0000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19ee616e733d66642c7266646e6f3db6fc082c28aed3d6c5706c3165f43aec6232162503743dbaaf593d8341da968555aca791f233fbd15197fc1f", @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f370db6ba725718b58d2b6bbca3ff6ecd5413e5eabb1485a1d811ab6c4777cd648b95406979d8d4a6742440b863db25b9ca087f2d4afb750bbaa6c3eb6428d5b40bf49a066c60", @ANYRESHEX=r1, @ANYBLOB]) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xff81, 0xffc1, 0x7, 0x7f, 0xfffd, 0x6703}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 04:20:16 executing program 2: io_uring_setup(0x1617, &(0x7f0000000180)) 04:20:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 501.374574][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 501.381693][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:20:16 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/22) [ 503.132788][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 503.143005][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ec6550b99313001a0000000000000000"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:17 executing program 2: bpf$MAP_CREATE(0x3, &(0x7f0000003500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:20:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000140)) (async) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c54d387127a70745724eca6726664542021", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) getsockname$packet(r6, &(0x7f0000000180), &(0x7f00000001c0)=0x14) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19ee616e733d66642c7266646e6f3db6fc082c28aed3d6c5706c3165f43aec6232162503743dbaaf593d8341da968555aca791f233fbd15197fc1f", @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f370db6ba725718b58d2b6bbca3ff6ecd5413e5eabb1485a1d811ab6c4777cd648b95406979d8d4a6742440b863db25b9ca087f2d4afb750bbaa6c3eb6428d5b40bf49a066c60", @ANYRESHEX=r1, @ANYBLOB]) (async) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xff81, 0xffc1, 0x7, 0x7f, 0xfffd, 0x6703}) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 04:20:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCFLSH(r4, 0x540b, 0x1) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 503.212935][ T4736] Bluetooth: hci8: command 0x1003 tx timeout [ 503.213231][ T3655] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:20:18 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={0x0, 0x0, 0xdfc59b12c578c6b8}, 0x10) 04:20:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 503.300535][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TCFLSH(r4, 0x540b, 0x1) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:18 executing program 2: pipe2(&(0x7f00000000c0), 0x0) syz_io_uring_setup(0x1276, &(0x7f0000000040), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:20:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) dup(r0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010011688f217afca78931f0", @ANYRES32=r0, @ANYBLOB="00910000"]) ioctl$TCFLSH(r1, 0x540b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a74b1", @ANYRESHEX=r3, @ANYBLOB="9b7226", @ANYRESHEX, @ANYRES16]) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f00000001c0)={0x5000001c}) [ 503.421921][ T4607] Bluetooth: hci8: Frame reassembly failed (-84) 04:20:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 503.499743][ T3645] Bluetooth: hci9: sending frame failed (-49) [ 503.508440][ T3649] Bluetooth: hci9: Opcode 0x1003 failed: -49 04:20:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ec6550b99313001a0000000000000000"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:20 executing program 2: r0 = openat$vcs(0xffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, 0x0) 04:20:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) dup(r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010011688f217afca78931f0", @ANYRES32=r0, @ANYBLOB="00910000"]) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a74b1", @ANYRESHEX=r3, @ANYBLOB="9b7226", @ANYRESHEX, @ANYRES16]) (async) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f00000001c0)={0x5000001c}) 04:20:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 505.372852][ T4865] Bluetooth: hci7: command 0x1003 tx timeout [ 505.372907][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 505.378965][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f0000000140)=@raw=[@generic, @call], &(0x7f0000000800)='GPL\x00', 0x4, 0x9e, &(0x7f0000000840)=""/158, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:20:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX]) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 505.452859][ T4736] Bluetooth: hci8: command 0x1003 tx timeout [ 505.463063][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 505.488104][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:20 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 505.548913][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 505.558873][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 505.568198][ T8] Bluetooth: hci8: Frame reassembly failed (-84) 04:20:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 505.603059][ T8] Bluetooth: hci8: Frame reassembly failed (-84) [ 505.734903][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 505.741818][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 507.532885][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 507.540261][ T22] Bluetooth: hci6: command tx timeout 04:20:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ec6550b99313001a0000000000000000"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) openat$vsock(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) 04:20:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX]) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async, rerun: 32) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) dup(r0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010011688f217afca78931f0", @ANYRES32=r0, @ANYBLOB="00910000"]) ioctl$TCFLSH(r1, 0x540b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a74b1", @ANYRESHEX=r3, @ANYBLOB="9b7226", @ANYRESHEX, @ANYRES16]) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f00000001c0)={0x5000001c}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) dup(r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010011688f217afca78931f0", @ANYRES32=r0, @ANYBLOB="00910000"]) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a74b1", @ANYRESHEX=r3, @ANYBLOB="9b7226", @ANYRESHEX, @ANYRES16]) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f00000001c0)={0x5000001c}) (async) [ 507.612833][ T22] Bluetooth: hci8: command 0x1003 tx timeout [ 507.613049][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:20:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 507.669321][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 507.677074][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:22 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@raw=[@ldst={0x1}, @initr0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:20:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x111201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESHEX]) r1 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async, rerun: 32) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:22 executing program 2: io_uring_setup(0x191a, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x2}) 04:20:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:20:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x111201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 507.898769][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 507.906561][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:22 executing program 2: openat$vcs(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/113) 04:20:22 executing program 2: sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20004044) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) 04:20:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:20:24 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0xc, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa2}, @cb_func, @call, @map_idx, @call, @ldst, @map_idx_val], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0xd, 0x10000, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)}, 0x80) 04:20:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x111201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x220, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xffefffffff7f0000, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/102}, 0x6e, 0x0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="9b324d353faf70bcae2b97668310b66995fb4bed361ed32c8dc6eb5f6598c7e5a238c2e9f0722bf7b12ee9acf514c495cb97b02d9385e35c3ec59638a4b92764400f7330606e0e4155688e34920e667052c1818f690f0920a15bc03d3c9680e7e75c2a2a4374209d2e3e6134205347c852bdef18eb74c106777c11e1702c01165862592e2b0602951de398a5e2087dcdc9e22e14512b92adb2c77932e2dfb7c7960e9dace888588783712c8402c6130b7315352a21c1a021f493d5cd5770d230f70d8bf21709b0ec62fed5d00e3303caeea9c8fc6cd671ca84a3ef5ecf8c5bc961ad7551dc9dce582f72f2a79c32250b424707"]) ioctl$TIOCSETD(r1, 0x5437, 0x0) [ 509.772810][ T22] Bluetooth: hci7: command 0x1003 tx timeout [ 509.783020][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:24 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000080)) 04:20:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) [ 509.884247][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 509.891395][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 509.891478][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 509.898294][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:20:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x220, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22000, 0x80) open(&(0x7f00000000c0)='./file0\x00', 0x105000, 0x11) [ 509.941129][T10075] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 04:20:24 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xffefffffff7f0000, 0x0) (async) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/102}, 0x6e, 0x0, 0x1000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="9b324d353faf70bcae2b97668310b66995fb4bed361ed32c8dc6eb5f6598c7e5a238c2e9f0722bf7b12ee9acf514c495cb97b02d9385e35c3ec59638a4b92764400f7330606e0e4155688e34920e667052c1818f690f0920a15bc03d3c9680e7e75c2a2a4374209d2e3e6134205347c852bdef18eb74c106777c11e1702c01165862592e2b0602951de398a5e2087dcdc9e22e14512b92adb2c77932e2dfb7c7960e9dace888588783712c8402c6130b7315352a21c1a021f493d5cd5770d230f70d8bf21709b0ec62fed5d00e3303caeea9c8fc6cd671ca84a3ef5ecf8c5bc961ad7551dc9dce582f72f2a79c32250b424707"]) (async) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:20:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:20:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:20:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x6c57, &(0x7f0000002540), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000025c0), &(0x7f0000002600)) epoll_create(0x3e5) sendmsg$unix(r0, &(0x7f0000002680)={&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002640)=[@rights={{0x14, 0x1, 0x1, [r2, r1]}}], 0x14}, 0x0) [ 510.084770][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 510.091633][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = epoll_create1(0x0) (async, rerun: 64) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x220, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:20:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22000, 0x80) (async) open(&(0x7f00000000c0)='./file0\x00', 0x105000, 0x11) [ 510.161610][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 04:20:25 executing program 2: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000300)={0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)={0x0, r0+10000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0x6e5]}, 0x8}) [ 510.302465][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 510.309422][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:25 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x10) 04:20:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22000, 0x80) open(&(0x7f00000000c0)='./file0\x00', 0x105000, 0x11) 04:20:26 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) (async) msgrcv(r0, 0x0, 0x0, 0xffefffffff7f0000, 0x0) (async) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/102}, 0x6e, 0x0, 0x1000) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000280)=ANY=[@ANYBLOB="9b324d353faf70bcae2b97668310b66995fb4bed361ed32c8dc6eb5f6598c7e5a238c2e9f0722bf7b12ee9acf514c495cb97b02d9385e35c3ec59638a4b92764400f7330606e0e4155688e34920e667052c1818f690f0920a15bc03d3c9680e7e75c2a2a4374209d2e3e6134205347c852bdef18eb74c106777c11e1702c01165862592e2b0602951de398a5e2087dcdc9e22e14512b92adb2c77932e2dfb7c7960e9dace888588783712c8402c6130b7315352a21c1a021f493d5cd5770d230f70d8bf21709b0ec62fed5d00e3303caeea9c8fc6cd671ca84a3ef5ecf8c5bc961ad7551dc9dce582f72f2a79c32250b424707"]) (async) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:20:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:20:26 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) 04:20:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 512.172847][ T4617] Bluetooth: hci7: command 0x1003 tx timeout [ 512.182994][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 512.190645][ T144] Bluetooth: hci6: command 0x1003 tx timeout [ 512.196809][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 04:20:27 executing program 2: openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x60000, 0x0) [ 512.280657][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 512.288226][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="65d3f1d7b54d0700d3c21528d64b33c03c2f292aa3df7c94105d3331c806c60ade568270dab6d949c77a896b096b8708390939f9e178620e9054eff01c6535192170286326716c69f373712d3bfade455b013fce083ca459b9b457cd1b77fe742bccc9a289890bc8795158f7d11e4de7136f8e83f635519d8534da8e723022e6696f83ff44d7b8fef3d400"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x120100, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 512.333083][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:27 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 04:20:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) [ 512.400873][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 512.407847][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x3850cd2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 04:20:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="65d3f1d7b54d0700d3c21528d64b33c03c2f292aa3df7c94105d3331c806c60ade568270dab6d949c77a896b096b8708390939f9e178620e9054eff01c6535192170286326716c69f373712d3bfade455b013fce083ca459b9b457cd1b77fe742bccc9a289890bc8795158f7d11e4de7136f8e83f635519d8534da8e723022e6696f83ff44d7b8fef3d400"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:27 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 512.493024][ T4737] Bluetooth: hci8: command 0x1003 tx timeout [ 512.499151][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:20:27 executing program 0: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee01}}) [ 512.597192][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 512.604184][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 512.638890][ T3636] Bluetooth: hci8: sending frame failed (-49) [ 512.645901][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:29 executing program 2: openat$vcs(0xffffff9c, &(0x7f0000000480), 0x111280, 0x0) 04:20:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {0xfffc}, {}, {}, {}]}) 04:20:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="65d3f1d7b54d0700d3c21528d64b33c03c2f292aa3df7c94105d3331c806c60ade568270dab6d949c77a896b096b8708390939f9e178620e9054eff01c6535192170286326716c69f373712d3bfade455b013fce083ca459b9b457cd1b77fe742bccc9a289890bc8795158f7d11e4de7136f8e83f635519d8534da8e723022e6696f83ff44d7b8fef3d400"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 514.332888][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 514.332902][ T142] Bluetooth: hci7: command 0x1003 tx timeout [ 514.420258][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x120100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x120100, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:20:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x3850cd2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x3850cd2, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x13) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:20:29 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_GET_THP_DISABLE(0x2a) 04:20:29 executing program 2: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000003c0)) 04:20:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="51f0f5dc70e1c86e2bf50d3458666afe599efec3ed9c0e7399a196f1a0c038f00e3443df6c081712f13cbf9b101dcb810867ef817fb52c5f1aacf80dd83d03ad9c8a4a59", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc2d066a45bdd0036, &(0x7f0000000240)=ANY=[@ANYBLOB="07ea2a4e9e9d5718899d184edfe7ec204e53ec72b2acca90cc119c312692f821bd5a9f126484496887a430bb66d896eededc1ba2a4caf81328f55ed8c2dd671e54a379a7e4dddb2d5d137e4b1448ab5b756111b594499db3868a749e019166b529797f833d84bac0bb056f20d143a226d48e5d1d7725539939d205dae811811686acb71b7db5535387ff77c71bebbf8a896023f46c8e39d5fabeb7e60f436b29444c0e4093c91b70341fd925a5756d3f751047176371c8c06f3d77a5ffd01059c55fbb87", @ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 514.502927][ T3645] Bluetooth: hci9: Opcode 0x1003 failed: -110 04:20:29 executing program 2: pipe(&(0x7f00000004c0)) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) 04:20:29 executing program 0: bpf$MAP_CREATE(0x7, &(0x7f0000003500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 514.582935][ T45] Bluetooth: hci7: Frame reassembly failed (-84) [ 514.589809][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 514.596952][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:29 executing program 2: syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) 04:20:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:31 executing program 0: openat$tun(0xffffff9c, &(0x7f0000001ac0), 0x40, 0x0) 04:20:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="51f0f5dc70e1c86e2bf50d3458666afe599efec3ed9c0e7399a196f1a0c038f00e3443df6c081712f13cbf9b101dcb810867ef817fb52c5f1aacf80dd83d03ad9c8a4a59", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc2d066a45bdd0036, &(0x7f0000000240)=ANY=[@ANYBLOB="07ea2a4e9e9d5718899d184edfe7ec204e53ec72b2acca90cc119c312692f821bd5a9f126484496887a430bb66d896eededc1ba2a4caf81328f55ed8c2dd671e54a379a7e4dddb2d5d137e4b1448ab5b756111b594499db3868a749e019166b529797f833d84bac0bb056f20d143a226d48e5d1d7725539939d205dae811811686acb71b7db5535387ff77c71bebbf8a896023f46c8e39d5fabeb7e60f436b29444c0e4093c91b70341fd925a5756d3f751047176371c8c06f3d77a5ffd01059c55fbb87", @ANYBLOB="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"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:31 executing program 2: r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, 0x0, 0x0) [ 516.493015][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 516.494184][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 516.603124][ T8] Bluetooth: hci8: Frame reassembly failed (-84) 04:20:31 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 04:20:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x3850cd2, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) [ 516.652867][ T3636] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 516.659940][ T144] Bluetooth: hci9: command tx timeout [ 516.662892][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 516.672204][ T142] Bluetooth: hci7: command tx timeout 04:20:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0xe, {0x2, 0x0, @empty}, 'veth1_macvtap\x00'}) 04:20:31 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000340)={0x2}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x6e5]}, 0x8}) 04:20:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) epoll_create1(0x80000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x2068804, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES64, @ANYRES64, @ANYRES32=r1]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) dup(r5) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:31 executing program 0: lstat(&(0x7f0000000180)='./file0\x00', 0x0) 04:20:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x101fe, 0x0, &(0x7f0000ffd000/0x2000)=nil}) [ 516.826225][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 518.572863][ T4736] Bluetooth: hci6: command 0x1003 tx timeout [ 518.572881][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 04:20:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) epoll_create1(0x80000) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r1) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x2068804, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES64, @ANYRES64, @ANYRES32=r1]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) (async) epoll_create1(0x0) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(r5) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x2}}], 0x1, 0xa0cc) 04:20:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="51f0f5dc70e1c86e2bf50d3458666afe599efec3ed9c0e7399a196f1a0c038f00e3443df6c081712f13cbf9b101dcb810867ef817fb52c5f1aacf80dd83d03ad9c8a4a59", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc2d066a45bdd0036, &(0x7f0000000240)=ANY=[@ANYBLOB="07ea2a4e9e9d5718899d184edfe7ec204e53ec72b2acca90cc119c312692f821bd5a9f126484496887a430bb66d896eededc1ba2a4caf81328f55ed8c2dd671e54a379a7e4dddb2d5d137e4b1448ab5b756111b594499db3868a749e019166b529797f833d84bac0bb056f20d143a226d48e5d1d7725539939d205dae811811686acb71b7db5535387ff77c71bebbf8a896023f46c8e39d5fabeb7e60f436b29444c0e4093c91b70341fd925a5756d3f751047176371c8c06f3d77a5ffd01059c55fbb87", @ANYBLOB="f60a9d759592c72a02e52550bd27739cab5721d12eff61a7e581233914655ea12d1c2f278eb0b458140e3420c4956f874c8b1412775733bfd78e66d3e4ca2f63ca6a2adfa280dc72bba5b42cf3883b7e3661aa479cb16890f70586f41bed596a18f6a00374e67334ddf57f6fc8e9b0b809a4b7cd5b5e46552afe3c104c6aaa9003f17f77ceb278b7b0e6ce2de4b04f65e466664d772d8caab9ecca5101d2fa7e48cca7fb9d012703d21e1cecf1b1787e98051706aeefda7f467f8d42b5ea939c510e649fce7d719b8ddefffe10134fd4a03b9a6e054a122111270f94fd83debe5cbb642d3ae6541a2428372083f233e3c61f17b585f928cbac66d8f4675078c9984e0c1c5cdc10c5ad65d79e29e0f98d0ff2be4428935abd79af0934ce5c5396ac121c75a485095dec92ee39a0456d69326536fa51ca8b8070c496df4630a133bf9c75"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 518.652851][ T4736] Bluetooth: hci8: command 0x1003 tx timeout [ 518.652969][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 518.725809][ T3655] Bluetooth: hci8: sending frame failed (-49) [ 518.733053][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 518.748178][ T4631] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xa0}}, 0x0) 04:20:33 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x4800) 04:20:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) epoll_create1(0x80000) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x2068804, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES64, @ANYRES64, @ANYRES32=r1]) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) (async) epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(r5) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x1c}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8e2d86c9e90a372dcf8565f342bb1d9efab52f6af1ed4760638babd9e36fb16dee7477d3b8642012918389ee854496abe217966c4589f385ade2a0d2662e3d4b37817e5e4f88c6205cd4eef9a0b99a141966349734b167086a0491127afc8ecc910e5112ed85fe4b691974dfcb2f974f0bdfc8f7fe2254b0b0d12eec097cf187c204ed9cd6e8b17c2ea132e6daed7e0d2414ff917dc73f044154", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x11a) ioctl$TIOCSETD(r6, 0x5437, 0x0) 04:20:33 executing program 1: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r0, 0xffffffffffffffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r1, 0xffffffffffffffff) syz_mount_image$ubifs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000200)="90f533b9dd8458a0b58744e2c26fdf3112040d87953dc651a4d1743639426c183c2a4100f32f5a54fef728e4089a7f", 0x2f, 0x4}, {&(0x7f0000000240)="011524ab32d5acdd95ce3d14f2ce7177a2e1b80bfd71b3016d719cd8b3b6328c85085e41889bf5b960d14e694db5569a5c3065f4c75c8f5f843d24282f69a5cc5097bb8d4f71a65eb637540a0c5435d7a83afa5f88a939045dc022ed16c944a607f236149fd788093a85f66dfbb059a24505143f42254385c7c1eeb97be64900192e6622fa13939332c012ac9f3546107a331820e89bc7692a7a7f464545d75bb10958337fbe1225fdd7fc6e0078f5e1b461efd2743c7e6eb8a2386254149baeb0f783b40a", 0xc5, 0x80000001}, {&(0x7f0000000340)="2d53db568083f831feffcde7eb9a4fb011289c2fcced2f8c50c56078c310104807c54e1e13e7a4c526a48be2ca8b1a07c3c0c3ae1645d4fcb7bde0b81d44f17486acc1c54fd12b55a77d7f8f96e987d43ac6326167cc72a8685b1cfb7cfd9d8aee874754cb453d0e8479b73f86892156e4c85f556ba3c950d4b46c545a4267029e219fadec6a8e61ad3b18fbfe2bddb1485ca1f237fb11ab544b7990c8", 0x9d, 0x8001}, {&(0x7f0000000400)="6937069a86e9391d07be17e756939cc73fa28135294355f170bd279bff248ca235db7afd98aad5b09a2f476e6dd9ade09e253a67eb9617423871a2f0258bc3e8aef8b8bf1d4277725258d42fc42a70f9c3f4764f46d056c0d790d04c7d4147d99bd8efb2bdfefbbac1723d62bc0e1fdf5a903e31722706a8f27775bb3b0c62afe92fc696b2acc0edbf4152319706929cbe8e097286cd9cb9b0b6b44730b982bb99db3ea4da1b6af179c3fb584db8268fac9825c0ac0f85caa365599366e8e9acae3417478d2f008a8432c8b5d8eb26407c7750f091f36ac889", 0xd9, 0x2}, {&(0x7f0000000500)="87d2ea54de6be3217347c8a036c4591f403a3f4309550ff1f94e29eb3d59fd346dc4adc1bc16687b6912c644ec2c347e745ef1666bd55287d25e587417bc876324cf0105734e6c855a168a7733bbb2db14dc393035ecb5e205d007f0a968393589d72a98280e832e0b7d17a9e35c9f63c03701f24414af7223acfb1934d969b21e07793d10358ad1a62091e97ae36341ed2f6c22", 0x94, 0x1}, {&(0x7f00000005c0)="d42f077a22fa69acf16e4beecad227c4943fe26efb54c46eae1bc166b523079286d907d83cfcc114be2ff0ce4c64643fb46d8d7d8b053e81bc85998ea616d6aece3c1ec1aa97f3a798aad47bb48ef5c233d51839fff978c0503f10d28cf816d3ecd2ca06a31bdcd35c7e84d04dd549ed33a221903f8fcb0dfbb0d496faf38a6586968474e7b8bed2a03e97c533155c4da52670dcd5", 0x95, 0x1f}, {&(0x7f0000000680)="0d98b871728df9d8a8a6f25e74ddb727b7ca835f50b3f9836e5ace90d388f9372a252026403dc217522c331793944d2ca8e2e0634ae0de22a428f0c06367ca61e59cd935089ac6d288db7e31b7303b9351acd0a1a954a03da2806627fa8fcebc910e0786991d682d04cc488045ca3776f09242b5cd2db58ae600c434a7bc90baf8b2887ceeda26ba7207e5216e1a3ae5e731027f9cfb4e8c4392", 0x9a, 0x734a787a}, {&(0x7f0000000740)="656c3ec23c7c7746", 0x8, 0xd8}, {&(0x7f0000000780)="00dc091bad419c4cf070c90225e3bf480096ab24803eff5225bd8f1d668891580f15a1a96f162e3a8495060270ee3cfdcfe46ae677ed2998915241438b16421d9aa764ce586ae2fd1ec77b443652d5a4f31cacf8bdc49938ce0e72f8bff9eee9deea6a9c10bae88963f645151717e7229e4d62da3def041a509a6eee7e3f667a7c0521a73c2511e2bd396a02e014d00e8e9fdfba916b2a762e0e4d11d157aa678c2c3d5d2e06031689b0ab0e3334c5", 0xaf, 0x6}], 0x2980b1, &(0x7f0000000940)={[{}, {@compr_zlib}, {@norm_unmount}, {@compr_none}, {@norm_unmount}, {@compr_zlib}, {@compr_lzo}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '/dev/cachefiles\x00'}}, {@uid_gt={'uid>', r1}}, {@dont_measure}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0xc480, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="747261733db0c52c7266cd00"]) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r2, 0x5437, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000100)) [ 518.892909][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 518.900435][ T144] Bluetooth: hci7: command tx timeout 04:20:33 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0xad7e9cc980ae0603}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 04:20:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x92}]}) [ 518.974105][T10261] loop1: detected capacity change from 0 to 264192 04:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSETD(r2, 0x5437, 0x0) 04:20:35 executing program 1: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r0, 0xffffffffffffffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r1, 0xffffffffffffffff) (async) syz_mount_image$ubifs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000200)="90f533b9dd8458a0b58744e2c26fdf3112040d87953dc651a4d1743639426c183c2a4100f32f5a54fef728e4089a7f", 0x2f, 0x4}, {&(0x7f0000000240)="011524ab32d5acdd95ce3d14f2ce7177a2e1b80bfd71b3016d719cd8b3b6328c85085e41889bf5b960d14e694db5569a5c3065f4c75c8f5f843d24282f69a5cc5097bb8d4f71a65eb637540a0c5435d7a83afa5f88a939045dc022ed16c944a607f236149fd788093a85f66dfbb059a24505143f42254385c7c1eeb97be64900192e6622fa13939332c012ac9f3546107a331820e89bc7692a7a7f464545d75bb10958337fbe1225fdd7fc6e0078f5e1b461efd2743c7e6eb8a2386254149baeb0f783b40a", 0xc5, 0x80000001}, {&(0x7f0000000340)="2d53db568083f831feffcde7eb9a4fb011289c2fcced2f8c50c56078c310104807c54e1e13e7a4c526a48be2ca8b1a07c3c0c3ae1645d4fcb7bde0b81d44f17486acc1c54fd12b55a77d7f8f96e987d43ac6326167cc72a8685b1cfb7cfd9d8aee874754cb453d0e8479b73f86892156e4c85f556ba3c950d4b46c545a4267029e219fadec6a8e61ad3b18fbfe2bddb1485ca1f237fb11ab544b7990c8", 0x9d, 0x8001}, {&(0x7f0000000400)="6937069a86e9391d07be17e756939cc73fa28135294355f170bd279bff248ca235db7afd98aad5b09a2f476e6dd9ade09e253a67eb9617423871a2f0258bc3e8aef8b8bf1d4277725258d42fc42a70f9c3f4764f46d056c0d790d04c7d4147d99bd8efb2bdfefbbac1723d62bc0e1fdf5a903e31722706a8f27775bb3b0c62afe92fc696b2acc0edbf4152319706929cbe8e097286cd9cb9b0b6b44730b982bb99db3ea4da1b6af179c3fb584db8268fac9825c0ac0f85caa365599366e8e9acae3417478d2f008a8432c8b5d8eb26407c7750f091f36ac889", 0xd9, 0x2}, {&(0x7f0000000500)="87d2ea54de6be3217347c8a036c4591f403a3f4309550ff1f94e29eb3d59fd346dc4adc1bc16687b6912c644ec2c347e745ef1666bd55287d25e587417bc876324cf0105734e6c855a168a7733bbb2db14dc393035ecb5e205d007f0a968393589d72a98280e832e0b7d17a9e35c9f63c03701f24414af7223acfb1934d969b21e07793d10358ad1a62091e97ae36341ed2f6c22", 0x94, 0x1}, {&(0x7f00000005c0)="d42f077a22fa69acf16e4beecad227c4943fe26efb54c46eae1bc166b523079286d907d83cfcc114be2ff0ce4c64643fb46d8d7d8b053e81bc85998ea616d6aece3c1ec1aa97f3a798aad47bb48ef5c233d51839fff978c0503f10d28cf816d3ecd2ca06a31bdcd35c7e84d04dd549ed33a221903f8fcb0dfbb0d496faf38a6586968474e7b8bed2a03e97c533155c4da52670dcd5", 0x95, 0x1f}, {&(0x7f0000000680)="0d98b871728df9d8a8a6f25e74ddb727b7ca835f50b3f9836e5ace90d388f9372a252026403dc217522c331793944d2ca8e2e0634ae0de22a428f0c06367ca61e59cd935089ac6d288db7e31b7303b9351acd0a1a954a03da2806627fa8fcebc910e0786991d682d04cc488045ca3776f09242b5cd2db58ae600c434a7bc90baf8b2887ceeda26ba7207e5216e1a3ae5e731027f9cfb4e8c4392", 0x9a, 0x734a787a}, {&(0x7f0000000740)="656c3ec23c7c7746", 0x8, 0xd8}, {&(0x7f0000000780)="00dc091bad419c4cf070c90225e3bf480096ab24803eff5225bd8f1d668891580f15a1a96f162e3a8495060270ee3cfdcfe46ae677ed2998915241438b16421d9aa764ce586ae2fd1ec77b443652d5a4f31cacf8bdc49938ce0e72f8bff9eee9deea6a9c10bae88963f645151717e7229e4d62da3def041a509a6eee7e3f667a7c0521a73c2511e2bd396a02e014d00e8e9fdfba916b2a762e0e4d11d157aa678c2c3d5d2e06031689b0ab0e3334c5", 0xaf, 0x6}], 0x2980b1, &(0x7f0000000940)={[{}, {@compr_zlib}, {@norm_unmount}, {@compr_none}, {@norm_unmount}, {@compr_zlib}, {@compr_lzo}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '/dev/cachefiles\x00'}}, {@uid_gt={'uid>', r1}}, {@dont_measure}]}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0xc480, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="747261733db0c52c7266cd00"]) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSETD(r2, 0x5437, 0x0) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000100)) 04:20:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x1c}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8e2d86c9e90a372dcf8565f342bb1d9efab52f6af1ed4760638babd9e36fb16dee7477d3b8642012918389ee854496abe217966c4589f385ade2a0d2662e3d4b37817e5e4f88c6205cd4eef9a0b99a141966349734b167086a0491127afc8ecc910e5112ed85fe4b691974dfcb2f974f0bdfc8f7fe2254b0b0d12eec097cf187c204ed9cd6e8b17c2ea132e6daed7e0d2414ff917dc73f044154", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x11a) ioctl$TIOCSETD(r6, 0x5437, 0x0) 04:20:35 executing program 0: bpf$MAP_CREATE(0x1e, &(0x7f0000003500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:20:35 executing program 2: bpf$MAP_CREATE(0x18, &(0x7f0000003500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) [ 520.812871][ T142] Bluetooth: hci6: command 0x1003 tx timeout [ 520.812878][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) 04:20:35 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x4c00) 04:20:35 executing program 2: syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5f, 0xed, 0x7e, 0x0, 0x846, 0x1002, 0x5171, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x11, 0x77, 0x6c}}]}}]}}, 0x0) 04:20:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000016c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, 0x0}) [ 520.918576][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) [ 520.972005][T10279] loop1: detected capacity change from 0 to 264192 [ 520.986093][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x1c}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8e2d86c9e90a372dcf8565f342bb1d9efab52f6af1ed4760638babd9e36fb16dee7477d3b8642012918389ee854496abe217966c4589f385ade2a0d2662e3d4b37817e5e4f88c6205cd4eef9a0b99a141966349734b167086a0491127afc8ecc910e5112ed85fe4b691974dfcb2f974f0bdfc8f7fe2254b0b0d12eec097cf187c204ed9cd6e8b17c2ea132e6daed7e0d2414ff917dc73f044154", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x11a) ioctl$TIOCSETD(r6, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x1c}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8e2d86c9e90a372dcf8565f342bb1d9efab52f6af1ed4760638babd9e36fb16dee7477d3b8642012918389ee854496abe217966c4589f385ade2a0d2662e3d4b37817e5e4f88c6205cd4eef9a0b99a141966349734b167086a0491127afc8ecc910e5112ed85fe4b691974dfcb2f974f0bdfc8f7fe2254b0b0d12eec097cf187c204ed9cd6e8b17c2ea132e6daed7e0d2414ff917dc73f044154", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) creat(&(0x7f0000000080)='./file0\x00', 0x11a) (async) ioctl$TIOCSETD(r6, 0x5437, 0x0) (async) 04:20:35 executing program 1: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r0, 0xffffffffffffffff) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r1, 0xffffffffffffffff) syz_mount_image$ubifs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x6, 0x9, &(0x7f0000000840)=[{&(0x7f0000000200)="90f533b9dd8458a0b58744e2c26fdf3112040d87953dc651a4d1743639426c183c2a4100f32f5a54fef728e4089a7f", 0x2f, 0x4}, {&(0x7f0000000240)="011524ab32d5acdd95ce3d14f2ce7177a2e1b80bfd71b3016d719cd8b3b6328c85085e41889bf5b960d14e694db5569a5c3065f4c75c8f5f843d24282f69a5cc5097bb8d4f71a65eb637540a0c5435d7a83afa5f88a939045dc022ed16c944a607f236149fd788093a85f66dfbb059a24505143f42254385c7c1eeb97be64900192e6622fa13939332c012ac9f3546107a331820e89bc7692a7a7f464545d75bb10958337fbe1225fdd7fc6e0078f5e1b461efd2743c7e6eb8a2386254149baeb0f783b40a", 0xc5, 0x80000001}, {&(0x7f0000000340)="2d53db568083f831feffcde7eb9a4fb011289c2fcced2f8c50c56078c310104807c54e1e13e7a4c526a48be2ca8b1a07c3c0c3ae1645d4fcb7bde0b81d44f17486acc1c54fd12b55a77d7f8f96e987d43ac6326167cc72a8685b1cfb7cfd9d8aee874754cb453d0e8479b73f86892156e4c85f556ba3c950d4b46c545a4267029e219fadec6a8e61ad3b18fbfe2bddb1485ca1f237fb11ab544b7990c8", 0x9d, 0x8001}, {&(0x7f0000000400)="6937069a86e9391d07be17e756939cc73fa28135294355f170bd279bff248ca235db7afd98aad5b09a2f476e6dd9ade09e253a67eb9617423871a2f0258bc3e8aef8b8bf1d4277725258d42fc42a70f9c3f4764f46d056c0d790d04c7d4147d99bd8efb2bdfefbbac1723d62bc0e1fdf5a903e31722706a8f27775bb3b0c62afe92fc696b2acc0edbf4152319706929cbe8e097286cd9cb9b0b6b44730b982bb99db3ea4da1b6af179c3fb584db8268fac9825c0ac0f85caa365599366e8e9acae3417478d2f008a8432c8b5d8eb26407c7750f091f36ac889", 0xd9, 0x2}, {&(0x7f0000000500)="87d2ea54de6be3217347c8a036c4591f403a3f4309550ff1f94e29eb3d59fd346dc4adc1bc16687b6912c644ec2c347e745ef1666bd55287d25e587417bc876324cf0105734e6c855a168a7733bbb2db14dc393035ecb5e205d007f0a968393589d72a98280e832e0b7d17a9e35c9f63c03701f24414af7223acfb1934d969b21e07793d10358ad1a62091e97ae36341ed2f6c22", 0x94, 0x1}, {&(0x7f00000005c0)="d42f077a22fa69acf16e4beecad227c4943fe26efb54c46eae1bc166b523079286d907d83cfcc114be2ff0ce4c64643fb46d8d7d8b053e81bc85998ea616d6aece3c1ec1aa97f3a798aad47bb48ef5c233d51839fff978c0503f10d28cf816d3ecd2ca06a31bdcd35c7e84d04dd549ed33a221903f8fcb0dfbb0d496faf38a6586968474e7b8bed2a03e97c533155c4da52670dcd5", 0x95, 0x1f}, {&(0x7f0000000680)="0d98b871728df9d8a8a6f25e74ddb727b7ca835f50b3f9836e5ace90d388f9372a252026403dc217522c331793944d2ca8e2e0634ae0de22a428f0c06367ca61e59cd935089ac6d288db7e31b7303b9351acd0a1a954a03da2806627fa8fcebc910e0786991d682d04cc488045ca3776f09242b5cd2db58ae600c434a7bc90baf8b2887ceeda26ba7207e5216e1a3ae5e731027f9cfb4e8c4392", 0x9a, 0x734a787a}, {&(0x7f0000000740)="656c3ec23c7c7746", 0x8, 0xd8}, {&(0x7f0000000780)="00dc091bad419c4cf070c90225e3bf480096ab24803eff5225bd8f1d668891580f15a1a96f162e3a8495060270ee3cfdcfe46ae677ed2998915241438b16421d9aa764ce586ae2fd1ec77b443652d5a4f31cacf8bdc49938ce0e72f8bff9eee9deea6a9c10bae88963f645151717e7229e4d62da3def041a509a6eee7e3f667a7c0521a73c2511e2bd396a02e014d00e8e9fdfba916b2a762e0e4d11d157aa678c2c3d5d2e06031689b0ab0e3334c5", 0xaf, 0x6}], 0x2980b1, &(0x7f0000000940)={[{}, {@compr_zlib}, {@norm_unmount}, {@compr_none}, {@norm_unmount}, {@compr_zlib}, {@compr_lzo}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, '/dev/cachefiles\x00'}}, {@uid_gt={'uid>', r1}}, {@dont_measure}]}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a40), 0xc480, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="747261733db0c52c7266cd00"]) (async) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSETD(r2, 0x5437, 0x0) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000100)) [ 521.131197][ T3652] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 521.162453][T10307] loop1: detected capacity change from 0 to 264192 [ 521.210778][ T3652] I/O error, dev loop1, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 521.253024][ T22] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 521.463108][ T22] usb 3-1: device descriptor read/64, error 18 [ 521.752898][ T22] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 521.943089][ T22] usb 3-1: device descriptor read/64, error 18 [ 522.063424][ T22] usb usb3-port1: attempt power cycle [ 522.472831][ T22] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 522.573077][ T22] usb 3-1: Invalid ep0 maxpacket: 0 [ 522.732836][ T22] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 522.832894][ T22] usb 3-1: Invalid ep0 maxpacket: 0 [ 522.838259][ T22] usb usb3-port1: unable to enumerate USB device 04:20:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000012c0), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80284504, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, "279f8998efd812f2d84ac9286259ce741aadddf61362d3c7ff98b0b2a2b54a9a"}) 04:20:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x6) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:37 executing program 1: setrlimit(0x9, &(0x7f0000000080)={0x1000, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="746a9b443a3d6c4372668388"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSETD(r2, 0x5437, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$TIOCSETD(r2, 0x5437, 0x0) (async) [ 522.973177][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 522.976391][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 522.979386][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:37 executing program 0: syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x103300) [ 523.085703][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 523.094328][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 523.114549][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 523.122083][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:37 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x80000000, 0x640) [ 523.133285][ T4631] Bluetooth: hci9: Frame reassembly failed (-84) [ 523.134085][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:37 executing program 1: setrlimit(0x9, &(0x7f0000000080)={0x1000, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="746a9b443a3d6c4372668388"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 523.267117][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 523.275947][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:20:38 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000500)) 04:20:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x6) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:38 executing program 1: setrlimit(0x9, &(0x7f0000000080)={0x1000, 0x2}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="746a9b443a3d6c4372668388"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @empty}}) [ 524.011597][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 524.019196][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 524.030820][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 524.045441][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 525.134805][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 525.135050][ T3655] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 525.149480][ T142] Bluetooth: hci9: command tx timeout 04:20:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:39 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2000004e, &(0x7f0000000000)=@framed={{}, [@alu, @alu, @cb_func, @call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x6, &(0x7f0000000080)=""/6, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 04:20:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @loopback}, 0x80) 04:20:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x6) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSETD(r2, 0x5437, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x148, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$TIOCSETD(r2, 0x5437, 0x0) (async) 04:20:39 executing program 0: unshare(0x400) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) 04:20:40 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 04:20:40 executing program 0: syz_clone(0x24024300, 0x0, 0x0, 0x0, 0x0, 0x0) [ 525.253907][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8b14", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c77660600d9f77a6f006f3d555ec053aa1726187e5a352f0283ae", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r8, 0x5437, 0x0) 04:20:40 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r0, 0x541b, 0x0) [ 525.317823][ T4607] Bluetooth: hci8: Frame reassembly failed (-84) 04:20:40 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r0, 0x40049409, 0x0) [ 525.414038][ T3651] Bluetooth: hci9: sending frame failed (-49) [ 525.420978][ T3645] Bluetooth: hci9: Opcode 0x1003 failed: -49 04:20:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:42 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mdlm={0x15}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 04:20:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 527.292888][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 527.300357][ T4617] Bluetooth: hci7: command tx timeout [ 527.302827][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 527.319972][ T4617] Bluetooth: hci6: command tx timeout 04:20:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8b14", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async, rerun: 32) r4 = dup(r2) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) (async, rerun: 64) r8 = dup(r6) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c77660600d9f77a6f006f3d555ec053aa1726187e5a352f0283ae", @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async, rerun: 32) ioctl$TIOCSETD(r8, 0x5437, 0x0) (rerun: 32) [ 527.374720][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:20:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 04:20:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)) [ 527.417042][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) [ 527.430822][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) [ 527.454975][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) [ 527.463168][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7493616e733d66642c726664788e5f32ee008a4cc66906702c08d78fc25e8190812202732fa39c9a278c7c5b27fdad3d7c4a465bcf9d17dd40f3f42e91c70281e8efcfc943e618908a9789e91dea62a4d26e4b7426396b6a5299983ebf0337bc4d5aea18bcfba29b139655262cca99895ac4f82a85343d7b106852147ae57e0d6617d4e99c8b8e07e1197f1bc4b8d449834d5c20df417d027862174ffa3d674e630e085c74a67556cfb6f90cdfa703a7b60c09c06d33092f36c16c924ea6b6890c46b6be14e74bd682543c84c067d773646f96a98c885b0501fc5300c5a0ebba265b96a3ea6db023f7cedbe053225b5b5779110715ceeebfad3c086c9c38042b8bc804"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:42 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 04:20:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x7fffffff) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x40) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x0, r1}, 0x0) process_vm_readv(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000180)=""/217, 0xd9}], 0x2, &(0x7f0000001980)=[{&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/251, 0xfb}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/131, 0x83}, {&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000018c0)=""/168, 0xa8}], 0x8, 0x0) socket$inet6(0xa, 0x4, 0x83) r2 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x7}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r5, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x40000000000017f, 0x0) [ 527.652841][ T3687] usb 1-1: new high-speed USB device number 4 using dummy_hcd 04:20:42 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 527.892916][ T3687] usb 1-1: Using ep0 maxpacket: 32 [ 528.013044][ T3687] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.027494][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 528.038828][ T3687] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.055023][ T3687] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 528.122968][ T4736] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 528.223066][ T3687] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.232615][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.246047][ T3687] usb 1-1: Product: syz [ 528.250255][ T3687] usb 1-1: Manufacturer: syz [ 528.256939][ T3687] usb 1-1: SerialNumber: syz [ 528.362861][ T4736] usb 3-1: Using ep0 maxpacket: 32 [ 528.483040][ T4736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.495874][ T4736] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.507160][ T4736] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.517130][ T4736] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 528.529709][ T3687] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 528.536742][ T4736] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.546791][ T3687] cdc_ncm 1-1:1.0: bind() failure [ 528.559960][ T3687] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 528.566809][ T4736] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 528.584144][ T3687] cdc_ncm 1-1:1.1: bind() failure [ 528.731539][ T4617] usb 1-1: USB disconnect, device number 4 [ 528.743256][ T4736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.752463][ T4736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.760826][ T4736] usb 3-1: Product: syz [ 528.765327][ T4736] usb 3-1: Manufacturer: syz [ 528.769934][ T4736] usb 3-1: SerialNumber: syz [ 529.272945][ T4736] cdc_ncm 3-1:1.0: bind() failure [ 529.282491][ T4736] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 529.289438][ T4736] cdc_ncm 3-1:1.1: bind() failure [ 529.298696][ T4736] usb 3-1: USB disconnect, device number 7 04:20:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:44 executing program 0: r0 = socket(0x1, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xf0ff7f) 04:20:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8b14", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = epoll_create1(0x0) (async, rerun: 64) r6 = epoll_create1(0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) (async, rerun: 32) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c77660600d9f77a6f006f3d555ec053aa1726187e5a352f0283ae", @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async, rerun: 64) ioctl$TIOCSETD(r8, 0x5437, 0x0) (rerun: 64) [ 529.452867][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 529.462834][ T3655] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:44 executing program 0: add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="14", 0x1, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="14", 0x1, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='logon\x00', 0x0, 0x0, 0x0, r0) 04:20:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 04:20:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8905, &(0x7f0000000040)={'veth0_virt_wifi\x00', {0x2, 0x0, @private}}) [ 529.533017][ T4737] Bluetooth: hci8: command 0x1003 tx timeout [ 529.540053][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 529.557942][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) [ 529.565786][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x578802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) [ 529.613975][ T3645] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 529.621424][ T4737] Bluetooth: hci9: command 0x1003 tx timeout 04:20:44 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) [ 529.681364][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 529.688909][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:44 executing program 2: syz_open_dev$loop(&(0x7f0000000580), 0xffffffe1, 0x101) 04:20:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) 04:20:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async, rerun: 32) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x578802, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) 04:20:44 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @private}, {0x0, @link_local}, 0x50, {}, 'syzkaller1\x00'}) [ 529.867007][T10447] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 529.885241][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 529.892110][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:20:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:46 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket(0xa, 0x80003, 0xa1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x890b, &(0x7f0000000140)) 04:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x578802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) 04:20:46 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) 04:20:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11040016) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x8022}, {r0, 0x8010}, {r2, 0x2000}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x1]}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fcntl$getflags(r0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 531.612856][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 531.612969][ T4617] Bluetooth: hci7: command 0x1003 tx timeout [ 531.620658][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:46 executing program 0: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x95) epoll_pwait(r0, &(0x7f0000001c00)=[{}], 0x1, 0x4, &(0x7f0000001c40)={[0x3]}, 0x8) 04:20:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11040016) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:46 executing program 2: set_mempolicy(0x1, &(0x7f0000000040), 0x101) 04:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file1\x00', 0x6) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:20:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20000815, 0x0, 0x0) [ 531.718539][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 531.725401][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 531.753667][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:46 executing program 0: openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 04:20:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:46 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@l2tp, 0x80) 04:20:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11040016) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x8) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f00000001c0)='./file1\x00', 0x6) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async, rerun: 64) r4 = dup(r2) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:20:46 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580), 0x8600, 0x0) [ 532.024755][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x8022}, {r0, 0x8010}, {r2, 0x2000}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x1]}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fcntl$getflags(r0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) (async) ppoll(&(0x7f0000000180)=[{r1, 0x8022}, {r0, 0x8010}, {r2, 0x2000}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x1]}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) fcntl$getflags(r0, 0x1) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:20:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000080)={0x2000}) 04:20:48 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}) 04:20:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file1\x00', 0x6) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:20:48 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xad, 0x4) [ 533.773117][ T4867] Bluetooth: hci7: command 0x1003 tx timeout [ 533.774505][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 04:20:48 executing program 0: r0 = socket(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) [ 533.850922][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 533.857974][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:20:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, 0x0) 04:20:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x8022}, {r0, 0x8010}, {r2, 0x2000}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x1]}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) fcntl$getflags(r0, 0x1) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)={0xf000300f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) dup(r1) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='tra.s=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) mount$9p_fd(0x0, 0x0, 0x0, 0x3a940ac, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r8}) 04:20:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x0) 04:20:48 executing program 0: syz_open_dev$audion(&(0x7f0000000180), 0x1f, 0x0) [ 534.092816][ T4617] Bluetooth: hci6: command 0x1003 tx timeout [ 534.092853][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 534.184285][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 534.216636][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 534.224601][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:20:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000080)={0x2000}) 04:20:50 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8943, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 04:20:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 04:20:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)={0xf000300f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) dup(r1) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='tra.s=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x3a940ac, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r8}) [ 535.943169][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 535.950828][ T4617] Bluetooth: hci8: command tx timeout 04:20:50 executing program 0: getegid() socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xcb00000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) [ 536.037789][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 536.045329][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 536.076776][ T8] Bluetooth: hci9: Frame reassembly failed (-84) 04:20:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 04:20:50 executing program 2: socketpair(0xa, 0x2, 0x20, &(0x7f0000000000)) 04:20:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 04:20:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f00000000c0)={'batadv_slave_1\x00'}) [ 536.172932][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:51 executing program 2: add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) [ 536.278674][ T45] Bluetooth: hci6: Frame reassembly failed (-84) 04:20:51 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 538.093082][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 538.093129][ T3687] Bluetooth: hci9: command 0x1003 tx timeout [ 538.093171][ T3687] Bluetooth: hci8: command 0x1003 tx timeout [ 538.100846][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 538.105470][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000000080)={0x2000}) 04:20:52 executing program 2: socketpair(0x29, 0x2, 0x2, &(0x7f0000000000)) 04:20:52 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000100)) 04:20:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000240)={0xf000300f}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) (async, rerun: 64) dup(r1) (async) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='tra.s=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x3a940ac, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000200)={r8}) 04:20:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:52 executing program 0: memfd_create(&(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2) [ 538.249238][ T58] Bluetooth: hci7: Frame reassembly failed (-84) [ 538.258493][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 538.265438][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 538.284848][ T3651] Bluetooth: hci9: sending frame failed (-49) [ 538.291960][ T3649] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 538.335684][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 538.343347][ T4737] Bluetooth: hci6: command 0x1003 tx timeout 04:20:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 04:20:53 executing program 2: clock_gettime(0x0, &(0x7f0000000e80)) r0 = syz_clone(0x40000000, &(0x7f0000000000)="975d5ba90e4c3b53fe2316b37fbbbdc164dda6ca7bc97960d32b2181939fea9ebe1367e19f0a1c6d9f6816ea61e07c9d5c", 0x31, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="844d3a5eab5243245a719bf4a30153e60910590bfed73537a74f327aa79e59cf076193a53ea71a1cd42581cb338c48585b81005823f3402045ed58ef2ceafa00b2f24d786b49a870bb55c41a3f0daa4650b23a0769f3dbc2e6f04a2a0aad110565e7f0eeb5fa95205634b086") sched_rr_get_interval(r0, &(0x7f0000000180)) 04:20:53 executing program 0: mq_open(&(0x7f0000000000)='$&:\'\x00', 0x0, 0x0, 0x0) 04:20:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000140)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7701006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x80) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:53 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000140)={0x0, 0x0, 0x1a0000}, 0x20) [ 538.470087][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 538.477173][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 538.506410][ T3649] Bluetooth: hci8: sending frame failed (-49) 04:20:53 executing program 0: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs$userns(0x0, &(0x7f0000000080)) [ 538.514627][ T3655] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 538.537101][ T3649] Bluetooth: hci9: sending frame failed (-49) [ 538.544935][ T3655] Bluetooth: hci9: Opcode 0x1003 failed: -49 04:20:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) (async) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7701006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x80) (async) dup(0xffffffffffffffff) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:20:53 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42}, 0x10) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 538.687849][ T45] Bluetooth: hci6: Frame reassembly failed (-84) [ 538.708495][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) [ 538.719549][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) 04:20:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup(r2) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="00f1"]) r8 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYRESHEX=r1, @ANYBLOB="00b9e50a3b28848dd616d2e8e84a6c73fea04a3c"]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 04:20:55 executing program 0: ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000740)={0x5000, 0x3000, 0x9, 0x6, 0x2}) ioprio_set$pid(0x0, 0x0, 0x2000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/mnt\x00') r0 = syz_usb_connect$printer(0x7, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x60, 0x81, [{{0x9, 0x4, 0x0, 0x1c, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x1, 0x20}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x3, 0x0, 0x1}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x0, 0x0, 0x10, 0x80}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x22, 0x9a, {0x9a, 0x6, "01ae44a7547da9c2a4dd52f7e8b3b8b44bc7ab07c751ec981af32d8b311193960ac9cd9a2b0cbde0775972a714e9caee0d48756de7acab6d1c1d92cf6524104bc25c7bc3fed4ffffb7260a52cc438cc5598ef6225f9e67d5fc7adde7562231176b131cd6953bb39ae335f41a63b505a2ae2109ef18de1d9d5dc8cf1e3dc4f7cca0d069a73d14e853bd7e9c14e3a2ebfbcbd08e7513c2902f"}}, &(0x7f0000000200)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "8a4f994369188b32282d3309c01534926e28adc5ba5e833c2caa1c4d370d803c50cb1d410fccd2f4fcf157"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x40, 0x11, 0xc3, "476abcedb095caa8490f55d059b4330c4549588c92137441d96077ffcfdd26cb4455a0f192dad6b96f6febada78fa425c2cebb4a721aab2c23ab2ff6814c0b08114721db90a3c9a20781a24270981ce5e42b3f32b5eab2544fdd32ab8d4bd554512abc6c978eeb49a88db781c9826494aae433603b83bc37d8b392d73d557465997d2af80d6f7ffa78c0dbbcde68daae56b26c6bdd6dbf6f7382cae110d2ed5d6fec58a078f10046d7f345c09ae167f8020577867f8019c067e133f565a877cd073a69"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0xed, {0xeb, "64475b6349feb156e4cb21a2cb242e4cdd90dddfdfb8b8b00eea463e799b4fd1be5049fe70bf899f3c8b64773662398ccded6828c97ebdb7ef3c046a18de44f60837abe2c3442b34c463eb277f12d74f1e0ce49c70f90bfb84a53e1418a73d91802a71b26256f97c0bec397de49bc99213174b40e76cfce3b6e69a51fa7a87596e2921fee43d4f5bfa60a244ed277142d9be17af28c2febb250ee61428864d123e7485bdb30aaed5161a098cd1c0cb120464aed489b5411ce5aaf20e5b21084a045732b22d0ca268e62f2b9aeecd6099689fd1020a8d94aeaafefa1a4f63b2121f05e911c6018e3508c914"}}, &(0x7f0000000500)={0x20, 0x1, 0x1}, 0x0}) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x3b5e263ce7340cc5, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xda, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0xff, 0x1b}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x0, 0x81}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x2, 0x40, 0x7, 0x40, 0x80}, 0x30, &(0x7f0000000680)={0x5, 0xf, 0x30, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x3d, 0x4, 0x7, 0x6ee5, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x4, 0x7, 0xff7f}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x1f, 0xb0, 0x0, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xf, 0x2, 0xb09}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41b}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000780), 0x4) 04:20:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046208, 0x0) [ 540.253056][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:20:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x9}, {0xb80, 0x7f}, {0x3, 0x6}, {0x4, 0x18c}, {0x2, 0x3}, {0x2, 0x40}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x3fff8, 0x8, '9P2000.u'}, 0x15) 04:20:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc018620c, &(0x7f0000000040)) [ 540.316766][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 540.333184][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) 04:20:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4b47, 0x0) [ 540.383994][T10635] binder: 10634:10635 ioctl c018620c 20000040 returned -1 [ 540.404536][ T3645] Bluetooth: hci9: sending frame failed (-49) [ 540.411357][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 04:20:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x0, 0xf}, @fda={0x66646185, 0x9, 0x2, 0x12}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x1000}, @acquire_done, @acquire], 0x5b, 0x0, &(0x7f0000000240)="6e1bb33e432f6e6f9a21d160d938d355680c16fedab42748126f3e10e5ff4336643ecc8ef88c09f45a4f1c701af843f285b162f95b485465ed8b31fc66ca6b747a40127fc292af2c25f1ea69a1ae3e3fa57e76fedf65d624701ec7"}) 04:20:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x9}, {0xb80, 0x7f}, {0x3, 0x6}, {0x4, 0x18c}, {0x2, 0x3}, {0x2, 0x40}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x3fff8, 0x8, '9P2000.u'}, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x9}, {0xb80, 0x7f}, {0x3, 0x6}, {0x4, 0x18c}, {0x2, 0x3}, {0x2, 0x40}]}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x3fff8, 0x8, '9P2000.u'}, 0x15) (async) [ 540.445281][T10637] binder: 10636:10637 ioctl 4b47 0 returned -22 [ 540.540278][ T3645] Bluetooth: hci9: sending frame failed (-49) [ 540.548107][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 540.565911][ T4867] usb 1-1: new high-speed USB device number 5 using dummy_hcd 04:20:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8) (async) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7701006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x80) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x401c5820, &(0x7f0000001240)={0x10, 0x0, &(0x7f0000001100)=[@request_death], 0x0, 0x0, 0x0}) 04:20:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x9}, {0xb80, 0x7f}, {0x3, 0x6}, {0x4, 0x18c}, {0x2, 0x3}, {0x2, 0x40}]}) ioctl$TIOCSETD(r0, 0x5437, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x3fff8, 0x8, '9P2000.u'}, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x9}, {0xb80, 0x7f}, {0x3, 0x6}, {0x4, 0x18c}, {0x2, 0x3}, {0x2, 0x40}]}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x3fff8, 0x8, '9P2000.u'}, 0x15) (async) 04:20:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1, 0x30}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 540.733030][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 540.740766][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 540.748137][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 540.801674][T10655] binder: 10646:10655 ioctl 401c5820 20001240 returned -22 [ 540.802636][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 540.823298][ T4867] usb 1-1: Using ep0 maxpacket: 16 [ 540.853855][ T3645] Bluetooth: hci9: sending frame failed (-49) [ 540.860628][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 541.053167][ T4867] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 541.063052][ T4867] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.076261][ T4867] usb 1-1: config 1 interface 0 has no altsetting 0 [ 541.243048][ T4867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 541.252103][ T4867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.260675][ T4867] usb 1-1: Product: syz [ 541.265146][ T4867] usb 1-1: Manufacturer: syz [ 541.269755][ T4867] usb 1-1: SerialNumber: syz [ 541.303206][T10628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 541.311419][T10628] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 541.562855][ T4867] usb 1-1: USB disconnect, device number 5 04:20:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done], 0x0, 0x0, 0x0}) 04:20:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='toans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 04:20:57 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x0) [ 542.332993][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 542.333151][ T4770] Bluetooth: hci7: command 0x1003 tx timeout 04:20:57 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/mnt\x00') 04:20:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001240)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='L'], 0x0, 0x0, 0x0}) 04:20:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:20:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 542.427089][ T3747] Bluetooth: hci7: Frame reassembly failed (-84) [ 542.501552][T10679] binder: 10678:10679 unknown command 76 [ 542.510073][T10679] binder: 10678:10679 ioctl c0306201 20001240 returned -22 04:20:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:20:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 542.812889][ T4617] Bluetooth: hci6: command 0x1003 tx timeout [ 542.812887][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0xf2, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="ccdb9a8b0fd431fb110cc6d0c6be7ea78774dedc95642b98ed5b3c7e27d5685c20c3c6763711a8525485044097f2d770c7f9e92e83f2a6c29a76db5812daae0f1eb62ebdbe2339da6a5d35bf89a92331a33ce8c959375978561ee1e5190ae8dc6b2d4c6eb15a3f46758f8cd8d803a7df4aa80ab58895220802b4", 0x7a, 0x1f}, {&(0x7f0000000200)="c575ebd0586d26dedb928eb58eee72ee70e35a07c67008df2e78eb7e76dff96df195781f33884b0b036059db55ee2aa10deb6d107b1f4c978baeddd07234482155d096a9a6d5d2549949cb08f67f7dc62659d4bb4e702f71df74538fda83de2990a3fd09bf999b5889ca09cbfd6ceda8b28b5b6825c8967d751b2f88fed55661c453acab20d0f63a85817eeb7bf9d48cd621870365f2afedbd103b1bc8f96480076aad860e235c372710831583877247b6fa8b1fe467dfc4880672482c1ea1be89286e86e1c69c86791c867e4105bf590854931a1e7b49", 0xd7, 0xfffffffffffffe01}, {&(0x7f0000000300), 0x0, 0x6ec9}, {&(0x7f0000000340)="54a3e8e4c6253d71c37f0a79bbf3e930b644fa10d68a904814fb0b187f8e55fc43da8680591bb0a7015975a1543db9d96e8ee6a9cd199219e05a46a9ff695d45a2a5ac54f64b007fb3ed19edbdba41f176bb7581bde976a32408c076fb41b0330e6c3737a35f4cd27eeca96c3309ac1fd536cc4cb23e7e6b6d3c3ffb9fce65e37b727cf56fa188454aa9b842ddcf4957556e23cee1e74302c81b593ca9b0ac65024e31ceba314cd457d05369260edc8de3bdc0d36f3cad9f1fe62bca136a6c1586455c3d2ca0bf9e09f19c90a42ae96bb78e7c446e9c90171455fd15e197c4a7f215", 0xe2, 0x8000}, {&(0x7f0000000440)="c534feb5478b1c95f80ee059e41728c4152f", 0x12, 0x9}, {&(0x7f0000000480)="283fbc324f40d005c45a27dc394db7bc0009a88c9c75836cd15fffc03481238db4c109bfb8143bbabda58f5ae767d7f1e9a43788d96fcb3a34dfff89fc438392bf89e6b6e3eb5139d29dc7e14e76508a81188142bab1daf2338f7d4a931af51d9abf2ac89efe384711c22adfd3ac9a2ef4470f68d538a2d659cf4b0e9b3ad563253e3b2221d97233ad48dbcd475161f2517663603701657d31044ee030a233ab5c4d6feed2b013443ba5d4345f893575827af00f01e37dfea525bebf58a896da3c3e9a9595825b6e575b3bf2dfc0a4", 0xcf, 0x6}], 0x0, &(0x7f0000000640)={[{@acl}, {@nobh}, {@jqfmt_vfsold}, {@block_validity}, {@max_batch_time}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0xc68, r2}, 0x0) 04:20:57 executing program 2: syz_io_uring_setup(0x49f0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 04:20:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0x50002002}) [ 542.892856][ T22] Bluetooth: hci8: command 0x1003 tx timeout [ 542.903082][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 542.968078][ T4631] Bluetooth: hci6: Frame reassembly failed (-84) [ 542.968199][ T3655] Bluetooth: hci8: sending frame failed (-49) [ 542.982026][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 543.030459][T10690] loop3: detected capacity change from 0 to 16382 [ 543.041541][T10690] EXT4-fs: Ignoring removed nobh option [ 543.047448][T10690] ext3: Unknown parameter 'uid<00000000000000060929' 04:20:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x600) 04:20:59 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000340)=':,!m\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 04:20:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1, &(0x7f0000000300)=@raw=[@kfunc], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x68, &(0x7f00000003c0)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:20:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='toans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='toans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:20:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0xf2, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="ccdb9a8b0fd431fb110cc6d0c6be7ea78774dedc95642b98ed5b3c7e27d5685c20c3c6763711a8525485044097f2d770c7f9e92e83f2a6c29a76db5812daae0f1eb62ebdbe2339da6a5d35bf89a92331a33ce8c959375978561ee1e5190ae8dc6b2d4c6eb15a3f46758f8cd8d803a7df4aa80ab58895220802b4", 0x7a, 0x1f}, {&(0x7f0000000200)="c575ebd0586d26dedb928eb58eee72ee70e35a07c67008df2e78eb7e76dff96df195781f33884b0b036059db55ee2aa10deb6d107b1f4c978baeddd07234482155d096a9a6d5d2549949cb08f67f7dc62659d4bb4e702f71df74538fda83de2990a3fd09bf999b5889ca09cbfd6ceda8b28b5b6825c8967d751b2f88fed55661c453acab20d0f63a85817eeb7bf9d48cd621870365f2afedbd103b1bc8f96480076aad860e235c372710831583877247b6fa8b1fe467dfc4880672482c1ea1be89286e86e1c69c86791c867e4105bf590854931a1e7b49", 0xd7, 0xfffffffffffffe01}, {&(0x7f0000000300), 0x0, 0x6ec9}, {&(0x7f0000000340)="54a3e8e4c6253d71c37f0a79bbf3e930b644fa10d68a904814fb0b187f8e55fc43da8680591bb0a7015975a1543db9d96e8ee6a9cd199219e05a46a9ff695d45a2a5ac54f64b007fb3ed19edbdba41f176bb7581bde976a32408c076fb41b0330e6c3737a35f4cd27eeca96c3309ac1fd536cc4cb23e7e6b6d3c3ffb9fce65e37b727cf56fa188454aa9b842ddcf4957556e23cee1e74302c81b593ca9b0ac65024e31ceba314cd457d05369260edc8de3bdc0d36f3cad9f1fe62bca136a6c1586455c3d2ca0bf9e09f19c90a42ae96bb78e7c446e9c90171455fd15e197c4a7f215", 0xe2, 0x8000}, {&(0x7f0000000440)="c534feb5478b1c95f80ee059e41728c4152f", 0x12, 0x9}, {&(0x7f0000000480)="283fbc324f40d005c45a27dc394db7bc0009a88c9c75836cd15fffc03481238db4c109bfb8143bbabda58f5ae767d7f1e9a43788d96fcb3a34dfff89fc438392bf89e6b6e3eb5139d29dc7e14e76508a81188142bab1daf2338f7d4a931af51d9abf2ac89efe384711c22adfd3ac9a2ef4470f68d538a2d659cf4b0e9b3ad563253e3b2221d97233ad48dbcd475161f2517663603701657d31044ee030a233ab5c4d6feed2b013443ba5d4345f893575827af00f01e37dfea525bebf58a896da3c3e9a9595825b6e575b3bf2dfc0a4", 0xcf, 0x6}], 0x0, &(0x7f0000000640)={[{@acl}, {@nobh}, {@jqfmt_vfsold}, {@block_validity}, {@max_batch_time}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0xc68, r2}, 0x0) [ 544.492930][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 544.519451][T10668] mkiss: ax0: crc mode is auto. 04:20:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9}) 04:20:59 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x0, 0x0}) 04:20:59 executing program 2: syz_open_dev$loop(&(0x7f00000007c0), 0x300, 0x10040) 04:20:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0xf2, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="ccdb9a8b0fd431fb110cc6d0c6be7ea78774dedc95642b98ed5b3c7e27d5685c20c3c6763711a8525485044097f2d770c7f9e92e83f2a6c29a76db5812daae0f1eb62ebdbe2339da6a5d35bf89a92331a33ce8c959375978561ee1e5190ae8dc6b2d4c6eb15a3f46758f8cd8d803a7df4aa80ab58895220802b4", 0x7a, 0x1f}, {&(0x7f0000000200)="c575ebd0586d26dedb928eb58eee72ee70e35a07c67008df2e78eb7e76dff96df195781f33884b0b036059db55ee2aa10deb6d107b1f4c978baeddd07234482155d096a9a6d5d2549949cb08f67f7dc62659d4bb4e702f71df74538fda83de2990a3fd09bf999b5889ca09cbfd6ceda8b28b5b6825c8967d751b2f88fed55661c453acab20d0f63a85817eeb7bf9d48cd621870365f2afedbd103b1bc8f96480076aad860e235c372710831583877247b6fa8b1fe467dfc4880672482c1ea1be89286e86e1c69c86791c867e4105bf590854931a1e7b49", 0xd7, 0xfffffffffffffe01}, {&(0x7f0000000300), 0x0, 0x6ec9}, {&(0x7f0000000340)="54a3e8e4c6253d71c37f0a79bbf3e930b644fa10d68a904814fb0b187f8e55fc43da8680591bb0a7015975a1543db9d96e8ee6a9cd199219e05a46a9ff695d45a2a5ac54f64b007fb3ed19edbdba41f176bb7581bde976a32408c076fb41b0330e6c3737a35f4cd27eeca96c3309ac1fd536cc4cb23e7e6b6d3c3ffb9fce65e37b727cf56fa188454aa9b842ddcf4957556e23cee1e74302c81b593ca9b0ac65024e31ceba314cd457d05369260edc8de3bdc0d36f3cad9f1fe62bca136a6c1586455c3d2ca0bf9e09f19c90a42ae96bb78e7c446e9c90171455fd15e197c4a7f215", 0xe2, 0x8000}, {&(0x7f0000000440)="c534feb5478b1c95f80ee059e41728c4152f", 0x12, 0x9}, {&(0x7f0000000480)="283fbc324f40d005c45a27dc394db7bc0009a88c9c75836cd15fffc03481238db4c109bfb8143bbabda58f5ae767d7f1e9a43788d96fcb3a34dfff89fc438392bf89e6b6e3eb5139d29dc7e14e76508a81188142bab1daf2338f7d4a931af51d9abf2ac89efe384711c22adfd3ac9a2ef4470f68d538a2d659cf4b0e9b3ad563253e3b2221d97233ad48dbcd475161f2517663603701657d31044ee030a233ab5c4d6feed2b013443ba5d4345f893575827af00f01e37dfea525bebf58a896da3c3e9a9595825b6e575b3bf2dfc0a4", 0xcf, 0x6}], 0x0, &(0x7f0000000640)={[{@acl}, {@nobh}, {@jqfmt_vfsold}, {@block_validity}, {@max_batch_time}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0xc68, r2}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0xf2, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="ccdb9a8b0fd431fb110cc6d0c6be7ea78774dedc95642b98ed5b3c7e27d5685c20c3c6763711a8525485044097f2d770c7f9e92e83f2a6c29a76db5812daae0f1eb62ebdbe2339da6a5d35bf89a92331a33ce8c959375978561ee1e5190ae8dc6b2d4c6eb15a3f46758f8cd8d803a7df4aa80ab58895220802b4", 0x7a, 0x1f}, {&(0x7f0000000200)="c575ebd0586d26dedb928eb58eee72ee70e35a07c67008df2e78eb7e76dff96df195781f33884b0b036059db55ee2aa10deb6d107b1f4c978baeddd07234482155d096a9a6d5d2549949cb08f67f7dc62659d4bb4e702f71df74538fda83de2990a3fd09bf999b5889ca09cbfd6ceda8b28b5b6825c8967d751b2f88fed55661c453acab20d0f63a85817eeb7bf9d48cd621870365f2afedbd103b1bc8f96480076aad860e235c372710831583877247b6fa8b1fe467dfc4880672482c1ea1be89286e86e1c69c86791c867e4105bf590854931a1e7b49", 0xd7, 0xfffffffffffffe01}, {&(0x7f0000000300), 0x0, 0x6ec9}, {&(0x7f0000000340)="54a3e8e4c6253d71c37f0a79bbf3e930b644fa10d68a904814fb0b187f8e55fc43da8680591bb0a7015975a1543db9d96e8ee6a9cd199219e05a46a9ff695d45a2a5ac54f64b007fb3ed19edbdba41f176bb7581bde976a32408c076fb41b0330e6c3737a35f4cd27eeca96c3309ac1fd536cc4cb23e7e6b6d3c3ffb9fce65e37b727cf56fa188454aa9b842ddcf4957556e23cee1e74302c81b593ca9b0ac65024e31ceba314cd457d05369260edc8de3bdc0d36f3cad9f1fe62bca136a6c1586455c3d2ca0bf9e09f19c90a42ae96bb78e7c446e9c90171455fd15e197c4a7f215", 0xe2, 0x8000}, {&(0x7f0000000440)="c534feb5478b1c95f80ee059e41728c4152f", 0x12, 0x9}, {&(0x7f0000000480)="283fbc324f40d005c45a27dc394db7bc0009a88c9c75836cd15fffc03481238db4c109bfb8143bbabda58f5ae767d7f1e9a43788d96fcb3a34dfff89fc438392bf89e6b6e3eb5139d29dc7e14e76508a81188142bab1daf2338f7d4a931af51d9abf2ac89efe384711c22adfd3ac9a2ef4470f68d538a2d659cf4b0e9b3ad563253e3b2221d97233ad48dbcd475161f2517663603701657d31044ee030a233ab5c4d6feed2b013443ba5d4345f893575827af00f01e37dfea525bebf58a896da3c3e9a9595825b6e575b3bf2dfc0a4", 0xcf, 0x6}], 0x0, &(0x7f0000000640)={[{@acl}, {@nobh}, {@jqfmt_vfsold}, {@block_validity}, {@max_batch_time}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0xc68, r2}, 0x0) (async) 04:20:59 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) [ 544.676698][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 544.683688][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:20:59 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00') [ 544.754175][T10706] mkiss: ax0: crc mode is auto. [ 544.855224][T10723] loop3: detected capacity change from 0 to 16382 [ 544.873199][T10723] EXT4-fs: Ignoring removed nobh option [ 544.878814][T10723] ext3: Unknown parameter 'uid<00000000000000060929' 04:20:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0x50002002}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) memfd_secret(0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5437, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0x50002002}) (async) 04:20:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:20:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x14}, 0x14}, 0x300}, 0x0) 04:20:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='toans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:20:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x80) [ 544.973001][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:20:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000280)) 04:20:59 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x10040) 04:20:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0xfffffffffffffddb}, 0xfffffffffffffe6b}}, 0x0) 04:20:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 545.067866][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) [ 545.078164][ T45] Bluetooth: hci8: Frame reassembly failed (-84) [ 545.138168][T10741] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:21:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x17, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x48) 04:21:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) [ 546.812930][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 546.820912][ T4737] Bluetooth: hci7: command tx timeout 04:21:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = memfd_secret(0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0x50002002}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000001c0)) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) memfd_secret(0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5437, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f00000000c0)={0x50002002}) (async) 04:21:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cd18a04a200"]) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',widno=', @ANYRESHEX, @ANYBLOB="ca5e4d5ed7f8b71838f0f9a80ddf85f415a8f07073af901746d53147e5086ebdece75fe808b3271127c5a6614bd979b8e3cc72bc55cc0678c9fbf7f017e3bb8b979c83586226df5e7d245495e836ae0b84ada406768ce47ae8e86a8f6895a0ba0c17df12f8b53885e78adf054fcf462b68f99bfbe2"]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSETD(r0, 0x5437, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0x8000, 0x9, 0x480, 0x200, 0x6, "444697392816069f"}) 04:21:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) [ 547.132876][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 547.141661][ T4867] Bluetooth: hci8: command 0x1003 tx timeout [ 547.142905][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 547.151378][T10738] mkiss: ax0: crc mode is auto. 04:21:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, 0x0, 0x0) [ 547.233386][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 547.240625][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 547.272977][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:21:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cd18a04a200"]) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',widno=', @ANYRESHEX, @ANYBLOB="ca5e4d5ed7f8b71838f0f9a80ddf85f415a8f07073af901746d53147e5086ebdece75fe808b3271127c5a6614bd979b8e3cc72bc55cc0678c9fbf7f017e3bb8b979c83586226df5e7d245495e836ae0b84ada406768ce47ae8e86a8f6895a0ba0c17df12f8b53885e78adf054fcf462b68f99bfbe2"]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSETD(r0, 0x5437, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0x8000, 0x9, 0x480, 0x200, 0x6, "444697392816069f"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cd18a04a200"]) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',widno=', @ANYRESHEX, @ANYBLOB="ca5e4d5ed7f8b71838f0f9a80ddf85f415a8f07073af901746d53147e5086ebdece75fe808b3271127c5a6614bd979b8e3cc72bc55cc0678c9fbf7f017e3bb8b979c83586226df5e7d245495e836ae0b84ada406768ce47ae8e86a8f6895a0ba0c17df12f8b53885e78adf054fcf462b68f99bfbe2"]) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x18) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0x8000, 0x9, 0x480, 0x200, 0x6, "444697392816069f"}) (async) 04:21:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x410380, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646ec63d29a09c06b23b9b5381855061797687759879aa46a76fb109086ba5bca2dd970a69ec28ea2a2afbe60fa6b9aa090d4d87d5d999d9ce77917b2039594acc77bcf41042c79c0959f2adbfd52a81ae41fe8c1b38eba046", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7406000000000000003d7664"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:02 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 547.349256][T10772] ptm ptm0: ldisc open failed (-12), clearing slot 0 04:21:02 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x1, 0x710b, 0x21, @remote, @local, 0x10, 0x0, 0x7, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000003c0)={0x6, 'veth0_to_batadv\x00'}) syz_io_uring_setup(0x347b, &(0x7f0000000400)={0x0, 0x84ff, 0x10, 0x0, 0x242}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000008c0)) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000900)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip6_vti0\x00', 0x0}) [ 547.440799][ T58] Bluetooth: hci6: Frame reassembly failed (-84) [ 547.448159][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) 04:21:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000000c0)='S', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r1, &(0x7f00000002c0)='8', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x5d, 0xb5, "a86522202552d7a7e78ba593705aae65842d2fc36faf3f910f331585800a79d5fb9c67fa67772456ed7c0e21325915cff60343a883a4c201c70c86d7a5a9e745cdbf7c17d2d0c8f69a7d172afd019a19a66b7cc715cb5daaf5ba1f9947e8d3b082ef1e5ae36ff5e5d3963c6ea47e0055fee0dec079ca28ebe1af764647076580d5ee695d49c1f3295a9f114a1fe7e555be7226d6161db63f7e4c7ce9875046c69a66812283e2ea6f68afcf62219b63db5ddcbeca66"}, 0xbd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r4, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:21:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:04 executing program 0: syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x4ca80) [ 549.292849][ T22] Bluetooth: hci7: command 0x1003 tx timeout [ 549.292868][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000000)=@raw=[@alu, @kfunc], &(0x7f0000000080)='GPL\x00', 0x5, 0xbe, &(0x7f00000000c0)=""/190, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:21:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cd18a04a200"]) syz_open_pts(r1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',widno=', @ANYRESHEX, @ANYBLOB="ca5e4d5ed7f8b71838f0f9a80ddf85f415a8f07073af901746d53147e5086ebdece75fe808b3271127c5a6614bd979b8e3cc72bc55cc0678c9fbf7f017e3bb8b979c83586226df5e7d245495e836ae0b84ada406768ce47ae8e86a8f6895a0ba0c17df12f8b53885e78adf054fcf462b68f99bfbe2"]) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSETD(r0, 0x5437, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0x8000, 0x9, 0x480, 0x200, 0x6, "444697392816069f"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cd18a04a200"]) (async) syz_open_pts(r1, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',widno=', @ANYRESHEX, @ANYBLOB="ca5e4d5ed7f8b71838f0f9a80ddf85f415a8f07073af901746d53147e5086ebdece75fe808b3271127c5a6614bd979b8e3cc72bc55cc0678c9fbf7f017e3bb8b979c83586226df5e7d245495e836ae0b84ada406768ce47ae8e86a8f6895a0ba0c17df12f8b53885e78adf054fcf462b68f99bfbe2"]) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x18) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000002c0)={0x8000, 0x9, 0x480, 0x200, 0x6, "444697392816069f"}) (async) 04:21:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x410380, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646ec63d29a09c06b23b9b5381855061797687759879aa46a76fb109086ba5bca2dd970a69ec28ea2a2afbe60fa6b9aa090d4d87d5d999d9ce77917b2039594acc77bcf41042c79c0959f2adbfd52a81ae41fe8c1b38eba046", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7406000000000000003d7664"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x410380, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646ec63d29a09c06b23b9b5381855061797687759879aa46a76fb109086ba5bca2dd970a69ec28ea2a2afbe60fa6b9aa090d4d87d5d999d9ce77917b2039594acc77bcf41042c79c0959f2adbfd52a81ae41fe8c1b38eba046", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7406000000000000003d7664"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 04:21:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 549.453127][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 549.454393][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 549.460804][ T4867] Bluetooth: hci8: command tx timeout 04:21:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 549.632535][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) [ 549.656043][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 549.725422][T10842] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:21:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000000c0)='S', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r1, &(0x7f00000002c0)='8', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x5d, 0xb5, "a86522202552d7a7e78ba593705aae65842d2fc36faf3f910f331585800a79d5fb9c67fa67772456ed7c0e21325915cff60343a883a4c201c70c86d7a5a9e745cdbf7c17d2d0c8f69a7d172afd019a19a66b7cc715cb5daaf5ba1f9947e8d3b082ef1e5ae36ff5e5d3963c6ea47e0055fee0dec079ca28ebe1af764647076580d5ee695d49c1f3295a9f114a1fe7e555be7226d6161db63f7e4c7ce9875046c69a66812283e2ea6f68afcf62219b63db5ddcbeca66"}, 0xbd) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r4, 0x400455c8, 0x0) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:21:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr=' \x01\x00'}}) 04:21:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x10, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086602, &(0x7f0000000000)) [ 550.291216][T10869] loop2: detected capacity change from 0 to 4096 [ 550.327626][T10869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 551.692875][ T4617] Bluetooth: hci7: command 0x1003 tx timeout [ 551.692927][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 551.699005][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 551.706699][ T22] Bluetooth: hci6: command 0x1003 tx timeout 04:21:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x18b900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 04:21:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x410380, 0x0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646ec63d29a09c06b23b9b5381855061797687759879aa46a76fb109086ba5bca2dd970a69ec28ea2a2afbe60fa6b9aa090d4d87d5d999d9ce77917b2039594acc77bcf41042c79c0959f2adbfd52a81ae41fe8c1b38eba046", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) (async) ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7406000000000000003d7664"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000000c0)='S', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r1, &(0x7f00000002c0)='8', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3}, 0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x5d, 0xb5, "a86522202552d7a7e78ba593705aae65842d2fc36faf3f910f331585800a79d5fb9c67fa67772456ed7c0e21325915cff60343a883a4c201c70c86d7a5a9e745cdbf7c17d2d0c8f69a7d172afd019a19a66b7cc715cb5daaf5ba1f9947e8d3b082ef1e5ae36ff5e5d3963c6ea47e0055fee0dec079ca28ebe1af764647076580d5ee695d49c1f3295a9f114a1fe7e555be7226d6161db63f7e4c7ce9875046c69a66812283e2ea6f68afcf62219b63db5ddcbeca66"}, 0xbd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 04:21:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x10, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086602, &(0x7f0000000000)) 04:21:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 551.807114][T10882] loop2: detected capacity change from 0 to 4096 [ 551.857531][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) [ 551.876771][T10882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 04:21:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:06 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 04:21:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x18b900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) [ 553.852933][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 553.852998][ T144] Bluetooth: hci6: command 0x1003 tx timeout 04:21:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c72666401c2ffbcff0b9a7336b0efb9444d0904e796e2d9b495eda52e4458fd635b2edbb13f2c36e2c56c6b9f5d9abc0d4d9664bd68dba230ca198f190150aec1d4570622d9a4011ca27b8c0dfe77e2e021977aee384f7426eac86de88cb58367fca5"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x10, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086602, &(0x7f0000000000)) 04:21:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:08 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 04:21:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x18b900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x18b900, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) (async) [ 553.933375][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:08 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) 04:21:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 554.020688][T10924] loop2: detected capacity change from 0 to 4096 [ 554.027730][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 554.035226][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 554.104903][T10924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 554.128781][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 554.136201][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:08 executing program 3: r0 = socket$inet(0x2, 0xa, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x8000, @mcast2, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="135a116ad239775432fbfbd0aaea4e4fbfd2368ba851aa54eb861bea72d3e5794a", 0xffffffffffffffcc}, {&(0x7f0000000140)="bc6c7ec00e0df4d3313dc1ffc5576691c1140aafadeaf1602fc11b1ebf60f44568cf51c32d73fbd507eacd48ccdb65186066b2c1f39dcee610fd72464e7946b67f5db49a77c21ed403767a777ecdc6570e45a430d35dd2d05878292c5d56c7d6c87344c31495644b62a7dff8a6ff", 0x6e}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="33665ae80bdf22bd65f307f098982a5512c98e59116e2af3e59990ab07049597e661ce11dcde835b7770640903c07f0b1b5da703a807a330b96b67abad36d0", 0x3f}], 0x4, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x80}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0x1}}], 0x38, 0x4}, 0x4008040) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:21:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c72666401c2ffbcff0b9a7336b0efb9444d0904e796e2d9b495eda52e4458fd635b2edbb13f2c36e2c56c6b9f5d9abc0d4d9664bd68dba230ca198f190150aec1d4570622d9a4011ca27b8c0dfe77e2e021977aee384f7426eac86de88cb58367fca5"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c72666401c2ffbcff0b9a7336b0efb9444d0904e796e2d9b495eda52e4458fd635b2edbb13f2c36e2c56c6b9f5d9abc0d4d9664bd68dba230ca198f190150aec1d4570622d9a4011ca27b8c0dfe77e2e021977aee384f7426eac86de88cb58367fca5"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:09 executing program 3: r0 = socket$inet(0x2, 0xa, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x8000, @mcast2, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="135a116ad239775432fbfbd0aaea4e4fbfd2368ba851aa54eb861bea72d3e5794a", 0xffffffffffffffcc}, {&(0x7f0000000140)="bc6c7ec00e0df4d3313dc1ffc5576691c1140aafadeaf1602fc11b1ebf60f44568cf51c32d73fbd507eacd48ccdb65186066b2c1f39dcee610fd72464e7946b67f5db49a77c21ed403767a777ecdc6570e45a430d35dd2d05878292c5d56c7d6c87344c31495644b62a7dff8a6ff", 0x6e}, {&(0x7f00000001c0)="73020719aba9ff1074d83a9997f12d2bf6cb31feaff96e85763805ba64c8394732a87cac361b0ed130155f5609997f4f77467d3a038337d72bda9b37cc2f4016d3bc5c0a37e613a3aa62a3779413751405bcff7269dd101935e08990c4c98d9674e960fa6f5eb0c25d7f68a05ef84376bd7ec5e4bf7687088e7a4735934142f41c8bf664b238457c9ea35856ab575b308cb7e1ac8b953cc527c827e40ee6c6ea2e08409ab586c345f1038c444cf97ad2cf97f13e9e5ac8815a12ae0bf4b061c524ff5c7271ff673d5b7984d7b3b36746cecf4ce6edce7b14b1ae03033b069d8d797703e26a3ed528265a7337736524d47471ce7f805ba1182de7bd94db", 0xfd}, {&(0x7f00000002c0)="33665ae80bdf22bd65f307f098982a5512c98e59116e2af3e59990ab07049597e661ce11dcde835b7770640903c07f0b1b5da703a807a330b96b67abad36d0", 0x3f}], 0x4, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x80}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0x1}}], 0x38, 0x4}, 0x4008040) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:21:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 554.301939][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 554.309483][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xe000100a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0xb348, &(0x7f00000001c0)={[0x9]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c72666401c2ffbcff0b9a7336b0efb9444d0904e796e2d9b495eda52e4458fd635b2edbb13f2c36e2c56c6b9f5d9abc0d4d9664bd68dba230ca198f190150aec1d4570622d9a4011ca27b8c0dfe77e2e021977aee384f7426eac86de88cb58367fca5"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 554.370935][T10951] ptm ptm0: ldisc open failed (-12), clearing slot 0 04:21:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:09 executing program 3: r0 = socket$inet(0x2, 0xa, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x8000, @mcast2, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="135a116ad239775432fbfbd0aaea4e4fbfd2368ba851aa54eb861bea72d3e5794a", 0xffffffffffffffcc}, {&(0x7f0000000140)="bc6c7ec00e0df4d3313dc1ffc5576691c1140aafadeaf1602fc11b1ebf60f44568cf51c32d73fbd507eacd48ccdb65186066b2c1f39dcee610fd72464e7946b67f5db49a77c21ed403767a777ecdc6570e45a430d35dd2d05878292c5d56c7d6c87344c31495644b62a7dff8a6ff", 0x6e}, {&(0x7f00000001c0)="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", 0xfd}, {&(0x7f00000002c0)="33665ae80bdf22bd65f307f098982a5512c98e59116e2af3e59990ab07049597e661ce11dcde835b7770640903c07f0b1b5da703a807a330b96b67abad36d0", 0x3f}], 0x4, &(0x7f00000003c0)=[@authinfo={0x18, 0x84, 0x6, {0x80}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x1, 0x1}}], 0x38, 0x4}, 0x4008040) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:21:09 executing program 0: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:21:09 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000000c0)={&(0x7f0000000080), 0x12}) 04:21:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8, 0x97fa, 0x8, 0x3, 0x15, "2adbb41a2df76918619d53fd1d812a9a99cdb4"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 554.546437][ T4631] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:09 executing program 2: syz_mount_image$bfs(0x0, &(0x7f0000003740)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@gid_ignore}, {@adinicb}, {@session}, {@mode={'mode', 0x3d, 0xffffffff9d4e491c}}, {@unhide}, {@noadinicb}]}) [ 554.660636][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 554.668019][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 554.774746][T11002] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 554.785552][T11002] UDF-fs: Scanning with blocksize 512 failed [ 554.799989][T11002] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 554.813668][T11002] UDF-fs: Scanning with blocksize 1024 failed [ 554.820272][T11002] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 554.828201][T11002] UDF-fs: Scanning with blocksize 2048 failed [ 554.835728][T11002] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 554.843268][T11002] UDF-fs: Scanning with blocksize 4096 failed 04:21:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xe000100a}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0xb348, &(0x7f00000001c0)={[0x9]}, 0x8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:11 executing program 0: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:21:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8, 0x97fa, 0x8, 0x3, 0x15, "2adbb41a2df76918619d53fd1d812a9a99cdb4"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8, 0x97fa, 0x8, 0x3, 0x15, "2adbb41a2df76918619d53fd1d812a9a99cdb4"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:11 executing program 2: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) [ 556.572880][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 556.572929][ T3687] Bluetooth: hci6: command 0x1003 tx timeout 04:21:11 executing program 0: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:21:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x82000000) 04:21:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 556.677758][ T4631] Bluetooth: hci8: Frame reassembly failed (-84) 04:21:11 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@id, 0x10, 0x0, 0x0, &(0x7f00000004c0)='-', 0x1}, 0x0) 04:21:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:11 executing program 2: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) [ 556.732974][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 556.740697][ T3687] Bluetooth: hci7: command tx timeout [ 556.755223][T11017] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 556.905447][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:21:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xe000100a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) (async) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x5, 0xb348, &(0x7f00000001c0)={[0x9]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 558.732986][ T22] Bluetooth: hci8: command 0x1003 tx timeout [ 558.733196][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 558.739127][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 558.745142][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:21:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8, 0x97fa, 0x8, 0x3, 0x15, "2adbb41a2df76918619d53fd1d812a9a99cdb4"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8, 0x97fa, 0x8, 0x3, 0x15, "2adbb41a2df76918619d53fd1d812a9a99cdb4"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:13 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 04:21:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 558.804458][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 558.811577][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:13 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001540), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0xcc9}) 04:21:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 558.896483][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 558.904098][ T22] Bluetooth: hci7: command 0x1003 tx timeout 04:21:13 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) 04:21:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 559.056225][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) 04:21:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 559.684855][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 559.691849][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:21:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xd000) 04:21:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) (async) dup(0xffffffffffffffff) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r3, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x68014, &(0x7f0000002480)=ANY=[@ANYBLOB="7472616e733d66642c7266347dd7992c6e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,cache=fscache,loose,cache=loose,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.L,nodevmap,noextend,version=9p2000.L,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c636f6e746578743d73746166665f752c7375626a5f726f6c653d292e287d292e85402c736d61636b66737472616e736d7574653d2f6465762f70746d78002c61707072616973655f747970653d696d617369672c61756469742c666f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB=',measure,obj_role=/dev/ptmx\x00,\x00']) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 560.972965][ T4617] Bluetooth: hci6: command 0x1003 tx timeout [ 560.979103][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) 04:21:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa8d082, &(0x7f00000000c0)=ANY=[]) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x70003008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a94800, &(0x7f0000000080)=ANY=[]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:15 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) 04:21:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 561.118633][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 561.126344][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 561.133013][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 561.133286][ T4770] Bluetooth: hci7: command 0x1003 tx timeout 04:21:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r3, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x68014, &(0x7f0000002480)=ANY=[@ANYBLOB="7472616e733d66642c7266347dd7992c6e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,cache=fscache,loose,cache=loose,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.L,nodevmap,noextend,version=9p2000.L,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c636f6e746578743d73746166665f752c7375626a5f726f6c653d292e287d292e85402c736d61636b66737472616e736d7574653d2f6465762f70746d78002c61707072616973655f747970653d696d617369672c61756469742c666f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB=',measure,obj_role=/dev/ptmx\x00,\x00']) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) setresuid(0x0, r3, 0xffffffffffffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) (async) geteuid() (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x68014, &(0x7f0000002480)=ANY=[@ANYBLOB="7472616e733d66642c7266347dd7992c6e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,cache=fscache,loose,cache=loose,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.L,nodevmap,noextend,version=9p2000.L,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c636f6e746578743d73746166665f752c7375626a5f726f6c653d292e287d292e85402c736d61636b66737472616e736d7574653d2f6465762f70746d78002c61707072616973655f747970653d696d617369672c61756469742c666f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB=',measure,obj_role=/dev/ptmx\x00,\x00']) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:15 executing program 2: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xea60}) 04:21:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x9) [ 561.273223][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 561.280441][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {}, 0x40}) [ 562.574722][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.581041][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 04:21:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = dup(0xffffffffffffffff) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x240100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa8d082, &(0x7f00000000c0)=ANY=[]) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x70003008}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a94800, &(0x7f0000000080)=ANY=[]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {}, 0x40}) [ 563.132883][ T4770] Bluetooth: hci6: command 0x1003 tx timeout [ 563.132979][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {}, 0x40}) [ 563.211005][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 563.218485][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 563.250050][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 563.257061][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:21:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r3, 0xffffffffffffffff) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x68014, &(0x7f0000002480)=ANY=[@ANYBLOB="7472616e733d66642c7266347dd7992c6e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',privport,cache=fscache,loose,cache=loose,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.L,nodevmap,noextend,version=9p2000.L,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c636f6e746578743d73746166665f752c7375626a5f726f6c653d292e287d292e85402c736d61636b66737472616e736d7574653d2f6465762f70746d78002c61707072616973655f747970653d696d617369672c61756469742c666f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB=',measure,obj_role=/dev/ptmx\x00,\x00']) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_virt_wifi\x00', {}, 0x40}) 04:21:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa8d082, &(0x7f00000000c0)=ANY=[]) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x70003008}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a94800, &(0x7f0000000080)=ANY=[]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2d00, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 563.373020][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xd0) getsockopt$inet6_mreq(r0, 0x29, 0x4c, 0x0, &(0x7f0000000080)) 04:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2d00, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9) 04:21:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) [ 563.485817][ T45] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:18 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xd0) getsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 04:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2d00, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 563.551544][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 563.558722][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x8003) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4, 0x90f6}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) 04:21:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 04:21:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 04:21:18 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0xa001, 0x0) 04:21:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x119402, 0x0) close(r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) r2 = dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xa) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:20 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xd0) getsockopt$inet6_mreq(r0, 0x29, 0x43, 0x0, &(0x7f0000000080)) 04:21:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:21:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 04:21:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x491802, 0x1, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 565.532926][ T4617] Bluetooth: hci6: command 0x1003 tx timeout [ 565.533135][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) 04:21:20 executing program 2: syz_clone(0x62bfbc7ece3ec131, 0x0, 0x0, 0x0, 0x0, 0x0) 04:21:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) [ 565.628200][ T4631] Bluetooth: hci6: Frame reassembly failed (-84) [ 565.699965][ T8] Bluetooth: hci8: Frame reassembly failed (-84) 04:21:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x8003) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4, 0x90f6}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) 04:21:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xff) 04:21:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) 04:21:20 executing program 2: openat$ptmx(0xffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @ioapic}) [ 565.773017][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 565.779318][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x119402, 0x0) close(r1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) r2 = dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xa) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:21:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) 04:21:22 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000100), 0x0, 0x40) [ 567.693440][ T4617] Bluetooth: hci6: command 0x1003 tx timeout [ 567.694725][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 567.772853][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 567.773509][ T4770] Bluetooth: hci8: command 0x1003 tx timeout 04:21:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x491802, 0x1, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x491802, 0x1, 0x4}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0x0, 0x1b000}) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe17, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f00000001c0)=0x5000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x29, 0x0, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0xf97bb000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:21:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:21:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) [ 567.820714][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x8003) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4, 0x90f6}}, './file0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) 04:21:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 04:21:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001440)={0x0, 0x0}) [ 567.932893][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 567.939365][ T4770] Bluetooth: hci7: command tx timeout 04:21:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) [ 568.045249][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 568.052127][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 568.064406][T11249] kvm: emulating exchange as write 04:21:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x119402, 0x0) close(r1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4) (async) r2 = dup(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xa) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x2d, 0x4, 0xc, 0x9, 0x80000001, 0x81}) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 04:21:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r0) [ 569.852874][ T4867] Bluetooth: hci6: command 0x1003 tx timeout [ 569.852867][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 569.941104][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x491802, 0x1, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 04:21:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2d7ea, 0x0, "eaff04ffffffffe72a55d509f200ff0600"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 04:21:24 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa840, 0x0) [ 569.990464][ T3747] Bluetooth: hci7: Frame reassembly failed (-84) [ 570.012927][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:21:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x3, 0x200, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) 04:21:24 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=@raw=[@alu={0x0, 0x0, 0x0, 0x0, 0x3}, @generic, @exit], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x40}, 0x10}, 0x80) 04:21:24 executing program 2: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x0) 04:21:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x7, 0x0, 0x81, 0x8eb2, 0x400, 0x8}) [ 571.932872][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:26 executing program 2: syz_mount_image$omfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000002100)=[{&(0x7f00000000c0)='~', 0x1, 0x4}], 0x0, 0x0) 04:21:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x20}}, 0x0) 04:21:26 executing program 0: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0) 04:21:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x2d, 0x4, 0xc, 0x9, 0x80000001, 0x81}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 572.012922][ T4770] Bluetooth: hci7: command 0x1003 tx timeout [ 572.012956][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:21:26 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={0x0}}, 0x0) 04:21:26 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0xd2, &(0x7f0000000140)) 04:21:26 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, &(0x7f0000000000)) [ 572.123919][ T58] Bluetooth: hci6: Frame reassembly failed (-84) [ 572.175599][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 572.182562][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x2001}, @void}}}, 0x1c}}, 0x0) 04:21:27 executing program 5: socketpair(0x1d, 0x0, 0x0, &(0x7f0000001f40)) 04:21:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async, rerun: 64) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x7, 0x0, 0x81, 0x8eb2, 0x400, 0x8}) 04:21:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) (rerun: 64) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 572.253260][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 572.253607][ T4770] Bluetooth: hci8: command 0x1003 tx timeout 04:21:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000580)="ee4e347669681fb3bd2e665547be3367ed4be74f68c9a08481c9216ed4cf15448f", 0x0, 0x0, 0x0, 0x0, 0x0}) 04:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) [ 572.374861][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 572.382369][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 572.459118][T11324] can: request_module (can-proto-0) failed. 04:21:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x2d, 0x4, 0xc, 0x9, 0x80000001, 0x81}) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000080)={0x2d, 0x4, 0xc, 0x9, 0x80000001, 0x81}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 04:21:28 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000d80)) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) 04:21:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x7, 0x0, 0x81, 0x8eb2, 0x400, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x7, 0x0, 0x81, 0x8eb2, 0x400, 0x8}) (async) 04:21:28 executing program 5: landlock_create_ruleset(&(0x7f0000000040), 0x8, 0x0) 04:21:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10000000}) [ 574.172918][ T144] Bluetooth: hci6: command 0x1003 tx timeout [ 574.172958][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:29 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000000c0)}) 04:21:29 executing program 5: syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x0) 04:21:29 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0xec4, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xead, 0x1, "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"}]}, 0xec4}}, 0x0) [ 574.244528][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 574.251410][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:29 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="f8", 0x1}], 0x1, &(0x7f00000003c0)=[{0x10}], 0x10}, 0x0) 04:21:29 executing program 5: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x18, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xcad8277637f36c47, 0x0, 0x0, &(0x7f0000000d80)) 04:21:29 executing program 0: io_setup(0x1, &(0x7f0000000200)=0x0) io_destroy(r0) 04:21:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e46069930236790a0"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x4, @unused=[0x100, 0x5d5, 0x0, 0xde73], @subvolid=0x7}) 04:21:29 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000500)=@raw=[@exit], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:29 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x805, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040)) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x4) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x0) 04:21:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x6b}, 0x0) 04:21:29 executing program 2: r0 = socket(0x18, 0x800, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) [ 574.525343][T11384] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 574.576734][T11383] input: syz1 as /devices/virtual/input/input5 [ 574.696774][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10000000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10000000}) (async) 04:21:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740100000a0a01080000000000000000030000055c0012"], 0x174}}, 0x0) 04:21:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e46069930236790a0"]) (rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async, rerun: 32) r1 = userfaultfd(0x80000) (rerun: 32) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x4, @unused=[0x100, 0x5d5, 0x0, 0xde73], @subvolid=0x7}) 04:21:31 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), 0xffffffffffffffff) 04:21:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "bb91ef86fa991a255472364b34c09e13d34b25c32f6881b3a747fe3c52821571e3f62c19783efcf10881a6ed5d1fcd3e6a6ae21df7e8d40ef484f1d5beddbb09302b9ee58db13bd9b05fd60258a22a1900000000000001ff79536678092a6bbb35760fcd200659569594b00c8360eda293"}, 0xe9) [ 576.343001][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 576.343008][ T4617] Bluetooth: hci7: command 0x1003 tx timeout 04:21:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200900, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e46069930236790a0"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = userfaultfd(0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x4, @unused=[0x100, 0x5d5, 0x0, 0xde73], @subvolid=0x7}) 04:21:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r1, 0x12d, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 04:21:31 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000500)=@raw=[@alu, @generic], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:21:31 executing program 0: syz_io_uring_setup(0x2f0e, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x55, &(0x7f0000000240)={0x0, 0xe9ba, 0x1, 0x0, 0x32b}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) [ 576.409894][T11397] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.5'. [ 576.415350][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 576.426826][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:31 executing program 3: r0 = epoll_create1(0x0) (async, rerun: 32) r1 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x805, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040)) (async) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x4) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) (async) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) (async) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x0) 04:21:31 executing program 5: syz_mount_image$omfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000002100)=[{&(0x7f00000000c0)="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", 0xffe, 0x4}, {&(0x7f00000010c0)="e8cd7208", 0x4, 0x449}, {&(0x7f0000001100)="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", 0x4d1}], 0x2a3848, &(0x7f0000002180)={[{'/dev/sg#\x00'}, {'/dev/sg#\x00'}, {'/dev/sg#\x00'}, {'/dev/sg#\x00'}, {'/:'}], [{@appraise}, {@fowner_gt={'fowner>', 0xee01}}]}) 04:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10000000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)={0x10000000}) (async) 04:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x300}, 0x0) 04:21:31 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x395000, 0x0) 04:21:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="74e2b341fd89ab1c3fa44fbee0a1733d6d642c726664"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 576.732888][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 576.732993][ T144] Bluetooth: hci6: command 0x1003 tx timeout 04:21:31 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) [ 576.786382][T11420] loop5: detected capacity change from 0 to 8 [ 576.817528][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 576.825501][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:31 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) 04:21:31 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, &(0x7f0000000000)) 04:21:31 executing program 2: setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) 04:21:31 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) accept$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x805, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000040)) (async, rerun: 32) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x4) (async, rerun: 32) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) (async) write$uinput_user_dev(r4, &(0x7f0000000880)={'syz1\x00'}, 0x45c) (async, rerun: 64) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) (async, rerun: 64) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x0) [ 576.889539][T11434] ptm ptm2: ldisc open failed (-12), clearing slot 2 04:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x101}, 0x14}}, 0x0) 04:21:31 executing program 5: syz_mount_image$omfs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000002100)=[{&(0x7f00000000c0)='~', 0x1}, {0x0}], 0x0, &(0x7f0000002180)={[{'/:'}], [{@appraise}, {@subj_role={'subj_role', 0x3d, ')'}}, {@fowner_gt={'fowner>', 0xee01}}]}) 04:21:31 executing program 2: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r2, 0x0, 0x100000800ff04, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 576.949492][ T3652] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:21:31 executing program 0: io_uring_setup(0x3fc5, &(0x7f0000000300)={0x0, 0x4a60, 0x2, 0x2}) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000500)) [ 577.086267][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 577.093415][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:31 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8946, &(0x7f0000000000)) 04:21:33 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) 04:21:33 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) 04:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="74e2b341fd89ab1c3fa44fbee0a1733d6d642c726664"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="74e2b341fd89ab1c3fa44fbee0a1733d6d642c726664"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:33 executing program 2: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/159) 04:21:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000007940)={0x0}, &(0x7f0000007980)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a00)=[{{&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="087f7bf1783aa60c236e3331618a1509623a42f3b097f7f43ddfe5b965307c4aa75e2d7093e35aafae8648f31bb6a3ae76d36227c33eccc164f9458aad4de71a11cab7af2063e28ed2546802322d9564ce367f25a726a8cd64f64ca9931a91c75f7a2cca10190224c47757b4cbb5c1cc7b371f4ac27bcdac290f679068d3b181a4cdcc57d3720c3c7f2c20a71a5204f3e88a29b8e993219678a085d4e9e1cadb8f834a9b12d2122793fd7ae18960eb4fe9bb53083cedd2601bdd5aebc299bb8138aaa74d4885de682fbc7a0193dc622866bd97cd0481946caee896efad319dcf05f962", 0xe3}, {&(0x7f0000000380)="0548c6cd759602db3c061a322c97a01adbca941d4e8ab6fc77b86486c34e5ae64a37051cfce8c45f18ce9a39680035a3839fbc9283671246116fca84430b1605084274bff36034020098ad30d193b2908791fbed3b3a5877ad9c7c8a42141e4828588c", 0x63}], 0x2, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r3, r3]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x40}}, {{&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)="b7484bb4732a2bba935900facf5e338049ae53a78898ec8b6b08459539d9d5ece6217bc0bd43ad3efc528b1addac6483c49c111f147ae2ad5b4f8bb1b8b943b83f231e1da6056ecc070b02ad066d5d3ada589715747f4d2132c50ecb06a725109a51901404b9a4b0b698a70e9a34fa07e11fd76f4f3c6709e6471d71804db2f3290ca9571b099a776618abcff7eee9d49dec17857bb7081f23", 0x99}, {&(0x7f0000000880)="b0790a4820b89f8844a7a4787a03827d2ca4a486338cb3c25965e59194ae76a281a1b58a8f7a8a3849a36b6ead4d79da4c64a43a1f02c90ae98219c5abf736825652832a2e547467026cbe658dbb43ac3b6afbeeb419bccc6db57f179d28bc86e36ed756cdfc", 0x66}, {&(0x7f0000000900)="211d90508972053127d1031edc992907058ba52f8734d83cdbfe1b4f8e10c5bbc980c0c847658bca05321847edd19b0beb475d6a76b0a342272ac0edeea3c58717832408c5c9a202b22561a8e6ad12c46af3c27a71da92e939e5d253827637a8ec67946df784", 0x66}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="1c0000000012000000000000015b0981", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x148, 0x8810}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003900)="82bc0b459487829fc3d3219f353c915c1f9821df0653cf811ee9c6e94b94ae08e2ebe6e37e4150414df0ca2981ccf1c1548e45ff14fbc2b6", 0x38}, {&(0x7f0000003940)="3221bb224d9f7f7ce6a68c411c66c3", 0xf}, {&(0x7f0000003980)="8d792ac4d54278a1627e943dbf284afcd807f393ebdfb13fe776a0d8d47b5b944d43e6778d4a98c07d9481edb64e26", 0x2f}, {&(0x7f00000039c0)="13ce6392cd70c2dbc8796fb001d2fa3fcdcdf3b9867c02fa7380a402327c68fec20e90dc21fcd86a83d785bd8f5999dfc88e4bf430990e20a8c2d5c9d39ec28da0922bc56d93bd252b3c8452ac61bfd55b4fae9ec8a00fdd924048c4c4bf6a8770630e25d7708517f011098017a84c4ec27d261723e8fce2be05beb78a0819567dbb9bb384a394a3e759b406981dc06baac73f1305", 0x95}, {&(0x7f0000003a80)}], 0x5, &(0x7f0000003c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x4000}}, {{&(0x7f0000003c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="5160b20da713037e64d473ab1a2e69be1ece8cbced41e0b46026dbc6fe92fa892e21a0c4a6329dd4199919ab37dbca5f554ea9d5b5a02f604bafc68ec8e102c9034e3755581aa8c395b97c46fb6e0c99b993c9f43abb25f506ec947585c8f9f2a9029beafe96428d1a1e602a1e9ec7cff5d6d690a0b89977493fbea26050a804835e25b416398a16b02925ee7195571eaffbc5837f6c42f240f1931acf414d15811a1b706878aca522b00a1c10e0d590d1cbb6b6d18c89a2152a9f1535fd902a6bd0388a0c9002b5cf67300ef28b1665c6f12a3a498db57d2831f63f9f88a73ad4ee07f77afaea252a016e4860af9c653e956e1381086eaa66da4a7f00d042de0b72dfed3ff3d7aeda1000e1bdbbb52f7dd40076e1c9b338bbf63093433b0e6f11ee50aaa6b42a2b480f2fbeb2e47678ca7e63edb5715b1fa00b5b6d3a7ddade5b17046210c5d2511c6efc660d44c8a856446b9d190eb7d7510ee3401c3ee7adfc382806b4620622cd0ddf2861647939d91fa274be7af2d7da5e05d7b76837884d8a57c347eede6256df538c06f31d18c65f279e24c73a5d11f0f6f3e22a1bd320a96e4628829ebf5a3eb3a2abab634aedeb9df2f62608063e0178996704106e9ff273788b9b602765a2cb3141fb6b23e891fb750f5e3d6375a4c37fbd9153b774a4836a830e5274e7afa1594dc56017c0ebde1901fa11937179c3ec6e78d28461215473d1399377c3bc58061ab455e672ae5939a2468cf46f45bbc720d1c0d06d7e7a73fdc13b187aff48e52c1af9110fa45d9286ab10fb138a1184ca37889ca48059d7034c09d67fd87a77d84e9abe1c2d57fed0977d13197a6fadd6a93b1a09095213b11c8d1babc5b9fe6f85fc067b88f5154894176649a8d4ddba5beea85b79e449a65c4e0c71f40a3db381c78cd6f65f0c64764f2a111d6d1c6d09bd2167fdb57fb9cc8bd0168d36f261eec4d567e99ea9014e78a5abefb4386ba49e0c4d88d69b8939b323259e2c96382fd30644758314302513a96723452c81e9ffef820e4512ae9a75ed8c9b93341415af03b23a2802d7c60192657bc9719b9bdae131db5c4792ae9f33437c95d4cc4408a44f18d726005bdba8a262d18d04abdec1b6ab3865c9a4fc5b5ba054ad53363687c197b9c301b23e634a713fe76dd455cd00179cd78c71d03afc82d37233679cc6311293dae071f76fb0ca577a481a2ca530fc1a96f1a74657241a5b2d688cd8b8ee0a7f33dc64554911dc59fd3a7df40ef4cc339bc972c06076786686c230d3b927be6799bb027bef17cc6244ba8e6022a4da596fd137c76b990e837a6036b21366d39bce8e70a3dcdeface5230489bc00d8ff0520c077045b38a17159de5de772ceffc95157b108e812b76e4ff6fb821909c39cb020f886988bbaf4b209f02c64fa9ac6adae9f787dd838e755e30e8d0ac2180508575855bd1191e751dfee6c7cdcece536d9ab4de35bc15fdd9ddb3a896c39163c16083414b6d9412886fcfc752b22047c4070872001e1f123fa7edaa2b44023cd253272513ebca8dacceeb15b9df309ed29e0442b3c06e41ea06ecfee78686651374e9bb2c09d0722e9d019f548a35bcdc7d9bb69ddfe27cfe295c4637687d7cf5177dd0485ac18517338f04b2515eba47da6ed4eb88fd31be4acc773a80966ae6c4d8fbc791433a92554c7d4ffbd929074f4be1e608bb5a239b50bb1cb9e64ceb1c8b4fa298f93dd82c4e174802a538e7236ebaee8768d2708c8d39f11039a2f1648881828b682a65c6fb8e18f0a99e41523a9987f6d71d55ddc16ac40429653765b90e151475ef63230550ba4aca829ffd1a314b85528919bb0b3350a36a578c21bdda7d62524d2dade3f71d1ad7c288d409ea64909a15fc885f52d598c5cfe23af4950d93523427efaaa0e55347d903d3e58da1dd5c662987b01df11527c24c72d248be49953b85f3aa3c16bfac86c1ef1d8b1efe97d41d0d5fb74a8defff61d8d8f756f28d36b334b01dddf02c7f2e337bc74188412f5a6d00901b4f29ea2b18146b56befa31995a11fe8ace5b76dcdd3489c61f0c8b55bffb7c796a92cad14da76ffb423623e7fc543fc69bedc2b141659d2bfb9633bbcd3a42e37c9e6faba783e532550d2a024345b4f858a9f4a56d539f4ee4d023b8c6e9a06971607ad509bed3a80a70375407f0283d60d3b8d6db419808e367a638ffe313dfab9dd78a1043cdbc639af06ef73237234d387fd39daf3e05f34652bce5ce739457e5dad1113e92a614dcbab4ff4faefc82029fb9d9c2d2199b09b16410c057c266a4cc4e882fb7a6bf527a650f4f7decc068945c01500704d4476e18389b4000a7226ee6443068f8b2112044edd5b16a6bd5b4066a4ad8157504ccdda1dfdc62df2cffd256588eb30c15eefd4683ba704ceefc88305ac82cc5ffe5378659f98511336febc598609297913b29565e4f06af276e476d04454fdebe344d43428ba74417e2da2f12aef7ed81ae664bd1ed944136e649197b6e6d3087cb74cfba7f358ec390b97d691b31911f62790443399c429b67ca21eba4dc636594d3a5c30ce124acbfd4622ae43001213fd286162c1684e384faf8ca315524350a7cfc3124485cf02ae35b1f32ca6e1dac18b874e6633df5272c0caac5887d323197766914b326e83a0472e7d7e78e8b6dd56a607aa28de844ca69ba7a3cf9486b3570439f215617f5b619dccd6a5721751cfc30b95bd769ab42f02f95f993c70da8a33faa492f3bb7effbff586c68a92cbc8841c530a9b830d2b8e3f96b10723e75ad6374d0970e3b6e5a781912c10085d8e1c26fb83197f45e0850b65e296caf48890ea9dcf6ae894720645a37dc147168fe61207bd4c3461556f75336391cdb1b66dced3dbe2c61fe5d84d22c6861212686ce454d90059f6ded06303a3d1d74227481bca42e0d6cb57191e6e612874c9128e489a8cfe65e013aff56dfc735dc0c0dc9faa8b4f48f2b7edefd87634f384dc1b1297cf150959837fb6d179a91d6720259de57c4b8cb30ebdf53d0f9b58639879ea77486debe15460bf0bb4f35c36db87d40253f6472540d3776ddd6e9b76368a766ed5ad5eb926558e1c1b0a9de5bea6fc51140b23bbc8182d5aad64d7c0cf8523b2c4ccff490b1ce18f3761a0e3c7cdf032bd57607b8026f89b9bd8ad74ec52b5035392c6a3dbf627cee5a3019bd7422c217db9f7e398f7149686f4ab19c1d3a7814b1abb5f392f97acf3ca9f21348dac300a8d3959c6ee4aa604c2719219e214c3a2cbab4925926b0972c4e99a7807f535681fff064064e98c7cb7847ca80c4876bcb9d54d9b9b6e0c5a546d48fd4b48bcdbfb1c18d13e8f74360759b28defb5e3cde9b3da8a7ed4b2d0e2fc4080841e6b73f82091201522cff36fd0bdab63cf521f22b82ec1b8fbcb7358e892bfc947fcb2045b320402a3bf2dd8e084a83e494c509c35f6b1e3f8c9a13e166b3958cefc2dd85b947b298224fdf5cc297cfd1d3020667df4767470b52dd07e5f2760c05611487d3677889b6a77ee3ef789df7819013194171727dac830129c04891644da64d2ee284198cccd310cf4c15ee2e7d9a8187e26e68256adc307df355dbc884a850689ab1f3ea65e27968667a540d0b6db9d8a64e806850bbd28b9dc78513f1e44867290f0a73397298b1277b6aef3785ee765ef9b5bcadc2337bc1d0d829a07e1a54e4743e13eebdd917afd3f1f4305f9006c71785661f305f3c900204cc391d6840999b2d7919b48f2f564ad64d8f76bcdfeff718328c6a1daa1f7f5b72e0232e5fe0f37d0276ce3e811fb110853c4fb27f47ed20960a0327b99b15147e8d49b998efdd491bc6f0ea4c2e2764be09e113721df04220afbde1b5cfc4f0ae2997bad198ca27ba17040864416d901d808c3fd39c1a72694505dc4151a8f6dd1cc1f5856d4fa8e85b826cb98d28f0f751a77c38c148ddfa4e7d7dee2b3785b33fbe4cbc4364f13dd04029ad8aeba716f5d17744f94c7f0cdddcfd88a5e25a5838e0e4c091a8be09210e45aada63f2d6482a10b3a4e872876194a2b16f9b9e2d0713256cafed6afe251d0de417df0b513e5229cf48776db8e32a67cb2af8adb5f4d83326a336fc30c66c58795e2e23510665d71cd2f3c1de11450229d6d6c92aa41075ad44f546b1f958e265749f43e3deabc0823999aa5dc71c151311f3659b52fc00740d5ad617da6b78c3e27a1172ba6be4f64197ca9549d51fae5436694a7649631c841f426e1fe5baec8f8500e6cf1cc33dbdb459e3714c9291903d0110e9a1d2f3f3dc44ae5c2294e58cd48d8aa3268554f08c8e35836e64d26c22b5e0ba2f2c367f73e0ff492dda3f86fa0859b645252c04ababfd90ad480ea000f8ad780a584bab72d536b45cc0ed0143d9dce94cf9253104256a8c233706f36bc73f7c9558f337bd753f5b7163efc75ec91bc7889a07db1713d4db569b0039f3a790f98ebbc4803b61d39b5d93cd467f05b922adb1d974239f4ceb99f8f640e44214354fcc002cdc66fb50aaf72aa441c601af9287d3a6f9b2f4742dd3a4364cc9e461f900a5f777ad981aa133c5e602e895fbe303c88b92c1f64839a708c5e6464a9022ac7d916f10e449d90475f82b84f8c1332853149d51cfd83d8fd96bebf8e109fd7ba3313ab7d0b2b0cdb242a0c23e5f9c2019e013734eb184dc2ffaa0531ad45cbe74313aa855256dba92fad1e0bec1cda14a26c19390bd2be2a90377a932f07017bef62c66c2029812897b311e7839b8ddf5651edc1a3b919e1195f820f69eded16774daed80edf9dcc42fe36319e7f9ce1a3b14b8c3bcd8608f264c1108da1445de6bcd55e315040325ebe10a9c6171d3b51000473faf99e539afa1d73e99066e4381332dc15a3144d25933ba8a3f460271e99e64c78ff35c66c5426ecd14d4ff37c110f8d8128112eb83419e07378bc9491c653090c3826c5ebe94b7dc6e2e09a6ff88c28862a1b30537e9384daf673f7e71534d222a4c03db4cc155280937e06c495b4f4b27bba20479afced78dca80b53ddb987fecc8c4dea5a83c153a60102d73b72b4db92947bea90c130d86b853000bfbcff22b441c0ec8631c560825ea26696930b3757717722f045d784eb4aed4725010d80f942aa2c77d41071a0babd0d1aacc393dcf762ae62383c41d2332c2f4030f71ef51cb49e7e4c31d48132f4d8e1c1401f19717e78a2fa5c74e00404a8917cae6915d13a326e38e82a7babc7f27e636fb9c7086e67c897ec18a932ca047a79dbae49237373d217236209839392e5eddbf39f3e323c48f5e3656aedcdb4ed5e5d32ead814cdf2bd19796f24f4a847e39cbed574fb3ddc44dda8a20087eca9ed5ad215b98f3e979fd6d9c7c686b5bd74f9ecc2176a71c12c204bb910b8766fb50c478fb5fd851429430d08d6f782cea74b320208eaae18d3e37f83d299cc034ad738761310da5f056a3303236e46f1ce019cb30ba14394d5cdd893079ffc4ba3909f00550835e27e56676ca58df0f2a20c288dc476d4289bba1a33a258ce445f87dbd19ff70cb393d5720db9764fd9c5934dfa9e3c61ac8a385eaea5d560f21acd12dd4411b5e3361963865be3776f0d9cc7fa3e78fd4445cc83a84af219d0401728c3b811cde9d801c9f5cfba07a35278bb3c157661aa03b5a30eeb2754ee621999899820a70d697384a9b8d48a9a4b8fad831d36d2deac833086aa85f4bccbee965d391ff54b502e7e1f86389b1f75f2fde662df226a4043db39eed5109bf9fde9228883cea8be0d7d8", 0x1000}, {&(0x7f0000004cc0)="975ed462458ae7e31aef4acbbc9ad68cde5d7b38358d7f4d3f996aad6601e4282482bd10153a6769f6dd3d060b6fb1a738bd3f0a66ce0c06d68f7566146a9dc25a130561c49309ca332dfe7230f77f95bba8a90d8b4cbbec157e9ff602b46898430f92b2a605d7a87ddf47c40f73dca360cc8e8479fbb8ac2a371eabaad410c7bf40d522494446701fbcabb04ae63a318786c8e961a945ae0d164c76d3e65580cb693d3e410265673f61619d3fd21fefa489a616dc7f0b3e4bddbe846d5f3c409263e81331af800c39169ee6", 0xcc}, {&(0x7f0000004dc0)="175f738b4958ebd5f951bc6c6fedc4e9d04681c75a59ecb90d88d2768d7b0d98ab304fb144c2159d6b1399da24d5edd81cafe67fd8d1754c4dcb49c13686b49617a17d31020fc7d7c60eec87e1be0be45b0a1828699084405c118c73f4cd6f80aec7f930de6cad2d51e2f44bda8373db0d7e875c0b2bdc762818999331f71ff103beaad77e5c246c5b0cc75dcf00a06fab802f5bca2e1af79d7a54b697332c5029cdf1831914d8137c99d38377f745584bc040e55ab4330ff2fa8714a8dc24d3d482f849c6289ac8a4980523227aa2c5495ba84951c6a8168838c8b8f0b1f97239c5c4e6fb", 0xe5}, {&(0x7f0000004ec0)="31a07db88279d7371c8cfdbe85c0c0462506ef63a86ecbb64c623f3515e772cbdf3f9bacd64bf7c25c0739400aed3f7ba93ead84a7f39ce686d447f45495da0898ab08ee16ea76ae12e058da6506197cb80c4ff30b1388632702d1801771547fbc2363820bd213fd3fbb5a770934e23505b0d6", 0x73}], 0x4, &(0x7f00000072c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}], 0xc0}}, {{&(0x7f0000007380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000078c0)=[{&(0x7f0000007400)="10141a8d6202b6b69644b190f41a628fcc612f52dc8a59f71dca44d9cd72777fcd450f2aaca43b04f20086db139229144321f0f140ad7be1f4899cfb494b758ba05ee890310874bfa1b27cc3bc11d72215729a4cff10dc4da3e63afbbb51a9c24c1e4a462057eeda4e7b692ead0f0cc1dbea276ded16d789e5c4c8a19cc6ebfc781cff295c4e7b11db66fe6c9e94", 0x8e}, {&(0x7f00000074c0)="a88c1b01fffe5c2a954bf06f18c03bb3935bdb191da18fbad5b175ffb38c30b6e220509796def911867782c4519b55b442b863101413d5adeb4e4e9653a38f4112923adb011a8c", 0x47}, {&(0x7f0000007540)="bd93df9bb31672e6a479b50f621e1dd977fe7e5846b9a3356452dbc6c1b5e891d306f994e87785b6b7c6cab60bb584789b3550ab3f1090c3873d15cfc13b77ae3a1a7b99590edd8b36a19524984c07ceed", 0x51}, {&(0x7f00000075c0)="89957434fd1c910482cc8114c2aca492407a04a0cd21692ff906f58ad6d106fec9bde709dd2a2ba2d70315b88c6d015de61a6e8c868bcb0f91d13d26d28c5425f4fea8", 0x43}, {&(0x7f0000007640)="3f530432a0c0d8ff88106aa3944948dc830d4ebc5bd6a83749606ac2ec99415052c577ac3cdfe3879f9bfc16966d2c6fc0c13a79f05e4d115039cae5687e384398ed8248f3a8b7", 0x47}, {&(0x7f00000076c0)="0c3d8533f971397b8bda47b665cac2ea02b0e4c0224ddc5b07c041ceeab0b318b1cc6e662b3aad99890a18a0dea3357bbd1fecd98d2353b7a693946266d286e046fb769a0e936c6fb05d42074d5c254624eb96f2399082b1438c4efbff6ea2b6150b70990f03b5", 0x67}, {&(0x7f0000007740)="3b2aaeee6f9d803fa0ff29a7d6b4f04174f073d397c2552e74f30ad1f5a1a8f15fed856738d3320414c11fdb84f34027e4ae10c3c8940eddd8746be0e1e2381bb5a5ada6cf912a4849c06811e5c22c5c1616f44504d4f23a0ed3d60583444505b97bd36b299d548b93858af6586501d8585620f4add401c9aa7dcb49c512662a28ff9cf45fc2b16fb1e36c3c4b0e6520b3eb199ebb1285e92faf9f9032733bfeb22155c75f6e42f664f2211048c2604fa3e9532bb5bf631eb00e1d71c9ee366ebfad6c7f60b6605a5889672a380ac41f550810f763702f507bc8f3abc5e3717b4509611a5fb796291bc631a572658137d4c5cb9ff7", 0xf5}, {&(0x7f0000007840)="a4fa034ea4575e2fdb9c92531132f8279daa74101e4255a346f9be8e8a23b4f3264578dfb639d30e1beceef12bdd7cf963d945e697b657918233f47ffc214ab7bacc88e99290a8c5a07fe4606e08a59ea15fb281b0a21db0caefc02840299f07d38062fe357e0f", 0x67}], 0x8, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x4040850}}], 0x5, 0x80800) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)) dup(r7) mount$9p_fd(0x0, 0x0, 0x0, 0x204057, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r7, @ANYBLOB="1d600d2ca6fdc46098e2a09483f0a8775a513b4d74df3adb523a9e1391f7dfe337a5dbbe8b21ded7c911d740adcfa51d967ebb254b209c8c208150b8f25f6f36409b734ea2350b1a5dccf6c784f827ec7283b5"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 578.892854][ T144] Bluetooth: hci7: command 0x1003 tx timeout [ 578.892927][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) [ 578.963378][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 578.971568][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:33 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa}, 0x34, &(0x7f00000002c0)={0x5, 0xf, 0x34, 0x5, [@ext_cap={0x7}, @ss_cap={0xa}, @ext_cap={0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x7, [0x0, 0x0]}, @ptm_cap={0x3}]}}) 04:21:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) [ 579.006633][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 579.013925][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000007940)={0x0}, &(0x7f0000007980)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a00)=[{{&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="087f7bf1783aa60c236e3331618a1509623a42f3b097f7f43ddfe5b965307c4aa75e2d7093e35aafae8648f31bb6a3ae76d36227c33eccc164f9458aad4de71a11cab7af2063e28ed2546802322d9564ce367f25a726a8cd64f64ca9931a91c75f7a2cca10190224c47757b4cbb5c1cc7b371f4ac27bcdac290f679068d3b181a4cdcc57d3720c3c7f2c20a71a5204f3e88a29b8e993219678a085d4e9e1cadb8f834a9b12d2122793fd7ae18960eb4fe9bb53083cedd2601bdd5aebc299bb8138aaa74d4885de682fbc7a0193dc622866bd97cd0481946caee896efad319dcf05f962", 0xe3}, {&(0x7f0000000380)="0548c6cd759602db3c061a322c97a01adbca941d4e8ab6fc77b86486c34e5ae64a37051cfce8c45f18ce9a39680035a3839fbc9283671246116fca84430b1605084274bff36034020098ad30d193b2908791fbed3b3a5877ad9c7c8a42141e4828588c", 0x63}], 0x2, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r3, r3]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x40}}, {{&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)="b7484bb4732a2bba935900facf5e338049ae53a78898ec8b6b08459539d9d5ece6217bc0bd43ad3efc528b1addac6483c49c111f147ae2ad5b4f8bb1b8b943b83f231e1da6056ecc070b02ad066d5d3ada589715747f4d2132c50ecb06a725109a51901404b9a4b0b698a70e9a34fa07e11fd76f4f3c6709e6471d71804db2f3290ca9571b099a776618abcff7eee9d49dec17857bb7081f23", 0x99}, {&(0x7f0000000880)="b0790a4820b89f8844a7a4787a03827d2ca4a486338cb3c25965e59194ae76a281a1b58a8f7a8a3849a36b6ead4d79da4c64a43a1f02c90ae98219c5abf736825652832a2e547467026cbe658dbb43ac3b6afbeeb419bccc6db57f179d28bc86e36ed756cdfc", 0x66}, {&(0x7f0000000900)="211d90508972053127d1031edc992907058ba52f8734d83cdbfe1b4f8e10c5bbc980c0c847658bca05321847edd19b0beb475d6a76b0a342272ac0edeea3c58717832408c5c9a202b22561a8e6ad12c46af3c27a71da92e939e5d253827637a8ec67946df784", 0x66}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="1c0000000012000000000000015b0981", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x148, 0x8810}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003900)="82bc0b459487829fc3d3219f353c915c1f9821df0653cf811ee9c6e94b94ae08e2ebe6e37e4150414df0ca2981ccf1c1548e45ff14fbc2b6", 0x38}, {&(0x7f0000003940)="3221bb224d9f7f7ce6a68c411c66c3", 0xf}, {&(0x7f0000003980)="8d792ac4d54278a1627e943dbf284afcd807f393ebdfb13fe776a0d8d47b5b944d43e6778d4a98c07d9481edb64e26", 0x2f}, {&(0x7f00000039c0)="13ce6392cd70c2dbc8796fb001d2fa3fcdcdf3b9867c02fa7380a402327c68fec20e90dc21fcd86a83d785bd8f5999dfc88e4bf430990e20a8c2d5c9d39ec28da0922bc56d93bd252b3c8452ac61bfd55b4fae9ec8a00fdd924048c4c4bf6a8770630e25d7708517f011098017a84c4ec27d261723e8fce2be05beb78a0819567dbb9bb384a394a3e759b406981dc06baac73f1305", 0x95}, {&(0x7f0000003a80)}], 0x5, &(0x7f0000003c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x4000}}, {{&(0x7f0000003c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="975ed462458ae7e31aef4acbbc9ad68cde5d7b38358d7f4d3f996aad6601e4282482bd10153a6769f6dd3d060b6fb1a738bd3f0a66ce0c06d68f7566146a9dc25a130561c49309ca332dfe7230f77f95bba8a90d8b4cbbec157e9ff602b46898430f92b2a605d7a87ddf47c40f73dca360cc8e8479fbb8ac2a371eabaad410c7bf40d522494446701fbcabb04ae63a318786c8e961a945ae0d164c76d3e65580cb693d3e410265673f61619d3fd21fefa489a616dc7f0b3e4bddbe846d5f3c409263e81331af800c39169ee6", 0xcc}, {&(0x7f0000004dc0)="175f738b4958ebd5f951bc6c6fedc4e9d04681c75a59ecb90d88d2768d7b0d98ab304fb144c2159d6b1399da24d5edd81cafe67fd8d1754c4dcb49c13686b49617a17d31020fc7d7c60eec87e1be0be45b0a1828699084405c118c73f4cd6f80aec7f930de6cad2d51e2f44bda8373db0d7e875c0b2bdc762818999331f71ff103beaad77e5c246c5b0cc75dcf00a06fab802f5bca2e1af79d7a54b697332c5029cdf1831914d8137c99d38377f745584bc040e55ab4330ff2fa8714a8dc24d3d482f849c6289ac8a4980523227aa2c5495ba84951c6a8168838c8b8f0b1f97239c5c4e6fb", 0xe5}, {&(0x7f0000004ec0)="31a07db88279d7371c8cfdbe85c0c0462506ef63a86ecbb64c623f3515e772cbdf3f9bacd64bf7c25c0739400aed3f7ba93ead84a7f39ce686d447f45495da0898ab08ee16ea76ae12e058da6506197cb80c4ff30b1388632702d1801771547fbc2363820bd213fd3fbb5a770934e23505b0d6", 0x73}], 0x4, &(0x7f00000072c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}], 0xc0}}, {{&(0x7f0000007380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000078c0)=[{&(0x7f0000007400)="10141a8d6202b6b69644b190f41a628fcc612f52dc8a59f71dca44d9cd72777fcd450f2aaca43b04f20086db139229144321f0f140ad7be1f4899cfb494b758ba05ee890310874bfa1b27cc3bc11d72215729a4cff10dc4da3e63afbbb51a9c24c1e4a462057eeda4e7b692ead0f0cc1dbea276ded16d789e5c4c8a19cc6ebfc781cff295c4e7b11db66fe6c9e94", 0x8e}, {&(0x7f00000074c0)="a88c1b01fffe5c2a954bf06f18c03bb3935bdb191da18fbad5b175ffb38c30b6e220509796def911867782c4519b55b442b863101413d5adeb4e4e9653a38f4112923adb011a8c", 0x47}, {&(0x7f0000007540)="bd93df9bb31672e6a479b50f621e1dd977fe7e5846b9a3356452dbc6c1b5e891d306f994e87785b6b7c6cab60bb584789b3550ab3f1090c3873d15cfc13b77ae3a1a7b99590edd8b36a19524984c07ceed", 0x51}, {&(0x7f00000075c0)="89957434fd1c910482cc8114c2aca492407a04a0cd21692ff906f58ad6d106fec9bde709dd2a2ba2d70315b88c6d015de61a6e8c868bcb0f91d13d26d28c5425f4fea8", 0x43}, {&(0x7f0000007640)="3f530432a0c0d8ff88106aa3944948dc830d4ebc5bd6a83749606ac2ec99415052c577ac3cdfe3879f9bfc16966d2c6fc0c13a79f05e4d115039cae5687e384398ed8248f3a8b7", 0x47}, {&(0x7f00000076c0)="0c3d8533f971397b8bda47b665cac2ea02b0e4c0224ddc5b07c041ceeab0b318b1cc6e662b3aad99890a18a0dea3357bbd1fecd98d2353b7a693946266d286e046fb769a0e936c6fb05d42074d5c254624eb96f2399082b1438c4efbff6ea2b6150b70990f03b5", 0x67}, {&(0x7f0000007740)="3b2aaeee6f9d803fa0ff29a7d6b4f04174f073d397c2552e74f30ad1f5a1a8f15fed856738d3320414c11fdb84f34027e4ae10c3c8940eddd8746be0e1e2381bb5a5ada6cf912a4849c06811e5c22c5c1616f44504d4f23a0ed3d60583444505b97bd36b299d548b93858af6586501d8585620f4add401c9aa7dcb49c512662a28ff9cf45fc2b16fb1e36c3c4b0e6520b3eb199ebb1285e92faf9f9032733bfeb22155c75f6e42f664f2211048c2604fa3e9532bb5bf631eb00e1d71c9ee366ebfad6c7f60b6605a5889672a380ac41f550810f763702f507bc8f3abc5e3717b4509611a5fb796291bc631a572658137d4c5cb9ff7", 0xf5}, {&(0x7f0000007840)="a4fa034ea4575e2fdb9c92531132f8279daa74101e4255a346f9be8e8a23b4f3264578dfb639d30e1beceef12bdd7cf963d945e697b657918233f47ffc214ab7bacc88e99290a8c5a07fe4606e08a59ea15fb281b0a21db0caefc02840299f07d38062fe357e0f", 0x67}], 0x8, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x4040850}}], 0x5, 0x80800) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)) (async) dup(r7) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x204057, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r7, @ANYBLOB="1d600d2ca6fdc46098e2a09483f0a8775a513b4d74df3adb523a9e1391f7dfe337a5dbbe8b21ded7c911d740adcfa51d967ebb254b209c8c208150b8f25f6f36409b734ea2350b1a5dccf6c784f827ec7283b5"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:33 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) 04:21:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:33 executing program 5: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) [ 579.109704][T11493] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:21:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1, 0x0, 0x0, 'v'}) [ 579.180692][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 579.187864][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 579.307522][T11509] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.362855][ T4736] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 579.803536][ T4736] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 579.813681][ T4736] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 579.823476][ T4736] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 579.993271][ T4736] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.002385][ T4736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.010936][ T4736] usb 3-1: Product: syz [ 580.015426][ T4736] usb 3-1: Manufacturer: syz [ 580.020073][ T4736] usb 3-1: SerialNumber: syz [ 580.302899][ T4736] cdc_ncm 3-1:1.0: bind() failure [ 580.309953][ T4736] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 580.321285][ T4736] cdc_ncm 3-1:1.1: bind() failure [ 580.328914][ T4736] usb 3-1: USB disconnect, device number 8 04:21:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="74e2b341fd89ab1c3fa44fbee0a1733d6d642c726664"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="74e2b341fd89ab1c3fa44fbee0a1733d6d642c726664"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:35 executing program 5: socket(0x1e, 0x0, 0xff) 04:21:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000007940)={0x0}, &(0x7f0000007980)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a00)=[{{&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000280)="087f7bf1783aa60c236e3331618a1509623a42f3b097f7f43ddfe5b965307c4aa75e2d7093e35aafae8648f31bb6a3ae76d36227c33eccc164f9458aad4de71a11cab7af2063e28ed2546802322d9564ce367f25a726a8cd64f64ca9931a91c75f7a2cca10190224c47757b4cbb5c1cc7b371f4ac27bcdac290f679068d3b181a4cdcc57d3720c3c7f2c20a71a5204f3e88a29b8e993219678a085d4e9e1cadb8f834a9b12d2122793fd7ae18960eb4fe9bb53083cedd2601bdd5aebc299bb8138aaa74d4885de682fbc7a0193dc622866bd97cd0481946caee896efad319dcf05f962", 0xe3}, {&(0x7f0000000380)="0548c6cd759602db3c061a322c97a01adbca941d4e8ab6fc77b86486c34e5ae64a37051cfce8c45f18ce9a39680035a3839fbc9283671246116fca84430b1605084274bff36034020098ad30d193b2908791fbed3b3a5877ad9c7c8a42141e4828588c", 0x63}], 0x2, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r3, r3]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98, 0x40}}, {{&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)="b7484bb4732a2bba935900facf5e338049ae53a78898ec8b6b08459539d9d5ece6217bc0bd43ad3efc528b1addac6483c49c111f147ae2ad5b4f8bb1b8b943b83f231e1da6056ecc070b02ad066d5d3ada589715747f4d2132c50ecb06a725109a51901404b9a4b0b698a70e9a34fa07e11fd76f4f3c6709e6471d71804db2f3290ca9571b099a776618abcff7eee9d49dec17857bb7081f23", 0x99}, {&(0x7f0000000880)="b0790a4820b89f8844a7a4787a03827d2ca4a486338cb3c25965e59194ae76a281a1b58a8f7a8a3849a36b6ead4d79da4c64a43a1f02c90ae98219c5abf736825652832a2e547467026cbe658dbb43ac3b6afbeeb419bccc6db57f179d28bc86e36ed756cdfc", 0x66}, {&(0x7f0000000900)="211d90508972053127d1031edc992907058ba52f8734d83cdbfe1b4f8e10c5bbc980c0c847658bca05321847edd19b0beb475d6a76b0a342272ac0edeea3c58717832408c5c9a202b22561a8e6ad12c46af3c27a71da92e939e5d253827637a8ec67946df784", 0x66}], 0x3, &(0x7f0000003700)=ANY=[@ANYBLOB="1c0000000012000000000000015b0981", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0x148, 0x8810}}, {{&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003900)="82bc0b459487829fc3d3219f353c915c1f9821df0653cf811ee9c6e94b94ae08e2ebe6e37e4150414df0ca2981ccf1c1548e45ff14fbc2b6", 0x38}, {&(0x7f0000003940)="3221bb224d9f7f7ce6a68c411c66c3", 0xf}, {&(0x7f0000003980)="8d792ac4d54278a1627e943dbf284afcd807f393ebdfb13fe776a0d8d47b5b944d43e6778d4a98c07d9481edb64e26", 0x2f}, {&(0x7f00000039c0)="13ce6392cd70c2dbc8796fb001d2fa3fcdcdf3b9867c02fa7380a402327c68fec20e90dc21fcd86a83d785bd8f5999dfc88e4bf430990e20a8c2d5c9d39ec28da0922bc56d93bd252b3c8452ac61bfd55b4fae9ec8a00fdd924048c4c4bf6a8770630e25d7708517f011098017a84c4ec27d261723e8fce2be05beb78a0819567dbb9bb384a394a3e759b406981dc06baac73f1305", 0x95}, {&(0x7f0000003a80)}], 0x5, &(0x7f0000003c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x20, 0x4000}}, {{&(0x7f0000003c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="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", 0x1000}, {&(0x7f0000004cc0)="975ed462458ae7e31aef4acbbc9ad68cde5d7b38358d7f4d3f996aad6601e4282482bd10153a6769f6dd3d060b6fb1a738bd3f0a66ce0c06d68f7566146a9dc25a130561c49309ca332dfe7230f77f95bba8a90d8b4cbbec157e9ff602b46898430f92b2a605d7a87ddf47c40f73dca360cc8e8479fbb8ac2a371eabaad410c7bf40d522494446701fbcabb04ae63a318786c8e961a945ae0d164c76d3e65580cb693d3e410265673f61619d3fd21fefa489a616dc7f0b3e4bddbe846d5f3c409263e81331af800c39169ee6", 0xcc}, {&(0x7f0000004dc0)="175f738b4958ebd5f951bc6c6fedc4e9d04681c75a59ecb90d88d2768d7b0d98ab304fb144c2159d6b1399da24d5edd81cafe67fd8d1754c4dcb49c13686b49617a17d31020fc7d7c60eec87e1be0be45b0a1828699084405c118c73f4cd6f80aec7f930de6cad2d51e2f44bda8373db0d7e875c0b2bdc762818999331f71ff103beaad77e5c246c5b0cc75dcf00a06fab802f5bca2e1af79d7a54b697332c5029cdf1831914d8137c99d38377f745584bc040e55ab4330ff2fa8714a8dc24d3d482f849c6289ac8a4980523227aa2c5495ba84951c6a8168838c8b8f0b1f97239c5c4e6fb", 0xe5}, {&(0x7f0000004ec0)="31a07db88279d7371c8cfdbe85c0c0462506ef63a86ecbb64c623f3515e772cbdf3f9bacd64bf7c25c0739400aed3f7ba93ead84a7f39ce686d447f45495da0898ab08ee16ea76ae12e058da6506197cb80c4ff30b1388632702d1801771547fbc2363820bd213fd3fbb5a770934e23505b0d6", 0x73}], 0x4, &(0x7f00000072c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}], 0xc0}}, {{&(0x7f0000007380)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000078c0)=[{&(0x7f0000007400)="10141a8d6202b6b69644b190f41a628fcc612f52dc8a59f71dca44d9cd72777fcd450f2aaca43b04f20086db139229144321f0f140ad7be1f4899cfb494b758ba05ee890310874bfa1b27cc3bc11d72215729a4cff10dc4da3e63afbbb51a9c24c1e4a462057eeda4e7b692ead0f0cc1dbea276ded16d789e5c4c8a19cc6ebfc781cff295c4e7b11db66fe6c9e94", 0x8e}, {&(0x7f00000074c0)="a88c1b01fffe5c2a954bf06f18c03bb3935bdb191da18fbad5b175ffb38c30b6e220509796def911867782c4519b55b442b863101413d5adeb4e4e9653a38f4112923adb011a8c", 0x47}, {&(0x7f0000007540)="bd93df9bb31672e6a479b50f621e1dd977fe7e5846b9a3356452dbc6c1b5e891d306f994e87785b6b7c6cab60bb584789b3550ab3f1090c3873d15cfc13b77ae3a1a7b99590edd8b36a19524984c07ceed", 0x51}, {&(0x7f00000075c0)="89957434fd1c910482cc8114c2aca492407a04a0cd21692ff906f58ad6d106fec9bde709dd2a2ba2d70315b88c6d015de61a6e8c868bcb0f91d13d26d28c5425f4fea8", 0x43}, {&(0x7f0000007640)="3f530432a0c0d8ff88106aa3944948dc830d4ebc5bd6a83749606ac2ec99415052c577ac3cdfe3879f9bfc16966d2c6fc0c13a79f05e4d115039cae5687e384398ed8248f3a8b7", 0x47}, {&(0x7f00000076c0)="0c3d8533f971397b8bda47b665cac2ea02b0e4c0224ddc5b07c041ceeab0b318b1cc6e662b3aad99890a18a0dea3357bbd1fecd98d2353b7a693946266d286e046fb769a0e936c6fb05d42074d5c254624eb96f2399082b1438c4efbff6ea2b6150b70990f03b5", 0x67}, {&(0x7f0000007740)="3b2aaeee6f9d803fa0ff29a7d6b4f04174f073d397c2552e74f30ad1f5a1a8f15fed856738d3320414c11fdb84f34027e4ae10c3c8940eddd8746be0e1e2381bb5a5ada6cf912a4849c06811e5c22c5c1616f44504d4f23a0ed3d60583444505b97bd36b299d548b93858af6586501d8585620f4add401c9aa7dcb49c512662a28ff9cf45fc2b16fb1e36c3c4b0e6520b3eb199ebb1285e92faf9f9032733bfeb22155c75f6e42f664f2211048c2604fa3e9532bb5bf631eb00e1d71c9ee366ebfad6c7f60b6605a5889672a380ac41f550810f763702f507bc8f3abc5e3717b4509611a5fb796291bc631a572658137d4c5cb9ff7", 0xf5}, {&(0x7f0000007840)="a4fa034ea4575e2fdb9c92531132f8279daa74101e4255a346f9be8e8a23b4f3264578dfb639d30e1beceef12bdd7cf963d945e697b657918233f47ffc214ab7bacc88e99290a8c5a07fe4606e08a59ea15fb281b0a21db0caefc02840299f07d38062fe357e0f", 0x67}], 0x8, &(0x7f00000079c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20, 0x4040850}}], 0x5, 0x80800) (async) r7 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000140)) dup(r7) mount$9p_fd(0x0, 0x0, 0x0, 0x204057, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r7, @ANYBLOB="1d600d2ca6fdc46098e2a09483f0a8775a513b4d74df3adb523a9e1391f7dfe337a5dbbe8b21ded7c911d740adcfa51d967ebb254b209c8c208150b8f25f6f36409b734ea2350b1a5dccf6c784f827ec7283b5"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) write$cgroup_type(r5, &(0x7f0000000080), 0x9) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x6, 0x5, 0x9, 0x1}) 04:21:35 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x2b3c, &(0x7f0000000700), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 04:21:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) [ 581.053061][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 581.060817][ T144] Bluetooth: hci8: command tx timeout 04:21:35 executing program 5: io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) io_uring_setup(0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 04:21:35 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f00000002c0)) [ 581.118920][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 581.126898][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 581.137334][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 581.144382][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 581.151500][T11521] netlink: 444 bytes leftover after parsing attributes in process `syz-executor.2'. 04:21:35 executing program 2: syz_mount_image$omfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002180)={[], [{@appraise}]}) 04:21:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000001070102000000000000000001000001240007"], 0x90}}, 0x0) 04:21:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 04:21:36 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@raw={0xfe, 0x0, "3ecbcc06740c"}) [ 581.255163][T11530] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.267326][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 04:21:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000200)=ANY=[@ANYBLOB="747261eb893d6e733d66642c7033b0240bf9517c47364d558d805e26e254d078018fd2b53fee67b2b871c7a8f8ad50a5b4f19e7c2cdaaff3545c565b868e7dbedb8fe05a9d15e4827c2f00136e8169abf67788f9bf05a19aaf9c3c5e69468820ccd1ac63ff8a28fa3570fe2af126bb837307b440c8604012b6a1f96071fd5645efaa9a41590fbc6619008e243b76b945e91641ffffe34a419d67030530922e194e82e59c067ef97a094b958052746dbbb73d1f628c94f92a8eb9286b76b1cd267f0d89456e49fe612d05314cb2e9c617003be289d02463c9ba1015f1b64fcab4edcda9d69d823dd2bfa8abd3e7c9e28130d983c118fa9ac20c8393762e3fafaf6ee483d9f723563c9a83cf461d613322af6a8afd18d46e0d99a9286acacf965e2b029dd0f3a5e254bc23dd9e6c4d75194098ced7bc939f8e71f2c1b93190414f315e22701a"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) dup3(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$cgroup_type(r5, &(0x7f0000000080), 0x9) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x6, 0x5, 0x9, 0x1}) 04:21:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 04:21:38 executing program 5: syz_open_dev$admmidi(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) 04:21:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) [ 583.212801][ T144] Bluetooth: hci8: command 0x1003 tx timeout [ 583.218940][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:21:38 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001180)) 04:21:38 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000300)=""/233, 0x26, 0xe9, 0x1}, 0x20) [ 583.278360][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 583.285706][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 583.306519][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 583.314280][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:38 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffe00}, 0x8) 04:21:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8400000003010103000000000000000001000008080017000000008120000d80080002007f00000114000500fe8000000000000000000000000000193c000f8008000340000007ff08000140000000ff0800024000000d07080003400000000008000140000000030800024000008001080002400000000904000e80080015"], 0x84}}, 0x0) 04:21:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000400), 0x8) [ 583.358808][ T45] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) (async) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) dup3(r0, r1, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$cgroup_type(r5, &(0x7f0000000080), 0x9) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x6, 0x5, 0x9, 0x1}) [ 583.425392][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 583.432007][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:21:38 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000300)=""/233, 0x32, 0xe9, 0x1}, 0x20) 04:21:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000200)=ANY=[@ANYBLOB="747261eb893d6e733d66642c7033b0240bf9517c47364d558d805e26e254d078018fd2b53fee67b2b871c7a8f8ad50a5b4f19e7c2cdaaff3545c565b868e7dbedb8fe05a9d15e4827c2f00136e8169abf67788f9bf05a19aaf9c3c5e69468820ccd1ac63ff8a28fa3570fe2af126bb837307b440c8604012b6a1f96071fd5645efaa9a41590fbc6619008e243b76b945e91641ffffe34a419d67030530922e194e82e59c067ef97a094b958052746dbbb73d1f628c94f92a8eb9286b76b1cd267f0d89456e49fe612d05314cb2e9c617003be289d02463c9ba1015f1b64fcab4edcda9d69d823dd2bfa8abd3e7c9e28130d983c118fa9ac20c8393762e3fafaf6ee483d9f723563c9a83cf461d613322af6a8afd18d46e0d99a9286acacf965e2b029dd0f3a5e254bc23dd9e6c4d75194098ced7bc939f8e71f2c1b93190414f315e22701a"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:40 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') 04:21:40 executing program 2: memfd_create(&(0x7f00000001c0)='.\x00', 0x7) 04:21:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x591080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x5, 0x3, 0x3, 0x91e9, 0x15, "5a1be77b781cbb310a9df6da6c06aaf051332e"}) 04:21:40 executing program 5: r0 = syz_clone(0x50960000, &(0x7f0000000000)="03961e90c0ad02bea261d1e9de8a4b087c20df200a048cc7f6a518499d9955895b4cacf9609a8a5364aaf3a473b2025876b6d7f680f1a6b4df7c3e7280933ea814756e38614bb6d046680ef065e8d7ad3117e01787ee4b8f849623658cf395b03bb4d906857e28ce00e0513b2abcc8a7", 0x70, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="521130a0d0a6c9b94efb12096de9038786d0d6e275babdb5bd58768f8174cac0368e789ff7f010fc87542345065c31badb93e468fafe56e89d10f1cfdf87ffc000e9b9dc469a68bbee8a5dc41e36e1d958ae9f665676af64da1cd3cc1f23ae95a26e012e055746c634f8c5bdd27882651b30da6112ea47e0671cfbc607e0dbe7f907f6") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(r1, r1, 0x0) [ 585.383002][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 585.390785][ T144] Bluetooth: hci6: command tx timeout 04:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001140)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}}) 04:21:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x591080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x5, 0x3, 0x3, 0x91e9, 0x15, "5a1be77b781cbb310a9df6da6c06aaf051332e"}) 04:21:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) [ 585.480226][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 585.487434][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 04:21:40 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0x40086602, 0x0) 04:21:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@x={0x94, 0x0, "d0a4383532cb"}) [ 585.558919][T11587] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:21:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000002c0)=ANY=[@ANYBLOB="687082bf75d271d9f293706db25648149a98d08f19c5200ce1aaf35d0a9bd51cf7c09fee861784131538b06368fe019859da78dd2fc6c1694006fd2738b226bf8423709ed65ea4debcde5a79dde509b1f870b4a0e2604b306e2c1a4b3d2be7667951a573f3f0bb01546a8e26e1644954fa7739f6b93bcc7d43b6ea1f02ea977b23283c5e5792f74a7c2c55a55ccba3270b1f6f00000000000000000000000000006ac372ea9694cecccc7ed934c14336529336a09740d674b61886486f443effd446de8679c4ba7cc462590e7f25802d804de2b14166464dee19ddee453811cee01ad74e6b45aefccc1d58f0f4f41d2c6fc7a277551c00633998be6ac05f2eaf07d91271d19c1e2c699bf4b9c517df17d77fe96063"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x591080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x5, 0x3, 0x3, 0x91e9, 0x15, "5a1be77b781cbb310a9df6da6c06aaf051332e"}) 04:21:40 executing program 5: syz_clone(0x50960000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 04:21:40 executing program 0: syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) 04:21:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='comm\x00') write$FUSE_IOCTL(r0, 0x0, 0x0) 04:21:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000004c0)={@mcast2, 0x101, 0x1, 0x0, 0xb, 0x5, 0x2}, &(0x7f0000000500)=0x20) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x1b, 0x0, 0xa9, &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5437, 0x0) poll(&(0x7f0000000540)=[{r3, 0x4000}, {r2}], 0x2, 0x0) 04:21:40 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@raw={0x0, 0x0, "3ecbcc06740c"}) 04:21:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40003fc) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1418034, &(0x7f00000001c0)={[{@memory_localevents}, {@subsystem='devices'}, {@memory_localevents}, {@subsystem='rlimit'}, {@memory_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^-)\x14+'}}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x608281, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_u}, {@nodevmap}, {@fscache}], [{@euid_gt={'euid>', 0xee01}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '-}--#(-(['}}, {@audit}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'devices'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '(:/-!/'}}, {@euid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x80000001}) 04:21:40 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[], [{@fowner_eq}]}) syz_mount_image$ntfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@mft_zone_multiplier}]}) syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f00000006c0)={[{@noacl}], [{@euid_gt}]}) syz_mount_image$erofs(&(0x7f0000000700), 0x0, 0x0, 0x2, &(0x7f0000000b40)=[{&(0x7f0000000780)='`', 0x1}, {&(0x7f0000000a00)="91", 0x1, 0x700000000}], 0x0, &(0x7f0000000c00)) syz_mount_image$ntfs(&(0x7f0000000c80), 0x0, 0x0, 0x1, &(0x7f0000002340)=[{0x0}], 0x0, &(0x7f0000002440)) open_tree(0xffffffffffffffff, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002580), 0x4000, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002680), 0x400, 0x0) syz_mount_image$erofs(&(0x7f00000026c0), &(0x7f0000002700)='./file0\x00', 0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f00000028c0)={[], [{@subj_type={'subj_type', 0x3d, 'fsname'}}]}) 04:21:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) 04:21:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0x4020940d, 0x0) 04:21:40 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) [ 585.891712][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) [ 585.916896][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) 04:21:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fd30aab63f9801c550bad1d582bf252a18233ef57da7f09f5b49485"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x80000001, 0x7fffffff, 0x3, 0x0, 0x40, "96e729f9a234cfbb8f2b19d189d462f8609ff5", 0x9, 0xfffff000}) 04:21:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}]}}, &(0x7f0000000300)=""/233, 0x32, 0xe9, 0x1}, 0x20) 04:21:42 executing program 5: syz_mount_image$erofs(&(0x7f0000000700), 0x0, 0x0, 0x1, &(0x7f0000000b40)=[{&(0x7f0000000a00)="91", 0x1, 0x700000000}], 0x0, &(0x7f0000000c00)) 04:21:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0x5452, &(0x7f0000000080)={"4598fddd9ec80d8edcd4a0276f2ef3682d6f4f31dd559c82cdae11c44c29"}) 04:21:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40003fc) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1418034, &(0x7f00000001c0)={[{@memory_localevents}, {@subsystem='devices'}, {@memory_localevents}, {@subsystem='rlimit'}, {@memory_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^-)\x14+'}}]}) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x608281, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_u}, {@nodevmap}, {@fscache}], [{@euid_gt={'euid>', 0xee01}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '-}--#(-(['}}, {@audit}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'devices'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '(:/-!/'}}, {@euid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x80000001}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40003fc) (async) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1418034, &(0x7f00000001c0)={[{@memory_localevents}, {@subsystem='devices'}, {@memory_localevents}, {@subsystem='rlimit'}, {@memory_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^-)\x14+'}}]}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x608281, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_u}, {@nodevmap}, {@fscache}], [{@euid_gt={'euid>', 0xee01}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '-}--#(-(['}}, {@audit}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'devices'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '(:/-!/'}}, {@euid_gt}]}}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) (async) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x80000001}) (async) [ 587.852892][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 587.852887][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 587.854519][ T144] Bluetooth: hci7: command 0x1003 tx timeout 04:21:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 64) r1 = dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) r2 = epoll_create1(0x0) (async, rerun: 32) r3 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000004c0)={@mcast2, 0x101, 0x1, 0x0, 0xb, 0x5, 0x2}, &(0x7f0000000500)=0x20) (async, rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x1b, 0x0, 0xa9, &(0x7f0000000080)}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) poll(&(0x7f0000000540)=[{r3, 0x4000}, {r2}], 0x2, 0x0) 04:21:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_ZONE={0x6}, @CTA_FILTER={0x4}]}, 0x28}}, 0x0) 04:21:42 executing program 2: syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002340), 0x0, 0x0) [ 587.932895][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 587.940584][ T144] Bluetooth: hci8: command tx timeout [ 587.947135][T11654] loop5: detected capacity change from 0 to 139264 04:21:42 executing program 5: syz_mount_image$erofs(&(0x7f00000026c0), &(0x7f0000002700)='./file0\x00', 0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f00000028c0)={[{@acl}, {}]}) [ 588.072326][ T58] Bluetooth: hci7: Frame reassembly failed (-84) 04:21:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fd30aab63f9801c550bad1d582bf252a18233ef57da7f09f5b49485"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x80000001, 0x7fffffff, 0x3, 0x0, 0x40, "96e729f9a234cfbb8f2b19d189d462f8609ff5", 0x9, 0xfffff000}) 04:21:43 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 04:21:43 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, 0x0) [ 588.276845][T11677] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock 04:21:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x895c, &(0x7f0000000000)={'batadv_slave_0\x00'}) 04:21:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "6f117fe4640c6691df139f59fa57402966b2af43ffe21450e6b6e0d658e1295e58c7887f137f91bed6dd0c6d12b4d28b3b27bee0d6de7af85afb05e6836b7544b9d79c0e9adc3b9e489582306924e9dac9c293275a3510a745cfd64ff9e36ff83faf1614d4928add0bbbbf89884d7700ab707afb781f0888c0a3ea67267377947d1e37e32b3d"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a2ddbd5}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "db879a03cd2627a7ac793bbf5b74140dbac5ddcf7c59a710259d2a5dece542fd73102fc07ee0a55c409498e0a8232063a879cee4a9991db838fe197f2d1257fc5d6918530e"}, @ETHTOOL_A_BITSET_MASK={0xc29, 0x5, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2008040}, 0x0) 04:21:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8930, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:21:43 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000480)='./file1\x00', 0x0) renameat2(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 04:21:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x40003fc) (async) mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1418034, &(0x7f00000001c0)={[{@memory_localevents}, {@subsystem='devices'}, {@memory_localevents}, {@subsystem='rlimit'}, {@memory_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '^-)\x14+'}}]}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x608281, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000007", @ANYRES16=r5, @ANYRES64], 0xd) (async) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_u}, {@nodevmap}, {@fscache}], [{@euid_gt={'euid>', 0xee01}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '-}--#(-(['}}, {@audit}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'devices'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '(:/-!/'}}, {@euid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x80000001}) [ 590.012778][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 590.012836][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000004c0)={@mcast2, 0x101, 0x1, 0x0, 0xb, 0x5, 0x2}, &(0x7f0000000500)=0x20) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x1b, 0x0, 0xa9, &(0x7f0000000080)}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) poll(&(0x7f0000000540)=[{r3, 0x4000}, {r2}], 0x2, 0x0) 04:21:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5421, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:21:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:21:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fd30aab63f9801c550bad1d582bf252a18233ef57da7f09f5b49485"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x80000001, 0x7fffffff, 0x3, 0x0, 0x40, "96e729f9a234cfbb8f2b19d189d462f8609ff5", 0x9, 0xfffff000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fd30aab63f9801c550bad1d582bf252a18233ef57da7f09f5b49485"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x80000001, 0x7fffffff, 0x3, 0x0, 0x40, "96e729f9a234cfbb8f2b19d189d462f8609ff5", 0x9, 0xfffff000}) (async) 04:21:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) [ 590.073258][ T45] Bluetooth: hci6: Frame reassembly failed (-84) [ 590.093096][ T4770] Bluetooth: hci7: command 0x1003 tx timeout [ 590.098812][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) 04:21:44 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)) 04:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x89, 0x5, "6f117fe4640c6691df139f59fa57402966b2af43ffe21450e6b6e0d658e1295e58c7887f137f91bed6dd0c6d12b4d28b3b27bee0d6de7af85afb05e6836b7544b9d79c0e9adc3b9e489582306924e9dac9c293275a3510a745cfd64ff9e36ff83faf1614d4928add0bbbbf89884d7700ab707afb781f0888c0a3ea67267377947d1e37e32b"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xd30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "db879a03cd2627a7ac793bbf5b74140dbac5ddcf7c59a710259d2a5dece542fd73102fc07ee0a55c409498e0a8232063a879cee4a9991db838fe197f2d1257fc5d6918530e"}, @ETHTOOL_A_BITSET_MASK={0xc29, 0x5, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x2008040}, 0x0) [ 590.164579][ T58] Bluetooth: hci8: Frame reassembly failed (-84) [ 590.166845][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 590.171388][ T58] Bluetooth: hci8: Frame reassembly failed (-84) [ 590.178062][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:45 executing program 2: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "9418b18a7029b871912dd9a8e7fe85fe7877818b48459d30a546bfedc81b7f3d22dd938af32c791a2e3bf86ef3caea2e9073f7f5aee90e4ee9e22e8eea94758b"}, 0x48, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x4, r1, 0x0) 04:21:45 executing program 0: socketpair(0x23, 0x5, 0x0, &(0x7f0000000140)) 04:21:45 executing program 0: socketpair(0x28, 0x0, 0x0, &(0x7f0000000280)) 04:21:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_io_uring_complete(0x0) syz_open_pts(r1, 0x400040) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=&d,rfd']) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x7, 0x8001, 0x3, 0x12, "65957b6e85b98f0c45190e01ffdd7e51c25f50"}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r4}, 0x0, 0x1e, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x5, {0x8, 0x5, 0x10e, 0x6cfb5666, 0xffffffffffff8b2c}, [0xbb2, 0x5da, 0x1, 0x400000, 0x8, 0x200, 0x7, 0x7ff]}}, @subvolid=0x100000001}) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 592.092827][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 592.102873][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$KDADDIO(r1, 0x400455c8, 0x7) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup2(r0, r3) 04:21:46 executing program 2: socketpair(0x25, 0x5, 0x8, &(0x7f0000001300)) 04:21:46 executing program 3: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x7) ioctl$KDADDIO(r3, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r3, 0x5437, 0x0) 04:21:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, 0x0) 04:21:46 executing program 5: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000), 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x4e) 04:21:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/194) [ 592.173220][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:21:47 executing program 2: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000180)) 04:21:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 04:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$KDADDIO(r1, 0x400455c8, 0x7) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup2(r0, r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x7) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup2(r0, r3) (async) 04:21:47 executing program 0: pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x0) [ 592.287287][T11758] overlayfs: failed to resolve './file1': -2 04:21:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:21:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_io_uring_complete(0x0) syz_open_pts(r1, 0x400040) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=&d,rfd']) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x7, 0x8001, 0x3, 0x12, "65957b6e85b98f0c45190e01ffdd7e51c25f50"}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r4}, 0x0, 0x1e, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x5, {0x8, 0x5, 0x10e, 0x6cfb5666, 0xffffffffffff8b2c}, [0xbb2, 0x5da, 0x1, 0x400000, 0x8, 0x200, 0x7, 0x7ff]}}, @subvolid=0x100000001}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_io_uring_complete(0x0) (async) syz_open_pts(r1, 0x400040) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=&d,rfd']) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x7, 0x8001, 0x3, 0x12, "65957b6e85b98f0c45190e01ffdd7e51c25f50"}) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r4}, 0x0, 0x1e, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x5, {0x8, 0x5, 0x10e, 0x6cfb5666, 0xffffffffffff8b2c}, [0xbb2, 0x5da, 0x1, 0x400000, 0x8, 0x200, 0x7, 0x7ff]}}, @subvolid=0x100000001}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:48 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 04:21:48 executing program 2: bpf$BPF_PROG_DETACH(0x21, &(0x7f0000000080), 0x10) [ 594.172854][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 594.180264][ T144] Bluetooth: hci6: command tx timeout [ 594.245569][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 594.252453][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:49 executing program 3: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="a8"], 0xa8) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x7) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r3, 0x5437, 0x0) 04:21:49 executing program 5: socketpair(0x2, 0x3, 0x0, &(0x7f0000000380)) 04:21:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$KDADDIO(r1, 0x400455c8, 0x7) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) dup2(r0, r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x7) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup2(r0, r3) (async) 04:21:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891b, &(0x7f0000000000)={'batadv_slave_0\x00'}) 04:21:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0189436, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:21:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_io_uring_complete(0x0) syz_open_pts(r1, 0x400040) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=&d,rfd']) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x7, 0x8001, 0x3, 0x12, "65957b6e85b98f0c45190e01ffdd7e51c25f50"}) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r4}, 0x0, 0x1e, @inherit={0x88, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x5, {0x8, 0x5, 0x10e, 0x6cfb5666, 0xffffffffffff8b2c}, [0xbb2, 0x5da, 0x1, 0x400000, 0x8, 0x200, 0x7, 0x7ff]}}, @subvolid=0x100000001}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 594.342940][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:49 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000000c}) 04:21:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8919, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 594.443918][T11790] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 594.477876][ T58] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x200) dup(0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x61, 0x8, 0x4, 0xe, "8fa07896fed11385"}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0xa0000008}) 04:21:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x541b, 0x0) 04:21:49 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0xc9a9f102fdb7347d}}}}}]}}]}}, 0x0) 04:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) [ 594.705453][T11816] overlayfs: failed to resolve './file1': -2 [ 594.747338][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 594.754442][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:49 executing program 3: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENT(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="a8"], 0xa8) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x7) (async, rerun: 64) ioctl$KDADDIO(r3, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r3, 0x5437, 0x0) 04:21:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x200) dup(0xffffffffffffffff) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x61, 0x8, 0x4, 0xe, "8fa07896fed11385"}) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x2) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0xa0000008}) 04:21:49 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x20, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 04:21:49 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x6c00, 0x0) 04:21:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x200) dup(0xffffffffffffffff) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x61, 0x8, 0x4, 0xe, "8fa07896fed11385"}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0xa0000008}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x200) (async) dup(0xffffffffffffffff) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x61, 0x8, 0x4, 0xe, "8fa07896fed11385"}) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x2) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0xa0000008}) (async) [ 594.901866][T11836] overlayfs: failed to resolve './file1': -2 [ 594.913252][ T4737] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 595.182819][ T4737] usb 1-1: Using ep0 maxpacket: 16 [ 595.312916][ T4737] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 595.482984][ T4737] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.40 [ 595.492142][ T4737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.500526][ T4737] usb 1-1: Product: syz [ 595.504827][ T4737] usb 1-1: Manufacturer: syz [ 595.509498][ T4737] usb 1-1: SerialNumber: syz [ 595.533171][T11818] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 595.555102][ T4737] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 595.760946][ T4617] usb 1-1: USB disconnect, device number 6 04:21:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="d4cf177a402790412b580e4335390768dff61a3f67b9caad6f6801665bb948fceaeecfbe814de4a0d5710ce9978bf068be892c7c1fe4df297b96bedcdd9290f15f04d466fc8b") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x404140, 0x9478ce077102a8b8) lseek(r1, 0x76, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00<\x00'/12]) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:51 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 04:21:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x541b, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:21:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2286008, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x4, 0x400, 0x1}, 0x452159b7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r6, 0x4b34, 0x2) 04:21:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:51 executing program 0: r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 596.492868][ T144] Bluetooth: hci6: command 0x1003 tx timeout [ 596.492904][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:51 executing program 0: r0 = epoll_create1(0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 04:21:51 executing program 5: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2000200e}) 04:21:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, 0x0) 04:21:51 executing program 2: acct(&(0x7f000000d100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f000000d1c0)='./file0\x00', 0x0, 0x0) 04:21:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2286008, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x4, 0x400, 0x1}, 0x452159b7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r6, 0x4b34, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2286008, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x4, 0x400, 0x1}, 0x452159b7) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r6, 0x4b34, 0x2) (async) 04:21:51 executing program 5: add_key$user(&(0x7f0000000700), 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 598.572934][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="d4cf177a402790412b580e4335390768dff61a3f67b9caad6f6801665bb948fceaeecfbe814de4a0d5710ce9978bf068be892c7c1fe4df297b96bedcdd9290f15f04d466fc8b") (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x404140, 0x9478ce077102a8b8) lseek(r1, 0x76, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00<\x00'/12]) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:53 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 04:21:53 executing program 2: pselect6(0x62, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 04:21:53 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000480)='./file1\x00', 0x0) renameat2(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 04:21:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2286008, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x4, 0x400, 0x1}, 0x452159b7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r6, 0x4b34, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX=r0]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2286008, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x4, 0x400, 0x1}, 0x452159b7) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r6, 0x4b34, 0x2) (async) 04:21:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) (rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 598.653034][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 598.653127][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:53 executing program 0: pselect6(0x6, &(0x7f0000000000)={0x3}, &(0x7f0000000180), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 04:21:53 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000640)=""/4096) 04:21:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x60e, 0x6, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 04:21:53 executing program 5: pselect6(0x62, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x7ffffffff000}) 04:21:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 598.807520][ T58] Bluetooth: hci6: Frame reassembly failed (-84) 04:21:53 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000002700)={0x0, @rc={0x1f, @none}, @in={0x2, 0x0, @broadcast}, @vsock={0x28, 0x0, 0x0, @my=0x0}}) [ 598.883933][ T45] Bluetooth: hci7: Frame reassembly failed (-84) [ 600.812996][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:21:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="d4cf177a402790412b580e4335390768dff61a3f67b9caad6f6801665bb948fceaeecfbe814de4a0d5710ce9978bf068be892c7c1fe4df297b96bedcdd9290f15f04d466fc8b") (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000100), 0x404140, 0x9478ce077102a8b8) lseek(r1, 0x76, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xf) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00<\x00'/12]) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, "2eca9615c61f6baeb53ba82dd1bf8d14cd287b"}) 04:21:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x7f, 0x7, 0x9, 0x8, 0x3, "6f1a3cebfdc223773c75840693e7983dc5d55a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d31fc3a6ce9bcda80ecaeaad5eb4b38f9e9fcd97e6c93b4f04d93f56168c0d754eeef732f38c4cba87642f5a58259ae216784c", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:55 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b2, 0x0) 04:21:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x401c5820, &(0x7f0000000580)=""/131) 04:21:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 600.892914][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40284504, 0x0) 04:21:55 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 04:21:55 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 04:21:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 04:21:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000001f40)) [ 601.054465][T11934] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 601.086392][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 601.100716][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:21:55 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0xef, 0x0, 0x0) 04:21:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@delqdisc={0x60, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x60}}, 0x0) 04:21:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 04:21:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) r4 = dup2(r0, r3) sendmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000200)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000440)=[@rights], 0x10}, 0x0) 04:21:57 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @esp_ip4_spec={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @broadcast}, @usr_ip4_spec={@local, @private}, {0x0, @dev}}}}) 04:21:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r2}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x0, 0x0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000580)='syzkaller\x00', 0x800, 0xcc, &(0x7f00000005c0)=""/204, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r5]}, 0x80) r6 = signalfd4(r0, &(0x7f0000000280)={[0x401]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xcb, 0x93, &(0x7f0000000140)=""/147, 0x41100, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x8000, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r6]}, 0x80) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:21:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x7f, 0x7, 0x9, 0x8, 0x3, "6f1a3cebfdc223773c75840693e7983dc5d55a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d31fc3a6ce9bcda80ecaeaad5eb4b38f9e9fcd97e6c93b4f04d93f56168c0d754eeef732f38c4cba87642f5a58259ae216784c", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x7f, 0x7, 0x9, 0x8, 0x3, "6f1a3cebfdc223773c75840693e7983dc5d55a"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d31fc3a6ce9bcda80ecaeaad5eb4b38f9e9fcd97e6c93b4f04d93f56168c0d754eeef732f38c4cba87642f5a58259ae216784c", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:57 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 04:21:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, 0x6, 0x189c) [ 603.052897][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 603.059024][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 603.063154][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:21:57 executing program 0: memfd_create(&(0x7f00000000c0)='k\x84-oa\xa3\xad\xd2\xf2\xad\xde\xe9\xc7\x1b\xd5|\xe2\x0f\xf8T\xe7\xfe\xa0Z\xb9\x95\xef\'\xff\xd8r8K\xd3\x1f\xf7%wt~\xe6\xc9\xc6\x1ep.&\x8b>\xe74<\x80\xe7\xd9}$\xe4\xe5\xc6\xc1\xeb\xacK\xa9~hh\x92K\xc1d\xb7pi\x97\a\x00'/91, 0x0) 04:21:57 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="309581cab386", @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c4bd07", 0x14, 0x6, 0x0, @remote, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 603.148914][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 603.163628][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:21:57 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 04:21:58 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 04:21:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) dup(0xffffffffffffffff) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, 0x6, 0x189c) [ 603.245793][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 603.252966][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:21:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r2}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x0, 0x0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000580)='syzkaller\x00', 0x800, 0xcc, &(0x7f00000005c0)=""/204, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r5]}, 0x80) r6 = signalfd4(r0, &(0x7f0000000280)={[0x401]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xcb, 0x93, &(0x7f0000000140)=""/147, 0x41100, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x8000, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r6]}, 0x80) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r2}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740), 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000580)='syzkaller\x00', 0x800, 0xcc, &(0x7f00000005c0)=""/204, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r5]}, 0x80) (async) signalfd4(r0, &(0x7f0000000280)={[0x401]}, 0x8, 0x80800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xcb, 0x93, &(0x7f0000000140)=""/147, 0x41100, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x8000, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r6]}, 0x80) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0x2000004e) 04:21:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x7f, 0x7, 0x9, 0x8, 0x3, "6f1a3cebfdc223773c75840693e7983dc5d55a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d31fc3a6ce9bcda80ecaeaad5eb4b38f9e9fcd97e6c93b4f04d93f56168c0d754eeef732f38c4cba87642f5a58259ae216784c", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x7f, 0x7, 0x9, 0x8, 0x3, "6f1a3cebfdc223773c75840693e7983dc5d55a"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d31fc3a6ce9bcda80ecaeaad5eb4b38f9e9fcd97e6c93b4f04d93f56168c0d754eeef732f38c4cba87642f5a58259ae216784c", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:21:58 executing program 5: socket(0x11, 0x2, 0xfffffffc) 04:21:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) 04:21:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mlockall(0x5) 04:21:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 04:21:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001440)={'veth1_vlan\x00'}) 04:21:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x81, 0x8, 0x7, 0x2, 0x13, "9c49679a6d3e1b79c03ca42f2b2bc93b8bbc3a"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x4, 0x8, 0x400, 0x9, 0x1b, "81e3ee7bff283c088e87b47d3e1521bb72ccf2"}) mount$9p_fd(0x0, 0x0, 0x0, 0x1000401, &(0x7f0000000100)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2084000, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 603.495098][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 603.502012][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 603.516075][T12006] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:21:58 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) 04:21:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/94, 0x5e}, {&(0x7f00000001c0)=""/80, 0x50}], 0x3, 0x6, 0x189c) 04:21:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266b7cc58b0", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101000) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0x1, 0x200, 0xfc5f, 0xf24, 0x2, "e9fe202b1e6fb207"}) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 603.679813][ T45] Bluetooth: hci7: Frame reassembly failed (-84) [ 603.706450][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r2}, 0x10) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x0, 0x0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000580)='syzkaller\x00', 0x800, 0xcc, &(0x7f00000005c0)=""/204, 0x41000, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, r5]}, 0x80) (async) r6 = signalfd4(r0, &(0x7f0000000280)={[0x401]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0xcb, 0x93, &(0x7f0000000140)=""/147, 0x41100, 0x10, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xb, 0x8000, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r6]}, 0x80) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000028c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002880)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe5e, 0x33, @data_frame={@qos_no_ht={{@type11={{}, {}, @broadcast, @device_a, @broadcast}}, {@type00={{}, {}, @broadcast, @broadcast, @random="df2a1b97b475"}}}, @a_msdu=[{@device_b, @broadcast, 0xc7, "06686a64d5cde0739f5e9eee577bb0d53f165879e58535f7f949c1e6dedec31ae81013f0b8e9471605ab507ad95176a6dea66007daaf0374629d813cbf282143a844082563afcb5588f0d335477ba8f96630823a91aabf41760dc64cce0d238e7f0497582aa459bf72781f6e2cc524a88ee6200f83aae8bd57147e1a28c551f0f58848296fb0516356a6ed862bfe40c12fe7566b535f8a34967de5f8a6ff3ef0639d6f56b1409bb1ed63dba20316e2c9f13b4582abc00a4f5d946d5d2b193fae7535961daf72bf"}, {@device_a, @device_a, 0xd37, "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"}]}}]}, 0xec4}}, 0x0) 04:22:00 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1, &(0x7f0000000ac0)=@raw=[@func], &(0x7f0000000640)='GPL\x00', 0x2, 0xe5, &(0x7f0000000680)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:00 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1001, @none, 0x0, 0x2}, 0xe) 04:22:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x81, 0x8, 0x7, 0x2, 0x13, "9c49679a6d3e1b79c03ca42f2b2bc93b8bbc3a"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x4, 0x8, 0x400, 0x9, 0x1b, "81e3ee7bff283c088e87b47d3e1521bb72ccf2"}) mount$9p_fd(0x0, 0x0, 0x0, 0x1000401, &(0x7f0000000100)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2084000, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 605.452868][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 605.452986][ T3687] Bluetooth: hci6: command 0x1003 tx timeout 04:22:00 executing program 2: socket(0x1, 0x0, 0x800) 04:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000580)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe5e, 0x33, @data_frame={@qos_no_ht={{@type11={{}, {}, @broadcast, @device_a, @broadcast}}, {@type00={{}, {}, @broadcast, @broadcast, @random="df2a1b97b475"}}}, @a_msdu=[{@device_b, @broadcast, 0xc7, "06686a64d5cde0739f5e9eee577bb0d53f165879e58535f7f949c1e6dedec31ae81013f0b8e9471605ab507ad95176a6dea66007daaf0374629d813cbf282143a844082563afcb5588f0d335477ba8f96630823a91aabf41760dc64cce0d238e7f0497582aa459bf72781f6e2cc524a88ee6200f83aae8bd57147e1a28c551f0f58848296fb0516356a6ed862bfe40c12fe7566b535f8a34967de5f8a6ff3ef0639d6f56b1409bb1ed63dba20316e2c9f13b4582abc00a4f5d946d5d2b193fae7535961daf72bf"}, {@device_a, @device_a, 0xd37, "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"}]}}]}, 0xec4}}, 0x0) 04:22:00 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xc, 0x4, &(0x7f0000000100)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0xc00}]}, &(0x7f0000000640)='GPL\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) [ 605.570811][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 605.579932][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 605.595686][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000040)=0x5, 0x4) 04:22:00 executing program 0: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 605.693325][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 605.699480][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266b7cc58b0", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101000) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0x1, 0x200, 0xfc5f, 0xf24, 0x2, "e9fe202b1e6fb207"}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266b7cc58b0", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101000) (async) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0x1, 0x200, 0xfc5f, 0xf24, 0x2, "e9fe202b1e6fb207"}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 605.827322][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 605.835051][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:02 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) 04:22:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x81, 0x8, 0x7, 0x2, 0x13, "9c49679a6d3e1b79c03ca42f2b2bc93b8bbc3a"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = epoll_create1(0x0) (async, rerun: 64) r3 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async, rerun: 32) r5 = dup(r3) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x4, 0x8, 0x400, 0x9, 0x1b, "81e3ee7bff283c088e87b47d3e1521bb72ccf2"}) mount$9p_fd(0x0, 0x0, 0x0, 0x1000401, &(0x7f0000000100)=ANY=[]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2084000, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0x4, 0x8b, &(0x7f0000000180)=""/139, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:02 executing program 0: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x101001) 04:22:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266b7cc58b0", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101000) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0x1, 0x200, 0xfc5f, 0xf24, 0x2, "e9fe202b1e6fb207"}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266b7cc58b0", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x16) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x101000) (async) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0x1, 0x200, 0xfc5f, 0xf24, 0x2, "e9fe202b1e6fb207"}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 607.612848][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 04:22:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1a) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000140)=ANY=[@ANYBLOB="74726191736966642c726664", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x6}], {}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r6}, {0x8, 0x3, 0xee01}], {0x10, 0x2}}, 0x9c, 0x2) ioctl$KDADDIO(r5, 0x4b34, 0x8000000000000000) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x21) 04:22:02 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1a8500ab9f7baf85, 0x0) [ 607.731333][ T58] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 04:22:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xc, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000640)='GPL\x00', 0x2, 0xe5, &(0x7f0000000680)=""/229, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 607.772027][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 607.778593][ T3655] Bluetooth: hci8: sending frame failed (-49) [ 607.779605][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 607.785535][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 04:22:02 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 04:22:02 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x9}, 0x16, 0x2) 04:22:02 executing program 0: mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 04:22:02 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 04:22:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1a) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000140)=ANY=[@ANYBLOB="74726191736966642c726664", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x6}], {}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r6}, {0x8, 0x3, 0xee01}], {0x10, 0x2}}, 0x9c, 0x2) (async) ioctl$KDADDIO(r5, 0x4b34, 0x8000000000000000) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x21) [ 608.128052][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) dup(r1) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/120, 0x78}], 0x5) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8fb63a36dc042c00"]) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 609.772861][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 609.782858][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x2}) 04:22:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @ifru_settings={0x0, 0x40009, @raw_hdlc=0x0}}) 04:22:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4180d10000992ffafbffffffffff8f000000", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e73bd66642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000200)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:04 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 04:22:04 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={0x0}) 04:22:04 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000140)) 04:22:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) [ 609.919304][ T58] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:04 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x17, 0x3, &(0x7f0000000ac0)=@framed, &(0x7f0000000640)='GPL\x00', 0x2, 0xe5, &(0x7f0000000680)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180), 0x4) [ 609.961764][ T45] Bluetooth: hci8: Frame reassembly failed (-84) 04:22:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x5460, 0x0) 04:22:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1a) (rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000140)=ANY=[@ANYBLOB="74726191736966642c726664", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0]) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000180)={'team0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x6}], {}, [{0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2, 0xee00}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, r6}, {0x8, 0x3, 0xee01}], {0x10, 0x2}}, 0x9c, 0x2) (async) ioctl$KDADDIO(r5, 0x4b34, 0x8000000000000000) (async) open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x21) [ 610.172874][ T3687] Bluetooth: hci7: command 0x1003 tx timeout [ 610.173039][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 610.228848][ T3645] Bluetooth: hci7: sending frame failed (-49) [ 610.235880][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 611.933010][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 611.933373][ T3687] Bluetooth: hci6: command 0x1003 tx timeout 04:22:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) dup(r1) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/120, 0x78}], 0x5) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8fb63a36dc042c00"]) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) dup(r1) (async) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/120, 0x78}], 0x5) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8fb63a36dc042c00"]) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x3) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:06 executing program 0: pipe2(&(0x7f00000000c0), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 04:22:06 executing program 2: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) 04:22:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000014c0)=0x7, 0x4) 04:22:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r5, 0x4b34, 0xfa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r6, 0xffffffffffffffff) r7 = syz_mount_image$omfs(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0xc8ec, 0x8, &(0x7f0000005340)=[{&(0x7f0000003f40)="e81d091aa65a4778a4e1d76de3d5e5e21641c8174b6879ac774b201f13615df752d739ead90e3285caf5d00744864c89856734e6dd035548263545b8e9babbbccd49a81decd8c7cc1feb37a96f576a6eb6f34faaedf7e0a6746768251450d2d04507e05d7f", 0x65, 0x1}, {&(0x7f0000003fc0)="80ca9e5ca78162eef76546bc4b4a34ade634d10f53ad9d443a0bea0cf5d75a39dfc2f60af5586186dd65f38830045193b36ab883285fadd7584b3b9dc5c9b88aadd01abb8808d8e80113d149a6530c3ecd4e5ab236fdcb7a9bfa0ccb7068da848e43ae414c21d7d79b9cbae4819149d7df122fbde576d01d9ad9e7cca6b12e95b0d86bd12512e5773c1137b9d80aa32384d9fbde13aaa2337a1f59055d53e9061f578ba9a0dd96f24f1fb4df917e9b202212f6307138fcf60b0733", 0xbb, 0x1}, {&(0x7f0000004080)="cd84653a1cdaf002ea07bd3b3d302be6cc941e7a3ffe208a9c4262d473bec7cba4c5815ab6fe9021b45189ac416cc39f1a51c5ac5b341d80f66096463447887d97aea994d8fa55b2ea04b6c9a55856270ed3426177c802fcc3685ccff98fd607334390eba4", 0x65, 0x7}, {&(0x7f0000004100)="2dc128374a729b32af4fae673e9ccb952da79ac6fd0d2f0a53dab3e46039d861d2048033c909d97a273b07ba60bb46e388bad58b4a3ea33ee99e7d1a04bc2f3c1f2e3d400d64f5315f39f43c3d5bb804f0f4fa58a722e8f0a98a4e08a813671c727582a5195660c208f49a664ef77a33ab109a11e66ed2b9c03a8f037adcd8ba940cc193c2aa1d7ce3a80d188e72c776887fd8be5334802e51fd36ce7c31ec0eec00653142315bad2047bcc70ceba5b7e6c23c46bfa87b532a415744a4ae0e97ee1391c5b7308de28b755d58d89959", 0xcf, 0x9d}, {&(0x7f0000004200)="938ec3a69d962c6dabb76648a8e575e985e27eb1098738b4fa86d1e9dea2b0943a774754cc5845e99ea188e24991c301", 0x30, 0x4}, {&(0x7f0000004240)="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", 0x1000, 0x5c2e452f}, {&(0x7f0000005240)="c7e8cc7c020d7ed424e993f5546ad7d3e35217937f77", 0x16, 0x79795c7b}, {&(0x7f0000005280)="3495f8cbe58bb0da9c9e109e3c17d07fb57c0dcf3a1c654ce77d8bfb0a1348db3d45411cdcb3481fd72b0bfe94311e19f250918fa394de195b670f3df07166b98e8227da1e0192e7097d055f1794f7942f6af8d70715c88e1b67ad4a3516a26fd00ee06167123040bfb154c55ee6313d2719541de34aab84e2cf7d14d96a440813a3", 0x82, 0x1}], 0x4, &(0x7f0000005400)={[{'9p\x00'}, {'9p\x00'}, {'rfdno'}, {'wfdno'}, {'trans=fd,'}, {'wfdno'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@fsname={'fsname', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) r8 = syz_open_dev$hiddev(&(0x7f0000005480), 0x2, 0x101000) sendmmsg$unix(r5, &(0x7f0000005540)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7b2412cf42bda6f5f3bbda828ad6d871f351e4c1c0edacf1821712e59ec84629cc00231797c61486050644efa7a5b6fe178f0a62b076f4c8d77a8df5e79c217e2739fb5ce52a030d78675dfcc4c87dc6f14422351be50b4d6dc068bd7a26d624468e8c51848903e014284bd972e752eecf48c8b45bf6ca831b5baab0c1ed73c1b0713ffa0d8e5286cfd2fb60f4ea56c035475e5bfde0a53e63a53c2dd89c8b64f1cb5b4243eafe63d3588d8783d8856ddf90fa240de24557514ae9860965eb11385ab6db3a8fe0fad312f1a74acf9da39368d58533526dc75d6eb0b1a1f7375a5829908a488dbbf02861f4082827a208a069abebab6f", 0xf6}, {&(0x7f0000001340)="99953b35fc845be6848d30bcc5367e793d0b8f8ccf87c15670b5f0766c73d6b188ac3a9d788ca4ded4746d769733142c1283f2743dd9f629d68abd6f3b616f627dc09b54d37fd004e9e032e28b38e2d596edd1bdce20b9bc5c09403fd5819721789a0cb033b3f1c10054536b787d85610daba40c0bc8fbfe240b7172fc375b7334a874ad8628a4262b16e3416b5015b533556304ae09414675e39fb83636", 0x9e}, {&(0x7f0000001400)}, {&(0x7f0000001440)="7947f5746372982a1bbdd84a3abda0bdaf8492670fba6fc33c3c875c98e2485834b0c48f4b25ef2e901cccfac87071ea6fd0aa63d12d7fff96dd4d7b58d2a7f7c506828f6920cd5232e3f2cefade856df00a1384a174a30ea2573d2793d112f79a3aa1652e691ef461164513b9dfdee10b6a6b3b10f9b04e972ff521212b2f183a2f345f0f54be246ce0f437d9b33fa99f18524702c622f841ab17fa49473f321b5e3add3094c289e296dd1ce7cf5f127a6cbec9b581ae02c250b407de262b1acfc49cdece2c4bfee6ca7452fcfb25e289a4a643a6c21540186a009c74f24a6d533594fc213ca23786823d61b7244f1963844033308ec659", 0xf8}], 0x5, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r1]}}], 0xe0, 0x1}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001c40)="da11dadd7de8809463d1826ede5b6250f296333acca46c96ad33ecff06fc1a70e1591ce1ea6e57b915a1cb3a170cdcd6f9b7d87847deec77bf7397c7c5e9d884eb507e25d9312e38d3132dbfca32cce5a4f9cd0ddb3fdb769cc66b78bbdadfc033cf8b77ee06d6ab3e005989fe4aae9a57805229441725538be43980751550f079e79cb9080a1bbd6c6a5c79cae4cc3275f95817d45cf73a9f473e04f7e573f03a6357912f8577ddd1e2045c01710e40574effc88b42345ec4f00ec9fe94847e70c84ae4b0ed9534261a1a3df87582560f9a8ada7c48965e", 0xd8}, {&(0x7f0000001d40)="96afc6572ec731d60a305a2aeb80452a5902ecf326d35536079f649cd1253ba3c8ad5502dc5aadfa1ac531ece2d9f313b5c2618af4709d516119f27bd1ba8be63d484e81df41855fbc69c552ce263c7517d7862faacc21ab4c84cb6207bc5429f110ef54b8403c27", 0x68}, {&(0x7f0000001dc0)="179cc74acd5f9c9648420cdab3d091", 0xf}, {&(0x7f0000001e00)="a5bd6220386a7886dd873a0e57864098f7c17c6244c9964e74e88b836b50699b1c7ad41b7a1432883f324273804f2be28f3137838f35cf8774b473bf294f82939c40491a17e4347f3873792e36f78cb5d5e3d5f06a351d8e67c31917907db9976879a51278841b13a643d7271a51d4ef968428cee5c902b6f51535dc31e3063eaaee16a9b8e2d3f52decd7ca1397a2938322993e3a77ecb0bdd9", 0x9a}, {&(0x7f0000001ec0)="3e1d1b9fe6359da6126140a685eed8df2fedffcae0009f1079631b45cec2bb25bfc302f20b87c116d40e12082a7db6fb28c362aef9d68f08aa3928a8e4a82a2f7cbf1af9e05fa872b579677c6c27078bd4912cc6a65184923a53b1171093061806", 0x61}, {&(0x7f0000001f40)="c828a55ea26e2354e6b730b912e62c6b282c407c9abb6a1d11c107b3c31deecbe4c1835f5e3a77a890ca76f1c30a7e3ce8b5ec2756ea2b4018aa8a526dc6eb5527f8fc6c68b9bad8f3da4df1578855a6caff134de4cad9780580546d116d287b415b91cb4af5515df23b081e6729f898c102a45c261f7394f86c1b3e40a45fd4d0049ee335ba", 0x86}, {&(0x7f0000002000)}, {&(0x7f0000002040)="4da173a90668e08d841549ee8604ab260ad142dac1279124ad682614156b1087d81ceefda342370eb552b98ea54e7a1a148eb1f0d9aaff3494f8d3e390b273a9bbf3ea1d0c487f36992b1dac9304faff9286c852168f855560d8005a7fefd884596840602439629466dc4dbdb374c76b27a5b6686a6effda9416ae5f122a593805e91d30997dea07e896dfc0a548d02334e4a0b85165748ffd79fcf07dce2acc0592432a41fc99098f09069953dd4e4254cbc6d366d9c5db7b0f2b6868c9009a69098e3523879592b4aac6948bc36c9ebaf12e1208eb387ec66aa860b313d7dbadaa65eaf7a3", 0xe6}], 0x8, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x68, 0x4}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002300)="95715e78ea913cd93d87167c09703bbb2f1f2951310701c9fabebc7e00f18be3b281adc429220549ba1e3d0dbc48c41728fabf6ff50ecd67dd76fa4d9539e68f", 0x40}, {&(0x7f0000002340)="13d4868095d76a56388c05a4796b4f745e01d4092820b424891fb62898c299dd16aa906b175fa05367f9a5280bd9dcb1d80a1986e9849e8423f7d0e2cf081d6c74dec4d522031267ba3263afcd1ef1ca61143eb047219ba29ec87612092ed54a6c1665403cfe7ec5c8136ee51c110f2d7930d9382c733140a2638f4a64ede54dd66c3df79299476d340636c739d09da692bec97f1d2e99b531280cfacb29050acb898efec8d86825", 0xa8}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="2df1b60802", 0x5}, {&(0x7f0000003440)="c36875ca95ed298aab1a70d23c869bc93e597ef289e9787a8f6759ae13630bb2a81e020c850840dd51aa1ad05dfa7c6762235e23075b36f52f9edefeb41e5e27a7dc305e85b83e27775641e630d814c67a0268534bfc2876bb5c783440e38cd9596f998393654d8ccb8f9d10dee434386560f1de138a687fbd28da8925b21cd560a21005660cb5f7e06e66db9e162bd6baad4837b55c55ff53959aaafcfc0a7a1230d60a7f20b8d8c3292b0a0f84ed7073da32d8e3b749d928a593d84fe1bd6826d15bdb10f04122ee45e3c1b3ffdda768feb7f094d1c7894c41be94525f5d289e108948c085c43590008f7b6fab4061e3", 0xf1}, {&(0x7f0000003540)="9f9558ab64f05bbfb2f5f8b7579e943527bee7bfa3160d62e2b10ba1e8a0a4361084f65436d22ded2bf292d69dc583cd34d7a60da04401814ed1e45b7830de9a522e4ba152eb1a8c3cdf3678ad615594545238d42f46572647b83d417016baca7c88827c183c84128cf0a12851a25f2e065308cc7a641110", 0x78}, {&(0x7f00000035c0)="7acc206ae0555f3ea9d5cf81868eea439e85df89c15b23fefcdc8152fdff02d99bdb19d55d4ef02ff44415cdb54158075e28892f96745ceeab6bfcacc8e4df023edc9011e19c14d70bb22dc32a3da73ab386f89fbdf9c4c32c03fbca59609232bfb4079543c8388ef252ffbca702ccf8ce4028887f13c22198f78285a3f2f536e0266c83bfeb5c0de534886fbfdc0fdae0866b78c217da2f1d85258c55417b5b503941e5c0b38eb4e586e91f688cf55b0c", 0xb1}], 0x7, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x4000000}}, {{&(0x7f0000003a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b00)="0aadd85078397b553927df37a6efe1206a54842b3be81a5c9ab37e677d3e6954168afa1bac105155c14a19ccf897f2e3b4735d5f8d839c0e4d5f6622792381666d4e7ca5037489dd720d1c6d219e3a6967d1dcd800894228c64cf3493d0a637294f67dc81fc6a3fd6c19be0df22cc527f05b0a5887b335", 0x77}, {&(0x7f0000003b80)="096387c80ecaf045866d8d7dcead2cd6bd0bc75aa83fad9abdbbc50af4090d252f60a3b1617f6169999240695e5cb3f69bad537ec219", 0x36}, {&(0x7f0000003bc0)="cea5529d0a270a646d7a2b30d3167f77836c8288bc5154951511b01e73c067b6307c468a29f66029f242597e2c0bdd0a71b1c2421a2cf52ace8d113e6c9bbde0df38d294be963b93dc0ffa13d2d21b4eb6079eb6aeabf905f01c8d27c3bba8463272266c42fe88122e40885afcb525f3e7ea859184d5f34f3af17cf21ef106a594ff2e951d271d15da5d5b90c2e0fbdffd75d5e30fb3aa04a902496db8a59aef7256ede56ca3", 0xa6}], 0x3, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, 0xffffffffffffffff, r3]}}], 0x78, 0x20008080}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e40)="6c9c5fe7647c690fae", 0x9}], 0x1, &(0x7f00000054c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x58, 0x40000}}], 0x5, 0x40000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4180d10000992ffafbffffffffff8f000000", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000140)) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e73bd66642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000200)) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4180d10000992ffafbffffffffff8f000000", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e73bd66642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000200)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 612.012870][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:06 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000ac0)=@framed={{0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x872d}}, &(0x7f0000000640)='GPL\x00', 0x2, 0xe5, &(0x7f0000000680)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 04:22:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee7b576ebde2c775206afffc1af17a4c13e5cac0b55fd165d2fbd48462c4ded376864f25e99d43c94af1a1528eb0edb33aa23303ee495cc781c569a94139a140", "97724386a554f76751eda55e76b2a011201e748d719c36315b863eaa47f62821241173413ad81f5a5fcdf30c4f6e5f8eeb8fc63da7efdb9b9937191c79db2401", "82728b844ffe682177c2fb0122c5b1176688957f12d54fdfed9828f0e7348ac7"}) [ 612.133811][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 612.140793][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 612.152263][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 612.161314][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 612.172066][T12151] loop1: detected capacity change from 0 to 228933 04:22:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)=0x4) 04:22:07 executing program 2: r0 = syz_io_uring_setup(0x338e, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) 04:22:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async, rerun: 32) r4 = dup(r2) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="4180d10000992ffafbffffffffff8f000000", @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES32]) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000140)) (async) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e73bd66642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) (async) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000200)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) (async) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async, rerun: 32) r4 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) dup(r1) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/235, 0xeb}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/120, 0x78}], 0x5) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8fb63a36dc042c00"]) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000003c0)=0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r5, 0x4b34, 0xfa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r6, 0xffffffffffffffff) r7 = syz_mount_image$omfs(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0xc8ec, 0x8, &(0x7f0000005340)=[{&(0x7f0000003f40)="e81d091aa65a4778a4e1d76de3d5e5e21641c8174b6879ac774b201f13615df752d739ead90e3285caf5d00744864c89856734e6dd035548263545b8e9babbbccd49a81decd8c7cc1feb37a96f576a6eb6f34faaedf7e0a6746768251450d2d04507e05d7f", 0x65, 0x1}, {&(0x7f0000003fc0)="80ca9e5ca78162eef76546bc4b4a34ade634d10f53ad9d443a0bea0cf5d75a39dfc2f60af5586186dd65f38830045193b36ab883285fadd7584b3b9dc5c9b88aadd01abb8808d8e80113d149a6530c3ecd4e5ab236fdcb7a9bfa0ccb7068da848e43ae414c21d7d79b9cbae4819149d7df122fbde576d01d9ad9e7cca6b12e95b0d86bd12512e5773c1137b9d80aa32384d9fbde13aaa2337a1f59055d53e9061f578ba9a0dd96f24f1fb4df917e9b202212f6307138fcf60b0733", 0xbb, 0x1}, {&(0x7f0000004080)="cd84653a1cdaf002ea07bd3b3d302be6cc941e7a3ffe208a9c4262d473bec7cba4c5815ab6fe9021b45189ac416cc39f1a51c5ac5b341d80f66096463447887d97aea994d8fa55b2ea04b6c9a55856270ed3426177c802fcc3685ccff98fd607334390eba4", 0x65, 0x7}, {&(0x7f0000004100)="2dc128374a729b32af4fae673e9ccb952da79ac6fd0d2f0a53dab3e46039d861d2048033c909d97a273b07ba60bb46e388bad58b4a3ea33ee99e7d1a04bc2f3c1f2e3d400d64f5315f39f43c3d5bb804f0f4fa58a722e8f0a98a4e08a813671c727582a5195660c208f49a664ef77a33ab109a11e66ed2b9c03a8f037adcd8ba940cc193c2aa1d7ce3a80d188e72c776887fd8be5334802e51fd36ce7c31ec0eec00653142315bad2047bcc70ceba5b7e6c23c46bfa87b532a415744a4ae0e97ee1391c5b7308de28b755d58d89959", 0xcf, 0x9d}, {&(0x7f0000004200)="938ec3a69d962c6dabb76648a8e575e985e27eb1098738b4fa86d1e9dea2b0943a774754cc5845e99ea188e24991c301", 0x30, 0x4}, {&(0x7f0000004240)="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", 0x1000, 0x5c2e452f}, {&(0x7f0000005240)="c7e8cc7c020d7ed424e993f5546ad7d3e35217937f77", 0x16, 0x79795c7b}, {&(0x7f0000005280)="3495f8cbe58bb0da9c9e109e3c17d07fb57c0dcf3a1c654ce77d8bfb0a1348db3d45411cdcb3481fd72b0bfe94311e19f250918fa394de195b670f3df07166b98e8227da1e0192e7097d055f1794f7942f6af8d70715c88e1b67ad4a3516a26fd00ee06167123040bfb154c55ee6313d2719541de34aab84e2cf7d14d96a440813a3", 0x82, 0x1}], 0x4, &(0x7f0000005400)={[{'9p\x00'}, {'9p\x00'}, {'rfdno'}, {'wfdno'}, {'trans=fd,'}, {'wfdno'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@fsname={'fsname', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) r8 = syz_open_dev$hiddev(&(0x7f0000005480), 0x2, 0x101000) sendmmsg$unix(r5, &(0x7f0000005540)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7b2412cf42bda6f5f3bbda828ad6d871f351e4c1c0edacf1821712e59ec84629cc00231797c61486050644efa7a5b6fe178f0a62b076f4c8d77a8df5e79c217e2739fb5ce52a030d78675dfcc4c87dc6f14422351be50b4d6dc068bd7a26d624468e8c51848903e014284bd972e752eecf48c8b45bf6ca831b5baab0c1ed73c1b0713ffa0d8e5286cfd2fb60f4ea56c035475e5bfde0a53e63a53c2dd89c8b64f1cb5b4243eafe63d3588d8783d8856ddf90fa240de24557514ae9860965eb11385ab6db3a8fe0fad312f1a74acf9da39368d58533526dc75d6eb0b1a1f7375a5829908a488dbbf02861f4082827a208a069abebab6f", 0xf6}, {&(0x7f0000001340)="99953b35fc845be6848d30bcc5367e793d0b8f8ccf87c15670b5f0766c73d6b188ac3a9d788ca4ded4746d769733142c1283f2743dd9f629d68abd6f3b616f627dc09b54d37fd004e9e032e28b38e2d596edd1bdce20b9bc5c09403fd5819721789a0cb033b3f1c10054536b787d85610daba40c0bc8fbfe240b7172fc375b7334a874ad8628a4262b16e3416b5015b533556304ae09414675e39fb83636", 0x9e}, {&(0x7f0000001400)}, {&(0x7f0000001440)="7947f5746372982a1bbdd84a3abda0bdaf8492670fba6fc33c3c875c98e2485834b0c48f4b25ef2e901cccfac87071ea6fd0aa63d12d7fff96dd4d7b58d2a7f7c506828f6920cd5232e3f2cefade856df00a1384a174a30ea2573d2793d112f79a3aa1652e691ef461164513b9dfdee10b6a6b3b10f9b04e972ff521212b2f183a2f345f0f54be246ce0f437d9b33fa99f18524702c622f841ab17fa49473f321b5e3add3094c289e296dd1ce7cf5f127a6cbec9b581ae02c250b407de262b1acfc49cdece2c4bfee6ca7452fcfb25e289a4a643a6c21540186a009c74f24a6d533594fc213ca23786823d61b7244f1963844033308ec659", 0xf8}], 0x5, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r1]}}], 0xe0, 0x1}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001c40)="da11dadd7de8809463d1826ede5b6250f296333acca46c96ad33ecff06fc1a70e1591ce1ea6e57b915a1cb3a170cdcd6f9b7d87847deec77bf7397c7c5e9d884eb507e25d9312e38d3132dbfca32cce5a4f9cd0ddb3fdb769cc66b78bbdadfc033cf8b77ee06d6ab3e005989fe4aae9a57805229441725538be43980751550f079e79cb9080a1bbd6c6a5c79cae4cc3275f95817d45cf73a9f473e04f7e573f03a6357912f8577ddd1e2045c01710e40574effc88b42345ec4f00ec9fe94847e70c84ae4b0ed9534261a1a3df87582560f9a8ada7c48965e", 0xd8}, {&(0x7f0000001d40)="96afc6572ec731d60a305a2aeb80452a5902ecf326d35536079f649cd1253ba3c8ad5502dc5aadfa1ac531ece2d9f313b5c2618af4709d516119f27bd1ba8be63d484e81df41855fbc69c552ce263c7517d7862faacc21ab4c84cb6207bc5429f110ef54b8403c27", 0x68}, {&(0x7f0000001dc0)="179cc74acd5f9c9648420cdab3d091", 0xf}, {&(0x7f0000001e00)="a5bd6220386a7886dd873a0e57864098f7c17c6244c9964e74e88b836b50699b1c7ad41b7a1432883f324273804f2be28f3137838f35cf8774b473bf294f82939c40491a17e4347f3873792e36f78cb5d5e3d5f06a351d8e67c31917907db9976879a51278841b13a643d7271a51d4ef968428cee5c902b6f51535dc31e3063eaaee16a9b8e2d3f52decd7ca1397a2938322993e3a77ecb0bdd9", 0x9a}, {&(0x7f0000001ec0)="3e1d1b9fe6359da6126140a685eed8df2fedffcae0009f1079631b45cec2bb25bfc302f20b87c116d40e12082a7db6fb28c362aef9d68f08aa3928a8e4a82a2f7cbf1af9e05fa872b579677c6c27078bd4912cc6a65184923a53b1171093061806", 0x61}, {&(0x7f0000001f40)="c828a55ea26e2354e6b730b912e62c6b282c407c9abb6a1d11c107b3c31deecbe4c1835f5e3a77a890ca76f1c30a7e3ce8b5ec2756ea2b4018aa8a526dc6eb5527f8fc6c68b9bad8f3da4df1578855a6caff134de4cad9780580546d116d287b415b91cb4af5515df23b081e6729f898c102a45c261f7394f86c1b3e40a45fd4d0049ee335ba", 0x86}, {&(0x7f0000002000)}, {&(0x7f0000002040)="4da173a90668e08d841549ee8604ab260ad142dac1279124ad682614156b1087d81ceefda342370eb552b98ea54e7a1a148eb1f0d9aaff3494f8d3e390b273a9bbf3ea1d0c487f36992b1dac9304faff9286c852168f855560d8005a7fefd884596840602439629466dc4dbdb374c76b27a5b6686a6effda9416ae5f122a593805e91d30997dea07e896dfc0a548d02334e4a0b85165748ffd79fcf07dce2acc0592432a41fc99098f09069953dd4e4254cbc6d366d9c5db7b0f2b6868c9009a69098e3523879592b4aac6948bc36c9ebaf12e1208eb387ec66aa860b313d7dbadaa65eaf7a3", 0xe6}], 0x8, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x68, 0x4}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002300)="95715e78ea913cd93d87167c09703bbb2f1f2951310701c9fabebc7e00f18be3b281adc429220549ba1e3d0dbc48c41728fabf6ff50ecd67dd76fa4d9539e68f", 0x40}, {&(0x7f0000002340)="13d4868095d76a56388c05a4796b4f745e01d4092820b424891fb62898c299dd16aa906b175fa05367f9a5280bd9dcb1d80a1986e9849e8423f7d0e2cf081d6c74dec4d522031267ba3263afcd1ef1ca61143eb047219ba29ec87612092ed54a6c1665403cfe7ec5c8136ee51c110f2d7930d9382c733140a2638f4a64ede54dd66c3df79299476d340636c739d09da692bec97f1d2e99b531280cfacb29050acb898efec8d86825", 0xa8}, {&(0x7f0000002400)="a623a20dbd128b6539220d619001f081a14fdeb4bc0f6d2e9540b40b36a2160e4751d605d652968fd00d66124706fef33cc9a76f745968f92c89cf287d411dd12172ae521f5d6186584c20cab25f21d9f2dc6de312f7333ebf7ae8213af52ec94250f7ff74fffe2248f9c6b008178fcb337da9a456d7801384916ca10d499dfd12e82e6996faa28c0815f7b6d255094384b3638109a380fcb09630b245fb4c826d35a19a8d2b5a16bad7b4217631a86478e8d11a38df7ce4463963e32b5e3f88deee86067e454e51197265dde3dfc81d56ae940034134b07b0f0569e9a2a318d097159ebc0f214e62b396315050323b784bed7fbad8b082685244ee7a15c031fa5de9cae33997fbef9b25f87831a5454c7394849c8e60a5c6c9f97c017dae1c8c44e295fbd6014b27b351165f55dfe3c66ce48396a4f1bf393e992ea22a9ac4009d9aed86257269df6daf716d4b8952b66b93367d12fa056f10096599c279e7ad16ebba2972e7d4dc365dc21e67001e109d7c256785f913bfb8580dc2d1187ca86629dd3f588de81dd7e5029200e3b28e0c569db2ec01ca7d6c23335c38e9ecd5aacad22f1feb14d648e0c2b00da353311ca3e49ad61b2daac91420b5a02374ddde437467839b4850c66ee876d4b156821a188631d28d6b9697912b845dd85f1292f8a45d93e2dd2f0348edbc191fa145d118ec6609fb6e9092f4bcacf3866d384a2b0a25dc2c9b86da7bff0866ad21529d4b4e71b4affbffaf831245097893971d94876c3f8bf4388dfd1d7627b692b2cb13376362a9d0b44157d7f9afc94c575366cefcb29199b11c183481b4ab5a60b33dfb9a4ebe52565ce431c8231943b4f08c7f07a5d95da79ff61275b8ca93fcab02377b2045c128e777112c4fc7e4932e0dc99a80eef62486298c8e32b05c4932dd2112c5d810b0baca6cd6a3edf5c9b8f1789398f4674f4f68ce594e46890aac88fbf1a253c71c84caf46202fa3778309cab249ac84fad472424a22e9cd6aca86888e1df84d38177908fbd10a4827514f0b1f5dbfb5decf602fe40e4e2009a48cb193e8593add6820e7d3d70e146849feab1bf2bbb671c1be51c1fb789cdfbc56bde881d9a610f1d18aeb4fc6f3b004afdb322d699c18315fd5140319b5dfe805d97c890f006f33df7d6c029409729c859df4684a10c944a82b8382bdb418834d32197ad34f9fbf5fa925a41e6a5b85a8e1125223a9dfd8c456c737d6855b7497528fd684b9017910c078013c546d8ef30fe0d8c7b7d7479fdc6670c239e5187b1a47e9c402824bdb4cba71906b0e9e4206346952fa77e602c37b86ff694616cef7e9b8d9e638758a50280d325f39ff656a27ee9772ffd7a46d95b62210ad4f465f4212dae7807f544e6f5baab353cc68597d16fc792ab667a2280a0c3329edba2b39df7a678ba10295f273ac1b7bb652afa3919aa79f6b744ce8ae0c4126328747597da495620203c9abc432c579c3f49c3522365fb376df58f736642f14528c13f85b0423059244181af1890ade0f724bb2bab6e1f0a4c2bb3ffdfca866832b4cfe931f3419f89072fabbe99138bb34ef8fdc448bbd467f502f8f7734932f398ffd5d51e3a4d809e9a65ec010f634bc0d168895c742e04be723f46a68801fc169450a76d2fcedc51f76630488ae1b846ae571025f1344cf236805273676427dfbaa204f7760452a1f45ac1a3ab94eddbf71464eb35f38d6b2acb5b6722ae922dd1d2c4aa9017748b63292356c428d2ce00751013c30e2171d329a606e47819e7a85da980884d75d350c67e969cfb9054365c926ef5b812ee82ad7dc3dc5444512c9c9ce0c6feb1bbb6d175184c52ffd3a9106029e6ad4454eec94919c90004b82ba2e6f6e772c7fdb29027f8c80645dac71b810e2f266c12927691293ae6ac106330cf5944a118b96924d1165f1652f473eb94991f6d749526e7358c84d8e781c716982547d8ed16aa0f5822838430b6cbd66f96a1403ad1eedbf13a0f8fc0e3897258804fb215eb7eab7fddc0406bdb5d2901b3f17a41848a134171d0cfc4d9de5b9c0a21e73edf4c7876f82bc1f24904dcdc92e4f259cf2571c3276af50a16c95f6004f2d6ff84fb3e80923001ef903b5e4e322f1a153ae27f4cc1a84bea773c9cb5384880b2fd18ec2056f0d8987d3e3d8d50fee879ad8bb0cd1307f9eb0effc3faf5f64e6d257f55c37163c2baf6c00613ccee31359b1718f27ffd30b8e404c6cee821dbf23b4aa9648e569f859c999b6a79a25decea8e53636a97a3a8f968beb209b84f5fcb39dd3858e49011a6597ceb394ffbf5d73449f8f379879ad89c5e34fac93faa1f416a139d18b412bad3fa7c935cb5de7c9a10424967ac55604c7c18afffc591cc81076c9f2b06b47c1f34e0678a8bedd9eb5e65f64603052bb49f2c53438a81712038ac550d840ebdd792a457ee99ec31d833fbc03b2f5ae21ed9fb06d07590e4250182d29ab6b5eb7f52abe432f79571b441e508943c2883f0e2cb7e00fb7c0ca122c7d7a3608288de4cc2a66c8572f98d6b6f97cb28a8432f33250365519a7e085d6478a7f5c5d22354af30e973b997e0cabcf61005e08cc984a0a3d452bca8b43a7fc698cffec95914ea81e6535dc554f0b058f660872dfa431be2c718214db0fcf9f05627f7ef560b2db7c1db2dd278b79114ad28f13e32e66db23801a7aca8a9623546695b33e8fc781b980d9488d89a83ecad2d7c4e5dcaf1540624a3811cc2191a4fad771c8bcd7a47c66bd824332230a785c71717bcde9e2518a34546fecc64c51c9907791759383bb0c81fa85865b5213de505d5d47fc7ec20dba0863130567f446bd616c87e709c571b578fb0164b82625b9a4f5dc7d2fba658d3041d341fb559000775ad0296ccf8527ff61fe2a49897784a60e47a56e49d9b64cf7204639b59bd61ad2ffbd61a05bf10bfefdb74cf6db20c9f219369a207e908b4c6715cfcf80f962beb17c6dfcde99daf27f10c280273473b560e5d3312a94066a18557b1218eedb56b87a41adb40b5bd0e7e0ff1ea3136e7b340f114063ef0ad384c28f4d7681fc13446a34be37d9cbec5ab295f75ff4d600aa7e4a9f78a48df224d18da7c22ca15e9b84493b1e31f31e4702ca0bdf8a6efdb4dd73287263711f17b7b1547977d60949817ee110e8a8990e7bfee4ca76193d74c43f17b6ad761127bf2dde5409fe9d0410324a1ff584aa68379ce1ba9dc2292d11e7061e8e7d8872cb5668916d7b9843e3f6d878422ce62832a55b85e2bcc14d965ea4779c3a03ebc47a21ca626220388c2457e79dd4cf36dc49ebab4af70872b02b68f96a345c162ae0f86139d8be1dd779c99ad6accf6ab89f1291083970ea685d7cb49e63ed1efd8af88850c258818b4b9c895a2ddd2011d22d9d9d20ce8908b097c75bebe0a62e6b7e7b0035a4c5271ea97bfc6e167f53248fac7e4e955e4fa779ea02640f93561c22f64b8a674f539dafd454f9ddfe2a61f4b0350b468f5ab0bbbe330c02eee7072c8b5e7fceaf8f5990db4f8afd99290284e48c5b046f24a5fefb8bb2332f31cf657a7eb4a905f67ec0f0fe3affb96589ffb619efdb4c1a509495580750cbfadc97b92b657e01d18e4dc4a1d2b0ab7d43b3da02e849822535800dccb118ad74836fecfd743154d1516a267222c05f3ed7597227bfa91cb74f3212f001e7d59dd090a90db67fef7b769c1d726636c1ce5006b1062fb53c4d91de57cb177f11650d301309630a995637e2a4b30062176786027c2f5f09fef0d52553d5514d2359c76d03b870208beaa80c89d259e898f325469f44f24fdb5f489c3a0748d52c4e23a4890f3cff12cc4c8612c4f4e41f55d644576a01eb4c2385c844dbbf1232793c7ae38b8cc4c0d10865c61904f4e3ee05aa3ffad9b4dec1cfbc80e6230ec028767806e0a09f6fa3e3dcd7c7770de5c5282f5a507e5e284f95f7647ef15fd1470d4c2c58778b5f96556fc588774f529506bc2228281a5c74fa01b135c1e9675dd1bc2bb00b32cb00074669b566c093ab594ee5063ae9f694e807189c8349808d1d2c6371c4c4b94e026e27969a6a1f727e8a2e6b36e491d782952b9bfad8011837e1732d9e739932250a2183b140b2b7c19313cfcab0a0f8fbaf7edeb7eb2691895164de4f98952348bdc327a587296d4572b8fac0e2d1b753a276be2e6f1379eb8680780310265529e273e6d7b38ecc61b5adc37f27676f49002576b112e1aa4e5f9519c3837798bf0e2271b9e02304a6da17045a15cc7169cfc0b2faaa234e6d80aa759f9fdbfc6a4bb9eefca262e4b823f65476ffef171ccdde3bd60b6301e81f7be4b8ceb2c5ff6a4c5e5bef89323cbd82379e07e50f5113a3d28b65365ac2921ba1f7d7a9b504d6503c335a1269e1b54986b57a5770ff03d11be896f16211d3cc9aaf3fdf7554d906539c3caf0a8dd345524c11df0ae397c72ee76565fc0938b694ea37b61f244636fd4ba65545cc11e45c762199ceb332d7d29b5eb53626ad9087011f81f2632121a19f162afdebfc7824886c4fe4555aaec50e7a24fafeef806f79b05e47547114dcf4f03e647f9d8db02d3f5db83481ad8b66e8199bfc75bf10cd197d9f51edb425d8c87968acca8ff423c2734cbe12e473bfdd3aea72a9928824e600757df3a1199b929e48950cc59dc47aff2499a45202c429f086894133335488cc3c9d2f92d220f6613a463f8a7cd005f1378d44460c708e68c6ac20490efc5ed9ed75172da7c66e543c04028cf455d599797285bc734af38389e1e896ea26241d3a4dd6ca4928ce5b1a926b244bf8d88f756db857f8b26d84bc56b92bbdddaba73479a81f3f7d3afb6bb82b60deae46acb021d67cf8e6b3032702f7c1f08e4121a0141ce83d932f0a0e840bb3cb70f7b36afa7bbea4eb20a347294e6d3de941ba51537cf1492f2eeca3852c5bb7530a87e0dc7f0d0fb5f6087546f3ca2c23c67283c255045fcb199fda2f0f448ac16e11794ed0cc6b11fe5a03b911a9de8cb9e5bb0a823a89fae84a805d2aa4526bf59d5318f4b1d089ae0b8acf1685c8aeebcf28060c8b29b552f6523b3705b25abcf7153dc3a543e501a0af9adb594e00479eb146afb6ffec94930fa0c424a323c8cf42bd35ca2752eabdc1bcaf772b9331d203c42b74b916add83cadd83d0cea153c3a082b12a1548cd0443a0d50dc1aab9d8edfb917b3e83b9fc07ad9f1c9c4c3bbf8481d7aaaa5b494bdfdd4cd57b658fcb1877112af53f91ce5dd4b7d776ae6b221a3e638d1d385921be251a5630a506d074301cf5ae19a2a301b6fa0ba4ec84c9ee91babd9af942af6dc3bc046ef092aac27137c59b50b3bd4872a4f414dbc9426b59a28a0bd804fc687c09746a94260759a6f726c823bfb45ff3236314adc9e3a16b94748041fe3496fdd991e02ca3df1c42dd1a5c0c8138b275dc6b2080ba403a9b498f212ceeef3c7fb47d2ccd85b4903f1e87e0c5f694d7a29cf7d1073945cc42a2375dc267e05b9324c4989233e4c355f4f66baf03352ce824d3ca692556ca8172d39e20633627ee00b9194b652d96a9afe3297b6c61684c58a21e10be22ad325c5884251024ce0c3e8ed289db1301076c44119f9f099bf8ac8232d50d16e3643e55da2d683fdcd7336a39c8821fff86e2f619f2f9f2487069c9e3b99c5dac09bf981c8655781e9462c7e66f6fdc646085a2913aa00e3223c1a6f8c9bba4c82a30c630cb9333dcb491add836f5da9429ed7bbcfc78fd4d23b8b083e5dad5af058145d8c268325946d6f", 0x1000}, {&(0x7f0000003400)="2df1b60802", 0x5}, {&(0x7f0000003440)="c36875ca95ed298aab1a70d23c869bc93e597ef289e9787a8f6759ae13630bb2a81e020c850840dd51aa1ad05dfa7c6762235e23075b36f52f9edefeb41e5e27a7dc305e85b83e27775641e630d814c67a0268534bfc2876bb5c783440e38cd9596f998393654d8ccb8f9d10dee434386560f1de138a687fbd28da8925b21cd560a21005660cb5f7e06e66db9e162bd6baad4837b55c55ff53959aaafcfc0a7a1230d60a7f20b8d8c3292b0a0f84ed7073da32d8e3b749d928a593d84fe1bd6826d15bdb10f04122ee45e3c1b3ffdda768feb7f094d1c7894c41be94525f5d289e108948c085c43590008f7b6fab4061e3", 0xf1}, {&(0x7f0000003540)="9f9558ab64f05bbfb2f5f8b7579e943527bee7bfa3160d62e2b10ba1e8a0a4361084f65436d22ded2bf292d69dc583cd34d7a60da04401814ed1e45b7830de9a522e4ba152eb1a8c3cdf3678ad615594545238d42f46572647b83d417016baca7c88827c183c84128cf0a12851a25f2e065308cc7a641110", 0x78}, {&(0x7f00000035c0)="7acc206ae0555f3ea9d5cf81868eea439e85df89c15b23fefcdc8152fdff02d99bdb19d55d4ef02ff44415cdb54158075e28892f96745ceeab6bfcacc8e4df023edc9011e19c14d70bb22dc32a3da73ab386f89fbdf9c4c32c03fbca59609232bfb4079543c8388ef252ffbca702ccf8ce4028887f13c22198f78285a3f2f536e0266c83bfeb5c0de534886fbfdc0fdae0866b78c217da2f1d85258c55417b5b503941e5c0b38eb4e586e91f688cf55b0c", 0xb1}], 0x7, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x4000000}}, {{&(0x7f0000003a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b00)="0aadd85078397b553927df37a6efe1206a54842b3be81a5c9ab37e677d3e6954168afa1bac105155c14a19ccf897f2e3b4735d5f8d839c0e4d5f6622792381666d4e7ca5037489dd720d1c6d219e3a6967d1dcd800894228c64cf3493d0a637294f67dc81fc6a3fd6c19be0df22cc527f05b0a5887b335", 0x77}, {&(0x7f0000003b80)="096387c80ecaf045866d8d7dcead2cd6bd0bc75aa83fad9abdbbc50af4090d252f60a3b1617f6169999240695e5cb3f69bad537ec219", 0x36}, {&(0x7f0000003bc0)="cea5529d0a270a646d7a2b30d3167f77836c8288bc5154951511b01e73c067b6307c468a29f66029f242597e2c0bdd0a71b1c2421a2cf52ace8d113e6c9bbde0df38d294be963b93dc0ffa13d2d21b4eb6079eb6aeabf905f01c8d27c3bba8463272266c42fe88122e40885afcb525f3e7ea859184d5f34f3af17cf21ef106a594ff2e951d271d15da5d5b90c2e0fbdffd75d5e30fb3aa04a902496db8a59aef7256ede56ca3", 0xa6}], 0x3, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, 0xffffffffffffffff, r3]}}], 0x78, 0x20008080}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e40)="6c9c5fe7647c690fae", 0x9}], 0x1, &(0x7f00000054c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x58, 0x40000}}], 0x5, 0x40000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r5, 0x4b34, 0xfa) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) setresuid(0x0, r6, 0xffffffffffffffff) (async) syz_mount_image$omfs(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0xc8ec, 0x8, &(0x7f0000005340)=[{&(0x7f0000003f40)="e81d091aa65a4778a4e1d76de3d5e5e21641c8174b6879ac774b201f13615df752d739ead90e3285caf5d00744864c89856734e6dd035548263545b8e9babbbccd49a81decd8c7cc1feb37a96f576a6eb6f34faaedf7e0a6746768251450d2d04507e05d7f", 0x65, 0x1}, {&(0x7f0000003fc0)="80ca9e5ca78162eef76546bc4b4a34ade634d10f53ad9d443a0bea0cf5d75a39dfc2f60af5586186dd65f38830045193b36ab883285fadd7584b3b9dc5c9b88aadd01abb8808d8e80113d149a6530c3ecd4e5ab236fdcb7a9bfa0ccb7068da848e43ae414c21d7d79b9cbae4819149d7df122fbde576d01d9ad9e7cca6b12e95b0d86bd12512e5773c1137b9d80aa32384d9fbde13aaa2337a1f59055d53e9061f578ba9a0dd96f24f1fb4df917e9b202212f6307138fcf60b0733", 0xbb, 0x1}, {&(0x7f0000004080)="cd84653a1cdaf002ea07bd3b3d302be6cc941e7a3ffe208a9c4262d473bec7cba4c5815ab6fe9021b45189ac416cc39f1a51c5ac5b341d80f66096463447887d97aea994d8fa55b2ea04b6c9a55856270ed3426177c802fcc3685ccff98fd607334390eba4", 0x65, 0x7}, {&(0x7f0000004100)="2dc128374a729b32af4fae673e9ccb952da79ac6fd0d2f0a53dab3e46039d861d2048033c909d97a273b07ba60bb46e388bad58b4a3ea33ee99e7d1a04bc2f3c1f2e3d400d64f5315f39f43c3d5bb804f0f4fa58a722e8f0a98a4e08a813671c727582a5195660c208f49a664ef77a33ab109a11e66ed2b9c03a8f037adcd8ba940cc193c2aa1d7ce3a80d188e72c776887fd8be5334802e51fd36ce7c31ec0eec00653142315bad2047bcc70ceba5b7e6c23c46bfa87b532a415744a4ae0e97ee1391c5b7308de28b755d58d89959", 0xcf, 0x9d}, {&(0x7f0000004200)="938ec3a69d962c6dabb76648a8e575e985e27eb1098738b4fa86d1e9dea2b0943a774754cc5845e99ea188e24991c301", 0x30, 0x4}, {&(0x7f0000004240)="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", 0x1000, 0x5c2e452f}, {&(0x7f0000005240)="c7e8cc7c020d7ed424e993f5546ad7d3e35217937f77", 0x16, 0x79795c7b}, {&(0x7f0000005280)="3495f8cbe58bb0da9c9e109e3c17d07fb57c0dcf3a1c654ce77d8bfb0a1348db3d45411cdcb3481fd72b0bfe94311e19f250918fa394de195b670f3df07166b98e8227da1e0192e7097d055f1794f7942f6af8d70715c88e1b67ad4a3516a26fd00ee06167123040bfb154c55ee6313d2719541de34aab84e2cf7d14d96a440813a3", 0x82, 0x1}], 0x4, &(0x7f0000005400)={[{'9p\x00'}, {'9p\x00'}, {'rfdno'}, {'wfdno'}, {'trans=fd,'}, {'wfdno'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@fsname={'fsname', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) (async) syz_open_dev$hiddev(&(0x7f0000005480), 0x2, 0x101000) (async) sendmmsg$unix(r5, &(0x7f0000005540)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="743384e7428ccc8944ed844211cd2d0a6ab49994ce37eefd1a5327e3b208797348457df43919c156c292448602400956c7db6439e66800a35270d304b461da082f1af6ef292f69e05e4cb895368d5ce18241a37beb4872487358db286639b74852acc47a6cf70583f268a1f49a4182704ce47cd9d4791a681060228be266ae2ce1b0e0a783dede73a19665b93988e7f111306af3a6a495007aa35cc79abeb392d6e156ebbc4dbd1a5c6ba7b647b87ba53a36a1dfec6e098e393e769c878fd8e3159eb1e84f5d6b8e47fa68fbcd1d8f0cb10ccae4cef6012a613ff3294b2c53fd66a25e195f8b6eca63aa7c41a7bc5328129acdffc013792f4448d0bda1080f858678ccbc2e5771943472cd8ad96a6c34b0785190ce175968bacd07b439491d9c64aceda2185c3f2971865285a2cf60bebe1e11d1f467361585b5a118f8c6ebfcc8c70fa2b4083139d8be88140748975d3a63b1e59aa9f1592696be8fb7c3406d8175a654dcda1faf6cf94ed1bfa8e34c4d8e335e693b42ab5216b495d5a381286f67be1305155a1e5bedcf8be60f223a889142cf757e56c6df0eae180ecd9279d499b2b26be7a791edfbea07875da3e9722587e4dbb3af829751c048dddb3a950d21c025421db5ef7164900d9d4f200f20e9231096acbf313f8fd6c0e2205666e51817d83204e390acea9c80a57f087d77c7d786e1f8d0c2f44464396ba63bb007cf09b833d42ccfb5ab4841704214e6df9b2c50eb2ee07d9bc34c525fd5562d433dd9e35c58775527387b6b267fbe23387cd2c1e663513f0b3df644e013520891ce1a92982aa730a8cbd40a0677e63234278783fe06d99ed39433992865c70c91bf4bf47167323546aad9d05ce5cdab221b0a758ccad7390293dc01da381c2b91cb826d772b91043e979cb6d6def94903d3a1a57b05b8ad8e2ff184edc01751547f816cfede5fb41398a4e5a66bae15ba78149efbdd2f1aeac82351403ea5f595369ff3dbe036a1eb39465a8a604b867a89fb959e5c86c65093ef72744c7b01bf0091a6ee751f61c7a5480f48c91167964f0cbd7dc8045e3408b1373f5912de5fcdb293d49e132d2e9bfaabf1e64b76e6a9aff6273c62650d2c47d0d14926298591847cad56bc287703be1a70efe1083a0d21a8da5d82d8951b62c7977a7c24c69795314c552db5e9877f9e01343c65a25fcddba61259ec787888751316fc6cab01e3b5da6f9a0e11a11e0d0495997884e34f190bcbcfed034d5f13197a8132580fbd22d1cbf448bf55197fd13af6da49a39d77d5ad4017bae0af957cc1dbc210127655aead3f916c1743f8cc851e52b505641c15f037864bd2275ca9e6d8308a61cdf0781a8d9b133999e2f9248bf283c995082f1d8c88b89fcf1bfe0b88bbed399d00aaf97be1b31f1fd6829786039302d00625453bfe7076bd56dddb43e600490177a4245af15a1e103994e3438403e6b18e468321ab7eeee3d8872b7c5997a6cef113dd2cd3c99d39e41ff1584613a8a11b286d88fcb74dc4a13ac656c62151e654acbeee2ec3319c07479ff8f3ec9d1d762a1d1822f94ec0ea443ce44434ac1801afd3e10f97c1baf9b827fcdb08d751cee4bbed36d25df37ee25ac3dcb65ec7ab718221f7267fb88592d89dbaae2ad0a485230bff86b59afa93234387a9643635a17cdee8e38eebb60c63f40fe99796745b874c1325a0b06c5e9491b01200f9d58348257d3125a283427692fa4b95d659bb4f53902ff03b731b164f1dbe06370d33c122ca1f5456a5faf7548b8f8fde190663a70a11a5a40c9799e9da82156ecfe585f94f97155c63c18cf0fe5e15e7fd55d33e44b97e6f507739d8d9bba3da8c6e7d250ce4c5496d38d2b2f6e2933b6c4d9aa37c67b910ae319af31847a44e909048cf4fa1ff5d0d6a4c2dec162d0e631cb11d22377468db61597e57c09f30f2143d4a47bdf3fab2d18fb2caede3a23f3d1238ef3bde918b42de51816d8d53fe25a0e464399177636ec462fdead806a109f45bb612884750000ffc6351445c1dfab3d8f58705549b2ecf89e5e7773fdd47fb6857616c04fecc09cfa010cc4d71e4f6965db444adb402f80c1693611a05a1533529cb9039bbfdc3a9ea0a08b7a825b09813e5486f0cad11f199c15b7d0cbb74d9ddaacfead267d6ba659e05e48cc646f41321559e7092b5ec9ee0e73184bf1d0b4521be71054a9abc7b5f2c065f17e26f527d52616974032c5ca251ac0aaafb06ddacb4e14779c08e9f2f7f94e666c87c579c868f9246b79e871b17ab74d5cc473fc65f563ae8ae322e3517a5b38776a2774047adfdbea4de823e722d777635e8c935a1cb81de4de84a71bcd5b61d69e6028d75c3b17d9a2564290ea87c6bad9d9bb2fd32b22ac48b844fd02cb25ff7231ee8ae908ef0f803e9006fba863a13d6d14348f098d81313be92ff78efb0290b00181c65bc26c9e4d877619b312cd12d68bba8c3900fc5d5c3745a0d8c87c24a5ca88415cc939b7e5715daad3dcb30b01ec97f430230f0999afef7901f89995dbc6b9585f6355ce6a4fc3479401412591ab3d2c1fd052366fe9edabdb4cde59b3d6bc342b37bdd9507103586c1af6b729e42b8c67c80c420ea62da5ee0cbcdc62532025adb3fce4b1d2e0e999a490dd38dfd4093262c2f92219c89e791f9cf1cde5422c318c6d9ac91431c14fa87c6ba5cf5b0982537977d992519ff9cf49b42cd8e7f0e03549044cbddad282250c0e64dbb9d24f44c70b36d09789f39c53bfd3e9b100a9dfe57b0a1b15d3448647c195a92518af1e86f50c4883161cfc3845a93c43efac2288add01a2343fb502e81846deaaa7a79b784a5265cb60c0d2103666f9330c315472c3bf9b7bfb1680e2785de4efd516db90fecf9c72f8a8f1a32637241d1b72d2b9d680123ed4d81af2f1bf28709451ff05fcf6704aa55d37aa6f0e5e6186c3f5123af95fb8df5e08020e66cda47f3f7725c79f10c8ddac71477e58e7b2c4748e715de146e0e71a54a4aa71f51cd5c1b2fa33e923139b5fe03e20f4e29bb125dc18cd7308cd0ea6ae05153d9dc6270eb383540bbd4a7c2cddf61838af571a0d2863f420ead223a997fa79ef816fc788c4e230734b71938febcd1882d44a306aaceaf7cf85b5ed75060d7ac39ef24af34b3086e6b95611bbbf06f45aa2404e4996c6f18e36b5a8d805ab4d903490bfd91011d54ebd77eb5c1fe8eaa5bca25b2542c0dd74610e48cc6e6face8642ce536f5dff61290c72e5b0da301610b747dc50ede7aff3f56f833bbc775697f15b5f385e67769808a2d840125f209db8d2cbb1be4dd74580c7bd22f64122bb622f19689cad5ae546d446721525fb6ebe37013dbf57ddd7abe06a9dc226648d82bb5f464270b5cd9d6ff70b4b16116077a120a1d989e301e9d53af723a59d4c6a498b64942166c4dc682db8b49428001df79a3eb488a6541440b2b974f945bf075d39ad1494e57fb49b2ef775e20abf2db4b07560f005f82e40cdd9cbe5b15c268715c993f0c94586c46e74422eccfe6610a11ccf8c2ca03ce5198817963ea0a3a6585e1146017a835519d734878dc0f4394146a54dcb3fce6993c1d0536a543e097a795f52ee7ed00470d076bad47f86fc9e48ea681a770c41092d826fe93b2966666345ea30231a126bcb7165b39a77ad8dd7e63e71a9dbf40306d1a6cd1b38334c83465374240b9cd4ee365ca0c5ec35346084c8a70295083c54a9aaf43a5c0f94ca4dac5194f7366f74c03598b66f39d87ae3ba81e9aadaf1a63a57189869ccc12101a8f0f7ac3fa8a5ae148b8364d688dc8833c76252d248ade99b01025801ff1c8b3e89b2d1ef07d7216a87c0db5e9610b2f2a9437e263069422cf16c7c79dfd0189f923721d44ec1cbdb33db1748d4d7567b215616712f4ec596089950e70be94210480147ffa2e8e9ab1124124488ee9d5344ae9cbdfe998ec37fa4cd7cb58f69ac827248f75850935870af0744b43928dc4b39cda754e1b822f4c3a43621514158d3afe8180cf98cc80a0d401dffd2c26edd9b8da792b6805a690ca6754e8ef54b2a591891c601857c028730fa8768911da985188863bbd8f4d2f3843fa4925fe5e1b3857ab90684bfbbbb82385072b1ed9046f47a622bfc16cd9a11ce7226d26a529a8c832b13f56af4c17b357e7f7ed8ee81bf69529ef6d0dffda27e3f1589d3290e3699445dd3d4f9bf39694fae64590635933c8cd9fd95f80a7c2a94e89178b046b375218b8f538d690dad2ba95a0b918c0c6cdb62675927ae2492ad7908cd300dbe4429d3d2fda61680fb25b061f8645c41faa927e23f5a28814bf19d7382c2f949bbb5747b9982ad597df2168f7fa4a0c316d1244644b4a7261d1e4829f211d1fe2c1ba70075216ae44552f0dd7df90094f190149fcb68bdb3a87c0118c3d950f0977ed73e1e2b6d35e7bbe3ccb07ae8c2bc539654efd04090bb73d6cb7f8c89899968da76bd7469f012789f0a7a6cfe048ea84b767dfae511e8aba65ce210ba695045e381afb145479fa6685554042e8e9f89fcbac2762cf4c7c8b4d2e30cfa1e844798eba796bc22d6dec3ee30e5ce0672fdfdf8d80f55bece238d4ab5fdfd6bf2b14d0f965c574454a588a323525b11b51b6bd297fbf725dede2d524af34dbbb5127986f2dc8c74ad7f35bcc03f82d006f2037ed3fffe187007b0fefbab464b49d1da926a003577276ca4902cd6412f8a24f7916cf60f27295e0ab621b6d67501e8ad0f7a2fcbe00af464c35b4838531d7ae14d190e8241e03ea501157f30f037da89cfb0ef8b023c8719546d72760eef310daabdb2e8d9fb6725804f32c3e01b0ce6fed59ee78544e4acb316a94a20ee7b110d7b7118a01173c9e7de2a450601882513808b3af311bb6e052a7d9e51fc16c63deabc57ca861e9ba37fad1cb044910f78cd49b7277c2059d28c6815727240108dce9b2afbc7793ea9dff46b48cf8982adb483819e1f40d57aeb0cf277ce2ead63cd306e15b67b77e2f5bdeede4cc910c6c769773ca45e5d0640dcb2a71e54095a56e07f0ab3c30918d5ce762c2454d5d878933957582e7c19f5214e72c813df708a647c601c0ffe2d406399b65105b45b2ed603ac52d2b81657adc34340644ff62718446e9d83fd31f358f67c7cf15deee32f9f8d77a0909d6561c13ba96fbcc919d970c6f3da0a9c2766bc31c453aca72d6b1c66cc11f69524eff5dab14f533ba38cc4f4939d1e9ec4f8a7764c858b863ed6556df3124147d0eebf36a62617e08c3e4ed36f22c431ee8b7e35d0d344e46947f24f7669eb4c1e586fc913eaf5ff590dea62ab52fbc95f05f1aeeb5cb6de02388b4d745673a906cdf8e9e10afff09899a57a49b5adc78b957652cda1a05d251277fdbc1ed0dbe7244c8e683983d34cf45e3ef5693130033aeb46fea74fb0f1030355d977a139fea3c4e91a125dade7de42078ae5793207f28d4134152375cce1a8c10594b3217fab854ed1bcd84c47260be28a8035031995697855c9eb42d2b39cf1ddc330bd6176390d7e806031eee1381f85289f9c48abbd0b1d83f226c95f509833986a376268863666bbf5199d2c8245b4d6d8184c0b64f7b36e4ecd6b7f7cdff9085079d70d4bc4f13dc29494b128459c981366b701eee7112fe5c8d007308b6a787731b4549a5d66de7e02974221edb69bfa2a7ed2488ad60ad9db9e30933f5748161272a936e029fc6a324f2ad8acb13e3e51d34bc40a62161e707bd38cb735b7bad84519f7726983ef8b098cdd0e0c47c25088f3e", 0x1000}, {&(0x7f0000001240)="7b2412cf42bda6f5f3bbda828ad6d871f351e4c1c0edacf1821712e59ec84629cc00231797c61486050644efa7a5b6fe178f0a62b076f4c8d77a8df5e79c217e2739fb5ce52a030d78675dfcc4c87dc6f14422351be50b4d6dc068bd7a26d624468e8c51848903e014284bd972e752eecf48c8b45bf6ca831b5baab0c1ed73c1b0713ffa0d8e5286cfd2fb60f4ea56c035475e5bfde0a53e63a53c2dd89c8b64f1cb5b4243eafe63d3588d8783d8856ddf90fa240de24557514ae9860965eb11385ab6db3a8fe0fad312f1a74acf9da39368d58533526dc75d6eb0b1a1f7375a5829908a488dbbf02861f4082827a208a069abebab6f", 0xf6}, {&(0x7f0000001340)="99953b35fc845be6848d30bcc5367e793d0b8f8ccf87c15670b5f0766c73d6b188ac3a9d788ca4ded4746d769733142c1283f2743dd9f629d68abd6f3b616f627dc09b54d37fd004e9e032e28b38e2d596edd1bdce20b9bc5c09403fd5819721789a0cb033b3f1c10054536b787d85610daba40c0bc8fbfe240b7172fc375b7334a874ad8628a4262b16e3416b5015b533556304ae09414675e39fb83636", 0x9e}, {&(0x7f0000001400)}, {&(0x7f0000001440)="7947f5746372982a1bbdd84a3abda0bdaf8492670fba6fc33c3c875c98e2485834b0c48f4b25ef2e901cccfac87071ea6fd0aa63d12d7fff96dd4d7b58d2a7f7c506828f6920cd5232e3f2cefade856df00a1384a174a30ea2573d2793d112f79a3aa1652e691ef461164513b9dfdee10b6a6b3b10f9b04e972ff521212b2f183a2f345f0f54be246ce0f437d9b33fa99f18524702c622f841ab17fa49473f321b5e3add3094c289e296dd1ce7cf5f127a6cbec9b581ae02c250b407de262b1acfc49cdece2c4bfee6ca7452fcfb25e289a4a643a6c21540186a009c74f24a6d533594fc213ca23786823d61b7244f1963844033308ec659", 0xf8}], 0x5, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r1]}}], 0xe0, 0x1}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001c40)="da11dadd7de8809463d1826ede5b6250f296333acca46c96ad33ecff06fc1a70e1591ce1ea6e57b915a1cb3a170cdcd6f9b7d87847deec77bf7397c7c5e9d884eb507e25d9312e38d3132dbfca32cce5a4f9cd0ddb3fdb769cc66b78bbdadfc033cf8b77ee06d6ab3e005989fe4aae9a57805229441725538be43980751550f079e79cb9080a1bbd6c6a5c79cae4cc3275f95817d45cf73a9f473e04f7e573f03a6357912f8577ddd1e2045c01710e40574effc88b42345ec4f00ec9fe94847e70c84ae4b0ed9534261a1a3df87582560f9a8ada7c48965e", 0xd8}, {&(0x7f0000001d40)="96afc6572ec731d60a305a2aeb80452a5902ecf326d35536079f649cd1253ba3c8ad5502dc5aadfa1ac531ece2d9f313b5c2618af4709d516119f27bd1ba8be63d484e81df41855fbc69c552ce263c7517d7862faacc21ab4c84cb6207bc5429f110ef54b8403c27", 0x68}, {&(0x7f0000001dc0)="179cc74acd5f9c9648420cdab3d091", 0xf}, {&(0x7f0000001e00)="a5bd6220386a7886dd873a0e57864098f7c17c6244c9964e74e88b836b50699b1c7ad41b7a1432883f324273804f2be28f3137838f35cf8774b473bf294f82939c40491a17e4347f3873792e36f78cb5d5e3d5f06a351d8e67c31917907db9976879a51278841b13a643d7271a51d4ef968428cee5c902b6f51535dc31e3063eaaee16a9b8e2d3f52decd7ca1397a2938322993e3a77ecb0bdd9", 0x9a}, {&(0x7f0000001ec0)="3e1d1b9fe6359da6126140a685eed8df2fedffcae0009f1079631b45cec2bb25bfc302f20b87c116d40e12082a7db6fb28c362aef9d68f08aa3928a8e4a82a2f7cbf1af9e05fa872b579677c6c27078bd4912cc6a65184923a53b1171093061806", 0x61}, {&(0x7f0000001f40)="c828a55ea26e2354e6b730b912e62c6b282c407c9abb6a1d11c107b3c31deecbe4c1835f5e3a77a890ca76f1c30a7e3ce8b5ec2756ea2b4018aa8a526dc6eb5527f8fc6c68b9bad8f3da4df1578855a6caff134de4cad9780580546d116d287b415b91cb4af5515df23b081e6729f898c102a45c261f7394f86c1b3e40a45fd4d0049ee335ba", 0x86}, {&(0x7f0000002000)}, {&(0x7f0000002040)="4da173a90668e08d841549ee8604ab260ad142dac1279124ad682614156b1087d81ceefda342370eb552b98ea54e7a1a148eb1f0d9aaff3494f8d3e390b273a9bbf3ea1d0c487f36992b1dac9304faff9286c852168f855560d8005a7fefd884596840602439629466dc4dbdb374c76b27a5b6686a6effda9416ae5f122a593805e91d30997dea07e896dfc0a548d02334e4a0b85165748ffd79fcf07dce2acc0592432a41fc99098f09069953dd4e4254cbc6d366d9c5db7b0f2b6868c9009a69098e3523879592b4aac6948bc36c9ebaf12e1208eb387ec66aa860b313d7dbadaa65eaf7a3", 0xe6}], 0x8, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x68, 0x4}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002300)="95715e78ea913cd93d87167c09703bbb2f1f2951310701c9fabebc7e00f18be3b281adc429220549ba1e3d0dbc48c41728fabf6ff50ecd67dd76fa4d9539e68f", 0x40}, {&(0x7f0000002340)="13d4868095d76a56388c05a4796b4f745e01d4092820b424891fb62898c299dd16aa906b175fa05367f9a5280bd9dcb1d80a1986e9849e8423f7d0e2cf081d6c74dec4d522031267ba3263afcd1ef1ca61143eb047219ba29ec87612092ed54a6c1665403cfe7ec5c8136ee51c110f2d7930d9382c733140a2638f4a64ede54dd66c3df79299476d340636c739d09da692bec97f1d2e99b531280cfacb29050acb898efec8d86825", 0xa8}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="2df1b60802", 0x5}, {&(0x7f0000003440)="c36875ca95ed298aab1a70d23c869bc93e597ef289e9787a8f6759ae13630bb2a81e020c850840dd51aa1ad05dfa7c6762235e23075b36f52f9edefeb41e5e27a7dc305e85b83e27775641e630d814c67a0268534bfc2876bb5c783440e38cd9596f998393654d8ccb8f9d10dee434386560f1de138a687fbd28da8925b21cd560a21005660cb5f7e06e66db9e162bd6baad4837b55c55ff53959aaafcfc0a7a1230d60a7f20b8d8c3292b0a0f84ed7073da32d8e3b749d928a593d84fe1bd6826d15bdb10f04122ee45e3c1b3ffdda768feb7f094d1c7894c41be94525f5d289e108948c085c43590008f7b6fab4061e3", 0xf1}, {&(0x7f0000003540)="9f9558ab64f05bbfb2f5f8b7579e943527bee7bfa3160d62e2b10ba1e8a0a4361084f65436d22ded2bf292d69dc583cd34d7a60da04401814ed1e45b7830de9a522e4ba152eb1a8c3cdf3678ad615594545238d42f46572647b83d417016baca7c88827c183c84128cf0a12851a25f2e065308cc7a641110", 0x78}, {&(0x7f00000035c0)="7acc206ae0555f3ea9d5cf81868eea439e85df89c15b23fefcdc8152fdff02d99bdb19d55d4ef02ff44415cdb54158075e28892f96745ceeab6bfcacc8e4df023edc9011e19c14d70bb22dc32a3da73ab386f89fbdf9c4c32c03fbca59609232bfb4079543c8388ef252ffbca702ccf8ce4028887f13c22198f78285a3f2f536e0266c83bfeb5c0de534886fbfdc0fdae0866b78c217da2f1d85258c55417b5b503941e5c0b38eb4e586e91f688cf55b0c", 0xb1}], 0x7, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x4000000}}, {{&(0x7f0000003a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b00)="0aadd85078397b553927df37a6efe1206a54842b3be81a5c9ab37e677d3e6954168afa1bac105155c14a19ccf897f2e3b4735d5f8d839c0e4d5f6622792381666d4e7ca5037489dd720d1c6d219e3a6967d1dcd800894228c64cf3493d0a637294f67dc81fc6a3fd6c19be0df22cc527f05b0a5887b335", 0x77}, {&(0x7f0000003b80)="096387c80ecaf045866d8d7dcead2cd6bd0bc75aa83fad9abdbbc50af4090d252f60a3b1617f6169999240695e5cb3f69bad537ec219", 0x36}, {&(0x7f0000003bc0)="cea5529d0a270a646d7a2b30d3167f77836c8288bc5154951511b01e73c067b6307c468a29f66029f242597e2c0bdd0a71b1c2421a2cf52ace8d113e6c9bbde0df38d294be963b93dc0ffa13d2d21b4eb6079eb6aeabf905f01c8d27c3bba8463272266c42fe88122e40885afcb525f3e7ea859184d5f34f3af17cf21ef106a594ff2e951d271d15da5d5b90c2e0fbdffd75d5e30fb3aa04a902496db8a59aef7256ede56ca3", 0xa6}], 0x3, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, 0xffffffffffffffff, r3]}}], 0x78, 0x20008080}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e40)="6c9c5fe7647c690fae", 0x9}], 0x1, &(0x7f00000054c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x58, 0x40000}}], 0x5, 0x40000) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x71, 0x0, &(0x7f0000000040)) 04:22:07 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000)=0x3, 0x4) 04:22:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='T', 0x1}], 0x1}, 0x0) [ 612.377225][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 612.384840][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x2001, 0x0) 04:22:07 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9e26e6", 0x10, 0x3a, 0x0, @local, @dev, {[], @ni}}}}}, 0x0) 04:22:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) fstat(r0, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x49, 0xfffffff9, 0x3, 0x2, "68fdc7c94bea275a44d35a03d43641e257e206"}) [ 612.469269][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 612.476328][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 612.489611][T12192] loop1: detected capacity change from 0 to 228933 [ 612.506057][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 612.513195][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:07 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 04:22:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 612.595807][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 612.602913][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:07 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:07 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r5, 0x4b34, 0xfa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setresuid(0x0, r6, 0xffffffffffffffff) r7 = syz_mount_image$omfs(&(0x7f0000003ec0), &(0x7f0000003f00)='./file0\x00', 0xc8ec, 0x8, &(0x7f0000005340)=[{&(0x7f0000003f40)="e81d091aa65a4778a4e1d76de3d5e5e21641c8174b6879ac774b201f13615df752d739ead90e3285caf5d00744864c89856734e6dd035548263545b8e9babbbccd49a81decd8c7cc1feb37a96f576a6eb6f34faaedf7e0a6746768251450d2d04507e05d7f", 0x65, 0x1}, {&(0x7f0000003fc0)="80ca9e5ca78162eef76546bc4b4a34ade634d10f53ad9d443a0bea0cf5d75a39dfc2f60af5586186dd65f38830045193b36ab883285fadd7584b3b9dc5c9b88aadd01abb8808d8e80113d149a6530c3ecd4e5ab236fdcb7a9bfa0ccb7068da848e43ae414c21d7d79b9cbae4819149d7df122fbde576d01d9ad9e7cca6b12e95b0d86bd12512e5773c1137b9d80aa32384d9fbde13aaa2337a1f59055d53e9061f578ba9a0dd96f24f1fb4df917e9b202212f6307138fcf60b0733", 0xbb, 0x1}, {&(0x7f0000004080)="cd84653a1cdaf002ea07bd3b3d302be6cc941e7a3ffe208a9c4262d473bec7cba4c5815ab6fe9021b45189ac416cc39f1a51c5ac5b341d80f66096463447887d97aea994d8fa55b2ea04b6c9a55856270ed3426177c802fcc3685ccff98fd607334390eba4", 0x65, 0x7}, {&(0x7f0000004100)="2dc128374a729b32af4fae673e9ccb952da79ac6fd0d2f0a53dab3e46039d861d2048033c909d97a273b07ba60bb46e388bad58b4a3ea33ee99e7d1a04bc2f3c1f2e3d400d64f5315f39f43c3d5bb804f0f4fa58a722e8f0a98a4e08a813671c727582a5195660c208f49a664ef77a33ab109a11e66ed2b9c03a8f037adcd8ba940cc193c2aa1d7ce3a80d188e72c776887fd8be5334802e51fd36ce7c31ec0eec00653142315bad2047bcc70ceba5b7e6c23c46bfa87b532a415744a4ae0e97ee1391c5b7308de28b755d58d89959", 0xcf, 0x9d}, {&(0x7f0000004200)="938ec3a69d962c6dabb76648a8e575e985e27eb1098738b4fa86d1e9dea2b0943a774754cc5845e99ea188e24991c301", 0x30, 0x4}, {&(0x7f0000004240)="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", 0x1000, 0x5c2e452f}, {&(0x7f0000005240)="c7e8cc7c020d7ed424e993f5546ad7d3e35217937f77", 0x16, 0x79795c7b}, {&(0x7f0000005280)="3495f8cbe58bb0da9c9e109e3c17d07fb57c0dcf3a1c654ce77d8bfb0a1348db3d45411cdcb3481fd72b0bfe94311e19f250918fa394de195b670f3df07166b98e8227da1e0192e7097d055f1794f7942f6af8d70715c88e1b67ad4a3516a26fd00ee06167123040bfb154c55ee6313d2719541de34aab84e2cf7d14d96a440813a3", 0x82, 0x1}], 0x4, &(0x7f0000005400)={[{'9p\x00'}, {'9p\x00'}, {'rfdno'}, {'wfdno'}, {'trans=fd,'}, {'wfdno'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@fsname={'fsname', 0x3d, '.'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) (async) r8 = syz_open_dev$hiddev(&(0x7f0000005480), 0x2, 0x101000) sendmmsg$unix(r5, &(0x7f0000005540)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7b2412cf42bda6f5f3bbda828ad6d871f351e4c1c0edacf1821712e59ec84629cc00231797c61486050644efa7a5b6fe178f0a62b076f4c8d77a8df5e79c217e2739fb5ce52a030d78675dfcc4c87dc6f14422351be50b4d6dc068bd7a26d624468e8c51848903e014284bd972e752eecf48c8b45bf6ca831b5baab0c1ed73c1b0713ffa0d8e5286cfd2fb60f4ea56c035475e5bfde0a53e63a53c2dd89c8b64f1cb5b4243eafe63d3588d8783d8856ddf90fa240de24557514ae9860965eb11385ab6db3a8fe0fad312f1a74acf9da39368d58533526dc75d6eb0b1a1f7375a5829908a488dbbf02861f4082827a208a069abebab6f", 0xf6}, {&(0x7f0000001340)="99953b35fc845be6848d30bcc5367e793d0b8f8ccf87c15670b5f0766c73d6b188ac3a9d788ca4ded4746d769733142c1283f2743dd9f629d68abd6f3b616f627dc09b54d37fd004e9e032e28b38e2d596edd1bdce20b9bc5c09403fd5819721789a0cb033b3f1c10054536b787d85610daba40c0bc8fbfe240b7172fc375b7334a874ad8628a4262b16e3416b5015b533556304ae09414675e39fb83636", 0x9e}, {&(0x7f0000001400)}, {&(0x7f0000001440)="7947f5746372982a1bbdd84a3abda0bdaf8492670fba6fc33c3c875c98e2485834b0c48f4b25ef2e901cccfac87071ea6fd0aa63d12d7fff96dd4d7b58d2a7f7c506828f6920cd5232e3f2cefade856df00a1384a174a30ea2573d2793d112f79a3aa1652e691ef461164513b9dfdee10b6a6b3b10f9b04e972ff521212b2f183a2f345f0f54be246ce0f437d9b33fa99f18524702c622f841ab17fa49473f321b5e3add3094c289e296dd1ce7cf5f127a6cbec9b581ae02c250b407de262b1acfc49cdece2c4bfee6ca7452fcfb25e289a4a643a6c21540186a009c74f24a6d533594fc213ca23786823d61b7244f1963844033308ec659", 0xf8}], 0x5, &(0x7f0000001ac0)=[@rights={{0x28, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r1]}}], 0xe0, 0x1}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001c40)="da11dadd7de8809463d1826ede5b6250f296333acca46c96ad33ecff06fc1a70e1591ce1ea6e57b915a1cb3a170cdcd6f9b7d87847deec77bf7397c7c5e9d884eb507e25d9312e38d3132dbfca32cce5a4f9cd0ddb3fdb769cc66b78bbdadfc033cf8b77ee06d6ab3e005989fe4aae9a57805229441725538be43980751550f079e79cb9080a1bbd6c6a5c79cae4cc3275f95817d45cf73a9f473e04f7e573f03a6357912f8577ddd1e2045c01710e40574effc88b42345ec4f00ec9fe94847e70c84ae4b0ed9534261a1a3df87582560f9a8ada7c48965e", 0xd8}, {&(0x7f0000001d40)="96afc6572ec731d60a305a2aeb80452a5902ecf326d35536079f649cd1253ba3c8ad5502dc5aadfa1ac531ece2d9f313b5c2618af4709d516119f27bd1ba8be63d484e81df41855fbc69c552ce263c7517d7862faacc21ab4c84cb6207bc5429f110ef54b8403c27", 0x68}, {&(0x7f0000001dc0)="179cc74acd5f9c9648420cdab3d091", 0xf}, {&(0x7f0000001e00)="a5bd6220386a7886dd873a0e57864098f7c17c6244c9964e74e88b836b50699b1c7ad41b7a1432883f324273804f2be28f3137838f35cf8774b473bf294f82939c40491a17e4347f3873792e36f78cb5d5e3d5f06a351d8e67c31917907db9976879a51278841b13a643d7271a51d4ef968428cee5c902b6f51535dc31e3063eaaee16a9b8e2d3f52decd7ca1397a2938322993e3a77ecb0bdd9", 0x9a}, {&(0x7f0000001ec0)="3e1d1b9fe6359da6126140a685eed8df2fedffcae0009f1079631b45cec2bb25bfc302f20b87c116d40e12082a7db6fb28c362aef9d68f08aa3928a8e4a82a2f7cbf1af9e05fa872b579677c6c27078bd4912cc6a65184923a53b1171093061806", 0x61}, {&(0x7f0000001f40)="c828a55ea26e2354e6b730b912e62c6b282c407c9abb6a1d11c107b3c31deecbe4c1835f5e3a77a890ca76f1c30a7e3ce8b5ec2756ea2b4018aa8a526dc6eb5527f8fc6c68b9bad8f3da4df1578855a6caff134de4cad9780580546d116d287b415b91cb4af5515df23b081e6729f898c102a45c261f7394f86c1b3e40a45fd4d0049ee335ba", 0x86}, {&(0x7f0000002000)}, {&(0x7f0000002040)="4da173a90668e08d841549ee8604ab260ad142dac1279124ad682614156b1087d81ceefda342370eb552b98ea54e7a1a148eb1f0d9aaff3494f8d3e390b273a9bbf3ea1d0c487f36992b1dac9304faff9286c852168f855560d8005a7fefd884596840602439629466dc4dbdb374c76b27a5b6686a6effda9416ae5f122a593805e91d30997dea07e896dfc0a548d02334e4a0b85165748ffd79fcf07dce2acc0592432a41fc99098f09069953dd4e4254cbc6d366d9c5db7b0f2b6868c9009a69098e3523879592b4aac6948bc36c9ebaf12e1208eb387ec66aa860b313d7dbadaa65eaf7a3", 0xe6}], 0x8, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x68, 0x4}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000002300)="95715e78ea913cd93d87167c09703bbb2f1f2951310701c9fabebc7e00f18be3b281adc429220549ba1e3d0dbc48c41728fabf6ff50ecd67dd76fa4d9539e68f", 0x40}, {&(0x7f0000002340)="13d4868095d76a56388c05a4796b4f745e01d4092820b424891fb62898c299dd16aa906b175fa05367f9a5280bd9dcb1d80a1986e9849e8423f7d0e2cf081d6c74dec4d522031267ba3263afcd1ef1ca61143eb047219ba29ec87612092ed54a6c1665403cfe7ec5c8136ee51c110f2d7930d9382c733140a2638f4a64ede54dd66c3df79299476d340636c739d09da692bec97f1d2e99b531280cfacb29050acb898efec8d86825", 0xa8}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="2df1b60802", 0x5}, {&(0x7f0000003440)="c36875ca95ed298aab1a70d23c869bc93e597ef289e9787a8f6759ae13630bb2a81e020c850840dd51aa1ad05dfa7c6762235e23075b36f52f9edefeb41e5e27a7dc305e85b83e27775641e630d814c67a0268534bfc2876bb5c783440e38cd9596f998393654d8ccb8f9d10dee434386560f1de138a687fbd28da8925b21cd560a21005660cb5f7e06e66db9e162bd6baad4837b55c55ff53959aaafcfc0a7a1230d60a7f20b8d8c3292b0a0f84ed7073da32d8e3b749d928a593d84fe1bd6826d15bdb10f04122ee45e3c1b3ffdda768feb7f094d1c7894c41be94525f5d289e108948c085c43590008f7b6fab4061e3", 0xf1}, {&(0x7f0000003540)="9f9558ab64f05bbfb2f5f8b7579e943527bee7bfa3160d62e2b10ba1e8a0a4361084f65436d22ded2bf292d69dc583cd34d7a60da04401814ed1e45b7830de9a522e4ba152eb1a8c3cdf3678ad615594545238d42f46572647b83d417016baca7c88827c183c84128cf0a12851a25f2e065308cc7a641110", 0x78}, {&(0x7f00000035c0)="7acc206ae0555f3ea9d5cf81868eea439e85df89c15b23fefcdc8152fdff02d99bdb19d55d4ef02ff44415cdb54158075e28892f96745ceeab6bfcacc8e4df023edc9011e19c14d70bb22dc32a3da73ab386f89fbdf9c4c32c03fbca59609232bfb4079543c8388ef252ffbca702ccf8ce4028887f13c22198f78285a3f2f536e0266c83bfeb5c0de534886fbfdc0fdae0866b78c217da2f1d85258c55417b5b503941e5c0b38eb4e586e91f688cf55b0c", 0xb1}], 0x7, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x4000000}}, {{&(0x7f0000003a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003b00)="0aadd85078397b553927df37a6efe1206a54842b3be81a5c9ab37e677d3e6954168afa1bac105155c14a19ccf897f2e3b4735d5f8d839c0e4d5f6622792381666d4e7ca5037489dd720d1c6d219e3a6967d1dcd800894228c64cf3493d0a637294f67dc81fc6a3fd6c19be0df22cc527f05b0a5887b335", 0x77}, {&(0x7f0000003b80)="096387c80ecaf045866d8d7dcead2cd6bd0bc75aa83fad9abdbbc50af4090d252f60a3b1617f6169999240695e5cb3f69bad537ec219", 0x36}, {&(0x7f0000003bc0)="cea5529d0a270a646d7a2b30d3167f77836c8288bc5154951511b01e73c067b6307c468a29f66029f242597e2c0bdd0a71b1c2421a2cf52ace8d113e6c9bbde0df38d294be963b93dc0ffa13d2d21b4eb6079eb6aeabf905f01c8d27c3bba8463272266c42fe88122e40885afcb525f3e7ea859184d5f34f3af17cf21ef106a594ff2e951d271d15da5d5b90c2e0fbdffd75d5e30fb3aa04a902496db8a59aef7256ede56ca3", 0xa6}], 0x3, &(0x7f0000003d40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, 0xffffffffffffffff, r3]}}], 0x78, 0x20008080}}, {{&(0x7f0000003dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e40)="6c9c5fe7647c690fae", 0x9}], 0x1, &(0x7f00000054c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x58, 0x40000}}], 0x5, 0x40000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:07 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:07 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 04:22:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x2) 04:22:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) fstat(r0, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x49, 0xfffffff9, 0x3, 0x2, "68fdc7c94bea275a44d35a03d43641e257e206"}) [ 612.776384][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 612.783526][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:07 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1a, 0x0, &(0x7f0000000040)) 04:22:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='T', 0x1}], 0x1, &(0x7f0000000180)=[@hopopts_2292={{0x18}}, @flowinfo={{0x14}}], 0x30}, 0x801) 04:22:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)='|', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) [ 612.933226][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 612.940477][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 612.954992][T12235] loop1: detected capacity change from 0 to 228933 04:22:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) fstat(r0, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x49, 0xfffffff9, 0x3, 0x2, "68fdc7c94bea275a44d35a03d43641e257e206"}) 04:22:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='T', 0x1}], 0x1, &(0x7f0000000180)=[@flowinfo={{0x14}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0xff}}}], 0x30}, 0x0) [ 613.003290][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 613.010266][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) 04:22:07 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:07 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x2c) 04:22:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100), 0x4) 04:22:07 executing program 0: syz_io_uring_setup(0x1fc6, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x4200}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (rerun: 64) 04:22:07 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @mcast2, 0xc138}], 0x1c) 04:22:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x0, @dev}], 0x3c) 04:22:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2002) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000001c0)={0x1}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 613.290726][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 613.301724][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:08 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x0) 04:22:08 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 613.463412][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 613.470368][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfff) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) 04:22:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74725be4518ecfa8bbf094010000006e0000000000", @ANYRESHEX=r5, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="f02c10"]) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40c00, 0x0) r7 = epoll_create1(0x80000) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000001c0)={r7, r8, 0x40}) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) 04:22:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x16, 0x0, &(0x7f0000000040)) 04:22:10 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xa, 0x0, &(0x7f0000000040)) 04:22:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TCXONC(r4, 0x540a, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2002) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000001c0)={0x1}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 615.373006][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)) 04:22:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x23, 0x0, &(0x7f0000000040)) 04:22:10 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, &(0x7f0000000040)=0x4) [ 615.473190][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 615.480249][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:10 executing program 5: socketpair(0x1, 0x0, 0x7fff, &(0x7f0000000040)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4580, 0x0) 04:22:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 04:22:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100840, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfff) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x9) (async) [ 615.720776][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 615.727864][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 615.798088][T12329] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:22:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74725be4518ecfa8bbf094010000006e0000000000", @ANYRESHEX=r5, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="f02c10"]) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40c00, 0x0) r7 = epoll_create1(0x80000) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000001c0)={r7, r8, 0x40}) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74725be4518ecfa8bbf094010000006e0000000000", @ANYRESHEX=r5, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="f02c10"]) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40c00, 0x0) (async) epoll_create1(0x80000) (async) socket$unix(0x1, 0x5, 0x0) (async) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000001c0)={r7, r8, 0x40}) (async) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) (async) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) (async) 04:22:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 04:22:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 04:22:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TCXONC(r4, 0x540a, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000100e}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async, rerun: 64) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x2002) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000001c0)={0x1}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:12 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 617.533044][ T144] Bluetooth: hci7: command 0x1003 tx timeout [ 617.539188][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x21, 0x0, &(0x7f0000000040)) 04:22:12 executing program 2: socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:22:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 617.615756][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 617.622964][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, 0x0, 0x0) 04:22:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, 0x0, 0x0) 04:22:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, 0x0, 0x0) 04:22:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74725be4518ecfa8bbf094010000006e0000000000", @ANYRESHEX=r5, @ANYRES32, @ANYRESHEX=r1, @ANYBLOB="f02c10"]) (async, rerun: 32) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40c00, 0x0) (async, rerun: 32) r7 = epoll_create1(0x80000) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f00000001c0)={r7, r8, 0x40}) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) (async) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) 04:22:12 executing program 5: syz_emit_ethernet(0x16, &(0x7f00000004c0)={@multicast, @local, @void, {@llc={0x4, {@snap={0x0, 0x0, 'A', "80c0c8", 0x6005}}}}}, 0x0) 04:22:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) 04:22:12 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x6, 0x4) 04:22:12 executing program 0: prctl$PR_SET_DUMPABLE(0x38, 0x3) 04:22:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:14 executing program 2: prctl$PR_SET_DUMPABLE(0x34, 0x3) 04:22:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="0f77e909325bbb", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:14 executing program 5: migrate_pages(0x0, 0x7fff, &(0x7f0000000200), &(0x7f0000000240)=0x1f) 04:22:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x1b, 0x0, &(0x7f0000000040)) [ 619.693448][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:14 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)=0x700) 04:22:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) [ 619.776855][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) [ 619.796425][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) 04:22:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0x2, 0x0, 0x0, @empty}, 0x1c) 04:22:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001e40)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001cc0)=[@tclass={{0x14, 0x29, 0x43, 0x2d66}}, @tclass={{0x14}}], 0x30}, 0x0) 04:22:14 executing program 5: prctl$PR_SET_DUMPABLE(0x3a, 0x3) [ 619.933015][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 619.942931][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:14 executing program 2: mlockall(0x3) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x10000000002) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) 04:22:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (rerun: 64) 04:22:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xf, 0x0, &(0x7f0000000040)) [ 621.773296][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 621.784371][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:16 executing program 5: syz_emit_ethernet(0x15, &(0x7f0000000040)={@multicast, @broadcast, @val={@void}, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x0, "e2"}}}}}}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @local, @void}, 0x0) 04:22:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 04:22:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) 04:22:16 executing program 1: r0 = memfd_secret(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0xfffffdf9, 0x4, 0x1, 0x7ff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r1, 0x5437, 0x0) [ 621.852883][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 621.860689][ T22] Bluetooth: hci8: command tx timeout 04:22:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000008}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="0f77e909325bbb", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) r7 = dup(r5) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r4]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:16 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="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", 0xa69, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 04:22:16 executing program 0: mlockall(0x3) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x10000000002) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) 04:22:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x1d, 0x0, &(0x7f0000000100)) 04:22:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:16 executing program 5: prctl$PR_SET_DUMPABLE(0x29, 0x3) 04:22:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="0f77e909325bbb", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) r7 = dup(r5) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r4]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766645a6f3dc744318d3a5fd95359276506008951a26cf89eb00a2653debd5258f84f39fa6a54664eea49bb90c7019b76856c3cc5f5890ea10d91bbb3e68d71c28191f149a20781fa8aa7279b85afaa9dcdd380d98465c592bb003d969f548c08f84466bdbe2b1d58e4b9b70720fe4052a8c3a2beffe7428a0a5a40eca462509d0a1214a246fee7b586", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 04:22:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x4e20, @remote}], 0x20) [ 622.141121][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 622.148541][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) [ 622.203126][ T45] Bluetooth: hci8: Frame reassembly failed (-84) 04:22:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r4, 0x4b34, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 622.349026][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:18 executing program 1: r0 = memfd_secret(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0xfffffdf9, 0x4, 0x1, 0x7ff}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r1, 0x5437, 0x0) 04:22:18 executing program 5: bpf$MAP_CREATE(0x0, 0xfffffffffffffffc, 0x0) 04:22:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000100)) 04:22:18 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4ba6d1", 0x10, 0x21, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a9e508", 0x0, "c905cb"}}}}}}}, 0x0) [ 624.014474][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.020765][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.024041][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) 04:22:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r1, @ANYBLOB="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"], 0x67c}}, 0x0) 04:22:18 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x10c}}, 0x0) [ 624.154386][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 624.161399][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:18 executing program 0: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) [ 624.200174][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 624.252951][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766645a6f3dc744318d3a5fd95359276506008951a26cf89eb00a2653debd5258f84f39fa6a54664eea49bb90c7019b76856c3cc5f5890ea10d91bbb3e68d71c28191f149a20781fa8aa7279b85afaa9dcdd380d98465c592bb003d969f548c08f84466bdbe2b1d58e4b9b70720fe4052a8c3a2beffe7428a0a5a40eca462509d0a1214a246fee7b586", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766645a6f3dc744318d3a5fd95359276506008951a26cf89eb00a2653debd5258f84f39fa6a54664eea49bb90c7019b76856c3cc5f5890ea10d91bbb3e68d71c28191f149a20781fa8aa7279b85afaa9dcdd380d98465c592bb003d969f548c08f84466bdbe2b1d58e4b9b70720fe4052a8c3a2beffe7428a0a5a40eca462509d0a1214a246fee7b586", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) (async) 04:22:19 executing program 1: r0 = memfd_secret(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0xfffffdf9, 0x4, 0x1, 0x7ff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r1, 0x5437, 0x0) memfd_secret(0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0xfffffdf9, 0x4, 0x1, 0x7ff}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r1, 0x5437, 0x0) (async) [ 624.324978][T12478] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 04:22:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x541b, 0x8000000000000004) 04:22:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r4, 0x4b34, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:19 executing program 0: r0 = socket(0xa, 0x3, 0x8) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) [ 624.424682][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 624.432393][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 624.440218][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:19 executing program 2: mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) socketpair(0x26, 0x0, 0x0, &(0x7f00000000c0)) 04:22:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xb, 0x0, 0x0, 0x8, 0x1}, 0x48) [ 624.506029][T12490] ptm ptm0: ldisc open failed (-12), clearing slot 0 04:22:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000080)={'dummy0\x00', @ifru_data=0x0}) 04:22:19 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f00000012c0), 0x0, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000001300)={0x1, @accept_phy_link={{0x436, 0x3}}}, 0xfffffdef) 04:22:19 executing program 2: syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 04:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x218e42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c726664500158dc85821c14055d6ddd10c06795e593b91a8e959f4bcf638ba6b35b7dde41ff9f5b9ae9e05bb1193a1e1acca8538bcd90ec99c5fcef2de187faf66603fb109fbb07929173f92709025539ae464654ea61d6611aab20964c8e31b41373c2500900f1b6b59975361f7abc5cc3c70a8745f8a8ded280caaf32c85eeb40e90a49"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:19 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)={0x0}, 0x10) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 04:22:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766645a6f3dc744318d3a5fd95359276506008951a26cf89eb00a2653debd5258f84f39fa6a54664eea49bb90c7019b76856c3cc5f5890ea10d91bbb3e68d71c28191f149a20781fa8aa7279b85afaa9dcdd380d98465c592bb003d969f548c08f84466bdbe2b1d58e4b9b70720fe4052a8c3a2beffe7428a0a5a40eca462509d0a1214a246fee7b586", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async, rerun: 64) r5 = epoll_create1(0x0) (async, rerun: 64) r6 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000100e}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 04:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0xc018aec0, 0x0) 04:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x218e42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c726664500158dc85821c14055d6ddd10c06795e593b91a8e959f4bcf638ba6b35b7dde41ff9f5b9ae9e05bb1193a1e1acca8538bcd90ec99c5fcef2de187faf66603fb109fbb07929173f92709025539ae464654ea61d6611aab20964c8e31b41373c2500900f1b6b59975361f7abc5cc3c70a8745f8a8ded280caaf32c85eeb40e90a49"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r4, 0x4b34, 0x7) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x218e42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c726664500158dc85821c14055d6ddd10c06795e593b91a8e959f4bcf638ba6b35b7dde41ff9f5b9ae9e05bb1193a1e1acca8538bcd90ec99c5fcef2de187faf66603fb109fbb07929173f92709025539ae464654ea61d6611aab20964c8e31b41373c2500900f1b6b59975361f7abc5cc3c70a8745f8a8ded280caaf32c85eeb40e90a49"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x218e42, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c726664500158dc85821c14055d6ddd10c06795e593b91a8e959f4bcf638ba6b35b7dde41ff9f5b9ae9e05bb1193a1e1acca8538bcd90ec99c5fcef2de187faf66603fb109fbb07929173f92709025539ae464654ea61d6611aab20964c8e31b41373c2500900f1b6b59975361f7abc5cc3c70a8745f8a8ded280caaf32c85eeb40e90a49"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 624.822599][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 624.830045][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 624.913061][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0189436, &(0x7f0000000000)) 04:22:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000200)) 04:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='xfrm0\x00'}) 04:22:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x4000010, r0, 0x4af62000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f0000000180)=0x8, 0x8, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000001c0)) 04:22:20 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/mdstat\x00', 0x0, 0x0) 04:22:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:21 executing program 5: mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000780)) 04:22:21 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0), 0x103201, 0x0) 04:22:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='xfrm0\x00'}) 04:22:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x4000010, r0, 0x4af62000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f0000000180)=0x8, 0x8, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000001c0)) [ 626.972877][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8901, &(0x7f0000000100)="b6d77fad") 04:22:21 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x464}, 0x10}}, 0x0) 04:22:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='xfrm0\x00'}) 04:22:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) (async) syz_open_pts(r1, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:22 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) pselect6(0x40, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={0x8}, &(0x7f0000000480)={0x77359400}, 0x0) 04:22:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x4000010, r0, 0x4af62000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) copy_file_range(r2, 0x0, r1, &(0x7f0000000180)=0x8, 0x8, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000001c0)) 04:22:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a1, &(0x7f0000000100)="b4") [ 627.292995][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='xfrm0\x00'}) 04:22:23 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg$unix(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x40000100) 04:22:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:23 executing program 5: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) [ 629.052890][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:23 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 04:22:23 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 04:22:23 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f00000012c0), 0x0, 0x81) write$bt_hci(r0, &(0x7f0000001300)={0x1, @accept_phy_link={{0x436, 0x3}}}, 0xfffffdef) [ 629.362854][ T4737] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 629.613012][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 629.753104][ T4737] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:22:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:24 executing program 2: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 04:22:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000240)={'wg1\x00', @ifru_hwaddr=@link_local}) 04:22:24 executing program 0: mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)) [ 629.926759][ T4737] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 629.945453][ T4737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.966023][ T4737] usb 6-1: Product: syz [ 629.975277][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 629.982549][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 629.990519][ T4737] usb 6-1: Manufacturer: syz [ 630.002622][ T4737] usb 6-1: SerialNumber: syz [ 630.043146][T12648] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 630.065083][ T4737] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 630.277367][ T144] usb 6-1: USB disconnect, device number 2 [ 631.132782][ T4737] Bluetooth: hci7: command 0x1003 tx timeout [ 631.132985][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:25 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x20002) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x0, 0x851, r0, 0x0) 04:22:25 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, 0x0) 04:22:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="0004616e733d666407000000"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = memfd_secret(0x80000) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x18100, 0x88) epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80002000}) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) 04:22:25 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000000)={'vxcan1\x00', @ifru_ivalue}) 04:22:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 631.212892][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 631.220328][ T22] Bluetooth: hci8: command tx timeout 04:22:26 executing program 5: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8993, &(0x7f0000002d00)={'batadv_slave_1\x00'}) 04:22:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4, 0x4}]}]}, 0x2c}}, 0x0) [ 631.293427][ T27] audit: type=1326 audit(1652156546.044:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12674 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3679c890e9 code=0x0 04:22:26 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) [ 631.348227][ T45] Bluetooth: hci7: Frame reassembly failed (-84) [ 631.367701][T12687] tipc: Invalid UDP bearer configuration [ 631.367737][T12687] tipc: Enabling of bearer rejected, failed to enable media 04:22:26 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000200)) 04:22:26 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 04:22:26 executing program 5: r0 = socket(0xa, 0x3, 0x8) bind$nfc_llcp(r0, &(0x7f00000005c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "b480944f5f3d2712c623112ce77939bbfb182c5be7e35b3c54437dcf7bb8bfccba787ef53ffcd29010a98646ed25e2228ab324bb012dae05c7c152ee055df1"}, 0x60) [ 633.372916][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 633.372937][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 633.380672][ T4770] Bluetooth: hci6: command 0x1003 tx timeout 04:22:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000300)={0xb0000018}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@mmap}, {@aname={'aname', 0x3d, '^\\'}}, {@msize={'msize', 0x3d, 0x80}}, {@cache_none}, {@cache_none}, {@nodevmap}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:28 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 04:22:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 04:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x5450, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x5452, 0x20004000) 04:22:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="0004616e733d666407000000"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = memfd_secret(0x80000) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x18100, 0x88) epoll_create1(0x0) (async) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80002000}) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) [ 633.453133][ T4770] Bluetooth: hci8: command 0x1003 tx timeout [ 633.459186][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:28 executing program 2: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) 04:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x930, 0x0, 0x12, r2, 0x0) 04:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x120) [ 633.546916][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 633.555207][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:28 executing program 2: futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 04:22:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000300)={0xb0000018}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@mmap}, {@aname={'aname', 0x3d, '^\\'}}, {@msize={'msize', 0x3d, 0x80}}, {@cache_none}, {@cache_none}, {@nodevmap}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000300)={0xb0000018}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@mmap}, {@aname={'aname', 0x3d, '^\\'}}, {@msize={'msize', 0x3d, 0x80}}, {@cache_none}, {@cache_none}, {@nodevmap}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="0004616e733d666407000000"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = memfd_secret(0x80000) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) r5 = openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x18100, 0x88) epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80002000}) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB="0004616e733d666407000000"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) memfd_secret(0x80000) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x18100, 0x88) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80002000}) (async) dup(r3) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r2}}) (async) getsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) (async) 04:22:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x10) 04:22:28 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000012c0), 0x0, 0x81) write$bt_hci(r0, &(0x7f0000001300)={0x1, @accept_phy_link={{0x436, 0x3}}}, 0x7) 04:22:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, &(0x7f0000000180), 0x4) [ 633.757135][ T45] Bluetooth: hci7: Frame reassembly failed (-84) [ 633.788468][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 633.795478][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:22:28 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002d00)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000002d40)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 04:22:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x800, 0x188) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:30 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0x10, 0x9b, 0x10, 0xbfd, 0x2, 0x103a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd9, 0xd, 0xac, 0x0, [], [{{0x9, 0x5, 0x0, 0x2, 0x8}}]}}]}}]}}, 0x0) 04:22:30 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) 04:22:30 executing program 2: mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) 04:22:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x6, 0x2, 0x7ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = dup(r1) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC=r4]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 635.612857][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 635.612853][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x1d, &(0x7f0000000000)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xe8) 04:22:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000300)={0xb0000018}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000002, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@mmap}, {@aname={'aname', 0x3d, '^\\'}}, {@msize={'msize', 0x3d, 0x80}}, {@cache_none}, {@cache_none}, {@nodevmap}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:30 executing program 5: syz_open_dev$loop(&(0x7f0000004940), 0x0, 0x0) 04:22:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) [ 635.743648][ T3645] Bluetooth: hci8: sending frame failed (-49) [ 635.750793][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 635.772944][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xa, 0x0, 0x10) 04:22:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="e0"], 0x10) 04:22:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x6, 0x2, 0x7ff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r1) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(r5) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC=r4]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 635.899996][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 635.907749][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 635.952793][ T4867] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 636.192749][ T4867] usb 1-1: Using ep0 maxpacket: 16 [ 636.313555][ T4867] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 636.482928][ T4867] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice=10.3a [ 636.492038][ T4867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.500279][ T4867] usb 1-1: Product: syz [ 636.504572][ T4867] usb 1-1: Manufacturer: syz [ 636.509247][ T4867] usb 1-1: SerialNumber: syz [ 636.515554][ T4867] usb 1-1: config 0 descriptor?? [ 636.532986][T12774] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 636.553411][ T4867] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 636.756775][ T4867] usb 1-1: USB disconnect, device number 7 04:22:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x800, 0x188) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x1) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) (rerun: 32) 04:22:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="437766646e6f3dbff8b394d53c90cc9d5c7dfb6963cc562b01d8d0679249c66fdeccfffb084e55b11657ae6e0975851fcff268b9bdb6cad6ffe065230330088b1ff3e0312fd9c10ee8f45a92ffb2", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r1, 0x9f83b000) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 04:22:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x6, 0x2, 0x7ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) r4 = dup(r1) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC=r4]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}}) (async) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000001c0)={0x6, 0x2, 0x7ff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000140)) (async) dup(r1) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(r5) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYRES32=r5, @ANYRESDEC=r4]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:32 executing program 5: pselect6(0x40, &(0x7f0000002480), 0x0, 0x0, &(0x7f0000002580), 0x0) 04:22:32 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180), 0x4) [ 637.773033][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 637.775110][ T22] Bluetooth: hci6: command 0x1003 tx timeout 04:22:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x6, 0x0, 0x10) 04:22:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x24840}, 0x48) 04:22:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000004c00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 04:22:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x800, 0x188) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:32 executing program 0: unshare(0x20400) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0) [ 637.887107][ T297] Bluetooth: hci6: Frame reassembly failed (-84) [ 637.890565][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 637.900404][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:32 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 04:22:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x5, &(0x7f0000000080)="b6", 0x1) [ 638.019651][T12825] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:22:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="437766646e6f3dbff8b394d53c90cc9d5c7dfb6963cc562b01d8d0679249c66fdeccfffb084e55b11657ae6e0975851fcff268b9bdb6cad6ffe065230330088b1ff3e0312fd9c10ee8f45a92ffb2", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r1, 0x9f83b000) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="437766646e6f3dbff8b394d53c90cc9d5c7dfb6963cc562b01d8d0679249c66fdeccfffb084e55b11657ae6e0975851fcff268b9bdb6cad6ffe065230330088b1ff3e0312fd9c10ee8f45a92ffb2", @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r1, 0x9f83b000) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter, 0x48) [ 638.154119][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 638.161820][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) 04:22:34 executing program 5: syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000100)) 04:22:34 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 04:22:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16]) ioctl$TIOCSETD(r0, 0x5437, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x4, 0x0) 04:22:34 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2400, &(0x7f0000000080)=""/9, 0x9}, 0x0) 04:22:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = dup(0xffffffffffffffff) (async) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (rerun: 64) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="437766646e6f3dbff8b394d53c90cc9d5c7dfb6963cc562b01d8d0679249c66fdeccfffb084e55b11657ae6e0975851fcff268b9bdb6cad6ffe065230330088b1ff3e0312fd9c10ee8f45a92ffb2", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r1, 0x9f83b000) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 639.932967][ T144] Bluetooth: hci6: command 0x1003 tx timeout [ 639.932974][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x31, 0x0, 0x10) 04:22:34 executing program 0: accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000003040), 0x0) getresuid(&(0x7f00000030c0), &(0x7f0000003100), 0x0) 04:22:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="c5") 04:22:34 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x52002, 0x0) 04:22:34 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "63dec4", 0x0, 0x2b, 0x0, @private0, @empty}}}}, 0x0) [ 640.100589][ T4631] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000004b80)={'veth0_to_hsr\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}}) [ 642.092855][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 642.102980][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) 04:22:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x4, &(0x7f0000000040)=ANY=[], 0x10) 04:22:36 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "63dec4", 0x3, 0x0, 0x0, @private0, @empty}}}}, 0x0) [ 642.173144][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 642.180749][ T144] Bluetooth: hci8: command 0x1003 tx timeout [ 642.183450][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16]) ioctl$TIOCSETD(r0, 0x5437, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x4, 0x0) (async) 04:22:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x5460, 0xfffffffffffffffb) 04:22:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:37 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40305828, 0x0) 04:22:37 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8993, &(0x7f0000000000)) 04:22:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x4) [ 642.293554][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf256900000008000e"], 0x60}}, 0x0) 04:22:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x9, &(0x7f0000000180), 0x4) 04:22:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) [ 642.414902][T12895] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:22:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) 04:22:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) 04:22:39 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8948, &(0x7f0000002d00)={'batadv_slave_1\x00'}) [ 644.332944][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 644.333004][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 644.341031][ T22] Bluetooth: hci7: command tx timeout [ 644.351198][ T22] Bluetooth: hci6: command 0x1003 tx timeout 04:22:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xa84000, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16]) ioctl$TIOCSETD(r0, 0x5437, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x4, 0x0) 04:22:39 executing program 2: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0) 04:22:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000004300)=[{{&(0x7f0000000300)=@isdn, 0x80, 0x0}}], 0x1, 0x0) 04:22:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000140)) [ 644.398501][T12911] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 644.422941][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:39 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:22:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x2d, 0x0, 0x10) 04:22:39 executing program 0: getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000100)="b6") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 644.553441][ T4607] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x10) 04:22:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, 0x0, 0x3021044, &(0x7f0000000180)=ANY=[@ANYBLOB="039387a18a3217f49afb2325e2995fbb215fd8c1ba44a022e7a6a4065324d1e090a3bbab7be73ea038f4fc426db9447689180d867f7684cad800028b11f4e0e4777224c53bc32135985ee6bd4dfd443e5359ff9a006ae1949ebd6df0f9484a7ace7f636191b48ebb2600293bbd3134beb1fe9dc338eec130fba7c636b1f6", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) ioctl$sock_bt_hci(r0, 0x8901, &(0x7f0000000000)) 04:22:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/dm_mirror', 0x100, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xfffffffffffff800, 0x8}) pipe(&(0x7f0000000100)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000000c0)) 04:22:41 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/vmstat\x00', 0x0, 0x0) 04:22:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="7c060000", @ANYRES16=r1, @ANYBLOB="450329bd7000fedbdf2504"], 0x67c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) [ 646.492807][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 646.503371][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (rerun: 64) 04:22:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x10, &(0x7f0000000040)=ANY=[], 0x10) 04:22:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) [ 646.572865][ T22] Bluetooth: hci7: command 0x1003 tx timeout [ 646.572979][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89f0, &(0x7f0000000100)) 04:22:41 executing program 0: syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 04:22:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/dm_mirror', 0x100, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xfffffffffffff800, 0x8}) pipe(&(0x7f0000000100)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) dup(r0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/dm_mirror', 0x100, 0x40) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xfffffffffffff800, 0x8}) (async) pipe(&(0x7f0000000100)) (async) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000000c0)) (async) 04:22:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) syz_open_pts(r1, 0x800) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 646.705519][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 646.712830][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, 0x0, 0x3021044, &(0x7f0000000180)=ANY=[@ANYBLOB="039387a18a3217f49afb2325e2995fbb215fd8c1ba44a022e7a6a4065324d1e090a3bbab7be73ea038f4fc426db9447689180d867f7684cad800028b11f4e0e4777224c53bc32135985ee6bd4dfd443e5359ff9a006ae1949ebd6df0f9484a7ace7f636191b48ebb2600293bbd3134beb1fe9dc338eec130fba7c636b1f6", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x3021044, &(0x7f0000000180)=ANY=[@ANYBLOB="039387a18a3217f49afb2325e2995fbb215fd8c1ba44a022e7a6a4065324d1e090a3bbab7be73ea038f4fc426db9447689180d867f7684cad800028b11f4e0e4777224c53bc32135985ee6bd4dfd443e5359ff9a006ae1949ebd6df0f9484a7ace7f636191b48ebb2600293bbd3134beb1fe9dc338eec130fba7c636b1f6", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x15) 04:22:41 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) [ 646.785366][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 646.793111][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = dup(0xffffffffffffffff) syz_open_pts(r1, 0x800) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:41 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, 0x0) 04:22:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/dm_mirror', 0x100, 0x40) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xfffffffffffff800, 0x8}) pipe(&(0x7f0000000100)) (async) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000000c0)) 04:22:41 executing program 5: syz_open_dev$vcsa(&(0x7f00000001c0), 0x0, 0x10841) [ 646.865279][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0xa, &(0x7f0000000040)=ANY=[], 0x10) 04:22:41 executing program 5: r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffd43, 0x0, 0x0) 04:22:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 04:22:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f0000000040)) [ 647.271554][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 647.278677][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:22:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x3021044, &(0x7f0000000180)=ANY=[@ANYBLOB="039387a18a3217f49afb2325e2995fbb215fd8c1ba44a022e7a6a4065324d1e090a3bbab7be73ea038f4fc426db9447689180d867f7684cad800028b11f4e0e4777224c53bc32135985ee6bd4dfd443e5359ff9a006ae1949ebd6df0f9484a7ace7f636191b48ebb2600293bbd3134beb1fe9dc338eec130fba7c636b1f6", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:43 executing program 2: r0 = socket(0xa, 0x3, 0x8) bind$nfc_llcp(r0, 0x0, 0x0) 04:22:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r0) [ 648.892856][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 648.893028][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 648.973012][ T4770] Bluetooth: hci7: command 0x1003 tx timeout [ 648.979142][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) syz_open_pts(r1, 0x800) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) syz_open_pts(r1, 0x800) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r2]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 04:22:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000180), 0x4) 04:22:43 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) [ 649.014265][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 649.021231][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 649.042456][ T27] audit: type=1326 audit(1652156563.784:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f894e4890e9 code=0x0 04:22:43 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) 04:22:43 executing program 2: openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) 04:22:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$inet_msfilter(r0, 0x6, 0x1e, &(0x7f0000000040)=ANY=[], 0x10) [ 649.111819][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xf) mount$9p_fd(0x0, 0x0, 0x0, 0x220000, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ef19468e04056aded51f1306a12f3084c1275c450d5e09d807d9022a92f2860ed291ac1bc08d0e83e7875baa066354f733ba61673fe5fdd31bcf7569d738592a9af5d06cf0f720565e073f8241016defab4d36f24c7d2311063d212062c9dd8e3c0bee26c19d29ef943a7c1e8065a22581b3b44d7aa8271552f57b13b644b62c08c712aa678b231876984deb7c1e3f38ece783dd1abaa87f9f2904a7ccc135fc9"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:43 executing program 0: memfd_create(&(0x7f0000000140)='\x05\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@hash}, {@euid_lt}]}}) 04:22:43 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000080)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "63dec4", 0x8, 0x0, 0x0, @private0, @empty, {[@fragment={0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x67}]}}}}}, 0x0) 04:22:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8941, &(0x7f0000000000)) [ 649.242540][T13052] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 649.295099][ T4631] Bluetooth: hci8: Frame reassembly failed (-84) [ 651.132871][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 651.132930][ T4617] Bluetooth: hci7: command 0x1003 tx timeout 04:22:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x50000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x307840, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x107, "40f3f6a042d18c79409eacddfa0a3577905fbfa654e017a2170f9d6ae5d47f27", 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x6112}, {r0, 0x81}, {r1, 0x10}, {r0, 0xd0a0}, {r0, 0x2}, {r0, 0x3040}, {r7, 0x408}, {r8, 0x18}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:45 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000031c0)) 04:22:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) 04:22:45 executing program 5: bpf$OBJ_GET_PROG(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='./file0\x00'}, 0x10) 04:22:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESOCT, @ANYRES32=r2]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 651.212853][ T4737] Bluetooth: hci6: command 0x1003 tx timeout [ 651.218929][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:46 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) [ 651.293861][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 651.301103][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 651.307669][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:22:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xf) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x220000, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ef19468e04056aded51f1306a12f3084c1275c450d5e09d807d9022a92f2860ed291ac1bc08d0e83e7875baa066354f733ba61673fe5fdd31bcf7569d738592a9af5d06cf0f720565e073f8241016defab4d36f24c7d2311063d212062c9dd8e3c0bee26c19d29ef943a7c1e8065a22581b3b44d7aa8271552f57b13b644b62c08c712aa678b231876984deb7c1e3f38ece783dd1abaa87f9f2904a7ccc135fc9"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x31, &(0x7f0000000040)=ANY=[@ANYBLOB="e0"], 0x10) [ 651.371689][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 651.378691][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:22:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e000e17c9017d333d1"], 0x10) 04:22:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0xf) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x220000, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ef19468e04056aded51f1306a12f3084c1275c450d5e09d807d9022a92f2860ed291ac1bc08d0e83e7875baa066354f733ba61673fe5fdd31bcf7569d738592a9af5d06cf0f720565e073f8241016defab4d36f24c7d2311063d212062c9dd8e3c0bee26c19d29ef943a7c1e8065a22581b3b44d7aa8271552f57b13b644b62c08c712aa678b231876984deb7c1e3f38ece783dd1abaa87f9f2904a7ccc135fc9"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x50000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x307840, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x107, "40f3f6a042d18c79409eacddfa0a3577905fbfa654e017a2170f9d6ae5d47f27", 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x6112}, {r0, 0x81}, {r1, 0x10}, {r0, 0xd0a0}, {r0, 0x2}, {r0, 0x3040}, {r7, 0x408}, {r8, 0x18}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x50000) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x307840, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x107, "40f3f6a042d18c79409eacddfa0a3577905fbfa654e017a2170f9d6ae5d47f27"}) (async) ppoll(&(0x7f0000000140)=[{r2, 0x6112}, {r0, 0x81}, {r1, 0x10}, {r0, 0xd0a0}, {r0, 0x2}, {r0, 0x3040}, {r7, 0x408}, {r8, 0x18}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:46 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1}, @call], &(0x7f0000000040)='GPL\x00', 0xa, 0xa3, &(0x7f0000000080)=""/163, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x24d0fb00, 0x9}, 0x10}, 0x80) 04:22:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000001140)={0x1f, 0xffffffffffffffff}, 0x6) 04:22:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x21, 0x0, 0x10) 04:22:46 executing program 5: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000003380), 0x2, 0x0) [ 651.584953][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 651.591855][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:22:46 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8995, &(0x7f0000002d00)={'batadv_slave_1\x00'}) 04:22:46 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x3ec}, 0x10}}, 0x0) 04:22:46 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:22:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 651.677846][ T4607] Bluetooth: hci8: Frame reassembly failed (-84) [ 651.768368][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) [ 651.992785][ T4617] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 652.392945][ T4617] usb 3-1: config 0 has no interfaces? [ 652.562884][ T4617] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.572175][ T4617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.580995][ T4617] usb 3-1: Product: syz [ 652.585483][ T4617] usb 3-1: Manufacturer: syz [ 652.590195][ T4617] usb 3-1: SerialNumber: syz [ 652.608447][ T4617] usb 3-1: config 0 descriptor?? [ 652.857434][T13115] UDC core: couldn't find an available UDC or it's busy: -16 [ 652.864998][T13115] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 652.873782][ T22] usb 3-1: USB disconnect, device number 9 04:22:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:48 executing program 0: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) 04:22:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x3c}}, 0x0) [ 653.692828][ T144] Bluetooth: hci8: command 0x1003 tx timeout [ 653.692871][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 653.699886][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 653.705248][ T4617] Bluetooth: hci7: command 0x1003 tx timeout 04:22:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept$unix(r0, 0x0, 0x0) 04:22:48 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) 04:22:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x50000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x307840, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x107, "40f3f6a042d18c79409eacddfa0a3577905fbfa654e017a2170f9d6ae5d47f27", 0xffffffffffffffff}) ppoll(&(0x7f0000000140)=[{r2, 0x6112}, {r0, 0x81}, {r1, 0x10}, {r0, 0xd0a0}, {r0, 0x2}, {r0, 0x3040}, {r7, 0x408}, {r8, 0x18}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x50000) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x307840, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x107, "40f3f6a042d18c79409eacddfa0a3577905fbfa654e017a2170f9d6ae5d47f27"}) (async) ppoll(&(0x7f0000000140)=[{r2, 0x6112}, {r0, 0x81}, {r1, 0x10}, {r0, 0xd0a0}, {r0, 0x2}, {r0, 0x3040}, {r7, 0x408}, {r8, 0x18}], 0x8, &(0x7f0000000180), &(0x7f00000001c0)={[0x3]}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x2, 0x1, @in6={0xa, 0x0, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 04:22:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="8f574241e7d1adbfbb642af391f853ff82bd65bcf7e4f9fd328c00e6965dbd0dab747d3696ade18b474b63fa468dc1ff7aec96732295d27cbf771860460898f515466663160562e2c3ec98cd15de3e0ae8c516cafc838f383696d1af6ebb107215525a66fca975008c521d6f47af5f1db69dc6120421e412d5bad486cc698fd500db5358cb0152bb454a7da03e67617078ab0f370021fca948cabde5e49ff458a4afab2c077f4d25960000000000f2e78bcef18a2dff55089faeac244b98585976037c027bd7e18c1a4f4012abdabd6d9ae119b23f03071ae65b06ba192cb44d02c8a6f94095bfb185c9d842762f798c3f01192687096b6432608fafec9fde27fc12bc6a84", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) (rerun: 64) [ 653.772911][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 653.772923][ T4617] Bluetooth: hci6: command 0x1003 tx timeout 04:22:48 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x4030582a, 0x20000009) 04:22:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x6, 0x9, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x10) 04:22:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffff0000}, 0x14) [ 653.879465][T13148] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 653.883277][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 653.914703][T13148] tipc: Invalid UDP bearer configuration [ 653.914748][T13148] tipc: Enabling of bearer rejected, failed to enable media [ 653.957178][ T297] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:50 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000300), &(0x7f00000003c0)=0x8) 04:22:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) dup2(r1, r0) 04:22:50 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0x8) [ 655.932827][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 655.932950][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 656.012854][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 656.013055][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 656.020458][ T22] Bluetooth: hci7: command 0x1003 tx timeout 04:22:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000380), &(0x7f0000000440)=0xb0) 04:22:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3476092414a414d5b5bad583d1854de870c54a48ed0004000084dbdc2ea7ad96d15845aa521b6b1ac042fd9d85af324d7dadda252cd17a7c05b25157fc3fdd8b90013b3726e9819d7db3360532982ead5d9ac7ef0ded5f4b0863aa6f7475e5bff8feac831f2052c58fae3b31f8dbb25eb4a3cd89", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240), 0x98) 04:22:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/157, 0x9d}, 0x83) 04:22:50 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) sendto(r0, &(0x7f0000000040)="cc4a37200b9356a63b77bf5363e5cbbed31c168aa21ecef36b927e0740fb7b014f5bc56e90d9f6b0b19b94ffbf36dc6a697754722a2fa0d06ab5f49cca18e0ecd96b12f3a53b0379babff83e28788db1b25e840f31799d95c66d898f027688cdd16c4cae47c7845fcd0cb4f582278cdb10d6ffcd4acdde3616fb3ff780fcf8345fbd5965f3d490c73cc00c0314facf6b9ca9c569c5ae8361b6", 0x99, 0x0, 0x0, 0x0) 04:22:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 04:22:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3476092414a414d5b5bad583d1854de870c54a48ed0004000084dbdc2ea7ad96d15845aa521b6b1ac042fd9d85af324d7dadda252cd17a7c05b25157fc3fdd8b90013b3726e9819d7db3360532982ead5d9ac7ef0ded5f4b0863aa6f7475e5bff8feac831f2052c58fae3b31f8dbb25eb4a3cd89", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3476092414a414d5b5bad583d1854de870c54a48ed0004000084dbdc2ea7ad96d15845aa521b6b1ac042fd9d85af324d7dadda252cd17a7c05b25157fc3fdd8b90013b3726e9819d7db3360532982ead5d9ac7ef0ded5f4b0863aa6f7475e5bff8feac831f2052c58fae3b31f8dbb25eb4a3cd89", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 656.217250][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x1c) r1 = dup2(r0, r0) connect$inet6(r1, &(0x7f0000000200)={0x1c, 0x1c, 0x2}, 0x1c) 04:22:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 04:22:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) [ 658.172924][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 658.183093][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3476092414a414d5b5bad583d1854de870c54a48ed0004000084dbdc2ea7ad96d15845aa521b6b1ac042fd9d85af324d7dadda252cd17a7c05b25157fc3fdd8b90013b3726e9819d7db3360532982ead5d9ac7ef0ded5f4b0863aa6f7475e5bff8feac831f2052c58fae3b31f8dbb25eb4a3cd89", @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3476092414a414d5b5bad583d1854de870c54a48ed0004000084dbdc2ea7ad96d15845aa521b6b1ac042fd9d85af324d7dadda252cd17a7c05b25157fc3fdd8b90013b3726e9819d7db3360532982ead5d9ac7ef0ded5f4b0863aa6f7475e5bff8feac831f2052c58fae3b31f8dbb25eb4a3cd89", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000000), 0x4) [ 658.252906][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r0, r0) dup2(r1, r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x900, &(0x7f0000000300), &(0x7f00000003c0)=0x8) 04:22:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=',', 0x1}], 0x1, &(0x7f00000014c0)=[@authinfo={0x10}], 0x10}, 0x0) 04:22:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}, @dstaddrv6={0x1c, 0x84, 0xa, @empty}, @dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}, @dstaddrv4={0x10, 0x84, 0x9, @multicast2}, @sndinfo={0x1c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @authinfo={0x10}, @sndinfo={0x1c}], 0xbc}, 0x0) [ 658.372794][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f00000002c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x14) 04:22:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 658.479197][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 658.519946][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 658.527418][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:22:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="100000008400000008"], 0x2c}, 0x0) 04:22:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), 0xb) 04:22:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000800)={&(0x7f00000004c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@prinfo={0x14}, @sndinfo={0x1c}, @prinfo={0x14}, @sndrcv={0x2c}, @prinfo={0x14}, @init={0x14}, @sndinfo={0x1c}], 0xb4}, 0x0) 04:22:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 660.412909][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 660.412988][ T3685] Bluetooth: hci6: command 0x1003 tx timeout 04:22:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:55 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x0, 0x1, "e6"}, 0x9) 04:22:55 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x100, &(0x7f0000000180), &(0x7f0000000280)=0xb0) [ 660.492952][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}], 0x38}, 0x0) 04:22:55 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r1) r3 = dup2(r2, r0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r4, &(0x7f0000000040)={0x10, 0x2}, 0x10) r5 = dup2(r4, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x902, &(0x7f0000000000)=r6, 0x4) [ 660.580057][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 660.589074][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 660.597342][ T45] Bluetooth: hci6: Frame reassembly failed (-84) 04:22:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f00000001c0)={'batadv_slave_0\x00'}) [ 660.639070][ T4607] Bluetooth: hci8: Frame reassembly failed (-84) [ 660.640673][ T45] Bluetooth: hci6: Frame reassembly failed (-84) [ 660.652318][ T4607] Bluetooth: hci8: Frame reassembly failed (-84) 04:22:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_PRIORITY, @RTA_UID]}, 0x2c}}, 0x0) 04:22:55 executing program 0: munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) clock_gettime(0x0, &(0x7f0000000340)) 04:22:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) syz_io_uring_setup(0x107a, &(0x7f0000000080)={0x0, 0xec21, 0x2, 0x1, 0xfe, 0x0, r1}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4190, &(0x7f0000000180)={0x0, 0x94d4, 0x1, 0x0, 0x19, 0x0, r1}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd_index=0x1, 0x400, &(0x7f0000000400)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/94, 0x5e}], 0x2, 0xb, 0x1, {0x0, r7}}, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:22:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891f, &(0x7f00000001c0)={'batadv_slave_0\x00'}) [ 660.764399][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 660.794821][T13255] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 660.845908][ T45] Bluetooth: hci7: Frame reassembly failed (-84) 04:22:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xac0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x8, '\x00', @b}) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:57 executing program 5: r0 = gettid() clock_gettime(0x0, &(0x7f0000001900)) rt_sigtimedwait(&(0x7f0000001780), 0x0, 0x0, 0x8) tkill(r0, 0xb) [ 662.652855][ T3685] Bluetooth: hci8: command 0x1003 tx timeout [ 662.655762][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 662.658907][ T3685] Bluetooth: hci6: command 0x1003 tx timeout [ 662.665413][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/class/devcoredump', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 04:22:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x31, &(0x7f0000000040)=ANY=[], 0x10) 04:22:57 executing program 5: syz_clone3(&(0x7f0000000380)={0x4080c400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:22:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x5, 0x7, 0xffffffff}, 0x48) 04:22:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000005c0)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 662.788643][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) [ 662.843856][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 662.851859][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:22:57 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x80002001, 0x0) [ 662.892912][ T3687] Bluetooth: hci7: command 0x1003 tx timeout [ 662.899005][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:22:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS2(r0, 0xc0285443, 0x0) 04:22:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) syz_io_uring_setup(0x107a, &(0x7f0000000080)={0x0, 0xec21, 0x2, 0x1, 0xfe, 0x0, r1}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4190, &(0x7f0000000180)={0x0, 0x94d4, 0x1, 0x0, 0x19, 0x0, r1}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd_index=0x1, 0x400, &(0x7f0000000400)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/94, 0x5e}], 0x2, 0xb, 0x1, {0x0, r7}}, 0x7) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 662.950837][T13314] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:22:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) open(&(0x7f0000000080)='./file0\x00', 0x24a102, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 663.065341][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 663.072296][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 663.100460][ T3636] Bluetooth: hci8: sending frame failed (-49) [ 663.107529][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:22:59 executing program 1: r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0x2000000}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/621]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r2}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {r2}, {r2}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r2}, {r2}, {r2, r4}, {}, {r3, r4}, {r3}, {r3}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r2}, {}, {}, {r3, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {r2}, {r3}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3}, {r3}, {0x0, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {}, {}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {}, {r3}, {r3}, {r3, r4}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {r2}, {r3, r4}, {r2}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r2}], 0x8, "a3fa374174c840"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={r3, 0xfffffffffffffbff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rFd']) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x8, 0x3, 0x7ff}) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 664.812831][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 664.812904][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:22:59 executing program 5: prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:22:59 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x101}) 04:22:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, 0x0) 04:22:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) open(&(0x7f0000000080)='./file0\x00', 0x24a102, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) open(&(0x7f0000000080)='./file0\x00', 0x24a102, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup(0xffffffffffffffff) syz_io_uring_setup(0x107a, &(0x7f0000000080)={0x0, 0xec21, 0x2, 0x1, 0xfe, 0x0, r1}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x4190, &(0x7f0000000180)={0x0, 0x94d4, 0x1, 0x0, 0x19, 0x0, r1}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd_index=0x1, 0x400, &(0x7f0000000400)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/94, 0x5e}], 0x2, 0xb, 0x1, {0x0, r7}}, 0x7) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) syz_io_uring_setup(0x107a, &(0x7f0000000080)={0x0, 0xec21, 0x2, 0x1, 0xfe, 0x0, r1}, &(0x7f0000001000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x4190, &(0x7f0000000180)={0x0, 0x94d4, 0x1, 0x0, 0x19, 0x0, r1}, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x0, @fd_index=0x1, 0x400, &(0x7f0000000400)=[{&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/94, 0x5e}], 0x2, 0xb, 0x1, {0x0, r7}}, 0x7) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:22:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8935, 0x0) 04:22:59 executing program 0: syz_clone(0x6282b500, 0x0, 0x0, 0x0, 0x0, 0x0) 04:22:59 executing program 2: syz_clone(0x1804c180, 0x0, 0x0, 0x0, 0x0, 0x0) 04:22:59 executing program 5: mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x0) [ 664.962381][ T3747] Bluetooth: hci8: Frame reassembly failed (-84) [ 664.983238][T13375] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:22:59 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0xea}, 0x0, &(0x7f0000000200), 0x0) 04:22:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) [ 666.903001][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:23:01 executing program 1: r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0x2000000}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/621]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r2}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {r2}, {r2}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r2}, {r2}, {r2, r4}, {}, {r3, r4}, {r3}, {r3}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r2}, {}, {}, {r3, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {r2}, {r3}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3}, {r3}, {0x0, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {}, {}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {}, {r3}, {r3}, {r3, r4}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {r2}, {r3, r4}, {r2}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r2}], 0x8, "a3fa374174c840"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={r3, 0xfffffffffffffbff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rFd']) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x8, 0x3, 0x7ff}) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000000c0)) ioctl$TIOCSETD(r5, 0x5437, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0x2000000}) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"/621]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r2}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {r2}, {r2}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r2}, {r2}, {r2, r4}, {}, {r3, r4}, {r3}, {r3}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r2}, {}, {}, {r3, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {r2}, {r3}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3}, {r3}, {0x0, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {}, {}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {}, {r3}, {r3}, {r3, r4}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {r2}, {r3, r4}, {r2}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r2}], 0x8, "a3fa374174c840"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={r3, 0xfffffffffffffbff}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rFd']) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x8, 0x3, 0x7ff}) (async) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r5, 0x5437, 0x0) (async) [ 666.972879][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 666.972915][ T3636] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 666.980419][ T3687] Bluetooth: hci8: command 0x1003 tx timeout 04:23:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 04:23:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1600bd7d, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x0, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'vxcan1\x00', 'rose0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@dev, @remote, 0x0, 0x0, 'macvlan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "b73587cc3aafd6beb24479629e994ca494a0743ba987192b29b2c5b17f76843ea8b6ef24fd99d27a230a8bf130191c372e2f56c7e0ec592f77775ca172539454"}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 04:23:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x88, 0x0, 0x0, 0x0) 04:23:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x20, 0x5, 0x1, 0x5, 0x1a, "a1214b1321a9e10e96c37e21a2e6fedbbd5c06"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7756b53619e0368a6c546f3d000000000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) open(&(0x7f0000000080)='./file0\x00', 0x24a102, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001180)={'ip6gre0\x00', 0x0}) 04:23:01 executing program 0: shmget(0x2, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 04:23:01 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) 04:23:01 executing program 0: io_setup(0x8ee8, &(0x7f0000000000)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "20c3f61f6ca0b584c03dfac8c5cfc909baa62a"}) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 04:23:01 executing program 5: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) 04:23:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x204c0, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000140)) dup(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 667.190763][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 667.211991][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) [ 667.238044][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 667.245669][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 669.212997][ T4770] Bluetooth: hci7: command 0x1003 tx timeout [ 669.213008][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 669.220627][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 669.225505][ T3685] Bluetooth: hci6: command 0x1003 tx timeout 04:23:04 executing program 1: r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0x2000000}) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0900000000000000ff03000010000000040000000000000006000000ad3900000075673af577719cc467d4e9d3ce0000000500000000000000280d64000000000000000000000000000000000007000000011400000000800000000000000000001a00000000000000400000000000000000000000000000005c19966e000000000000000004000000000000000000000000000006000000a1db3bc4020000000000000005000000000000000000000000000008000000000000000001000000ff00000000000000000000000000000000000000ff0300000000000001000000000000000000000000008c00400000000000000000000000000001000000000000000400000000000000a100000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000e9ff0800000000000000000000000000000000000000000000000000070000000000000000000000000000000000002eb0203721cc82bb42658507276146ca17edeb6c6add775f877fc7113eddf58ca6b1ce6b1b36fd28f2a5f1f7aa0ded96338aa456578912a7b8e62f9af59fe07d6a6274e31f9e5dbbd51c84bc34f8a644daf1546a27a24b06865a36db50ea4b0a7050c587e072759d624dbfec97fa144b0cbd591fdf233cf6d7a31fa357dc8d40fea7721a9789e2e646ede2cc53912ab35607a5593eb54cf950fd3a53695b54306b8f7303987e65f25084ad5291b71acdd21ffda2028a227a669d5d2bc8f27b41be9c4d6716e15caff60c599c4960b713331827fe6ab96ae5a949906755297cb22304d8d72d3b9ff679b7dd58ae7ea703a8367d0300"/621]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r2}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {}, {}, {r2}, {}, {0x0, r4}, {r2, r4}, {}, {r3, r4}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r2}, {}, {r3, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {0x0, r4}, {r3}, {r2, r4}, {r2}, {r2}, {}, {r2, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {r3}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r2}, {r2}, {r2, r4}, {}, {r3, r4}, {r3}, {r3}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {r3}, {r2}, {}, {}, {r3, r4}, {r3, r4}, {r3}, {}, {r3, r4}, {r2}, {r3}, {r3}, {r3, r4}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {r3}, {r3}, {r3, r4}, {0x0, r4}, {0x0, r4}, {r3}, {r3}, {r2, r4}, {0x0, r4}, {r3}, {}, {r3}, {r3}, {0x0, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {}, {}, {r2}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3, r4}, {}, {r3}, {r3}, {r3, r4}, {r2}, {r2}, {0x0, r4}, {r3}, {}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r2}, {r3}, {r2}, {r2, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {r3, r4}, {r3, r4}, {}, {0x0, r4}, {r2}, {}, {r2}, {}, {r2}, {r3}, {}, {r2}, {}, {r2, r4}, {}, {r2}, {r3, r4}, {r2}, {r3}, {}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r2}], 0x8, "a3fa374174c840"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={r3, 0xfffffffffffffbff}) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rFd']) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r6, 0x8, 0x3, 0x7ff}) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r5, 0x5437, 0x0) 04:23:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xb, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0x0, 0x0, 0x200, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'vxcan1\x00', 'rose0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@dev, @remote, 0x0, 0x0, 'macvlan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "b73587cc3aafd6beb24479629e994ca494a0743ba987192b29b2c5b17f76843ea8b6ef24fd99d27a230a8bf130191c372e2f56c7e0ec592f77775ca172539454"}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 04:23:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x204c0, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) (async) ioctl$TIOCSETD(r5, 0x5437, 0x0) 04:23:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TCSBRK(r0, 0x89a1, 0x20000000) 04:23:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1, &(0x7f0000000b40)=@raw=[@func], &(0x7f0000000b80)='GPL\x00', 0x3, 0xe6, &(0x7f0000000bc0)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:23:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x20, 0x5, 0x1, 0x5, 0x1a, "a1214b1321a9e10e96c37e21a2e6fedbbd5c06"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7756b53619e0368a6c546f3d000000000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 04:23:04 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48c283, 0x0) 04:23:04 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TCSBRK(r0, 0x891a, 0x0) [ 669.324741][ T8] Bluetooth: hci6: Frame reassembly failed (-84) 04:23:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x20, 0x5, 0x1, 0x5, 0x1a, "a1214b1321a9e10e96c37e21a2e6fedbbd5c06"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7756b53619e0368a6c546f3d000000000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) dup(r2) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000200)={0x20, 0x5, 0x1, 0x5, 0x1a, "a1214b1321a9e10e96c37e21a2e6fedbbd5c06"}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7756b53619e0368a6c546f3d000000000000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 669.384411][T13441] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 669.394815][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:23:04 executing program 2: clock_settime(0xf5c943cfce73c098, &(0x7f0000000040)) 04:23:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x0, 0x0, 0x0, 0x1002}, 0x48) [ 669.473229][ T3649] Bluetooth: hci8: sending frame failed (-49) [ 669.480525][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 671.372880][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 671.372991][ T144] Bluetooth: hci6: command 0x1003 tx timeout 04:23:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='t,rfd\x00@\x00\x00\x00\x00\x00']) ioctl$TIOCSETD(r0, 0x5437, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0xc001, 0x3ff) 04:23:06 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_pts(r0, 0x0) 04:23:06 executing program 2: syz_mount_image$iso9660(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x200, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@session}, {@dmode}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@mode}]}) 04:23:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000001) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x204c0, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX]) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB]) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async, rerun: 64) dup(0xffffffffffffffff) (rerun: 64) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 671.462931][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:23:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000001) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000001) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:23:06 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 04:23:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="efc5f596c938a58923bd42fac98edd037c48ba1eff5caba6b913a246d60be49802021b7a9ce4e733ef7032df1fb785fab093e9010220aa0d5cff337adcd88400d8a6855b9eafb768f121a0fac4d83fda2cece00000000000009089d624017b167c8057a1292339777e36aea677ae8103706cb20000000000000000"]) r1 = epoll_create1(0x0) open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000001c0)) dup(r1) fcntl$setpipe(r1, 0x407, 0x7) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) [ 671.530237][T13483] loop2: detected capacity change from 0 to 1 04:23:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) [ 671.590101][T13483] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 04:23:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x4, 0x4) 04:23:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) [ 671.707852][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:23:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='t,rfd\x00@\x00\x00\x00\x00\x00']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0xc001, 0x3ff) 04:23:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000001) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000001) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:23:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 04:23:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x5451, 0x0) [ 673.532947][ T3685] Bluetooth: hci6: command 0x1003 tx timeout [ 673.546607][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:23:08 executing program 2: socketpair(0x1, 0x0, 0x6, &(0x7f0000000100)) 04:23:08 executing program 2: bpf$MAP_CREATE(0x6, &(0x7f00000016c0)=@bloom_filter, 0x48) 04:23:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) [ 673.603530][ T3645] Bluetooth: hci6: sending frame failed (-49) [ 673.610391][ T3636] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 673.663634][T13516] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:23:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="efc5f596c938a58923bd42fac98edd037c48ba1eff5caba6b913a246d60be49802021b7a9ce4e733ef7032df1fb785fab093e9010220aa0d5cff337adcd88400d8a6855b9eafb768f121a0fac4d83fda2cece00000000000009089d624017b167c8057a1292339777e36aea677ae8103706cb20000000000000000"]) r1 = epoll_create1(0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000001c0)) dup(r1) (async) fcntl$setpipe(r1, 0x407, 0x7) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) 04:23:08 executing program 2: pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 04:23:08 executing program 0: pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) 04:23:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='t,rfd\x00@\x00\x00\x00\x00\x00']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0xc001, 0x3ff) 04:23:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r1, 0x12, @unused=[0x0, 0x1ff, 0x1, 0x9], @subvolid=0x5}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1847cb0d086bbffa8b4f100070003947f6e800000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x400, 0x42}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r2]}, 0x80) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x200000, 0x31}, 0x18) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) r8 = syz_open_dev$mouse(&(0x7f0000000300), 0x9de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x400, 0xe4, &(0x7f0000000100)=""/228, 0x41000, 0x12, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r3, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) [ 673.772975][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 673.773158][ T144] Bluetooth: hci7: command 0x1003 tx timeout 04:23:08 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 04:23:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 04:23:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:08 executing program 0: faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 673.876033][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 673.903227][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:23:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 04:23:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') read$FUSE(r0, 0x0, 0x0) 04:23:10 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/51) 04:23:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:10 executing program 0: msgget(0x0, 0x200) 04:23:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r4, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84020, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66f9f7ee9400"]) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x400, 0x3}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) [ 675.932809][ T3685] Bluetooth: hci8: command 0x1003 tx timeout [ 675.932886][ T3645] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 675.939009][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 675.945706][ T3636] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:23:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r1, 0x12, @unused=[0x0, 0x1ff, 0x1, 0x9], @subvolid=0x5}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1847cb0d086bbffa8b4f100070003947f6e800000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x400, 0x42}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r2]}, 0x80) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x200000, 0x31}, 0x18) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) r8 = syz_open_dev$mouse(&(0x7f0000000300), 0x9de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x400, 0xe4, &(0x7f0000000100)=""/228, 0x41000, 0x12, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r3, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r1, 0x12, @unused=[0x0, 0x1ff, 0x1, 0x9], @subvolid=0x5}) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1847cb0d086bbffa8b4f100070003947f6e800000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x400, 0x42}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r2]}, 0x80) (async) openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x200000, 0x31}, 0x18) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) (async) dup(r5) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) (async) syz_open_dev$mouse(&(0x7f0000000300), 0x9de, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x400, 0xe4, &(0x7f0000000100)=""/228, 0x41000, 0x12, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r3, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8]}, 0x80) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:23:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="efc5f596c938a58923bd42fac98edd037c48ba1eff5caba6b913a246d60be49802021b7a9ce4e733ef7032df1fb785fab093e9010220aa0d5cff337adcd88400d8a6855b9eafb768f121a0fac4d83fda2cece00000000000009089d624017b167c8057a1292339777e36aea677ae8103706cb20000000000000000"]) r1 = epoll_create1(0x0) open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000001c0)) dup(r1) fcntl$setpipe(r1, 0x407, 0x7) ioctl$TIOCSETD(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYBLOB="efc5f596c938a58923bd42fac98edd037c48ba1eff5caba6b913a246d60be49802021b7a9ce4e733ef7032df1fb785fab093e9010220aa0d5cff337adcd88400d8a6855b9eafb768f121a0fac4d83fda2cece00000000000009089d624017b167c8057a1292339777e36aea677ae8103706cb20000000000000000"]) (async) epoll_create1(0x0) (async) open(&(0x7f0000000280)='./file0\x00', 0x80000, 0xa0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$unix(0x1, 0x5, 0x0) (async) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000001c0)) (async) dup(r1) (async) fcntl$setpipe(r1, 0x407, 0x7) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) (async) 04:23:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44014, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:23:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 04:23:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 04:23:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) (async) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$KDADDIO(r4, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84020, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66f9f7ee9400"]) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x400, 0x3}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) [ 676.075087][ T4607] Bluetooth: hci6: Frame reassembly failed (-84) 04:23:10 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x108) 04:23:10 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 04:23:10 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, 0x0) 04:23:11 executing program 2: set_mempolicy(0x4002, &(0x7f0000000000)=0x24, 0x4da) [ 676.191111][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 676.198265][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:23:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r1, 0x12, @unused=[0x0, 0x1ff, 0x1, 0x9], @subvolid=0x5}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1847cb0d086bbffa8b4f100070003947f6e800000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x400, 0x42}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r2]}, 0x80) (async) r3 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x200000, 0x31}, 0x18) (async) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r8 = syz_open_dev$mouse(&(0x7f0000000300), 0x9de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0x400, 0xe4, &(0x7f0000000100)=""/228, 0x41000, 0x12, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r3, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 676.463678][ T3636] Bluetooth: hci7: sending frame failed (-49) [ 676.470661][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:23:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)) dup(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc72582beb7d44cb501049504000000000000007745fe78d0e303361d03b9736a27e40a38f2d8c1c830a04ef5720b807361d9f86a2913", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_pts(r5, 0x181000) syz_open_pts(r0, 0x20200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000240)=ANY=[@ANYBLOB="c65efeaa40b1c3d6faeade34518af0aa424272321628eca1d006889b28d4e0965b223f19ce9bd411d520b4833e7678070ceeb1ad649072c3814ed995cf21fcb5657fcd1b59267ca445c8a3e9a3ffa117e83e81252aa0cfac8bb81f93d88f5be49900477d57f2589ffcbe4703ee427cc9543c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84020, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66f9f7ee9400"]) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x400, 0x3}}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) 04:23:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0xee00) 04:23:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:12 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x100000000}) 04:23:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1ac601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000002c80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002d00)=""/201, 0xc9}, {&(0x7f0000002e00)=""/239, 0xef}, {&(0x7f0000002f00)=""/78, 0x4e}, {&(0x7f0000002f80)=""/214, 0xd6}], 0x4, &(0x7f00000031c0)}, 0x0) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d1579cb9a4b5ec1703706498da306e4397a6a1fa3a32c3889695212da61bbd11834245823b3f9ef48a5de784033620e27259fb22308656f5a84a676a0cdb35679f03ce1a202d6427c5763c93e820f138ae855422f46e53ec5e8d6635b8bd9567adc261b8c3e714881569f0cf1329e7b6507b379fcee4d61c495034ac92a3ae4b7452d7c4331af774db5d67ca1820e533051b5773f00a7a573a49545b8bff7ad179957775ea907da49460025e0c6bcccdde840d475eb916d1d7b62d0db517f5db8fbb1ad87b979ee85d53cff624b3a740144fd245b22b7e4f29fbe0", 0xdb}, {&(0x7f0000000480)="c3566fa5a286e51971d302628ac045000700c634eccd12f0937b2eced8268ad7c8bfb8a637fbe5b651f1b3c8e14a59d912c30d013e2fe6", 0x37}, {&(0x7f00000001c0)="5db8e79b6c4cb672babd512727a84c4a1dc2a40be013369870228662cb6db4f1ad87e0c7b46ea24640e7c57a", 0x2c}, {&(0x7f0000000200)="5f369289769f48559fc92cb0ebbb95967369aa462f8f79da55a243068be22a362dd564f981088dcbc6c73db318bf09003f055f753140bcda3cf7f8e0c2e0eacba68bb6a75c10649de401fff4c85f2a663c6590a8579f8714bfa4c874d71eda5721da4ed03178d53e19ad83255e69a80f771267a8a074d5cd9f87167c9af57bb9125e013b1d702d939397bdcfb730572707285369a47ddbe357a1901279ddf287fb30397bb9d35839420e9fda43d1993a64efb1ce8b9e84ff60be708ca06cdb77fed4cd1c0d8f8038cd7f99a7f9db90d465776566a7ec75bb4b", 0xd9}, {&(0x7f0000000640)="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", 0xdea}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="280000000000000012010000060000007338e809a37ef107dc51a6efe8408e20e4efe68540761d0010010000000000001401000004000000cbb3ebddd75fbeef9fccb3cff65826569b1518726618a432d230005184beddd4b501cc968d66ffeb6657d91543b335a342b586d7c85370aecf230263ed9677c7317fd57b5ca81ded22795dfcc3552f497ee269737e4d343626ee19df28ea8948c38447d7e719d2c1481a76468d2eb98798c213114ec2df4adfe149928218ffa7ec746199c50e39d0d430739bf4cfdd3a8dedd4810b9f55b61bc1811b8b4ccfdbad4be269b17884d5dc6add776f95264b86b5b5c62fe3d6fd41ef98ac634097bcb494196696c551be2d33f3674e529fcb808b7c7058a0e90cdba844f612231b2ca41be0228206cd6d486bc2245fedd6db30853fe50addfdd07a04f68b1a0000002000000000000000110100005a000000a80e6fd559b262bfdb2d0000000000000801"], 0x260}, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 678.092880][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:23:12 executing program 0: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 04:23:12 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1}]}}, 0x0, 0x2a}, 0x20) 04:23:12 executing program 0: bpf$BPF_PROG_TEST_RUN(0x6, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x48) 04:23:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x4, 0x0, 0x15, 0x3}, 0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 678.237265][ T3747] Bluetooth: hci6: Frame reassembly failed (-84) [ 678.330110][ T4631] Bluetooth: hci7: Frame reassembly failed (-84) 04:23:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)) dup(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc72582beb7d44cb501049504000000000000007745fe78d0e303361d03b9736a27e40a38f2d8c1c830a04ef5720b807361d9f86a2913", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_pts(r5, 0x181000) syz_open_pts(r0, 0x20200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000240)=ANY=[@ANYBLOB="c65efeaa40b1c3d6faeade34518af0aa424272321628eca1d006889b28d4e0965b223f19ce9bd411d520b4833e7678070ceeb1ad649072c3814ed995cf21fcb5657fcd1b59267ca445c8a3e9a3ffa117e83e81252aa0cfac8bb81f93d88f5be49900477d57f2589ffcbe4703ee427cc9543c"]) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc72582beb7d44cb501049504000000000000007745fe78d0e303361d03b9736a27e40a38f2d8c1c830a04ef5720b807361d9f86a2913", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) syz_open_pts(r5, 0x181000) (async) syz_open_pts(r0, 0x20200) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000240)=ANY=[@ANYBLOB="c65efeaa40b1c3d6faeade34518af0aa424272321628eca1d006889b28d4e0965b223f19ce9bd411d520b4833e7678070ceeb1ad649072c3814ed995cf21fcb5657fcd1b59267ca445c8a3e9a3ffa117e83e81252aa0cfac8bb81f93d88f5be49900477d57f2589ffcbe4703ee427cc9543c"]) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) 04:23:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1ac601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000002c80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002d00)=""/201, 0xc9}, {&(0x7f0000002e00)=""/239, 0xef}, {&(0x7f0000002f00)=""/78, 0x4e}, {&(0x7f0000002f80)=""/214, 0xd6}], 0x4, &(0x7f00000031c0)}, 0x0) (async) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d1579cb9a4b5ec1703706498da306e4397a6a1fa3a32c3889695212da61bbd11834245823b3f9ef48a5de784033620e27259fb22308656f5a84a676a0cdb35679f03ce1a202d6427c5763c93e820f138ae855422f46e53ec5e8d6635b8bd9567adc261b8c3e714881569f0cf1329e7b6507b379fcee4d61c495034ac92a3ae4b7452d7c4331af774db5d67ca1820e533051b5773f00a7a573a49545b8bff7ad179957775ea907da49460025e0c6bcccdde840d475eb916d1d7b62d0db517f5db8fbb1ad87b979ee85d53cff624b3a740144fd245b22b7e4f29fbe0", 0xdb}, {&(0x7f0000000480)="c3566fa5a286e51971d302628ac045000700c634eccd12f0937b2eced8268ad7c8bfb8a637fbe5b651f1b3c8e14a59d912c30d013e2fe6", 0x37}, {&(0x7f00000001c0)="5db8e79b6c4cb672babd512727a84c4a1dc2a40be013369870228662cb6db4f1ad87e0c7b46ea24640e7c57a", 0x2c}, {&(0x7f0000000200)="5f369289769f48559fc92cb0ebbb95967369aa462f8f79da55a243068be22a362dd564f981088dcbc6c73db318bf09003f055f753140bcda3cf7f8e0c2e0eacba68bb6a75c10649de401fff4c85f2a663c6590a8579f8714bfa4c874d71eda5721da4ed03178d53e19ad83255e69a80f771267a8a074d5cd9f87167c9af57bb9125e013b1d702d939397bdcfb730572707285369a47ddbe357a1901279ddf287fb30397bb9d35839420e9fda43d1993a64efb1ce8b9e84ff60be708ca06cdb77fed4cd1c0d8f8038cd7f99a7f9db90d465776566a7ec75bb4b", 0xd9}, {&(0x7f0000000640)="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", 0xdea}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="280000000000000012010000060000007338e809a37ef107dc51a6efe8408e20e4efe68540761d0010010000000000001401000004000000cbb3ebddd75fbeef9fccb3cff65826569b1518726618a432d230005184beddd4b501cc968d66ffeb6657d91543b335a342b586d7c85370aecf230263ed9677c7317fd57b5ca81ded22795dfcc3552f497ee269737e4d343626ee19df28ea8948c38447d7e719d2c1481a76468d2eb98798c213114ec2df4adfe149928218ffa7ec746199c50e39d0d430739bf4cfdd3a8dedd4810b9f55b61bc1811b8b4ccfdbad4be269b17884d5dc6add776f95264b86b5b5c62fe3d6fd41ef98ac634097bcb494196696c551be2d33f3674e529fcb808b7c7058a0e90cdba844f612231b2ca41be0228206cd6d486bc2245fedd6db30853fe50addfdd07a04f68b1a0000002000000000000000110100005a000000a80e6fd559b262bfdb2d0000000000000801"], 0x260}, 0x0) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x604, 0xffffffffffffffff, 0x6}, 0x48) 04:23:15 executing program 0: bpf$BPF_PROG_TEST_RUN(0x1e, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 680.252866][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 680.253049][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:23:15 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) 04:23:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x4, 0x0, 0x15, 0x3}, 0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:15 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r1, r0, 0x0) [ 680.334171][ T22] Bluetooth: hci7: command 0x1003 tx timeout [ 680.340311][ T3645] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:23:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 04:23:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1ac601, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000002c80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002d00)=""/201, 0xc9}, {&(0x7f0000002e00)=""/239, 0xef}, {&(0x7f0000002f00)=""/78, 0x4e}, {&(0x7f0000002f80)=""/214, 0xd6}], 0x4, &(0x7f00000031c0)}, 0x0) (async) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d1579cb9a4b5ec1703706498da306e4397a6a1fa3a32c3889695212da61bbd11834245823b3f9ef48a5de784033620e27259fb22308656f5a84a676a0cdb35679f03ce1a202d6427c5763c93e820f138ae855422f46e53ec5e8d6635b8bd9567adc261b8c3e714881569f0cf1329e7b6507b379fcee4d61c495034ac92a3ae4b7452d7c4331af774db5d67ca1820e533051b5773f00a7a573a49545b8bff7ad179957775ea907da49460025e0c6bcccdde840d475eb916d1d7b62d0db517f5db8fbb1ad87b979ee85d53cff624b3a740144fd245b22b7e4f29fbe0", 0xdb}, {&(0x7f0000000480)="c3566fa5a286e51971d302628ac045000700c634eccd12f0937b2eced8268ad7c8bfb8a637fbe5b651f1b3c8e14a59d912c30d013e2fe6", 0x37}, {&(0x7f00000001c0)="5db8e79b6c4cb672babd512727a84c4a1dc2a40be013369870228662cb6db4f1ad87e0c7b46ea24640e7c57a", 0x2c}, {&(0x7f0000000200)="5f369289769f48559fc92cb0ebbb95967369aa462f8f79da55a243068be22a362dd564f981088dcbc6c73db318bf09003f055f753140bcda3cf7f8e0c2e0eacba68bb6a75c10649de401fff4c85f2a663c6590a8579f8714bfa4c874d71eda5721da4ed03178d53e19ad83255e69a80f771267a8a074d5cd9f87167c9af57bb9125e013b1d702d939397bdcfb730572707285369a47ddbe357a1901279ddf287fb30397bb9d35839420e9fda43d1993a64efb1ce8b9e84ff60be708ca06cdb77fed4cd1c0d8f8038cd7f99a7f9db90d465776566a7ec75bb4b", 0xd9}, {&(0x7f0000000640)="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", 0xdea}], 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x260}, 0x0) (async) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:15 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r0, 0x0) 04:23:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = epoll_create1(0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)) (async) dup(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000100e}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000140)) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc72582beb7d44cb501049504000000000000007745fe78d0e303361d03b9736a27e40a38f2d8c1c830a04ef5720b807361d9f86a2913", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) syz_open_pts(r5, 0x181000) syz_open_pts(r0, 0x20200) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000240)=ANY=[@ANYBLOB="c65efeaa40b1c3d6faeade34518af0aa424272321628eca1d006889b28d4e0965b223f19ce9bd411d520b4833e7678070ceeb1ad649072c3814ed995cf21fcb5657fcd1b59267ca445c8a3e9a3ffa117e83e81252aa0cfac8bb81f93d88f5be49900477d57f2589ffcbe4703ee427cc9543c"]) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x88100) 04:23:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x4, 0x0, 0x15, 0x3}, 0x5) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x8) (async, rerun: 32) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x2a84000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd']) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:17 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) 04:23:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 682.412814][ T3687] Bluetooth: hci6: command 0x1003 tx timeout [ 682.422854][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:23:17 executing program 0: r0 = epoll_create(0x6) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc3) 04:23:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000380)=""/240, 0x2e, 0xf0, 0x1}, 0x20) 04:23:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) 04:23:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x110000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@uid_lt={'uid<', r1}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x280006, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESHEX]) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x8, 0x10, "1cc5d809169b19f214ebd4d5b6948ca411b29f"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000100e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1304011, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash}, {@measure}, {@permit_directio}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a84000, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1]) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 682.551109][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 682.558206][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 682.566987][T13710] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:23:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xfa3}, 0x17) 04:23:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) dup(0xffffffffffffffff) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) (async) [ 682.644806][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 682.651866][ T3645] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 682.670486][ T3747] Bluetooth: hci7: Frame reassembly failed (-84) 04:23:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xfa3}, 0x17) 04:23:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) [ 682.758896][ T3636] Bluetooth: hci6: sending frame failed (-49) [ 682.766579][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:23:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x110000, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@uid_lt={'uid<', r1}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x280006, &(0x7f00000000c0)=ANY=[]) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5437, 0x0) 04:23:17 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000b00)=""/246, 0x26, 0xf6, 0x1}, 0x20) close(r0) 04:23:17 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000b00)=""/246, 0x26, 0xf6, 0x1}, 0x20) close(r0) [ 682.914662][T13742] INFO: trying to register non-static key. [ 682.920486][T13742] The code is fine but needs lockdep annotation, or maybe [ 682.927600][T13742] you didn't initialize this object before use? [ 682.933833][T13742] turning off the locking correctness validator. [ 682.940156][T13742] CPU: 0 PID: 13742 Comm: syz-executor.1 Not tainted 5.18.0-rc6-syzkaller-00007-g9be9ed2612b5 #0 [ 682.950653][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.960707][T13742] Call Trace: 04:23:17 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000b00)=""/246, 0x26, 0xf6, 0x1}, 0x20) ioctl$TUNSETPERSIST(r0, 0x40086602, 0x0) 04:23:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000340)="10", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x1ff, 0x1, "c6"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000002b80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), 0x8) [ 682.963989][T13742] [ 682.966917][T13742] dump_stack_lvl+0x1e3/0x2cb [ 682.971603][T13742] ? bfq_pos_tree_add_move+0x436/0x436 [ 682.977069][T13742] ? panic+0x76e/0x76e [ 682.981145][T13742] ? __is_module_percpu_address+0x29e/0x3d0 [ 682.987125][T13742] assign_lock_key+0x22a/0x240 [ 682.991924][T13742] ? SOFTIRQ_verbose+0x10/0x10 [ 682.996704][T13742] register_lock_class+0x287/0x9d0 [ 683.001816][T13742] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 683.007801][T13742] ? __might_sleep+0xc0/0xc0 04:23:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x61, 0x5f, 0x25]}}, &(0x7f00000000c0)=""/135, 0x35, 0x87, 0xfffffffe}, 0x20) [ 683.012394][T13742] ? is_dynamic_key+0x1f0/0x1f0 [ 683.017250][T13742] __lock_acquire+0xe9/0x1f80 [ 683.021938][T13742] ? pty_flush_buffer+0x4d/0x120 [ 683.026938][T13742] ? __lock_acquire+0x1f80/0x1f80 [ 683.031966][T13742] ? __mutex_lock_common+0x465/0x26e0 [ 683.037403][T13742] lock_acquire+0x1a7/0x400 [ 683.041922][T13742] ? hci_uart_flush+0xd2/0x310 [ 683.046747][T13742] ? read_lock_is_recursive+0x10/0x10 [ 683.052123][T13742] ? __might_sleep+0xc0/0xc0 [ 683.056718][T13742] ? tty_buffer_flush+0x336/0x390 [ 683.061805][T13742] percpu_down_read+0x44/0x190 [ 683.066570][T13742] ? hci_uart_flush+0xd2/0x310 [ 683.071343][T13742] hci_uart_flush+0xd2/0x310 [ 683.076017][T13742] hci_uart_tty_close+0x8e/0x280 [ 683.080955][T13742] tty_ldisc_hangup+0x432/0x610 [ 683.085806][T13742] __tty_hangup+0x494/0x6d0 [ 683.090310][T13742] tty_ioctl+0x606/0xc60 [ 683.094561][T13742] ? bpf_lsm_file_ioctl+0x5/0x10 [ 683.099649][T13742] ? tty_get_icount+0xa0/0xa0 [ 683.104324][T13742] __se_sys_ioctl+0xfb/0x170 [ 683.108912][T13742] do_syscall_64+0x2b/0x70 [ 683.113310][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.119197][T13742] RIP: 0033:0x7fcbe28890e9 [ 683.123602][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 683.143190][T13742] RSP: 002b:00007fcbe3a22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.151595][T13742] RAX: ffffffffffffffda RBX: 00007fcbe299c100 RCX: 00007fcbe28890e9 [ 683.159581][T13742] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 683.167545][T13742] RBP: 00007fcbe28e308d R08: 0000000000000000 R09: 0000000000000000 [ 683.175511][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.183479][T13742] R13: 00007ffde5942f4f R14: 00007fcbe3a22300 R15: 0000000000022000 [ 683.191436][T13742] [ 683.199124][T13742] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 683.210831][T13742] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 683.219216][T13742] CPU: 0 PID: 13742 Comm: syz-executor.1 Not tainted 5.18.0-rc6-syzkaller-00007-g9be9ed2612b5 #0 [ 683.229693][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.239723][T13742] RIP: 0010:__wake_up_locked+0xa7/0x1a0 [ 683.245301][T13742] Code: 00 fc ff df 4c 8b 73 40 66 2e 0f 1f 84 00 00 00 00 00 90 4d 39 f4 0f 84 b3 00 00 00 4c 89 f3 49 8d 6e e8 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 fb 6d 72 00 48 ba 00 00 00 00 00 fc [ 683.264897][T13742] RSP: 0018:ffffc90002f9fc08 EFLAGS: 00010046 [ 683.270950][T13742] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 683.278910][T13742] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8880778428c8 [ 683.286881][T13742] RBP: ffffffffffffffe8 R08: dffffc0000000000 R09: fffff520005f3f64 [ 683.294847][T13742] R10: fffff520005f3f65 R11: 1ffff920005f3f64 R12: ffff888077842908 [ 683.302905][T13742] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 683.310960][T13742] FS: 00007fcbe3a22700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 683.319873][T13742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.326440][T13742] CR2: 00007f3679d9d090 CR3: 00000000766ce000 CR4: 00000000003506f0 [ 683.334401][T13742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.342355][T13742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.350307][T13742] Call Trace: [ 683.353567][T13742] [ 683.356483][T13742] rcu_sync_func+0xa8/0x200 [ 683.360972][T13742] rcu_sync_enter+0x20a/0x350 [ 683.365637][T13742] ? rcu_sync_enter_start+0x70/0x70 [ 683.370815][T13742] ? __lock_acquire+0x1f80/0x1f80 [ 683.375823][T13742] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 683.381697][T13742] ? _raw_spin_unlock+0x40/0x40 [ 683.386524][T13742] ? rcu_read_lock_any_held+0x5f/0x150 [ 683.391965][T13742] ? rcu_read_lock_bh_held+0x110/0x110 [ 683.397403][T13742] ? skb_queue_purge+0x197/0x1c0 [ 683.402447][T13742] percpu_down_write+0x5c/0x2e0 [ 683.407280][T13742] ? hci_uart_flush+0x20d/0x310 [ 683.412111][T13742] hci_uart_tty_close+0x123/0x280 [ 683.417118][T13742] tty_ldisc_hangup+0x432/0x610 [ 683.421958][T13742] __tty_hangup+0x494/0x6d0 [ 683.426444][T13742] tty_ioctl+0x606/0xc60 [ 683.430666][T13742] ? bpf_lsm_file_ioctl+0x5/0x10 [ 683.435585][T13742] ? tty_get_icount+0xa0/0xa0 [ 683.440244][T13742] __se_sys_ioctl+0xfb/0x170 [ 683.444814][T13742] do_syscall_64+0x2b/0x70 [ 683.449211][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.455087][T13742] RIP: 0033:0x7fcbe28890e9 [ 683.459484][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 683.479072][T13742] RSP: 002b:00007fcbe3a22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.487464][T13742] RAX: ffffffffffffffda RBX: 00007fcbe299c100 RCX: 00007fcbe28890e9 [ 683.495417][T13742] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 683.503367][T13742] RBP: 00007fcbe28e308d R08: 0000000000000000 R09: 0000000000000000 [ 683.511315][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.519264][T13742] R13: 00007ffde5942f4f R14: 00007fcbe3a22300 R15: 0000000000022000 [ 683.527219][T13742] [ 683.530216][T13742] Modules linked in: [ 683.534094][T13742] ---[ end trace 0000000000000000 ]--- [ 683.539526][T13742] RIP: 0010:__wake_up_locked+0xa7/0x1a0 [ 683.545071][T13742] Code: 00 fc ff df 4c 8b 73 40 66 2e 0f 1f 84 00 00 00 00 00 90 4d 39 f4 0f 84 b3 00 00 00 4c 89 f3 49 8d 6e e8 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 fb 6d 72 00 48 ba 00 00 00 00 00 fc [ 683.564657][T13742] RSP: 0018:ffffc90002f9fc08 EFLAGS: 00010046 [ 683.570704][T13742] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 683.578654][T13742] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff8880778428c8 [ 683.586608][T13742] RBP: ffffffffffffffe8 R08: dffffc0000000000 R09: fffff520005f3f64 [ 683.594565][T13742] R10: fffff520005f3f65 R11: 1ffff920005f3f64 R12: ffff888077842908 [ 683.602518][T13742] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 683.610468][T13742] FS: 00007fcbe3a22700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 683.619376][T13742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.625940][T13742] CR2: 00007f3679d9d090 CR3: 00000000766ce000 CR4: 00000000003506f0 [ 683.633897][T13742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.641854][T13742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.649804][T13742] Kernel panic - not syncing: Fatal exception [ 683.656011][T13742] Kernel Offset: disabled [ 683.660322][T13742] Rebooting in 86400 seconds..