(r0, 0x5441, 0xe9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r8 = dup2(r5, r5) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000000300)=""/170) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r8, 0x5423, &(0x7f00000000c0)=0x8) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:20:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_open_pts(r1, 0x4081) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:20:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00'}) 05:20:50 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x5452, &(0x7f0000002d40)=ANY=[]) [ 607.031968][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 607.040158][ T3640] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 607.074168][T15289] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:20:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_open_pts(r1, 0x4081) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 607.208024][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 607.215321][ T3640] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:20:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3f) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x9, 0x101, 0xfffffff8, 0x4, 0x14, "fd549fa87bdb72ecf75029460dfcf66c1923e8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "85cfbaa719186c373720b1f0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e587d966f5ce17983b586bf10"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "71bc012edbdbcaeee8e0ae3122"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9f8d215dd1e3ae7dc0b57d20bd"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r8 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x81) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x4) 05:20:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "a59f7995f969f9"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003640)={0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045d80)={0xef, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "ddb5005a79a790"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046d80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {r5}, {}, {}, {r11}], 0x0, "3271aaa7524c58"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0xfd) 05:20:51 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000002d40)=ANY=[@ANYBLOB="f909002b6bcc"]) [ 608.177479][ T3676] Bluetooth: hci6: command 0x1003 tx timeout [ 608.183679][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:20:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_open_pts(r1, 0x4081) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) syz_open_pts(r1, 0x4081) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:20:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCOUTQ(r0, 0x8953, 0x0) 05:20:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) [ 608.281009][ T3640] Bluetooth: hci6: sending frame failed (-49) [ 608.289606][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 608.301086][T15316] hub 9-0:1.0: USB hub found [ 608.318819][T15316] hub 9-0:1.0: 8 ports detected [ 608.358424][ T3640] Bluetooth: hci10: sending frame failed (-49) [ 608.366285][ T3641] Bluetooth: hci10: Opcode 0x1003 failed: -49 05:20:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:20:52 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = dup2(r5, r5) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000000300)=""/170) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r8, 0x5423, &(0x7f00000000c0)=0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r5, r5) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000000300)=""/170) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r8, 0x5423, &(0x7f00000000c0)=0x8) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:20:52 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0) 05:20:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x1) 05:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3f) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x9, 0x101, 0xfffffff8, 0x4, 0x14, "fd549fa87bdb72ecf75029460dfcf66c1923e8"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "85cfbaa719186c373720b1f0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e587d966f5ce17983b586bf10"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "71bc012edbdbcaeee8e0ae3122"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9f8d215dd1e3ae7dc0b57d20bd"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r8 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x81) (async) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x4) [ 609.058630][ T3676] Bluetooth: hci8: command 0x1003 tx timeout [ 609.067800][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 609.076056][T10195] Bluetooth: hci7: command 0x1003 tx timeout [ 609.082198][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 609.151908][ T3639] Bluetooth: hci6: sending frame failed (-49) [ 609.159643][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 609.167932][ T3640] Bluetooth: hci7: sending frame failed (-49) [ 609.175506][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 609.189750][T15327] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:20:52 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 609.206285][ T3635] Bluetooth: hci8: sending frame failed (-49) [ 609.215547][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3f) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x9, 0x101, 0xfffffff8, 0x4, 0x14, "fd549fa87bdb72ecf75029460dfcf66c1923e8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "85cfbaa719186c373720b1f0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e587d966f5ce17983b586bf10"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "71bc012edbdbcaeee8e0ae3122"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9f8d215dd1e3ae7dc0b57d20bd"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r8 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x81) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TCSBRKP(r0, 0x5425, 0x3f) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x9, 0x101, 0xfffffff8, 0x4, 0x14, "fd549fa87bdb72ecf75029460dfcf66c1923e8"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "85cfbaa719186c373720b1f0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e587d966f5ce17983b586bf10"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "71bc012edbdbcaeee8e0ae3122"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9f8d215dd1e3ae7dc0b57d20bd"}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) (async) dup2(r4, r4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0x81) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x4) (async) [ 609.259570][ T3635] Bluetooth: hci7: sending frame failed (-49) [ 609.267263][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 609.420893][T15359] ptm ptm0: ldisc open failed (-12), clearing slot 0 05:20:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "a59f7995f969f9"}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003640)={0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045d80)={0xef, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "ddb5005a79a790"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046d80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {r5}, {}, {}, {r11}], 0x0, "3271aaa7524c58"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0xfd) [ 610.337647][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:20:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:20:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x1) 05:20:54 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000240)={0x0, 0x0}) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001280)="f5", 0xfffffe00}]) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)=0x40) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:20:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r3, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x9, 0x0, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x20, 0x2d}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x20c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d26}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5432, 0xb7, 0x6, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) dup2(r1, r0) 05:20:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_pts(r1, 0x1) (async) 05:20:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "a59f7995f969f9"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003640)={0x0}) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r8, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045d80)={0xef, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "ddb5005a79a790"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046d80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {r5}, {}, {}, {r11}], 0x0, "3271aaa7524c58"}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0xfd) [ 610.532970][ T3639] Bluetooth: hci8: sending frame failed (-49) [ 610.540533][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 610.559141][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 610.567034][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:20:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "1e64446fc79cc3a98e33facf7743e704274d0b1d8c7c55deb9ae36ebb0db8a8a1deef1584598912556cc2f81415280d8a08e8ca4bd5de6c975c32cfeecd9747d"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@secondary) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="c006e690000000002e2f66696c65302300fa7fe09ec8aa892d4330203b53a1227d21755f8f1098f59793d34d418246f60d4d4afa8ff2ccf0cecad8e69116d24b0826f5251afbc4fcfc0100000008f15764ecec3b96fdc6a1dab77fc9df37ccc23ba21dc923dd790e51d81090a60be7ebfc61b9"]) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:20:54 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp6\x00') read$snddsp(r0, &(0x7f0000000040)=""/115, 0x99) 05:20:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x654400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_mount_image$jffs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="959fb74d8e5d96832d325cf005d833b578cf14dbed87f4ac0d1ff57181030645c0aafd82c18f2524222fc0071c754e8e28ca737518ad01c324fc6731fcceeaef712c095bbfbb4e1be375480ad7ac2cd30a05c3dd93ac607a4e121f142666fd74088cd46205d112fcce85599c144a4f962ac5af9e466ef5100ad326eb4045deda810771e08414917c8119840f3ea7ccf72f0a14663c4f05841006ae8648f51b81b533075bbea1b6839eb2be89e2c4ef786f", 0xb1, 0x4}, {&(0x7f0000000280)="1cc37410e81e6ea1db957c2ddfbd4923bb22200c7af079f0edbc3724b34c2410b9493a0d85d5056a777812c3d435612af00ca3c8985f0d8ee75a9651c68b487f13397768c5cad218a38a4fda8f444f424097c0b96eea38bd730d413060c3382b5d2dd437b30d7c3707c500ea60a05d6eef43ff50f583ad45af4bdb36fbafc260b5c44fa7dc25eb93837b967b527d5effa13c72063442586acbaa6e980c45a8e8be5bf7cb4aaeaae6856489eeea37c1171966358c86a765f370b91c9b4c2161c4231c113d7065625f7495", 0xca, 0xc92}], 0xa00010, &(0x7f00000003c0)={[{@compr_lzo}, {@compr_lzo}, {@rp_size}, {@rp_size={'rp_size', 0x3d, 0x2318}}, {@compr_lzo}, {@compr_lzo}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) dup3(r2, r3, 0x80000) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 610.756706][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 610.764392][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:20:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "1e64446fc79cc3a98e33facf7743e704274d0b1d8c7c55deb9ae36ebb0db8a8a1deef1584598912556cc2f81415280d8a08e8ca4bd5de6c975c32cfeecd9747d"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@secondary) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="c006e690000000002e2f66696c65302300fa7fe09ec8aa892d4330203b53a1227d21755f8f1098f59793d34d418246f60d4d4afa8ff2ccf0cecad8e69116d24b0826f5251afbc4fcfc0100000008f15764ecec3b96fdc6a1dab77fc9df37ccc23ba21dc923dd790e51d81090a60be7ebfc61b9"]) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "1e64446fc79cc3a98e33facf7743e704274d0b1d8c7c55deb9ae36ebb0db8a8a1deef1584598912556cc2f81415280d8a08e8ca4bd5de6c975c32cfeecd9747d"}, 0x48, 0xfffffffffffffffd) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@secondary) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="c006e690000000002e2f66696c65302300fa7fe09ec8aa892d4330203b53a1227d21755f8f1098f59793d34d418246f60d4d4afa8ff2ccf0cecad8e69116d24b0826f5251afbc4fcfc0100000008f15764ecec3b96fdc6a1dab77fc9df37ccc23ba21dc923dd790e51d81090a60be7ebfc61b9"]) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 610.865413][T15405] loop5: detected capacity change from 0 to 12 [ 610.925711][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 610.931333][T15405] jffs2: Bad value for 'rp_size' [ 610.933176][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:20:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x654400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = syz_mount_image$jffs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="959fb74d8e5d96832d325cf005d833b578cf14dbed87f4ac0d1ff57181030645c0aafd82c18f2524222fc0071c754e8e28ca737518ad01c324fc6731fcceeaef712c095bbfbb4e1be375480ad7ac2cd30a05c3dd93ac607a4e121f142666fd74088cd46205d112fcce85599c144a4f962ac5af9e466ef5100ad326eb4045deda810771e08414917c8119840f3ea7ccf72f0a14663c4f05841006ae8648f51b81b533075bbea1b6839eb2be89e2c4ef786f", 0xb1, 0x4}, {&(0x7f0000000280)="1cc37410e81e6ea1db957c2ddfbd4923bb22200c7af079f0edbc3724b34c2410b9493a0d85d5056a777812c3d435612af00ca3c8985f0d8ee75a9651c68b487f13397768c5cad218a38a4fda8f444f424097c0b96eea38bd730d413060c3382b5d2dd437b30d7c3707c500ea60a05d6eef43ff50f583ad45af4bdb36fbafc260b5c44fa7dc25eb93837b967b527d5effa13c72063442586acbaa6e980c45a8e8be5bf7cb4aaeaae6856489eeea37c1171966358c86a765f370b91c9b4c2161c4231c113d7065625f7495", 0xca, 0xc92}], 0xa00010, &(0x7f00000003c0)={[{@compr_lzo}, {@compr_lzo}, {@rp_size}, {@rp_size={'rp_size', 0x3d, 0x2318}}, {@compr_lzo}, {@compr_lzo}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) dup3(r2, r3, 0x80000) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) 05:20:55 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) [ 611.377724][T10195] Bluetooth: hci6: command 0x1003 tx timeout [ 611.377830][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 611.454488][T15417] loop5: detected capacity change from 0 to 12 [ 611.468943][T15417] jffs2: Bad value for 'rp_size' 05:20:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$VT_RELDISP(r4, 0x5605) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:20:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "1e64446fc79cc3a98e33facf7743e704274d0b1d8c7c55deb9ae36ebb0db8a8a1deef1584598912556cc2f81415280d8a08e8ca4bd5de6c975c32cfeecd9747d"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@secondary) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="c006e690000000002e2f66696c65302300fa7fe09ec8aa892d4330203b53a1227d21755f8f1098f59793d34d418246f60d4d4afa8ff2ccf0cecad8e69116d24b0826f5251afbc4fcfc0100000008f15764ecec3b96fdc6a1dab77fc9df37ccc23ba21dc923dd790e51d81090a60be7ebfc61b9"]) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "1e64446fc79cc3a98e33facf7743e704274d0b1d8c7c55deb9ae36ebb0db8a8a1deef1584598912556cc2f81415280d8a08e8ca4bd5de6c975c32cfeecd9747d"}, 0x48, 0xfffffffffffffffd) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@secondary) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="c006e690000000002e2f66696c65302300fa7fe09ec8aa892d4330203b53a1227d21755f8f1098f59793d34d418246f60d4d4afa8ff2ccf0cecad8e69116d24b0826f5251afbc4fcfc0100000008f15764ecec3b96fdc6a1dab77fc9df37ccc23ba21dc923dd790e51d81090a60be7ebfc61b9"]) (async) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:20:56 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000240)={0x0, 0x0}) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001280)="f5", 0xfffffe00}]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)=0x40) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8d0628894a67b003b9b7d58139144690"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="010000f6ffffff0700008900000020001d801c000080050007000e00030000000000000013f814a7717779c880ffffff4900b41001c5fdcb221cdfe17b8d23ad6b31b205e36305a82a8508"], 0x34}}, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x3f, 0xffff0920, 0x7, 0x2fe3, 0xf7, "fcade6c8d5e1cbba5043f096e2460290f68610", 0x67c9, 0x8}) 05:20:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x78}}, 0x0) 05:20:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x654400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80000) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = syz_mount_image$jffs2(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="959fb74d8e5d96832d325cf005d833b578cf14dbed87f4ac0d1ff57181030645c0aafd82c18f2524222fc0071c754e8e28ca737518ad01c324fc6731fcceeaef712c095bbfbb4e1be375480ad7ac2cd30a05c3dd93ac607a4e121f142666fd74088cd46205d112fcce85599c144a4f962ac5af9e466ef5100ad326eb4045deda810771e08414917c8119840f3ea7ccf72f0a14663c4f05841006ae8648f51b81b533075bbea1b6839eb2be89e2c4ef786f", 0xb1, 0x4}, {&(0x7f0000000280)="1cc37410e81e6ea1db957c2ddfbd4923bb22200c7af079f0edbc3724b34c2410b9493a0d85d5056a777812c3d435612af00ca3c8985f0d8ee75a9651c68b487f13397768c5cad218a38a4fda8f444f424097c0b96eea38bd730d413060c3382b5d2dd437b30d7c3707c500ea60a05d6eef43ff50f583ad45af4bdb36fbafc260b5c44fa7dc25eb93837b967b527d5effa13c72063442586acbaa6e980c45a8e8be5bf7cb4aaeaae6856489eeea37c1171966358c86a765f370b91c9b4c2161c4231c113d7065625f7495", 0xca, 0xc92}], 0xa00010, &(0x7f00000003c0)={[{@compr_lzo}, {@compr_lzo}, {@rp_size}, {@rp_size={'rp_size', 0x3d, 0x2318}}, {@compr_lzo}, {@compr_lzo}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) dup3(r2, r3, 0x80000) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 612.497843][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 612.506378][T10190] Bluetooth: hci7: command tx timeout 05:20:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x17}, 0x48) 05:20:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200002) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x71) 05:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) (async, rerun: 32) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8d0628894a67b003b9b7d58139144690"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="010000f6ffffff0700008900000020001d801c000080050007000e00030000000000000013f814a7717779c880ffffff4900b41001c5fdcb221cdfe17b8d23ad6b31b205e36305a82a8508"], 0x34}}, 0x0) (async) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x3f, 0xffff0920, 0x7, 0x2fe3, 0xf7, "fcade6c8d5e1cbba5043f096e2460290f68610", 0x67c9, 0x8}) 05:20:56 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000240)={0x0, 0x0}) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001280)="f5", 0xfffffe00}]) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)=0x40) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:20:56 executing program 1: socketpair(0x10, 0x0, 0xb3010000, &(0x7f0000000080)) 05:20:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200002) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x71) [ 613.140125][ T962] Bluetooth: Error in BCSP hdr checksum 05:20:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$VT_RELDISP(r4, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$VT_RELDISP(r4, 0x5605) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:20:58 executing program 1: socketpair(0xa, 0x3, 0x28, &(0x7f0000000080)) 05:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "8d0628894a67b003b9b7d58139144690"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="010000f6ffffff0700008900000020001d801c000080050007000e00030000000000000013f814a7717779c880ffffff4900b41001c5fdcb221cdfe17b8d23ad6b31b205e36305a82a8508"], 0x34}}, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x3f, 0xffff0920, 0x7, 0x2fe3, 0xf7, "fcade6c8d5e1cbba5043f096e2460290f68610", 0x67c9, 0x8}) 05:20:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200002) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x71) [ 614.657714][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 614.666117][ T3710] Bluetooth: hci6: command 0x1003 tx timeout [ 614.667456][T10190] Bluetooth: hci7: command tx timeout [ 614.678061][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:20:58 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d"], &(0x7f00000002c0)=""/216, 0x2e, 0xd8, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1, &(0x7f00000008c0)=@raw=[@exit], &(0x7f0000000900)='syzkaller\x00', 0x1, 0xd8, &(0x7f0000000940)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x0, 0x10001}, 0x10}, 0x80) 05:20:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) 05:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff9, 0x21ad0a12}}, './file0\x00'}) syz_open_pts(r0, 0x228243) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x440901, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) 05:20:58 executing program 1: socketpair(0x25, 0x3, 0x0, &(0x7f0000000500)) [ 614.897635][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 614.905770][T10190] Bluetooth: hci8: command tx timeout [ 614.958219][T15485] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 614.998049][ T3641] Bluetooth: hci8: sending frame failed (-49) 05:20:58 executing program 1: socketpair(0xa, 0x2, 0x28, &(0x7f0000000080)) [ 615.002388][ T3640] Bluetooth: hci7: sending frame failed (-49) [ 615.010974][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 615.019203][ T3639] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:20:58 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 05:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff9, 0x21ad0a12}}, './file0\x00'}) (async) syz_open_pts(r0, 0x228243) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async, rerun: 32) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x440901, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) 05:20:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fd96e318000000fc00000000001d010000"], 0xfffffdef}}, 0x0) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x2}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r9, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, r2, "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", "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"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 615.189862][ T3639] Bluetooth: hci8: sending frame failed (-49) [ 615.198379][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 615.269964][T15510] hub 9-0:1.0: USB hub found [ 615.280909][T15510] hub 9-0:1.0: 8 ports detected 05:21:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (async) 05:21:00 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000000600)="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", 0xffa, 0x7}, {&(0x7f0000001780)="89", 0x1, 0x34d984b3}], 0x0, 0x0) 05:21:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff9, 0x21ad0a12}}, './file0\x00'}) syz_open_pts(r0, 0x228243) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x440901, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x15) 05:21:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, 0x0}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1], 0x1, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48776595}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @exit, @ldst={0x0, 0x1, 0x6, 0x3, 0x4, 0x20, 0xffffffffffffffee}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x7f, 0x8, 0x6, 0x1, 0xff}, @cb_func={0x18, 0x6}, @jmp={0x5, 0x0, 0xa, 0x7, 0x8, 0xfffffffffffffff0, 0x7ffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf3, &(0x7f0000000280)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x5, 0x80000001}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r9, 0x1, r10, r11]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 616.897682][ T3676] Bluetooth: hci6: command 0x1003 tx timeout [ 616.897748][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 616.956655][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 616.970600][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x891b, 0x0) 05:21:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4cd82, 0xe1, 0x8}, 0x18) dup2(r1, r0) [ 617.058228][ T3635] Bluetooth: hci7: sending frame failed (-49) [ 617.067280][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:21:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (rerun: 32) 05:21:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000200)={0x0, "aea7494c8fd3447366fe9393e5d51cdc489473279dc9fff7a857e3cfcf5ac547b9e42f82e7109591660d814bd2001a0b9d944924a9954c500000000000008f00"}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, r1, r0) 05:21:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, 0x0}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1], 0x1, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48776595}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @exit, @ldst={0x0, 0x1, 0x6, 0x3, 0x4, 0x20, 0xffffffffffffffee}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x7f, 0x8, 0x6, 0x1, 0xff}, @cb_func={0x18, 0x6}, @jmp={0x5, 0x0, 0xa, 0x7, 0x8, 0xfffffffffffffff0, 0x7ffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf3, &(0x7f0000000280)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x5, 0x80000001}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r9, 0x1, r10, r11]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r6, r6) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1], 0x1, 0x800}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48776595}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @exit, @ldst={0x0, 0x1, 0x6, 0x3, 0x4, 0x20, 0xffffffffffffffee}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x7f, 0x8, 0x6, 0x1, 0xff}, @cb_func={0x18, 0x6}, @jmp={0x5, 0x0, 0xa, 0x7, 0x8, 0xfffffffffffffff0, 0x7ffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf3, &(0x7f0000000280)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x5, 0x80000001}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r9, 0x1, r10, r11]}, 0x80) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 617.241537][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 617.249980][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 617.298920][ T3640] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 617.307895][ T3639] Bluetooth: hci10: Opcode 0x1003 failed: -110 05:21:00 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async, rerun: 32) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 05:21:00 executing program 1: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) 05:21:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fd96e318000000fc00000000001d010000"], 0xfffffdef}}, 0x0) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x2}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r9, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, r2, "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", "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"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fd96e318000000fc00000000001d010000"], 0xfffffdef}}, 0x0) (async) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x2}, 0x18) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r9, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, r2, "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", "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"}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:01 executing program 1: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='C', 0x1, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r0, 0x2) [ 617.505234][T15565] hub 9-0:1.0: USB hub found [ 617.520234][T15565] hub 9-0:1.0: 8 ports detected 05:21:01 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = dup2(r1, r1) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 05:21:01 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000840)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 05:21:01 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14}, 0x14) write$P9_RREAD(r0, 0x0, 0x100b) 05:21:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 05:21:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4cd82, 0xe1, 0x8}, 0x18) dup2(r1, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4cd82, 0xe1, 0x8}, 0x18) (async) dup2(r1, r0) (async) 05:21:02 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) 05:21:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x7, "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"}) [ 619.217451][ T6342] Bluetooth: hci8: command 0x1003 tx timeout [ 619.227739][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, 0x0}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1], 0x1, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48776595}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @exit, @ldst={0x0, 0x1, 0x6, 0x3, 0x4, 0x20, 0xffffffffffffffee}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x7f, 0x8, 0x6, 0x1, 0xff}, @cb_func={0x18, 0x6}, @jmp={0x5, 0x0, 0xa, 0x7, 0x8, 0xfffffffffffffff0, 0x7ffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf3, &(0x7f0000000280)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x5, 0x80000001}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r9, 0x1, r10, r11]}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r6, r6) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x1], 0x1, 0x800}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x48776595}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @exit, @ldst={0x0, 0x1, 0x6, 0x3, 0x4, 0x20, 0xffffffffffffffee}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x7f, 0x8, 0x6, 0x1, 0xff}, @cb_func={0x18, 0x6}, @jmp={0x5, 0x0, 0xa, 0x7, 0x8, 0xfffffffffffffff0, 0x7ffffffffffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xf3, &(0x7f0000000280)=""/243, 0x40f00, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0xa, 0x5, 0x80000001}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r9, 0x1, r10, r11]}, 0x80) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:03 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x110602, 0x0) [ 619.377558][ T3676] Bluetooth: hci7: command 0x1003 tx timeout [ 619.383885][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:03 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x80000000}) [ 619.436412][T15612] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:21:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fd96e318000000fc00000000001d010000"], 0xfffffdef}}, 0x0) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x2}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r9, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, r2, "cd04d9123cef11a1dd4261829d38b1691d2010c9c73382d541f4c9ab6bb6bb72109984804e3673e98f7489c1cdc23eac0398cdcacb2f68c1233aa8f06710424523edb2a9f2af6a99cf78a0810b41aea8da262cdbbfbaa9ef9b989d000959bc64c0a6e882241efe9c286cc27e47f98aa0093d00e1f5728eb5accae927193583ef80681cb794708a56061f7d81e2101e1397c94f5e26d7ddf3b3658f12766f0c50992cecefc0e65e26ef9854f00534e471ce3ce918bd35cbc4f8dd547113bce1be148f14e07f55f59f28832c606ef71bfedd81f02124a990e7afc51d56bc9b51ad85dcf1b27fc61586e573e2106f41e5362b3fc0dcf37f72914601d5aab6461f3a", "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"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @remote={0xac, 0x10, 0x3}}, @sco={0x1f, @none}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001640)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fd96e318000000fc00000000001d010000"], 0xfffffdef}}, 0x0) (async) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x1}, 0x2}, 0x18) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) (async) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r9, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005a700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "a59f7995f969f9"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, r2, "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", "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"}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}, 0x1, 0x0, 0x6000}, 0x0) [ 619.537614][ T3676] Bluetooth: hci9: command 0x1003 tx timeout [ 619.537646][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 619.561351][T15623] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 619.623905][T15638] hub 9-0:1.0: USB hub found [ 619.637564][T15638] hub 9-0:1.0: 8 ports detected 05:21:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x11}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x5, 0x40]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) 05:21:03 executing program 1: syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x480000) [ 619.689269][T15638] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 619.697625][ T3676] Bluetooth: hci10: command 0x1003 tx timeout [ 619.703873][ T3640] Bluetooth: hci10: Opcode 0x1003 failed: -110 05:21:03 executing program 1: r0 = openat$adsp1(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000480)) 05:21:03 executing program 1: sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x14}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 621.297602][ T6342] Bluetooth: hci6: command 0x1003 tx timeout [ 621.299558][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4cd82, 0xe1, 0x8}, 0x18) dup2(r1, r0) 05:21:05 executing program 1: openat$vhost_vsock(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 05:21:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x7, "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"}) [ 621.377701][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x144) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x80000000, 0x0, 0x4, 0x3ff, 0x7, "1a2ce3882bb63573dae2f7dc84bcb39ea4c8da"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="000041f934f9200e10fa0000", @ANYRES32=r1, @ANYBLOB="0166696c653000"]) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) 05:21:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 05:21:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xf8, r2, 0xb892db0657f11360, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc0, 0x70, [@NL80211_MESH_SETUP_IE={0xb9, 0x3, "dbe54ba9fbf995b510ff73426818b33114486f1e863a2a7dcbe47dd56d36e1547496f2259fb326b9647d9341d30a9047ea381e506543dc4ec4685f6306d2377d3f3cc3bb3245d604e12caae414eed7fe0208ed68e41b8216162e6b58d305afe2848d2429609c6b062326a68f896ea74dda3b6f07762f147d7a2b64af0cea95f90045d1a3ca5ae56f738abbc39413bbcd577c42c19092239c335e36728af4bc5968669aab9915ea6fee84787e60881e298c7dea8b2f"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4d76ec67}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xf8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r6, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = dup2(0xffffffffffffffff, r7) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 621.537684][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r1 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xcb, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="9837c28659d97ec9a7913d2aaa4e35c11d40f97f22ed6b60753a42826537e9f69026d9597a077771b85641fec2aca8a60f6d376550e93aa54b03467c73993dcba89d682039cbe280f31a6f6847", 0x4d, 0x5f}, {&(0x7f0000000280)="d6b293e847ef2eec657e6baf61dddbf8a58be9303326da71076395371351c1b27ec04cc38781c23c90adfb1e28d872d75f6da1832d265527d92fe0a0423cce8baeb9e5a5793d5dec1adea835d7dcee9f366b269644a2686a08f5ccf7b0db01b3a9ede59aab499d853c83afcb3bd287fd6924cc4735c3bd95d4ac7a562edadb2d3dd96a8e2770b69cec9119370aadde4c675c3f93bb9e99163ca13fafc8a4483de70b728904c7df172ec2fe164b63cf13551a0583812ccf8b278a29c55eaa2d2ab45b39cfc1ca26fd82883537ecdcbc615cc6ea9b91c1fd30f07c2feedd4110bc88a3af8337ffee2655695794012eca", 0xef, 0x8}], 0x80008, &(0x7f0000000380)={[{@biosize={'biosize', 0x3d, 0x6}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@audit}, {@dont_measure}]}) fanotify_mark(r0, 0x20, 0x48, r1, &(0x7f00000003c0)='./file0\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', r7) r8 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x10) ioctl$KDADDIO(r8, 0x400455c8, 0x3) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) r9 = syz_open_dev$vcsu(&(0x7f0000000480), 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer], 0x44, 0x0, &(0x7f0000000500)="3afafc43baabb349554e625c33d68f888eca6764f8ce33ba54d4c8b531a9bd96f665ebd02d144fe5242b1be918a2f7c493debf5bc5a008b1064fd6aef573714fafd06379"}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}}, 0x4008000) 05:21:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0) [ 621.707748][T10191] Bluetooth: hci9: command 0x1003 tx timeout [ 621.713937][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x144) ioctl$TCXONC(r1, 0x540a, 0x2) (async, rerun: 32) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x80000000, 0x0, 0x4, 0x3ff, 0x7, "1a2ce3882bb63573dae2f7dc84bcb39ea4c8da"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="000041f934f9200e10fa0000", @ANYRES32=r1, @ANYBLOB="0166696c653000"]) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) 05:21:05 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0) 05:21:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r1 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xcb, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="9837c28659d97ec9a7913d2aaa4e35c11d40f97f22ed6b60753a42826537e9f69026d9597a077771b85641fec2aca8a60f6d376550e93aa54b03467c73993dcba89d682039cbe280f31a6f6847", 0x4d, 0x5f}, {&(0x7f0000000280)="d6b293e847ef2eec657e6baf61dddbf8a58be9303326da71076395371351c1b27ec04cc38781c23c90adfb1e28d872d75f6da1832d265527d92fe0a0423cce8baeb9e5a5793d5dec1adea835d7dcee9f366b269644a2686a08f5ccf7b0db01b3a9ede59aab499d853c83afcb3bd287fd6924cc4735c3bd95d4ac7a562edadb2d3dd96a8e2770b69cec9119370aadde4c675c3f93bb9e99163ca13fafc8a4483de70b728904c7df172ec2fe164b63cf13551a0583812ccf8b278a29c55eaa2d2ab45b39cfc1ca26fd82883537ecdcbc615cc6ea9b91c1fd30f07c2feedd4110bc88a3af8337ffee2655695794012eca", 0xef, 0x8}], 0x80008, &(0x7f0000000380)={[{@biosize={'biosize', 0x3d, 0x6}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@audit}, {@dont_measure}]}) fanotify_mark(r0, 0x20, 0x48, r1, &(0x7f00000003c0)='./file0\x00') (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', r7) (async) r8 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x10) ioctl$KDADDIO(r8, 0x400455c8, 0x3) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) r9 = syz_open_dev$vcsu(&(0x7f0000000480), 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer], 0x44, 0x0, &(0x7f0000000500)="3afafc43baabb349554e625c33d68f888eca6764f8ce33ba54d4c8b531a9bd96f665ebd02d144fe5242b1be918a2f7c493debf5bc5a008b1064fd6aef573714fafd06379"}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}}, 0x4008000) 05:21:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x11}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x5, 0x40]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x11}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x5, 0x40]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) [ 621.857657][ T3640] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 621.857693][T10191] Bluetooth: hci10: command 0x1003 tx timeout 05:21:05 executing program 1: syz_mount_image$qnx4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x292d021, &(0x7f0000000040)) 05:21:05 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x9140) 05:21:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x7, "5ca70d8aadaab31bb79f5cdb4686e753dc1859e5b4f0883e0999fff18d91593cf9385e75f56d208a5535039f468ed58cc296be542e6052847b5d9bac696ecb03e353188bb6e657cdf16925c21fae4ed9184e51302526587f2b7102aa56a66965d94d9318a68ee774f061053060b888340a8c9a3f62293485df83cef242641775e7253b71e3007e614c68f09b29a5c9ca560bf32baf61d6121136e5567363df9625535bd1bc95a780d2c01ec9d1a509c9ae81493eb1dfca7925a85ddf8bebe3d96aef01aa1befaf216cbc9cdc60ddadf56fcf3a789fb3adfa0a8e3d59a1554c118ca5373a4312c95f2ca33e369d208f55a88ea255c73117419cc17f5f953959ea276bf44e5ae8255f3fd90539e01bb12489512bbbcf5cf58f51b34f1f3cfb4a36fab93e4578376c1eba5c165df02fcecc432d7ab7dfc1178e22617bac8704e9cc580d45683ab4c5db7366955dc383d5009069fa7d7f27a074693d8a878643ca5f1689b4b38f99bc7c656ffdd0df963970c8815710c703dbc1b8d45978227732141bb18f2787e1e1b58edf8cc36f332856660cdeaec0241c85813d76a11b7d647b083de1835968dda9ce4d977bb4051641e9f81a10362a152900ed8f5bd0ec2b862546177c442daae70bc7e53de6fa2482cce6b77f734834bc52662fbe0678752f06d78f23dea45bbc1ac7388474c36ab74eefc0f14d47b6aac0ad50281d46c196"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000280)={0x7, "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"}) (async) 05:21:07 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 05:21:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x144) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x80000000, 0x0, 0x4, 0x3ff, 0x7, "1a2ce3882bb63573dae2f7dc84bcb39ea4c8da"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="000041f934f9200e10fa0000", @ANYRES32=r1, @ANYBLOB="0166696c653000"]) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x144) (async) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x80000000, 0x0, 0x4, 0x3ff, 0x7, "1a2ce3882bb63573dae2f7dc84bcb39ea4c8da"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="000041f934f9200e10fa0000", @ANYRES32=r1, @ANYBLOB="0166696c653000"]) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) (async) [ 623.537716][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 623.537814][T10191] Bluetooth: hci6: command 0x1003 tx timeout [ 623.640113][T15700] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 623.689470][T15706] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 623.697637][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xf8, r2, 0xb892db0657f11360, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc0, 0x70, [@NL80211_MESH_SETUP_IE={0xb9, 0x3, "dbe54ba9fbf995b510ff73426818b33114486f1e863a2a7dcbe47dd56d36e1547496f2259fb326b9647d9341d30a9047ea381e506543dc4ec4685f6306d2377d3f3cc3bb3245d604e12caae414eed7fe0208ed68e41b8216162e6b58d305afe2848d2429609c6b062326a68f896ea74dda3b6f07762f147d7a2b64af0cea95f90045d1a3ca5ae56f738abbc39413bbcd577c42c19092239c335e36728af4bc5968669aab9915ea6fee84787e60881e298c7dea8b2f"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4d76ec67}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xf8}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r6, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = dup2(0xffffffffffffffff, r7) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x3f) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:07 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r1 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xcb, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="9837c28659d97ec9a7913d2aaa4e35c11d40f97f22ed6b60753a42826537e9f69026d9597a077771b85641fec2aca8a60f6d376550e93aa54b03467c73993dcba89d682039cbe280f31a6f6847", 0x4d, 0x5f}, {&(0x7f0000000280)="d6b293e847ef2eec657e6baf61dddbf8a58be9303326da71076395371351c1b27ec04cc38781c23c90adfb1e28d872d75f6da1832d265527d92fe0a0423cce8baeb9e5a5793d5dec1adea835d7dcee9f366b269644a2686a08f5ccf7b0db01b3a9ede59aab499d853c83afcb3bd287fd6924cc4735c3bd95d4ac7a562edadb2d3dd96a8e2770b69cec9119370aadde4c675c3f93bb9e99163ca13fafc8a4483de70b728904c7df172ec2fe164b63cf13551a0583812ccf8b278a29c55eaa2d2ab45b39cfc1ca26fd82883537ecdcbc615cc6ea9b91c1fd30f07c2feedd4110bc88a3af8337ffee2655695794012eca", 0xef, 0x8}], 0x80008, &(0x7f0000000380)={[{@biosize={'biosize', 0x3d, 0x6}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@audit}, {@dont_measure}]}) fanotify_mark(r0, 0x20, 0x48, r1, &(0x7f00000003c0)='./file0\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', r7) r8 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x10) ioctl$KDADDIO(r8, 0x400455c8, 0x3) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) r9 = syz_open_dev$vcsu(&(0x7f0000000480), 0x20, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer], 0x44, 0x0, &(0x7f0000000500)="3afafc43baabb349554e625c33d68f888eca6764f8ce33ba54d4c8b531a9bd96f665ebd02d144fe5242b1be918a2f7c493debf5bc5a008b1064fd6aef573714fafd06379"}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}}, 0x4008000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xcb, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="9837c28659d97ec9a7913d2aaa4e35c11d40f97f22ed6b60753a42826537e9f69026d9597a077771b85641fec2aca8a60f6d376550e93aa54b03467c73993dcba89d682039cbe280f31a6f6847", 0x4d, 0x5f}, {&(0x7f0000000280)="d6b293e847ef2eec657e6baf61dddbf8a58be9303326da71076395371351c1b27ec04cc38781c23c90adfb1e28d872d75f6da1832d265527d92fe0a0423cce8baeb9e5a5793d5dec1adea835d7dcee9f366b269644a2686a08f5ccf7b0db01b3a9ede59aab499d853c83afcb3bd287fd6924cc4735c3bd95d4ac7a562edadb2d3dd96a8e2770b69cec9119370aadde4c675c3f93bb9e99163ca13fafc8a4483de70b728904c7df172ec2fe164b63cf13551a0583812ccf8b278a29c55eaa2d2ab45b39cfc1ca26fd82883537ecdcbc615cc6ea9b91c1fd30f07c2feedd4110bc88a3af8337ffee2655695794012eca", 0xef, 0x8}], 0x80008, &(0x7f0000000380)={[{@biosize={'biosize', 0x3d, 0x6}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@audit}, {@dont_measure}]}) (async) fanotify_mark(r0, 0x20, 0x48, r1, &(0x7f00000003c0)='./file0\x00') (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) memfd_secret(0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r4, r4) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', r7) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x10) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x3) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_open_dev$vcsu(&(0x7f0000000480), 0x20, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer], 0x44, 0x0, &(0x7f0000000500)="3afafc43baabb349554e625c33d68f888eca6764f8ce33ba54d4c8b531a9bd96f665ebd02d144fe5242b1be918a2f7c493debf5bc5a008b1064fd6aef573714fafd06379"}) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}]}, 0x38}}, 0x4008000) (async) 05:21:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x11}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x5, 0x40]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) 05:21:07 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa601) 05:21:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x8}, 0x18) ioctl$TCFLSH(r2, 0x540b, 0x2) 05:21:07 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4020940d, &(0x7f0000000180)={0x3}) [ 623.812046][ T3640] Bluetooth: hci7: sending frame failed (-49) [ 623.820115][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 623.820136][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 623.845240][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:07 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x4f0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x85d9, 0x7ff, 0xac, 0x1, 0x2, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x24, 0x18, 0x7, 0x30, 0x2, 0x36, 0x5a, 0x6c, 0x24, 0xc, 0x1b, 0x2, 0x1, 0x24, 0x3, 0xb, 0x60, 0x6, 0x6c, 0xc, 0x6, 0x3, 0x2, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6c, 0x36, 0x36, 0x18, 0x16, 0x6, 0xc, 0x1, 0x60, 0x35, 0x6, 0x30, 0x18, 0x4, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x60, 0x36, 0xb, 0x36, 0x30, 0xc, 0x5, 0x2, 0x2, 0x36, 0x64, 0xb, 0x16, 0x16, 0x12, 0x17, 0x9, 0x4, 0x9, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xd4e5, 0x2, 0x7ff, 0xfffa, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x174, 0x200, 0xf4, 0xcb2, 0x80, 0x69, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xdc3b, 0x8, 0x9, 0x99, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6c}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x2, 0x6}, {}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1a, 0x8, 0xdb, 0x5, 0x400, 0xfebe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0xc, 0x16, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x6, 0x6, 0x4e, 0x2b13, 0x3, 0x29b4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1077, 0x2, 0x40, 0x3, 0x0, 0xe6e7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x60, 0x9, 0x1b, 0xc, 0x4, 0x6c, 0x1b, 0x3, 0x16, 0x571ac431cd32363e, 0x6c, 0x30, 0x30, 0xc, 0x12, 0x16, 0x48, 0x31, 0x18, 0x5e, 0x1b, 0x4, 0x5, 0x5, 0x60, 0x30]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x2}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x3, 0x81, 0x3, 0x0, 0x7fff, 0x3, 0x2ee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x9, 0x1, 0x8001, 0x5, 0x5a5a, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x1b, 0x5, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x7, 0x200, 0x7, 0x7f, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41b, 0x4, 0x5c, 0x4, 0x7f, 0x7fff, 0x8879, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xc, 0x6, 0x4, 0x12, 0x4, 0x3, 0x24, 0x5, 0x12, 0x6c, 0x9, 0x3, 0x60, 0x48, 0x6, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x4, 0x18, 0x5f, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1, 0xb, 0x2, 0x3, 0xb, 0xb, 0x5e, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x81, 0x3, 0x8, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x7f, 0x26e7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x2, 0xb, 0x1, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x493, 0x3f, 0x8, 0x101, 0xff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7b27, 0x1f, 0x3ff, 0x7, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x9, 0xfffb, 0x100, 0xff, 0x6, 0xcbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x401, 0x6, 0x0, 0x3, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x3, 0x401, 0x1, 0xfffc, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:07 executing program 1: pipe(&(0x7f0000000040)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_open(r0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x3d}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 623.906334][T15714] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:21:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x8}, 0x18) ioctl$TCFLSH(r2, 0x540b, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x8}, 0x18) (async) ioctl$TCFLSH(r2, 0x540b, 0x2) (async) [ 623.989816][ T3625] Bluetooth: hci7: sending frame failed (-49) [ 623.997109][ T3639] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 624.022800][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.030053][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.132219][T15742] ptm ptm1: ldisc open failed (-12), clearing slot 1 05:21:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x4, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="9118e0fddbce1e50f2bcd92f8de0b22db946a49defeb29c64cbea77adc2d976917803baf71d8881ca4a96ded06f6783de89b0ba97964e4e5ac2cd8762fe63cb4c815c448900a779ce174afbb0adca698e90240a15651750aaf63414585792cd36efe5ff44194f9229361f4e5b4d9f23a3540fab30d8f2693f97635c23c1fe474b082858ca79dd3c798773ea9658799d6991177e54a6b329a32984f291533fe3087d3741b2a1c330ce639618e4a57b56224f53f663eba680d171eb33db4cb09c6aae834fd5966231d11a0e28c41bc10b03a9a96012f07e759810230f6377e668a9bb4419251d124a0abb8621304fb50473c97682d8f7c94", 0xf7}, {&(0x7f0000000740)="38e74c61ca4c08ed4b5bb95dee2d8953d38820e72762f3f864796e1b86dc4b3703c8b33798824e52de7aa2233d49d233665f7d57b8ad3b4b1cdbabbb6701508eeccdac90d5b6bcb62c77f31f463e94454f03d39986c9e30ca9045f122c45944ef285a44d1713aaa06d6bbcfd8cf87f699adc8842335c3795787926ae8b4f2e56800f7381c360ac62f87447acf750bf8f35425f72aac3f424a0378b510d1498842e0d9c47a7f9f2e333885bee406f9b64d4df23d5f0e8ff0f133fe895ffd6af7361692d4422525a", 0xc7}], 0x2, &(0x7f0000000840)=[{0x1010, 0x119, 0x5, "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"}], 0x1010}}], 0x1, 0x8090) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0xfffffffffffff001, 0x4}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) 05:21:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xf8, r2, 0xb892db0657f11360, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0xc0, 0x70, [@NL80211_MESH_SETUP_IE={0xb9, 0x3, "dbe54ba9fbf995b510ff73426818b33114486f1e863a2a7dcbe47dd56d36e1547496f2259fb326b9647d9341d30a9047ea381e506543dc4ec4685f6306d2377d3f3cc3bb3245d604e12caae414eed7fe0208ed68e41b8216162e6b58d305afe2848d2429609c6b062326a68f896ea74dda3b6f07762f147d7a2b64af0cea95f90045d1a3ca5ae56f738abbc39413bbcd577c42c19092239c335e36728af4bc5968669aab9915ea6fee84787e60881e298c7dea8b2f"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4d76ec67}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xf8}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = dup2(r4, r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r6, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r9 = dup2(0xffffffffffffffff, r7) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:09 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x4f0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x85d9, 0x7ff, 0xac, 0x1, 0x2, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x24, 0x18, 0x7, 0x30, 0x2, 0x36, 0x5a, 0x6c, 0x24, 0xc, 0x1b, 0x2, 0x1, 0x24, 0x3, 0xb, 0x60, 0x6, 0x6c, 0xc, 0x6, 0x3, 0x2, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6c, 0x36, 0x36, 0x18, 0x16, 0x6, 0xc, 0x1, 0x60, 0x35, 0x6, 0x30, 0x18, 0x4, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x60, 0x36, 0xb, 0x36, 0x30, 0xc, 0x5, 0x2, 0x2, 0x36, 0x64, 0xb, 0x16, 0x16, 0x12, 0x17, 0x9, 0x4, 0x9, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xd4e5, 0x2, 0x7ff, 0xfffa, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x174, 0x200, 0xf4, 0xcb2, 0x80, 0x69, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xdc3b, 0x8, 0x9, 0x99, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6c}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x2, 0x6}, {}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1a, 0x8, 0xdb, 0x5, 0x400, 0xfebe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0xc, 0x16, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x6, 0x6, 0x4e, 0x2b13, 0x3, 0x29b4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1077, 0x2, 0x40, 0x3, 0x0, 0xe6e7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x60, 0x9, 0x1b, 0xc, 0x4, 0x6c, 0x1b, 0x3, 0x16, 0x571ac431cd32363e, 0x6c, 0x30, 0x30, 0xc, 0x12, 0x16, 0x48, 0x31, 0x18, 0x5e, 0x1b, 0x4, 0x5, 0x5, 0x60, 0x30]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x2}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x3, 0x81, 0x3, 0x0, 0x7fff, 0x3, 0x2ee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x9, 0x1, 0x8001, 0x5, 0x5a5a, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x1b, 0x5, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x7, 0x200, 0x7, 0x7f, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41b, 0x4, 0x5c, 0x4, 0x7f, 0x7fff, 0x8879, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xc, 0x6, 0x4, 0x12, 0x4, 0x3, 0x24, 0x5, 0x12, 0x6c, 0x9, 0x3, 0x60, 0x48, 0x6, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x4, 0x18, 0x5f, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1, 0xb, 0x2, 0x3, 0xb, 0xb, 0x5e, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x81, 0x3, 0x8, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x7f, 0x26e7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x2, 0xb, 0x1, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x493, 0x3f, 0x8, 0x101, 0xff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7b27, 0x1f, 0x3ff, 0x7, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x9, 0xfffb, 0x100, 0xff, 0x6, 0xcbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x401, 0x6, 0x0, 0x3, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x3, 0x401, 0x1, 0xfffc, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x4f0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x85d9, 0x7ff, 0xac, 0x1, 0x2, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x24, 0x18, 0x7, 0x30, 0x2, 0x36, 0x5a, 0x6c, 0x24, 0xc, 0x1b, 0x2, 0x1, 0x24, 0x3, 0xb, 0x60, 0x6, 0x6c, 0xc, 0x6, 0x3, 0x2, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6c, 0x36, 0x36, 0x18, 0x16, 0x6, 0xc, 0x1, 0x60, 0x35, 0x6, 0x30, 0x18, 0x4, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x60, 0x36, 0xb, 0x36, 0x30, 0xc, 0x5, 0x2, 0x2, 0x36, 0x64, 0xb, 0x16, 0x16, 0x12, 0x17, 0x9, 0x4, 0x9, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xd4e5, 0x2, 0x7ff, 0xfffa, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x174, 0x200, 0xf4, 0xcb2, 0x80, 0x69, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xdc3b, 0x8, 0x9, 0x99, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6c}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x2, 0x6}, {}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1a, 0x8, 0xdb, 0x5, 0x400, 0xfebe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0xc, 0x16, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x6, 0x6, 0x4e, 0x2b13, 0x3, 0x29b4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1077, 0x2, 0x40, 0x3, 0x0, 0xe6e7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x60, 0x9, 0x1b, 0xc, 0x4, 0x6c, 0x1b, 0x3, 0x16, 0x571ac431cd32363e, 0x6c, 0x30, 0x30, 0xc, 0x12, 0x16, 0x48, 0x31, 0x18, 0x5e, 0x1b, 0x4, 0x5, 0x5, 0x60, 0x30]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x2}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x3, 0x81, 0x3, 0x0, 0x7fff, 0x3, 0x2ee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x9, 0x1, 0x8001, 0x5, 0x5a5a, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x1b, 0x5, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x7, 0x200, 0x7, 0x7f, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41b, 0x4, 0x5c, 0x4, 0x7f, 0x7fff, 0x8879, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xc, 0x6, 0x4, 0x12, 0x4, 0x3, 0x24, 0x5, 0x12, 0x6c, 0x9, 0x3, 0x60, 0x48, 0x6, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x4, 0x18, 0x5f, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1, 0xb, 0x2, 0x3, 0xb, 0xb, 0x5e, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x81, 0x3, 0x8, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x7f, 0x26e7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x2, 0xb, 0x1, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x493, 0x3f, 0x8, 0x101, 0xff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7b27, 0x1f, 0x3ff, 0x7, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x9, 0xfffb, 0x100, 0xff, 0x6, 0xcbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x401, 0x6, 0x0, 0x3, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x3, 0x401, 0x1, 0xfffc, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:21:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 625.697617][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:09 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x0) write$snddsp(r0, 0x0, 0x0) [ 625.807685][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 625.816849][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00./fise0\x00']) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) 05:21:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "d918baa93caa0204c1f7f21752a7bfa9d59cc77091ac847c1c5d0b19a4765d2248598f5ac0fa024ab4a401368f60c50ae77b39b1309aff7f385369eeca2f347f", "e274782501d127130bf5f6e391e69ee1f67aa9084bed41168d8fe810066b5c2c8c4e7d1560ff25b593c876485c81d59a4fcbd40d329bda1b370074f80e1c1d38", "ee48e86cf03bb92f0efac5f3486b64f71e51716c44d0a5790544cb446363a0d8"}) 05:21:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:09 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)) 05:21:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xffffffff) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 626.039280][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 626.046560][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2, 0x8}, 0x18) ioctl$TCFLSH(r2, 0x540b, 0x2) 05:21:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000440)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, '\x00', [@generic={0x0, 0x7, "56ba11a9567f5f"}]}}}], 0x28}, 0x0) [ 626.097780][ T3639] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 626.106016][T10190] Bluetooth: hci7: command tx timeout [ 627.857737][ T6342] Bluetooth: hci8: command 0x1003 tx timeout [ 627.865146][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 627.867869][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 627.880642][T10190] Bluetooth: hci6: command tx timeout 05:21:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x4, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="9118e0fddbce1e50f2bcd92f8de0b22db946a49defeb29c64cbea77adc2d976917803baf71d8881ca4a96ded06f6783de89b0ba97964e4e5ac2cd8762fe63cb4c815c448900a779ce174afbb0adca698e90240a15651750aaf63414585792cd36efe5ff44194f9229361f4e5b4d9f23a3540fab30d8f2693f97635c23c1fe474b082858ca79dd3c798773ea9658799d6991177e54a6b329a32984f291533fe3087d3741b2a1c330ce639618e4a57b56224f53f663eba680d171eb33db4cb09c6aae834fd5966231d11a0e28c41bc10b03a9a96012f07e759810230f6377e668a9bb4419251d124a0abb8621304fb50473c97682d8f7c94", 0xf7}, {&(0x7f0000000740)="38e74c61ca4c08ed4b5bb95dee2d8953d38820e72762f3f864796e1b86dc4b3703c8b33798824e52de7aa2233d49d233665f7d57b8ad3b4b1cdbabbb6701508eeccdac90d5b6bcb62c77f31f463e94454f03d39986c9e30ca9045f122c45944ef285a44d1713aaa06d6bbcfd8cf87f699adc8842335c3795787926ae8b4f2e56800f7381c360ac62f87447acf750bf8f35425f72aac3f424a0378b510d1498842e0d9c47a7f9f2e333885bee406f9b64d4df23d5f0e8ff0f133fe895ffd6af7361692d4422525a", 0xc7}], 0x2, &(0x7f0000000840)=[{0x1010, 0x119, 0x5, "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"}], 0x1010}}], 0x1, 0x8090) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0xfffffffffffff001, 0x4}) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x4, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="9118e0fddbce1e50f2bcd92f8de0b22db946a49defeb29c64cbea77adc2d976917803baf71d8881ca4a96ded06f6783de89b0ba97964e4e5ac2cd8762fe63cb4c815c448900a779ce174afbb0adca698e90240a15651750aaf63414585792cd36efe5ff44194f9229361f4e5b4d9f23a3540fab30d8f2693f97635c23c1fe474b082858ca79dd3c798773ea9658799d6991177e54a6b329a32984f291533fe3087d3741b2a1c330ce639618e4a57b56224f53f663eba680d171eb33db4cb09c6aae834fd5966231d11a0e28c41bc10b03a9a96012f07e759810230f6377e668a9bb4419251d124a0abb8621304fb50473c97682d8f7c94", 0xf7}, {&(0x7f0000000740)="38e74c61ca4c08ed4b5bb95dee2d8953d38820e72762f3f864796e1b86dc4b3703c8b33798824e52de7aa2233d49d233665f7d57b8ad3b4b1cdbabbb6701508eeccdac90d5b6bcb62c77f31f463e94454f03d39986c9e30ca9045f122c45944ef285a44d1713aaa06d6bbcfd8cf87f699adc8842335c3795787926ae8b4f2e56800f7381c360ac62f87447acf750bf8f35425f72aac3f424a0378b510d1498842e0d9c47a7f9f2e333885bee406f9b64d4df23d5f0e8ff0f133fe895ffd6af7361692d4422525a", 0xc7}], 0x2, &(0x7f0000000840)=[{0x1010, 0x119, 0x5, "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"}], 0x1010}}], 0x1, 0x8090) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0xfffffffffffff001, 0x4}) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r2, r2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) (async) 05:21:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00./fise0\x00']) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00./fise0\x00']) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) (async) 05:21:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44088}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x400047}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @random="d616c8ef1fb3", {0x3, 0x4f2}}, @ver_80211n={0x0, 0xff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x14, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x5, 0x0, 0xfffe]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r10 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDSKBLED(r10, 0x4b65, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:11 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc0096616, 0x0) 05:21:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x400000000003) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000040)={0x39, 0x8, &(0x7f0000000280)}) 05:21:11 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x4f0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x85d9, 0x7ff, 0xac, 0x1, 0x2, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x24, 0x18, 0x7, 0x30, 0x2, 0x36, 0x5a, 0x6c, 0x24, 0xc, 0x1b, 0x2, 0x1, 0x24, 0x3, 0xb, 0x60, 0x6, 0x6c, 0xc, 0x6, 0x3, 0x2, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6c, 0x36, 0x36, 0x18, 0x16, 0x6, 0xc, 0x1, 0x60, 0x35, 0x6, 0x30, 0x18, 0x4, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x60, 0x36, 0xb, 0x36, 0x30, 0xc, 0x5, 0x2, 0x2, 0x36, 0x64, 0xb, 0x16, 0x16, 0x12, 0x17, 0x9, 0x4, 0x9, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xd4e5, 0x2, 0x7ff, 0xfffa, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x174, 0x200, 0xf4, 0xcb2, 0x80, 0x69, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xdc3b, 0x8, 0x9, 0x99, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6c}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x2, 0x6}, {}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1a, 0x8, 0xdb, 0x5, 0x400, 0xfebe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0xc, 0x16, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x6, 0x6, 0x4e, 0x2b13, 0x3, 0x29b4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1077, 0x2, 0x40, 0x3, 0x0, 0xe6e7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x60, 0x9, 0x1b, 0xc, 0x4, 0x6c, 0x1b, 0x3, 0x16, 0x571ac431cd32363e, 0x6c, 0x30, 0x30, 0xc, 0x12, 0x16, 0x48, 0x31, 0x18, 0x5e, 0x1b, 0x4, 0x5, 0x5, 0x60, 0x30]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x2}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x3, 0x81, 0x3, 0x0, 0x7fff, 0x3, 0x2ee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x9, 0x1, 0x8001, 0x5, 0x5a5a, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x1b, 0x5, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x7, 0x200, 0x7, 0x7f, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41b, 0x4, 0x5c, 0x4, 0x7f, 0x7fff, 0x8879, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xc, 0x6, 0x4, 0x12, 0x4, 0x3, 0x24, 0x5, 0x12, 0x6c, 0x9, 0x3, 0x60, 0x48, 0x6, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x4, 0x18, 0x5f, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1, 0xb, 0x2, 0x3, 0xb, 0xb, 0x5e, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x81, 0x3, 0x8, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x7f, 0x26e7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x2, 0xb, 0x1, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x493, 0x3f, 0x8, 0x101, 0xff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7b27, 0x1f, 0x3ff, 0x7, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x9, 0xfffb, 0x100, 0xff, 0x6, 0xcbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x401, 0x6, 0x0, 0x3, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x3, 0x401, 0x1, 0xfffc, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x4f0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4dc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffc1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}]}, {0x22c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x5, 0x85d9, 0x7ff, 0xac, 0x1, 0x2, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x7}, {0x6, 0x7}, {0x2, 0x1f}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x12, 0x36, 0x24, 0x18, 0x7, 0x30, 0x2, 0x36, 0x5a, 0x6c, 0x24, 0xc, 0x1b, 0x2, 0x1, 0x24, 0x3, 0xb, 0x60, 0x6, 0x6c, 0xc, 0x6, 0x3, 0x2, 0x48, 0x48]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x9, 0x6c, 0x36, 0x36, 0x18, 0x16, 0x6, 0xc, 0x1, 0x60, 0x35, 0x6, 0x30, 0x18, 0x4, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x60, 0x36, 0xb, 0x36, 0x30, 0xc, 0x5, 0x2, 0x2, 0x36, 0x64, 0xb, 0x16, 0x16, 0x12, 0x17, 0x9, 0x4, 0x9, 0x0, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xd4e5, 0x2, 0x7ff, 0xfffa, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x174, 0x200, 0xf4, 0xcb2, 0x80, 0x69, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x101, 0xdc3b, 0x8, 0x9, 0x99, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6c}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x2, 0x6}, {}, {0x3, 0x1}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x1a, 0x8, 0xdb, 0x5, 0x400, 0xfebe, 0x2]}}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x48, 0xc, 0x16, 0x1, 0x30]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x5, 0x5}, {0x4, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x7, 0x7}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x6, 0x1}, {0x7, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x3}, {0x6}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5}, {0x3, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5f, 0x6, 0x6, 0x4e, 0x2b13, 0x3, 0x29b4, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1077, 0x2, 0x40, 0x3, 0x0, 0xe6e7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x60, 0x9, 0x1b, 0xc, 0x4, 0x6c, 0x1b, 0x3, 0x16, 0x571ac431cd32363e, 0x6c, 0x30, 0x30, 0xc, 0x12, 0x16, 0x48, 0x31, 0x18, 0x5e, 0x1b, 0x4, 0x5, 0x5, 0x60, 0x30]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7}, {0x5, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x2}]}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x3, 0x81, 0x3, 0x0, 0x7fff, 0x3, 0x2ee2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x9, 0x1, 0x8001, 0x5, 0x5a5a, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x4, 0x1b, 0x5, 0x1b, 0x5, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x16, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x4, 0x7, 0x200, 0x7, 0x7f, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x41b, 0x4, 0x5c, 0x4, 0x7f, 0x7fff, 0x8879, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0xc, 0x6, 0x4, 0x12, 0x4, 0x3, 0x24, 0x5, 0x12, 0x6c, 0x9, 0x3, 0x60, 0x48, 0x6, 0x2, 0x6c, 0x60, 0x48, 0x12, 0x4, 0x18, 0x5f, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1, 0xb, 0x2, 0x3, 0xb, 0xb, 0x5e, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x81, 0x3, 0x8, 0x1, 0x0, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x2, 0x7fff, 0x0, 0x3, 0x7f, 0x26e7]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0x2, 0xb, 0x1, 0x60, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x0, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x493, 0x3f, 0x8, 0x101, 0xff, 0x2, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7b27, 0x1f, 0x3ff, 0x7, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x7, 0x9, 0xfffb, 0x100, 0xff, 0x6, 0xcbf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x401, 0x6, 0x0, 0x3, 0xfffd, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x5}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x101, 0x3, 0x401, 0x1, 0xfffc, 0x6, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:21:11 executing program 1: socketpair(0x28, 0x4, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40840) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20100080}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10000800}, 0x24040012) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x80, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 05:21:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x400000000003) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000040)={0x39, 0x8, &(0x7f0000000280)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x400000000003) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000040)={0x39, 0x8, &(0x7f0000000280)}) (async) 05:21:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000240)) [ 628.128280][T15802] ptm ptm5: ldisc open failed (-12), clearing slot 5 05:21:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x400000000003) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = dup2(r1, r1) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000040)={0x39, 0x8, &(0x7f0000000280)}) [ 628.173271][T15819] ptm ptm6: ldisc open failed (-12), clearing slot 6 05:21:11 executing program 1: unshare(0x4a000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x0, 0x3}, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) 05:21:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/4632], 0x1220) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0x990000, 0x6, 0x18f, r6, 0x0, &(0x7f0000000100)={0x990a69, 0xfffffff9, '\x00', @p_u16=&(0x7f00000000c0)=0x3}}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 628.418582][T14587] Bluetooth: Error in BCSP hdr checksum [ 628.677966][ T1088] Bluetooth: Error in BCSP hdr checksum [ 628.963285][T15860] tipc: Started in network mode [ 628.977669][T15860] tipc: Node identity 9, cluster identity 4711 [ 628.985211][T15860] tipc: Node number set to 9 [ 629.120993][ T962] tipc: Left network mode 05:21:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async, rerun: 64) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x4, 0x4) (rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="9118e0fddbce1e50f2bcd92f8de0b22db946a49defeb29c64cbea77adc2d976917803baf71d8881ca4a96ded06f6783de89b0ba97964e4e5ac2cd8762fe63cb4c815c448900a779ce174afbb0adca698e90240a15651750aaf63414585792cd36efe5ff44194f9229361f4e5b4d9f23a3540fab30d8f2693f97635c23c1fe474b082858ca79dd3c798773ea9658799d6991177e54a6b329a32984f291533fe3087d3741b2a1c330ce639618e4a57b56224f53f663eba680d171eb33db4cb09c6aae834fd5966231d11a0e28c41bc10b03a9a96012f07e759810230f6377e668a9bb4419251d124a0abb8621304fb50473c97682d8f7c94", 0xf7}, {&(0x7f0000000740)="38e74c61ca4c08ed4b5bb95dee2d8953d38820e72762f3f864796e1b86dc4b3703c8b33798824e52de7aa2233d49d233665f7d57b8ad3b4b1cdbabbb6701508eeccdac90d5b6bcb62c77f31f463e94454f03d39986c9e30ca9045f122c45944ef285a44d1713aaa06d6bbcfd8cf87f699adc8842335c3795787926ae8b4f2e56800f7381c360ac62f87447acf750bf8f35425f72aac3f424a0378b510d1498842e0d9c47a7f9f2e333885bee406f9b64d4df23d5f0e8ff0f133fe895ffd6af7361692d4422525a", 0xc7}], 0x2, &(0x7f0000000840)=[{0x1010, 0x119, 0x5, "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"}], 0x1010}}], 0x1, 0x8090) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0xfffffffffffff001, 0x4}) (async, rerun: 32) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) [ 630.097754][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 630.106288][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 630.107640][T10192] Bluetooth: hci6: command tx timeout [ 630.114224][ T6342] Bluetooth: hci7: command 0x1003 tx timeout [ 630.118589][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00./fise0\x00']) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00./fise0\x00']) (async) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) (async) [ 630.197488][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r9 = dup2(r6, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44088}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x400047}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @random="d616c8ef1fb3", {0x3, 0x4f2}}, @ver_80211n={0x0, 0xff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x14, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x5, 0x0, 0xfffe]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r10 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 64) ioctl$KDSKBLED(r10, 0x4b65, 0x4) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/4632], 0x1220) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0x990000, 0x6, 0x18f, r6, 0x0, &(0x7f0000000100)={0x990a69, 0xfffffff9, '\x00', @p_u16=&(0x7f00000000c0)=0x3}}) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:13 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000040)={0x0, [0x7fff]}) 05:21:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:13 executing program 1: syz_clone(0x300000, 0x0, 0x0, &(0x7f0000000d00), 0x0, 0x0) 05:21:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008900ed0020745cefc52682b9a9340000d6ca5d879c1aa878942db851725e6f96dbf656d4b2d61e560e48aaf30fe6d8f69eea97d1a26431a2014b24c06ba735ed109b587668d1db34aa330fd2596b555a9acd", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = dup2(r5, r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000010) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40c0) ioctl$TIOCSTI(r4, 0x5423, &(0x7f0000000040)) 05:21:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6tnl0\x00', 0x400}) 05:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/4632], 0x1220) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0x990000, 0x6, 0x18f, r6, 0x0, &(0x7f0000000100)={0x990a69, 0xfffffff9, '\x00', @p_u16=&(0x7f00000000c0)=0x3}}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:14 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0xc, 0x13, r0, 0x82000000) 05:21:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008900ed0020745cefc52682b9a9340000d6ca5d879c1aa878942db851725e6f96dbf656d4b2d61e560e48aaf30fe6d8f69eea97d1a26431a2014b24c06ba735ed109b587668d1db34aa330fd2596b555a9acd", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r8 = dup2(r5, r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000010) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40c0) (async) ioctl$TIOCSTI(r4, 0x5423, &(0x7f0000000040)) 05:21:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x3, 0x7, 0x9, 0xfffffffd, 0x10, "7b0630704949897bd5e3ee472263550d5b3e64"}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x80000000, 0x14, @mcast2, @private2, 0x0, 0x40, 0x7fff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0x9, 0x2, 0x7, 0x6847, 0xc, "4c73af886946e792c551018b45235533c64eb4"}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 630.645947][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 05:21:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x52b7, 0x802) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r9 = dup2(r6, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44088}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x400047}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @random="d616c8ef1fb3", {0x3, 0x4f2}}, @ver_80211n={0x0, 0xff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x14, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x5, 0x0, 0xfffe]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r10 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$KDSKBLED(r10, 0x4b65, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xa1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008900ed0020745cefc52682b9a9340000d6ca5d879c1aa878942db851725e6f96dbf656d4b2d61e560e48aaf30fe6d8f69eea97d1a26431a2014b24c06ba735ed109b587668d1db34aa330fd2596b555a9acd", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r8 = dup2(r5, r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000010) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40c0) (async) ioctl$TIOCSTI(r4, 0x5423, &(0x7f0000000040)) 05:21:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 632.337483][T10192] Bluetooth: hci6: command 0x1003 tx timeout [ 632.343696][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:16 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x0) 05:21:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x52b7, 0x802) (rerun: 64) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}}, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 632.497736][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 632.497890][T15872] Bluetooth: hci7: command 0x1003 tx timeout 05:21:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 05:21:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}}, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}}, 0x0) (async) ioctl$KDMKTONE(r3, 0x4b30, 0x3) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x3, 0x7, 0x9, 0xfffffffd, 0x10, "7b0630704949897bd5e3ee472263550d5b3e64"}) (async, rerun: 32) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x80000000, 0x14, @mcast2, @private2, 0x0, 0x40, 0x7fff}}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0x9, 0x2, 0x7, 0x6847, 0xc, "4c73af886946e792c551018b45235533c64eb4"}) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 632.657676][ T917] Bluetooth: hci8: command 0x1003 tx timeout [ 632.667456][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:16 executing program 1: syz_mount_image$qnx4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 05:21:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x52b7, 0x802) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x52b7, 0x802) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:16 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x127300) 05:21:16 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (rerun: 64) 05:21:16 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001940)='ns/pid\x00') 05:21:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 632.846870][T15967] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:21:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000140)=@abs={0x1}, 0x6e, 0x0}, 0x0) [ 632.916171][T15981] ptm ptm3: ldisc open failed (-12), clearing slot 3 05:21:16 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000140)) 05:21:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r3 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}}, 0x0) (async) ioctl$KDMKTONE(r3, 0x4b30, 0x3) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 632.969221][T15989] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:21:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 633.110120][ T3639] Bluetooth: hci6: sending frame failed (-49) [ 633.118042][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x3, 0x7, 0x9, 0xfffffffd, 0x10, "7b0630704949897bd5e3ee472263550d5b3e64"}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x80000000, 0x14, @mcast2, @private2, 0x0, 0x40, 0x7fff}}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000300)={0x9, 0x2, 0x7, 0x6847, 0xc, "4c73af886946e792c551018b45235533c64eb4"}) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 05:21:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) dup3(r1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48082) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000000000000001, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="f6745851af6f0428d25059184df9101d4fb0998f8c92a8a70ba4183d764233e8e06883565dab69b5b9268c3e2f87de785e898d95106e8d46881f174625596f8cc2afd5c12f72ed5565e27567b904ac868ec4aaac240ae51ab6d09f52fc938e341d4c53a8208e6eee799b77abbeb8868047fb74179e68739328354e2680e4ea1257d6b8434b440b6cde02b3948f11fb04618e026df8b408a72b04bab169090ed75b4b3b968035a638", 0xa8, 0x7}, {&(0x7f0000000280)="cbb1276627983ec4e805b91216b0b37f9bc9ce7f3bdf5f1abce57f844dca0166f0970f86050ca2c3c99fea325ac73280602f6d38148e1c56f2be06e9750e0a4c6f0fe385492c92925436a11a219102e10713cecb733828183ea6b3f0ada39f84680212d06f3a32251b488a372740ae5d038c886acd6269d17ec630dc12ce0ca9d05d274c1af44308eaee6fcd69a95f31df29484bbe4ebd963e73d2fe35a1e59b85bdb127205f5e710172e6782a1a1064a31e7ca3c68e3e2d2ee5af75d11626a84969e2068f", 0xc5, 0x8001}, {&(0x7f00000000c0)="0f398eb491d7196b8f1e826d71ca2ff9700adfa453abdbc43f5db987a308c26ae0da5d5e5139382b59c0887da6fdfa6952d8a224d7a0c9c961ba40dbd009c2a44c4ff1b37b4fc6031c9a02f2289731e5817f239a364ebf5935f94ed1b43dbe2c5d47e7ef1bb7c7b78d0572ac2c766d580946e0ce01ae", 0x76, 0x3}, {&(0x7f0000000380)="890ff5d24d75368965a37c9b5ff81476916078f392a24a4ebb7aef401d41a72f3034f020a615ade42476d4b0be1330b71084d72e82f57d7a6329098c25b30c323dc6a72b0debf83b3784d6267903a0a28b752e56c9efce0bf4347e8953c8841d1c053e3861437d437b320a79cfcf639ad3c33f9177142081f2cf16335220e7d5", 0x80}], 0x1480, &(0x7f0000000480)={[{@suiddir}, {}, {@data_ordered}, {}, {@errors_withdraw}, {@noloccookie}, {@localflocks}, {@norgrplvb}, {@data_ordered}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000640)={0xffffffff, 0x338, 0x0, 0xfff, 0x1f, "1ad730311ec11354b7294dea1067d9e94b4417", 0x0, 0x1}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r2}, 0xd2b2, 0x6, 0x3}) 05:21:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept$inet(r0, 0x0, 0x0) 05:21:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) 05:21:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 634.817458][T10192] Bluetooth: hci7: command 0x1003 tx timeout [ 634.817576][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 634.881473][T16013] [U]  [ 634.938222][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 634.945524][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 634.958654][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 634.973466][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) 05:21:18 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1d, 0x8, 0xffffffff, 0x544, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000a00)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a40), 0x4000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000c40)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 634.992686][T16015] loop4: detected capacity change from 0 to 264192 [ 635.006311][T16019] ptm ptm2: ldisc open failed (-12), clearing slot 2 05:21:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffe, 0x6, 0x7f, 0x8, 0x9, "594826be0da33368940729e6bb936862ff837a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) 05:21:18 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)={0x0, 0x0, 0x18}, 0x10) 05:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48082) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000000000000001, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="f6745851af6f0428d25059184df9101d4fb0998f8c92a8a70ba4183d764233e8e06883565dab69b5b9268c3e2f87de785e898d95106e8d46881f174625596f8cc2afd5c12f72ed5565e27567b904ac868ec4aaac240ae51ab6d09f52fc938e341d4c53a8208e6eee799b77abbeb8868047fb74179e68739328354e2680e4ea1257d6b8434b440b6cde02b3948f11fb04618e026df8b408a72b04bab169090ed75b4b3b968035a638", 0xa8, 0x7}, {&(0x7f0000000280)="cbb1276627983ec4e805b91216b0b37f9bc9ce7f3bdf5f1abce57f844dca0166f0970f86050ca2c3c99fea325ac73280602f6d38148e1c56f2be06e9750e0a4c6f0fe385492c92925436a11a219102e10713cecb733828183ea6b3f0ada39f84680212d06f3a32251b488a372740ae5d038c886acd6269d17ec630dc12ce0ca9d05d274c1af44308eaee6fcd69a95f31df29484bbe4ebd963e73d2fe35a1e59b85bdb127205f5e710172e6782a1a1064a31e7ca3c68e3e2d2ee5af75d11626a84969e2068f", 0xc5, 0x8001}, {&(0x7f00000000c0)="0f398eb491d7196b8f1e826d71ca2ff9700adfa453abdbc43f5db987a308c26ae0da5d5e5139382b59c0887da6fdfa6952d8a224d7a0c9c961ba40dbd009c2a44c4ff1b37b4fc6031c9a02f2289731e5817f239a364ebf5935f94ed1b43dbe2c5d47e7ef1bb7c7b78d0572ac2c766d580946e0ce01ae", 0x76, 0x3}, {&(0x7f0000000380)="890ff5d24d75368965a37c9b5ff81476916078f392a24a4ebb7aef401d41a72f3034f020a615ade42476d4b0be1330b71084d72e82f57d7a6329098c25b30c323dc6a72b0debf83b3784d6267903a0a28b752e56c9efce0bf4347e8953c8841d1c053e3861437d437b320a79cfcf639ad3c33f9177142081f2cf16335220e7d5", 0x80}], 0x1480, &(0x7f0000000480)={[{@suiddir}, {}, {@data_ordered}, {}, {@errors_withdraw}, {@noloccookie}, {@localflocks}, {@norgrplvb}, {@data_ordered}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000640)={0xffffffff, 0x338, 0x0, 0xfff, 0x1f, "1ad730311ec11354b7294dea1067d9e94b4417", 0x0, 0x1}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r2}, 0xd2b2, 0x6, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48082) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000000000000001, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="f6745851af6f0428d25059184df9101d4fb0998f8c92a8a70ba4183d764233e8e06883565dab69b5b9268c3e2f87de785e898d95106e8d46881f174625596f8cc2afd5c12f72ed5565e27567b904ac868ec4aaac240ae51ab6d09f52fc938e341d4c53a8208e6eee799b77abbeb8868047fb74179e68739328354e2680e4ea1257d6b8434b440b6cde02b3948f11fb04618e026df8b408a72b04bab169090ed75b4b3b968035a638", 0xa8, 0x7}, {&(0x7f0000000280)="cbb1276627983ec4e805b91216b0b37f9bc9ce7f3bdf5f1abce57f844dca0166f0970f86050ca2c3c99fea325ac73280602f6d38148e1c56f2be06e9750e0a4c6f0fe385492c92925436a11a219102e10713cecb733828183ea6b3f0ada39f84680212d06f3a32251b488a372740ae5d038c886acd6269d17ec630dc12ce0ca9d05d274c1af44308eaee6fcd69a95f31df29484bbe4ebd963e73d2fe35a1e59b85bdb127205f5e710172e6782a1a1064a31e7ca3c68e3e2d2ee5af75d11626a84969e2068f", 0xc5, 0x8001}, {&(0x7f00000000c0)="0f398eb491d7196b8f1e826d71ca2ff9700adfa453abdbc43f5db987a308c26ae0da5d5e5139382b59c0887da6fdfa6952d8a224d7a0c9c961ba40dbd009c2a44c4ff1b37b4fc6031c9a02f2289731e5817f239a364ebf5935f94ed1b43dbe2c5d47e7ef1bb7c7b78d0572ac2c766d580946e0ce01ae", 0x76, 0x3}, {&(0x7f0000000380)="890ff5d24d75368965a37c9b5ff81476916078f392a24a4ebb7aef401d41a72f3034f020a615ade42476d4b0be1330b71084d72e82f57d7a6329098c25b30c323dc6a72b0debf83b3784d6267903a0a28b752e56c9efce0bf4347e8953c8841d1c053e3861437d437b320a79cfcf639ad3c33f9177142081f2cf16335220e7d5", 0x80}], 0x1480, &(0x7f0000000480)={[{@suiddir}, {}, {@data_ordered}, {}, {@errors_withdraw}, {@noloccookie}, {@localflocks}, {@norgrplvb}, {@data_ordered}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000640)={0xffffffff, 0x338, 0x0, 0xfff, 0x1f, "1ad730311ec11354b7294dea1067d9e94b4417", 0x0, 0x1}) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r2}, 0xd2b2, 0x6, 0x3}) (async) [ 635.162888][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 635.170590][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 635.189985][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 635.197816][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 635.288375][T16044] loop4: detected capacity change from 0 to 264192 [ 635.376910][T16044] ptm ptm0: ldisc open failed (-12), clearing slot 0 05:21:20 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000980), 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 05:21:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1, 0x100, 0x4, "68cbb0c81f609565087b7f7478c2a90b6b8f3e"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r6 = openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x2800, 0x108) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000300)="b3867aa81ed096e70e9ba3888657dcbf8b09de50dd497513346fa25438406d5c84716fc6150cb9dca69e906deead19fcf679707778fdaacd449ebcdc3f5c777a2b1ec470d4df644198a8acad4e1187ee84577f0b56fe2475218042f438f27d8bae554576850057d90e633fba002d91d301c7cb0f288ad0790f094b680d58e292d693ebb79606fbca0e58a54d90f91bebb1c598c255c50eeb8883cfae189833e248d8873ae4091ac3d849d22d6703bc8d9be17232164b9c5f953e19d47a17ccf9606cf127fa25b215161fc17601558b515f24fd9293dcf1c738210ef815dc8063dd") ioctl$KDADDIO(r0, 0x400455c8, 0xff) 05:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffe, 0x6, 0x7f, 0x8, 0x9, "594826be0da33368940729e6bb936862ff837a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffe, 0x6, 0x7f, 0x8, 0x9, "594826be0da33368940729e6bb936862ff837a"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) dup3(r1, r0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:20 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x105043, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x401, 0x5, 0x10001, 0x6, 0x2, "e53cc721e88efd3c32fb12e8db2a1f80bdb758"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001ecbaf306a063dfe180000007c7ee9cd1b78ebc03b495a1520b30382c32fbb67fa826ff0181b7fd9790d5327d98e9653e46f641c6f24ff07846e327c34f3fe6140cbc36ea01010d38ff5926e49e509022049c73ceca6456cb3f00538383c404433fb3d95deaa99f3596a3b565f672525b1c5cdbe3973f370c593e72b11f66477c67e6975051b2f5ba60433a359c8a6ff418beb3d0741bcd9537a188c20247be096a8abb5015931fa345da899a884e756e5e5176d3293ed22aaac10113b7f7575f693210010", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f666900000000"]) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0xd, 0xa90}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ath9k_htc', 0x101000, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x5000, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=+&+,cache=mmap,cache=none,loose,access=user,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,dont_hash,uid=', @ANYRESDEC=r7, @ANYBLOB]) [ 636.977732][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 637.084019][ T3625] Bluetooth: hci7: sending frame failed (-49) [ 637.091771][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:21:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) 05:21:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1, 0x100, 0x4, "68cbb0c81f609565087b7f7478c2a90b6b8f3e"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r6 = openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x2800, 0x108) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000300)="b3867aa81ed096e70e9ba3888657dcbf8b09de50dd497513346fa25438406d5c84716fc6150cb9dca69e906deead19fcf679707778fdaacd449ebcdc3f5c777a2b1ec470d4df644198a8acad4e1187ee84577f0b56fe2475218042f438f27d8bae554576850057d90e633fba002d91d301c7cb0f288ad0790f094b680d58e292d693ebb79606fbca0e58a54d90f91bebb1c598c255c50eeb8883cfae189833e248d8873ae4091ac3d849d22d6703bc8d9be17232164b9c5f953e19d47a17ccf9606cf127fa25b215161fc17601558b515f24fd9293dcf1c738210ef815dc8063dd") ioctl$KDADDIO(r0, 0x400455c8, 0xff) 05:21:20 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x105043, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x401, 0x5, 0x10001, 0x6, 0x2, "e53cc721e88efd3c32fb12e8db2a1f80bdb758"}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001ecbaf306a063dfe180000007c7ee9cd1b78ebc03b495a1520b30382c32fbb67fa826ff0181b7fd9790d5327d98e9653e46f641c6f24ff07846e327c34f3fe6140cbc36ea01010d38ff5926e49e509022049c73ceca6456cb3f00538383c404433fb3d95deaa99f3596a3b565f672525b1c5cdbe3973f370c593e72b11f66477c67e6975051b2f5ba60433a359c8a6ff418beb3d0741bcd9537a188c20247be096a8abb5015931fa345da899a884e756e5e5176d3293ed22aaac10113b7f7575f693210010", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f666900000000"]) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0xd, 0xa90}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ath9k_htc', 0x101000, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x5000, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=+&+,cache=mmap,cache=none,loose,access=user,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,dont_hash,uid=', @ANYRESDEC=r7, @ANYBLOB]) 05:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffe, 0x6, 0x7f, 0x8, 0x9, "594826be0da33368940729e6bb936862ff837a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 637.158934][T16072] [U]  05:21:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (async, rerun: 64) dup3(r1, r0, 0x0) (rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (rerun: 32) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) (rerun: 64) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x1, 0x100, 0x4, "68cbb0c81f609565087b7f7478c2a90b6b8f3e"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) r6 = openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x2800, 0x108) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000300)="b3867aa81ed096e70e9ba3888657dcbf8b09de50dd497513346fa25438406d5c84716fc6150cb9dca69e906deead19fcf679707778fdaacd449ebcdc3f5c777a2b1ec470d4df644198a8acad4e1187ee84577f0b56fe2475218042f438f27d8bae554576850057d90e633fba002d91d301c7cb0f288ad0790f094b680d58e292d693ebb79606fbca0e58a54d90f91bebb1c598c255c50eeb8883cfae189833e248d8873ae4091ac3d849d22d6703bc8d9be17232164b9c5f953e19d47a17ccf9606cf127fa25b215161fc17601558b515f24fd9293dcf1c738210ef815dc8063dd") (async) ioctl$KDADDIO(r0, 0x400455c8, 0xff) [ 637.244639][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 637.244656][ T27] audit: type=1326 audit(1646457680.841:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a8f689049 code=0x0 05:21:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 05:21:20 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="833a653fdcd094c03089839090c002561098ad6250bf18dd009f3b27a6b322af1eb814840b148f207a79b447adabaa27764dddcc33e52c", 0x37, 0x80}], 0x2150400, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@seclabel}, {@uid_gt}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x1) r6 = eventfd2(0x15c280, 0x80000) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0xff, 0x0, &(0x7f0000000340)=[r6, r2, r7, r2]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 05:21:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48082) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000000000000001, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="f6745851af6f0428d25059184df9101d4fb0998f8c92a8a70ba4183d764233e8e06883565dab69b5b9268c3e2f87de785e898d95106e8d46881f174625596f8cc2afd5c12f72ed5565e27567b904ac868ec4aaac240ae51ab6d09f52fc938e341d4c53a8208e6eee799b77abbeb8868047fb74179e68739328354e2680e4ea1257d6b8434b440b6cde02b3948f11fb04618e026df8b408a72b04bab169090ed75b4b3b968035a638", 0xa8, 0x7}, {&(0x7f0000000280)="cbb1276627983ec4e805b91216b0b37f9bc9ce7f3bdf5f1abce57f844dca0166f0970f86050ca2c3c99fea325ac73280602f6d38148e1c56f2be06e9750e0a4c6f0fe385492c92925436a11a219102e10713cecb733828183ea6b3f0ada39f84680212d06f3a32251b488a372740ae5d038c886acd6269d17ec630dc12ce0ca9d05d274c1af44308eaee6fcd69a95f31df29484bbe4ebd963e73d2fe35a1e59b85bdb127205f5e710172e6782a1a1064a31e7ca3c68e3e2d2ee5af75d11626a84969e2068f", 0xc5, 0x8001}, {&(0x7f00000000c0)="0f398eb491d7196b8f1e826d71ca2ff9700adfa453abdbc43f5db987a308c26ae0da5d5e5139382b59c0887da6fdfa6952d8a224d7a0c9c961ba40dbd009c2a44c4ff1b37b4fc6031c9a02f2289731e5817f239a364ebf5935f94ed1b43dbe2c5d47e7ef1bb7c7b78d0572ac2c766d580946e0ce01ae", 0x76, 0x3}, {&(0x7f0000000380)="890ff5d24d75368965a37c9b5ff81476916078f392a24a4ebb7aef401d41a72f3034f020a615ade42476d4b0be1330b71084d72e82f57d7a6329098c25b30c323dc6a72b0debf83b3784d6267903a0a28b752e56c9efce0bf4347e8953c8841d1c053e3861437d437b320a79cfcf639ad3c33f9177142081f2cf16335220e7d5", 0x80}], 0x1480, &(0x7f0000000480)={[{@suiddir}, {}, {@data_ordered}, {}, {@errors_withdraw}, {@noloccookie}, {@localflocks}, {@norgrplvb}, {@data_ordered}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000640)={0xffffffff, 0x338, 0x0, 0xfff, 0x1f, "1ad730311ec11354b7294dea1067d9e94b4417", 0x0, 0x1}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r2}, 0xd2b2, 0x6, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48082) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8000000000000001, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180)="f6745851af6f0428d25059184df9101d4fb0998f8c92a8a70ba4183d764233e8e06883565dab69b5b9268c3e2f87de785e898d95106e8d46881f174625596f8cc2afd5c12f72ed5565e27567b904ac868ec4aaac240ae51ab6d09f52fc938e341d4c53a8208e6eee799b77abbeb8868047fb74179e68739328354e2680e4ea1257d6b8434b440b6cde02b3948f11fb04618e026df8b408a72b04bab169090ed75b4b3b968035a638", 0xa8, 0x7}, {&(0x7f0000000280)="cbb1276627983ec4e805b91216b0b37f9bc9ce7f3bdf5f1abce57f844dca0166f0970f86050ca2c3c99fea325ac73280602f6d38148e1c56f2be06e9750e0a4c6f0fe385492c92925436a11a219102e10713cecb733828183ea6b3f0ada39f84680212d06f3a32251b488a372740ae5d038c886acd6269d17ec630dc12ce0ca9d05d274c1af44308eaee6fcd69a95f31df29484bbe4ebd963e73d2fe35a1e59b85bdb127205f5e710172e6782a1a1064a31e7ca3c68e3e2d2ee5af75d11626a84969e2068f", 0xc5, 0x8001}, {&(0x7f00000000c0)="0f398eb491d7196b8f1e826d71ca2ff9700adfa453abdbc43f5db987a308c26ae0da5d5e5139382b59c0887da6fdfa6952d8a224d7a0c9c961ba40dbd009c2a44c4ff1b37b4fc6031c9a02f2289731e5817f239a364ebf5935f94ed1b43dbe2c5d47e7ef1bb7c7b78d0572ac2c766d580946e0ce01ae", 0x76, 0x3}, {&(0x7f0000000380)="890ff5d24d75368965a37c9b5ff81476916078f392a24a4ebb7aef401d41a72f3034f020a615ade42476d4b0be1330b71084d72e82f57d7a6329098c25b30c323dc6a72b0debf83b3784d6267903a0a28b752e56c9efce0bf4347e8953c8841d1c053e3861437d437b320a79cfcf639ad3c33f9177142081f2cf16335220e7d5", 0x80}], 0x1480, &(0x7f0000000480)={[{@suiddir}, {}, {@data_ordered}, {}, {@errors_withdraw}, {@noloccookie}, {@localflocks}, {@norgrplvb}, {@data_ordered}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000640)={0xffffffff, 0x338, 0x0, 0xfff, 0x1f, "1ad730311ec11354b7294dea1067d9e94b4417", 0x0, 0x1}) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000540)={{r2}, 0xd2b2, 0x6, 0x3}) (async) [ 637.297572][T10191] Bluetooth: hci6: command 0x1003 tx timeout [ 637.303783][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 637.338264][T16090] [U]  05:21:21 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x105043, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x401, 0x5, 0x10001, 0x6, 0x2, "e53cc721e88efd3c32fb12e8db2a1f80bdb758"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001ecbaf306a063dfe180000007c7ee9cd1b78ebc03b495a1520b30382c32fbb67fa826ff0181b7fd9790d5327d98e9653e46f641c6f24ff07846e327c34f3fe6140cbc36ea01010d38ff5926e49e509022049c73ceca6456cb3f00538383c404433fb3d95deaa99f3596a3b565f672525b1c5cdbe3973f370c593e72b11f66477c67e6975051b2f5ba60433a359c8a6ff418beb3d0741bcd9537a188c20247be096a8abb5015931fa345da899a884e756e5e5176d3293ed22aaac10113b7f7575f693210010", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f666900000000"]) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0xd, 0xa90}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ath9k_htc', 0x101000, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x5000, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=+&+,cache=mmap,cache=none,loose,access=user,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,dont_hash,uid=', @ANYRESDEC=r7, @ANYBLOB]) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x105043, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x401, 0x5, 0x10001, 0x6, 0x2, "e53cc721e88efd3c32fb12e8db2a1f80bdb758"}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000001ecbaf306a063dfe180000007c7ee9cd1b78ebc03b495a1520b30382c32fbb67fa826ff0181b7fd9790d5327d98e9653e46f641c6f24ff07846e327c34f3fe6140cbc36ea01010d38ff5926e49e509022049c73ceca6456cb3f00538383c404433fb3d95deaa99f3596a3b565f672525b1c5cdbe3973f370c593e72b11f66477c67e6975051b2f5ba60433a359c8a6ff418beb3d0741bcd9537a188c20247be096a8abb5015931fa345da899a884e756e5e5176d3293ed22aaac10113b7f7575f693210010", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f666900000000"]) (async) ioctl$TCFLSH(r2, 0x540b, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)={0xd, 0xa90}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ath9k_htc', 0x101000, 0x40) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x5000, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cachetag=+&+,cache=mmap,cache=none,loose,access=user,dfltgid=', @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,dont_hash,uid=', @ANYRESDEC=r7, @ANYBLOB]) (async) 05:21:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='D \x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000fdffffff270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x190, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xfffffef0}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4f4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8e}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) fcntl$setstatus(r4, 0x4, 0x0) r5 = accept4(r4, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000640)=0x80, 0x81800) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@private, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x4) ioctl$KDADDIO(r3, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 637.402012][T16097] loop4: detected capacity change from 0 to 264192 05:21:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20}, 0x0) 05:21:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:21 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000640)={0x885f, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 637.542682][ T3635] Bluetooth: hci8: sending frame failed (-49) [ 637.550188][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='D \x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000fdffffff270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x190, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xfffffef0}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4f4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8e}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) fcntl$setstatus(r4, 0x4, 0x0) (async) r5 = accept4(r4, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000640)=0x80, 0x81800) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@private, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x4) ioctl$KDADDIO(r3, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:21 executing program 1: pselect6(0x40, &(0x7f0000000280)={0x3}, &(0x7f00000002c0)={0x1}, &(0x7f0000000300)={0x4}, 0x0, 0x0) 05:21:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:21 executing program 1: syz_mount_image$qnx4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xfdfdffff, &(0x7f00000013c0), 0x202040, &(0x7f0000001580)) [ 637.797757][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 637.805738][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='D \x00\x00', @ANYRES16=r2, @ANYBLOB="000100000000fdffffff270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x190, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xfffffef0}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4f4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x5a, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8e}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) fcntl$setstatus(r4, 0x4, 0x0) (async) r5 = accept4(r4, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000640)=0x80, 0x81800) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@private, @in6=@private0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x4) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 637.975716][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 637.983122][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 639.457613][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="833a653fdcd094c03089839090c002561098ad6250bf18dd009f3b27a6b322af1eb814840b148f207a79b447adabaa27764dddcc33e52c", 0x37, 0x80}], 0x2150400, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@seclabel}, {@uid_gt}]}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x1) (async, rerun: 32) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r5, 0x400455c8, 0x1) r6 = eventfd2(0x15c280, 0x80000) (async) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0xff, 0x0, &(0x7f0000000340)=[r6, r2, r7, r2]}, 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 05:21:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init1(0x80800) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30aa98d3f56100786becf5e6b9ee745482975929ae8e829eea9b165f7eac421c178ca524782d4d4a26fea2d03a4847ec9ec28ca24fe4745bf04499b30ac75c732e104fbec83cb170bbfe3c4feeb9c73d7e20ba2184f9d3ce010b9b388aeb0a39c5b047825e789519828b1dcc671e48e0ab7b4e806dd9d162952d7771cb780baf792ccafe91b89b401923ce3eb39a588b2a58eb4ae789d2d573e3dd05f752cbe33b157e6933f466f2c2f502bdf816"], 0x92) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0xfe) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, r1) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup3(r2, r3, 0x0) 05:21:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}}, &(0x7f0000000d40)=""/133, 0x36, 0x85, 0x1}, 0x20) 05:21:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2040, 0x1a0, 0x12}, 0x18) syz_open_pts(r1, 0x28000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340003000000feb75a89fd2acc0000", @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000280)={0x80, "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"}) [ 639.537624][T10191] Bluetooth: hci7: command 0x1003 tx timeout [ 639.538410][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 639.640901][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 639.648641][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 639.697590][T10190] Bluetooth: hci8: command 0x1003 tx timeout [ 639.706022][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x9) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) ioctl$KDADDIO(r2, 0x4b34, 0x3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:23 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000001140), 0x2002, 0x0) 05:21:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init1(0x80800) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30aa98d3f56100786becf5e6b9ee745482975929ae8e829eea9b165f7eac421c178ca524782d4d4a26fea2d03a4847ec9ec28ca24fe4745bf04499b30ac75c732e104fbec83cb170bbfe3c4feeb9c73d7e20ba2184f9d3ce010b9b388aeb0a39c5b047825e789519828b1dcc671e48e0ab7b4e806dd9d162952d7771cb780baf792ccafe91b89b401923ce3eb39a588b2a58eb4ae789d2d573e3dd05f752cbe33b157e6933f466f2c2f502bdf816"], 0x92) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0xfe) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, r1) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup3(r2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) inotify_init1(0x80800) (async) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30aa98d3f56100786becf5e6b9ee745482975929ae8e829eea9b165f7eac421c178ca524782d4d4a26fea2d03a4847ec9ec28ca24fe4745bf04499b30ac75c732e104fbec83cb170bbfe3c4feeb9c73d7e20ba2184f9d3ce010b9b388aeb0a39c5b047825e789519828b1dcc671e48e0ab7b4e806dd9d162952d7771cb780baf792ccafe91b89b401923ce3eb39a588b2a58eb4ae789d2d573e3dd05f752cbe33b157e6933f466f2c2f502bdf816"], 0x92) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0xfe) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, r1) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) dup3(r2, r3, 0x0) (async) 05:21:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:23 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x1d) 05:21:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="833a653fdcd094c03089839090c002561098ad6250bf18dd009f3b27a6b322af1eb814840b148f207a79b447adabaa27764dddcc33e52c", 0x37, 0x80}], 0x2150400, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x800}}, {@seclabel}, {@uid_gt}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (rerun: 64) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x1) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x1) (async) r6 = eventfd2(0x15c280, 0x80000) (async) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0xff, 0x0, &(0x7f0000000340)=[r6, r2, r7, r2]}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) [ 639.877105][ T3639] Bluetooth: hci6: sending frame failed (-49) [ 639.884619][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:23 executing program 0: dup(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x12) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/130, 0x82, 0x8) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:23 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init1(0x80800) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30aa98d3f56100786becf5e6b9ee745482975929ae8e829eea9b165f7eac421c178ca524782d4d4a26fea2d03a4847ec9ec28ca24fe4745bf04499b30ac75c732e104fbec83cb170bbfe3c4feeb9c73d7e20ba2184f9d3ce010b9b388aeb0a39c5b047825e789519828b1dcc671e48e0ab7b4e806dd9d162952d7771cb780baf792ccafe91b89b401923ce3eb39a588b2a58eb4ae789d2d573e3dd05f752cbe33b157e6933f466f2c2f502bdf816"], 0x92) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0xfe) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, r1) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup3(r2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) inotify_init1(0x80800) (async) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30aa98d3f56100786becf5e6b9ee745482975929ae8e829eea9b165f7eac421c178ca524782d4d4a26fea2d03a4847ec9ec28ca24fe4745bf04499b30ac75c732e104fbec83cb170bbfe3c4feeb9c73d7e20ba2184f9d3ce010b9b388aeb0a39c5b047825e789519828b1dcc671e48e0ab7b4e806dd9d162952d7771cb780baf792ccafe91b89b401923ce3eb39a588b2a58eb4ae789d2d573e3dd05f752cbe33b157e6933f466f2c2f502bdf816"], 0x92) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0xfe) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, r1) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) dup3(r2, r3, 0x0) (async) 05:21:23 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20040000) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x24048090) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_clone(0x300000, 0x0, 0x0, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80)) getpgrp(0x0) 05:21:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x624, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb3, 0x2e}}}}, [@NL80211_ATTR_TID_CONFIG={0x5fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x800, 0x7, 0x4, 0x6, 0x1c, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x5, 0x6, 0x3, 0x3b, 0x1c, 0x16, 0x2, 0x63, 0x9, 0x5, 0x24, 0x16, 0x1b, 0x3, 0x30, 0xb, 0x18, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x5, 0x8, 0x57, 0xe4, 0x2, 0xfff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x1b, 0x48, 0x3, 0x5, 0x24, 0x1b, 0x9, 0xc, 0x1, 0x9, 0x0]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x1f, 0x9, 0xa4a1, 0x4, 0x40, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0x80, 0x533, 0x6, 0x3f, 0x31]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x6, 0x2, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x318, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xb, 0x12, 0x12, 0x9, 0x30, 0x16, 0x18, 0x1b, 0x9, 0x6c, 0x3c, 0x12, 0x60, 0x36, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x6}, {0x3}, {0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x4}, {}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x5, 0x7f, 0x7, 0x68b2, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x24, 0x2, 0x9, 0xb, 0x4, 0x1b, 0x9, 0x24, 0x2, 0x60, 0x60, 0x3, 0x6c, 0x48, 0x9, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x3}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x9, 0x2, 0x1, 0x9, 0x8, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x17e7, 0xffff, 0x0, 0x1, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x5, 0x8, 0xf000, 0x5, 0x8000, 0x7f, 0x3a4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x5}, {0x2}, {0x6, 0x3}, {0x6, 0x9}, {}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x6}, {}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x1}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6786, 0xff7f, 0x70e4, 0x5, 0x5, 0xfb9, 0x0, 0xac9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x4, 0x7}, {0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x2, 0x6b8b, 0x6, 0xea, 0xfff, 0x8, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x18, 0x5, 0x48, 0x9, 0xc, 0x76, 0x60, 0x2, 0xc, 0x16, 0x1, 0x48, 0x5, 0x1b, 0x30, 0x6c, 0x48, 0x48, 0x3, 0x4, 0xc, 0x36, 0x30, 0x18, 0x18, 0x5, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xde, 0x100, 0x1ff, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x4, 0x60, 0x6, 0x3, 0x24, 0x30, 0x30, 0x30, 0x9, 0x1b, 0xc, 0x1b, 0x12, 0x5, 0x16]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x2, 0x70, 0x6, 0x1fcc9eac9004a763, 0xb, 0x60, 0x9, 0x6c, 0x3, 0x6c, 0x2, 0x3, 0x9, 0x6c, 0x2, 0x48, 0x5, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9e3b2fd4eb382d81, 0x60, 0xb, 0x6c, 0x2, 0xc, 0x60, 0xc, 0x12, 0x5, 0x3, 0x1b, 0x36, 0x0, 0x36, 0x2, 0x36, 0x3, 0xc, 0xb, 0x18, 0x2, 0xc, 0x48, 0x1, 0x6c, 0x5, 0x4]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x3, 0x24, 0x1b, 0x18, 0x0, 0x12, 0x9, 0x60, 0x36, 0x60, 0x18, 0x5, 0x18, 0x6c, 0xb, 0x48, 0x24, 0x3, 0x3, 0x2, 0x37ef558d11e25af1, 0x1b, 0x6, 0x65, 0x24, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x101, 0x6, 0x3ff, 0x8001, 0x7, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x1000, 0x5, 0x7, 0x70d3, 0xff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x800, 0x4, 0x7, 0x0, 0x3, 0x4, 0xf30d]}}]}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x6, 0x36, 0x4, 0x2, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x8}, {0x1, 0x9}, {0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x1, 0xb, 0x36, 0x2, 0x30, 0x36, 0x2, 0x48, 0xc, 0x18, 0x4, 0x754c9fbd2cdd9f9e, 0x9, 0x4, 0xeb3f38ce7047c8c1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x2, 0x100, 0x0, 0x6, 0x7ff, 0x7]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x4}, {0x3}, {0x4, 0x6}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x2}, {0x2, 0x8}, {0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x7fff, 0xed2, 0x7f, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1680, 0x200, 0x8, 0x3ff, 0x918, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x30, 0xc, 0x6c, 0x1a, 0x16, 0x36, 0x1, 0xc, 0x12, 0x60, 0x2, 0x2, 0x30, 0x5, 0x3, 0x16, 0x9, 0xc, 0x48, 0x30, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x8001, 0x4, 0x3ff, 0x0, 0x3, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0xff, 0x40, 0x2e, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xbb, 0x0, 0x3, 0x7, 0x0, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}]}]}]}, 0x624}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x2}, @enter_looper], 0xb, 0x0, &(0x7f0000000040)="97c93f412a665bc6c9843a"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) ioctl$KDADDIO(r4, 0x400455c8, 0x1) 05:21:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r2, 0x80) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_open_pts(r2, 0x8080) ioctl$TCFLSH(r1, 0x540b, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190000c93fca47366e8efb001d0100006fb71b8280c85e57f987e90b454d1306f1dfa2bc3338841c845f58033805ad440ad5ea7b709d762297c6a1f2d919b0340afbeae86739cfe203e5eb89f91884b52ab272ba0e800b62e8263c08269abc8493d3d11a8900"/116], 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r4) [ 640.185662][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 640.193469][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2040, 0x1a0, 0x12}, 0x18) syz_open_pts(r1, 0x28000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340003000000feb75a89fd2acc0000", @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000280)={0x80, "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"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2040, 0x1a0, 0x12}, 0x18) (async) syz_open_pts(r1, 0x28000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r2, r2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340003000000feb75a89fd2acc0000", @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) (async) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000280)={0x80, "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"}) (async) [ 641.697568][T10191] Bluetooth: hci7: command 0x1003 tx timeout [ 641.699384][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x9) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x9) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) ioctl$KDADDIO(r2, 0x4b34, 0x3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:25 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000004c0)={0x0, [[0xffff], [0xffffffff], [0x80000000]]}) 05:21:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x624, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb3, 0x2e}}}}, [@NL80211_ATTR_TID_CONFIG={0x5fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x800, 0x7, 0x4, 0x6, 0x1c, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x5, 0x6, 0x3, 0x3b, 0x1c, 0x16, 0x2, 0x63, 0x9, 0x5, 0x24, 0x16, 0x1b, 0x3, 0x30, 0xb, 0x18, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x5, 0x8, 0x57, 0xe4, 0x2, 0xfff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x1b, 0x48, 0x3, 0x5, 0x24, 0x1b, 0x9, 0xc, 0x1, 0x9, 0x0]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x1f, 0x9, 0xa4a1, 0x4, 0x40, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0x80, 0x533, 0x6, 0x3f, 0x31]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x6, 0x2, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x318, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xb, 0x12, 0x12, 0x9, 0x30, 0x16, 0x18, 0x1b, 0x9, 0x6c, 0x3c, 0x12, 0x60, 0x36, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x6}, {0x3}, {0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x4}, {}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x5, 0x7f, 0x7, 0x68b2, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x24, 0x2, 0x9, 0xb, 0x4, 0x1b, 0x9, 0x24, 0x2, 0x60, 0x60, 0x3, 0x6c, 0x48, 0x9, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x3}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x9, 0x2, 0x1, 0x9, 0x8, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x17e7, 0xffff, 0x0, 0x1, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x5, 0x8, 0xf000, 0x5, 0x8000, 0x7f, 0x3a4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x5}, {0x2}, {0x6, 0x3}, {0x6, 0x9}, {}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x6}, {}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x1}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6786, 0xff7f, 0x70e4, 0x5, 0x5, 0xfb9, 0x0, 0xac9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x4, 0x7}, {0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x2, 0x6b8b, 0x6, 0xea, 0xfff, 0x8, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x18, 0x5, 0x48, 0x9, 0xc, 0x76, 0x60, 0x2, 0xc, 0x16, 0x1, 0x48, 0x5, 0x1b, 0x30, 0x6c, 0x48, 0x48, 0x3, 0x4, 0xc, 0x36, 0x30, 0x18, 0x18, 0x5, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xde, 0x100, 0x1ff, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x4, 0x60, 0x6, 0x3, 0x24, 0x30, 0x30, 0x30, 0x9, 0x1b, 0xc, 0x1b, 0x12, 0x5, 0x16]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x2, 0x70, 0x6, 0x1fcc9eac9004a763, 0xb, 0x60, 0x9, 0x6c, 0x3, 0x6c, 0x2, 0x3, 0x9, 0x6c, 0x2, 0x48, 0x5, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9e3b2fd4eb382d81, 0x60, 0xb, 0x6c, 0x2, 0xc, 0x60, 0xc, 0x12, 0x5, 0x3, 0x1b, 0x36, 0x0, 0x36, 0x2, 0x36, 0x3, 0xc, 0xb, 0x18, 0x2, 0xc, 0x48, 0x1, 0x6c, 0x5, 0x4]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x3, 0x24, 0x1b, 0x18, 0x0, 0x12, 0x9, 0x60, 0x36, 0x60, 0x18, 0x5, 0x18, 0x6c, 0xb, 0x48, 0x24, 0x3, 0x3, 0x2, 0x37ef558d11e25af1, 0x1b, 0x6, 0x65, 0x24, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x101, 0x6, 0x3ff, 0x8001, 0x7, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x1000, 0x5, 0x7, 0x70d3, 0xff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x800, 0x4, 0x7, 0x0, 0x3, 0x4, 0xf30d]}}]}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x6, 0x36, 0x4, 0x2, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x8}, {0x1, 0x9}, {0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x1, 0xb, 0x36, 0x2, 0x30, 0x36, 0x2, 0x48, 0xc, 0x18, 0x4, 0x754c9fbd2cdd9f9e, 0x9, 0x4, 0xeb3f38ce7047c8c1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x2, 0x100, 0x0, 0x6, 0x7ff, 0x7]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x4}, {0x3}, {0x4, 0x6}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x2}, {0x2, 0x8}, {0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x7fff, 0xed2, 0x7f, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1680, 0x200, 0x8, 0x3ff, 0x918, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x30, 0xc, 0x6c, 0x1a, 0x16, 0x36, 0x1, 0xc, 0x12, 0x60, 0x2, 0x2, 0x30, 0x5, 0x3, 0x16, 0x9, 0xc, 0x48, 0x30, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x8001, 0x4, 0x3ff, 0x0, 0x3, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0xff, 0x40, 0x2e, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xbb, 0x0, 0x3, 0x7, 0x0, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}]}]}]}, 0x624}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x2}, @enter_looper], 0xb, 0x0, &(0x7f0000000040)="97c93f412a665bc6c9843a"}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x1) [ 642.017490][T10190] Bluetooth: hci8: command 0x1003 tx timeout [ 642.023691][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:25 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 05:21:25 executing program 0: dup(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x12) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/130, 0x82, 0x8) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) dup(0xffffffffffffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000180), 0x4800) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x12) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pread64(r2, &(0x7f0000000080)=""/130, 0x82, 0x8) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 642.097741][T10190] Bluetooth: hci6: command 0x1003 tx timeout [ 642.106691][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:25 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) 05:21:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x624, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb3, 0x2e}}}}, [@NL80211_ATTR_TID_CONFIG={0x5fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x5c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x5, 0x800, 0x7, 0x4, 0x6, 0x1c, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x5, 0x6, 0x3, 0x3b, 0x1c, 0x16, 0x2, 0x63, 0x9, 0x5, 0x24, 0x16, 0x1b, 0x3, 0x30, 0xb, 0x18, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb5}]}, {0x3c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x5, 0x8, 0x57, 0xe4, 0x2, 0xfff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x1b, 0x48, 0x3, 0x5, 0x24, 0x1b, 0x9, 0xc, 0x1, 0x9, 0x0]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x1f, 0x9, 0xa4a1, 0x4, 0x40, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1, 0x80, 0x533, 0x6, 0x3f, 0x31]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x6, 0x2, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x318, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xb, 0x12, 0x12, 0x9, 0x30, 0x16, 0x18, 0x1b, 0x9, 0x6c, 0x3c, 0x12, 0x60, 0x36, 0x3, 0x5]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x6}, {0x3}, {0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x1, 0x4}, {}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x6, 0x3}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x5, 0x7f, 0x7, 0x68b2, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x24, 0x2, 0x9, 0xb, 0x4, 0x1b, 0x9, 0x24, 0x2, 0x60, 0x60, 0x3, 0x6c, 0x48, 0x9, 0x16, 0x60]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x2}, {0x3, 0x3}, {0x3, 0x6}, {0x3}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x6}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3, 0x9, 0x2, 0x1, 0x9, 0x8, 0x0, 0x3]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x17e7, 0xffff, 0x0, 0x1, 0x9, 0x5, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x5, 0x8, 0xf000, 0x5, 0x8000, 0x7f, 0x3a4]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x4}, {0x5, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x5}, {0x2}, {0x6, 0x3}, {0x6, 0x9}, {}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6c]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x6}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x6}, {}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x1}, {0x7, 0x5}, {0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6786, 0xff7f, 0x70e4, 0x5, 0x5, 0xfb9, 0x0, 0xac9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x5}, {0x2, 0x2}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x4, 0x7}, {0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x7}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x8}, {0x4}, {0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4000, 0x2, 0x6b8b, 0x6, 0xea, 0xfff, 0x8, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x18, 0x5, 0x48, 0x9, 0xc, 0x76, 0x60, 0x2, 0xc, 0x16, 0x1, 0x48, 0x5, 0x1b, 0x30, 0x6c, 0x48, 0x48, 0x3, 0x4, 0xc, 0x36, 0x30, 0x18, 0x18, 0x5, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0xde, 0x100, 0x1ff, 0x2, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x4, 0x60, 0x6, 0x3, 0x24, 0x30, 0x30, 0x30, 0x9, 0x1b, 0xc, 0x1b, 0x12, 0x5, 0x16]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x2, 0x70, 0x6, 0x1fcc9eac9004a763, 0xb, 0x60, 0x9, 0x6c, 0x3, 0x6c, 0x2, 0x3, 0x9, 0x6c, 0x2, 0x48, 0x5, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9e3b2fd4eb382d81, 0x60, 0xb, 0x6c, 0x2, 0xc, 0x60, 0xc, 0x12, 0x5, 0x3, 0x1b, 0x36, 0x0, 0x36, 0x2, 0x36, 0x3, 0xc, 0xb, 0x18, 0x2, 0xc, 0x48, 0x1, 0x6c, 0x5, 0x4]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x3, 0x24, 0x1b, 0x18, 0x0, 0x12, 0x9, 0x60, 0x36, 0x60, 0x18, 0x5, 0x18, 0x6c, 0xb, 0x48, 0x24, 0x3, 0x3, 0x2, 0x37ef558d11e25af1, 0x1b, 0x6, 0x65, 0x24, 0x18, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x101, 0x6, 0x3ff, 0x8001, 0x7, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x1000, 0x5, 0x7, 0x70d3, 0xff, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x1}, {0x2, 0x9}, {0x1, 0x9}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x5, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x8}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x800, 0x4, 0x7, 0x0, 0x3, 0x4, 0xf30d]}}]}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x6, 0x36, 0x4, 0x2, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x8}, {0x1, 0x9}, {0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x3}, {0x7, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x1, 0xb, 0x36, 0x2, 0x30, 0x36, 0x2, 0x48, 0xc, 0x18, 0x4, 0x754c9fbd2cdd9f9e, 0x9, 0x4, 0xeb3f38ce7047c8c1, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x100, 0x2, 0x100, 0x0, 0x6, 0x7ff, 0x7]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x1}, {0x6, 0x7}, {0x5, 0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x5}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x4}, {0x3}, {0x4, 0x6}, {0x0, 0x6}, {}, {0x5, 0x3}, {0x2}, {0x2, 0x8}, {0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x7fff, 0xed2, 0x7f, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1680, 0x200, 0x8, 0x3ff, 0x918, 0x5, 0x9, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x30, 0xc, 0x6c, 0x1a, 0x16, 0x36, 0x1, 0xc, 0x12, 0x60, 0x2, 0x2, 0x30, 0x5, 0x3, 0x16, 0x9, 0xc, 0x48, 0x30, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x1, 0x8001, 0x4, 0x3ff, 0x0, 0x3, 0xfffb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x4, 0xff, 0x40, 0x2e, 0x9, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xbb, 0x0, 0x3, 0x7, 0x0, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x69}]}]}]}, 0x624}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x2}, @enter_looper], 0xb, 0x0, &(0x7f0000000040)="97c93f412a665bc6c9843a"}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x1) [ 642.257642][ T3634] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 642.257761][T15868] Bluetooth: hci10: command 0x1003 tx timeout 05:21:25 executing program 1: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 05:21:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r2, 0x80) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_open_pts(r2, 0x8080) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190000c93fca47366e8efb001d0100006fb71b8280c85e57f987e90b454d1306f1dfa2bc3338841c845f58033805ad440ad5ea7b709d762297c6a1f2d919b0340afbeae86739cfe203e5eb89f91884b52ab272ba0e800b62e8263c08269abc8493d3d11a8900"/116], 0xfffffdef}}, 0x0) (async) syz_genetlink_get_family_id$SEG6(0x0, r4) [ 642.383929][ T3635] Bluetooth: hci9: sending frame failed (-49) [ 642.391437][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 05:21:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "f606ce2aea81c54bdab4bd518fadee5250181b6d350d5e6316b41bb31fd9be64723b8d92021d58894b6029d0e4e33939dee6654b557f3e0576ef10d6938e10671b56578a1a26efa41e3bc9d8519e3e053545cc4e452953eba11256ae7757d1eaed1f11c03a3dd6bada70fcb17feb2c81ffe43daa88859b8e5aec0bc42437b4b10efa8d7e7d2b6c9023f7ba59f3bb7603bec12795e2c1bf9a692f80d5ae937449ae9e1a2d8a42061cba57b7a08fed0764215c40524458d554b8c1f9791b80e3586ce5a0e39391e066b58a578e8c468cc41f16d55d2ce050a0a870bcf61e88b57d286c176e571593f1785f7a3406c9575c01dee48193a3caae0756cab5e146e3de041b867f97d79f0cac405ad67ee43c689e0c8309c31a87e58724aa2d57e0226140cb8a3db2b20f41fc63617664e84ad8ff7baafb4d44c8507b7f217c3be48cb8db5169474a35cb2101045e00449977bf1f5b85fe0880843970c3d4ed55bfd52c9eec7cd39a2dc863636d5825f583545a0cf843ae9d8dac4db55c741365516a6a355a6fec59e5feabed567203919a6220e09ed81ea441ce25b97a494137abbad2e6482efb0bd96c4eb71a24c6c3cd9a27279cbf2088856b1810f446cfac91c3edfb383921e39d629276e1ef00d613ac98739948ce10512512ee3734bf92c8a0a3d510919c7b02953c06729b1af65a88195aa812c194da17a61453c5f4cbdd48dda390a2d437915a56975a2cf9c134aaad77b9f73dbdec4735fbbd8f462526243becb025267f498ae0f07194da8afb9cf53df646f76d1f811e85b9353997426282a07a0ba356e036fa7795ac8f0c94f8245b84318d8b9c3701ca4ba081d899536ec5ee866f80cecb5fee2e15639a44122644ba5ab1e0f991de177e2178feb4e8c7959a8a45ccf617f7addf2d59f69f8b48509ba5c46c98ea759bfe2c0692a2027e763729f24593e6ec6182539adf76b0f017b29773245fc40d610dc89b1e95b78847385cfa5d5e4045880da6c5bbd912c2d139e2c1a77f2bbd7e81a613378ac5bb930117c6f97de1480aa891277b09cb5e64fca5735d3b9cfe6c874749ae6ba436b775d69c039af7d1feccf355e2d2416a3ae3e3e62d0ce5131791d3487aa48c1693179d8acf9d53fcc0524c1c8cb2eb4352c20d5206cfe93250ad67b3634079c56254659d0c0010f97d00ed3b03ef9f646084fb9e46208e3d50424b8ed5ef73fd40e203c9652aa9e44124221f651401f27b49f84a8907b45383985b6c43bda553f1cff80c64f03a8e4179f58561488de7434095d88994469377cf5b693d8357669ab9e2effa37b9ec79f9ff719f096122d9fb363173c9cc56b03570a85ab5a24fdd948631a1edc2287bb933be1f73efc4808ae7fa880aabf5a2fc200b172543481d40253ca6a62b1913f08538ae9aaaa65a6b20bb07c8a29bc353e9c9d235dcb2a792f8b14dca8a5418904e0b174993cbd377955e226eb207c6449ca0e6a5c03da37304c683909e5bf50791a95b273d00afdbe5addbf4b04134f412dfe52d55c053e35e89559b0befa4ecc85e0deb59d36e7416f97824a6254d43f4b9194ccc42f503593330a07626977c3b0dc2809deab6371fc1b5ad60a4a2d16b47458a50eea2a16f779313e7a4c41873e568e0b3e24937c6652be50ebf4776b38dc8c4cb2d624ee3ebb9c08fbe29235f68fe36a8b3eacc476e8c323884381a7bd70af37827105f6ab6ff3f28ba84c5990aec6ddbe7093745672a33cbdaa79c323272083b855e0bcfb3f09f0259d4d05617aaa26e93e3c20592d4911bc61840f717dab01821de835e654eedb5041e16eec93f8326f3643e061c1112d7eb62e12c6ca0cfd2da043071f3bc62b33b146c09577af96791768635ac45af4d1ddd9b1ac93421e2d102c7a1df2abd3dbae9c51c8de8b18bbabcf957bcc5f29a7776ec3676c9b2221148441119936ff6a4f14198d68c5bb70726d8ea873f15b48eb76bc4b6b24e96300154c2ee5e09a921f7eeeef7fa30cda2b0aff375467c4638522ccbd625e1a61537aed5d3653bdf8cc035b2b77c68282cb25eed290c47fedf0074b135577133e895ee96ad99351679a95b39e1ec0ce5f47008aaf4beb493ac53df32ddc892c0ccb60144aa5765c10d549c21937affef7ec5f4e45948373379293039939a0108094dc5b2ffc98e7e94c017b197213bd2f21c14b5d12e1b44653a8ebe487ee1d20387eb6fa709d33a52a5959f4ce090935264eb2bf9fd685756383477217dbd4284d29cc2dc5270c9610e62d3c963dec73d3c2282a9a7cd59000dd38eefc3c463324db4aba4864f46b208c4f84ec05c7ef688dea333884676bce98de27f7b4c985a7a2b9e6d17de71a995491420ddef4f460ce7019ee30f4ade1509ced32550f021860f394811516ceb251a8bd9c17fb5148a4da74df80c602dd0b4efcb0348ab1d2f0c911dca836e965c3c8273b5f45be91fb5af4c5af9d9b84b14a27e6b3cfa8895df7f3d07a65857c4c7c59bbe7b750a047d666f90662509830729ea57462d52cca8e09d1ad7f55c9d889837c942b5f3d694333f310112b7ae3befbc8a9962e35287cbb51157d6c92bd399abb65ac8dc3bcd529adad5aee1eed7c712541b15f25e349f1c99ffc22c268e4b21c3ec512547d72e966e6d37e1a1057aae7a7c00a5c09b87d1965cd17716fc9ccd72e9b8c87154d1bcb75e3aa8943431991d92378226fad15f963c828a28f3e55c79e3de0fe0afd7e41d65fc4e44b0124942bfc0510eaec62c5c20c934a33296b684b00aad1bddccfe3aabc9e3d75c91558be390fe599c673bbceeb1526e698b7b26bb4fd1f51993d1327e12250121f234c24c255d3ee2a40e55041ad1a7390c9cae39dfab388855c5ba4ddfab848f9deb7c6490adb9da50ccab70f3e53e35bea5527f72dfb0bad1ece518b7f6d14fbef0a9fc2b4ae16c42cc74477bbc12e71ddbc8708dd3ebfc7b8a69a4042aa95eb1613e76277ede7f78aaff9be2027e106a42124399dae6428de854cc78eb5d5f21e622cbf69febf9d6f825ec02f7f8539c9be94c6e1cba766cb6eddac20b06d5441baf45ed40b3e1fbdb8ff1b1df3d34801229b1e49b6d52f4cec8ee92babf9f14631abb67b0aba38c2955e6c60ab1187a75280afdfd7391576dfab520d70832225a7be7e35862c682534d815ed2a7d0aa51b209da19dcfccfef8232aa9be050e906c8bf15cafc9487abafa427a86e1642cf23119231444080871da0e230da750c31ec9e5b65bb71d16617263804c60f695f6a32781bfb602748d90c9dc4992e01c2eefe9ca2eb41d79c7053ae143253c373e504e64bff91b99cc64e00c7d0b5668918c3f823b36a398330c2fcc8f16ef96fdcb3812bfb45ef081024a4650aa7fbc2883f966682c6dfa8c049281674f597eb29d7bfcc341e3908f937a4b133e81027354c2fc0a4852b7e0dc4a3eedf9f80fb757722290d057bd5b03ed39fb70546d52d3ea343d00d6e8dcd8a1ab8480ac1d74f6ce1af88da3afa978cc8680f2cc6f4f228b0bd98fa62eecacc2c36d3a500954433af54ac338239b18829f207d969c8e3e98b0113ad5c662b04bdd38ec5ad62eaa6cff67ad378a510acf36c59805f848fe463a0df0a6cdda7e7d48663712c90e2f74c764387700c11e10a10605765f443fb30d1b7629ce4378b5e0b2d25a9287e3ecf92bb7f120a1a8378b035248785bf0a62242da39f0ea0e11fa800dc5214c2f76f30ac082ff4d00f6d80588f5976d36d613a054c129a790409e39bc94d4e41fb1f462054b3c4c0773ff96532e540e85422a03976ebad5075f4b69950c3d897c3201bbc200f942212ee4c4c9000bf719cf600a886af7a71924052b022475919c7198a855ef5c25a467677186af1e3a3450bcca95ed25fe69a83c0bcacc7b04160456a3305b050c88dd8330b18c0afda31746335a80f122b6268662688eb927ac885f953077c2454bebf7c72a228c71e52577a9906fdcd8bd7b6a585d3f6878e8ce1d63136786792c7bfddb885cba778c550ae3dc6dabe8d70b3b2e00ba917fe1d140cce87521f17e1263e5c162c72e89308cc26432ac2ae422be7c677f3aa97523ca664ae2abdae8311fa1d0d0e3fb31e5d2aa17e6f471b09143390c2eec4a84c885c9b2d95eba616c8a3129d8b3b4cde9d0a87f8f023186f8b724c28a5ca45ce9f2231f213b1fc503dc46cffd9dc9c8fe6d385f6a340561edbe0bb4600dd73f3c7f245988fc09f16f84bf9abe4d099af2e9b506506b60c835cea6db0551abb621240eae267cc978b4bb7a8ccd3fdfc7121e9f05f83be146c7bb7d28c133527fd5b8269b17ebf50ff021f6c6d5d19d11d0c5507c2954aaf6e760787337a7833ff01df55d30095595340c5d14cc7e8af3f4a79d194254233bffe9382b91a0fdb281afde2c0008c46b663ba8b49d38d008a1e27ba2aed7e24d4b4b50409791618b78a839f9ee83b6ea1af856826fc838ffbf31bb1d18bd2a48309756b4a9ef0360094a1b1118a8128251a748bf5b631bfd81e3fbf3711cc770522f5c8bcc5097a1b70588a99020aa6911fc196d4ae65d5a7f3ccc6d100b3921cf93ea1be149cd30bc092dbb5ea7450c49f336f15bcd34ad42dcd3f573208c4a9fa941447f926cbb8f54ff0032ac62d4c7cc21c53f03e6fde034bb6d690b7428b42e4076ca56ac01d8cde0900f3a5d103b9c848d34b85d11efd0408192cef529151b242b3c676e0eaa791b3fd85ef9125e68f7278171dbe3fcbaa3e2733e72fdd14fc7298fc0849f5aa7d7e82e5edd00bf20aab4268f5414f8b50a5f1d22beeaf1d894277dc4d558584712f364e413ce35127572dd19768703224899d6b7313244634585eae8b0f70d1255229381d996460c2fa37f116b687aed2678ccf18f1dbd7fa80340cb54ed3e5ecc6115728ae9e447e0cf42eae9d83e7979bb45bb14dd278e6398a7f45b8114e587bf18eaf37a416164baffdc8ba313661104afc067e64f82ff55ed96420d331c8fbd543d91e8d4c0c329f82450468c37c47e0264235b9bec9eac11d360d0e00343dc9878c077f4faee4e14841faa7f011d5ad414ac3ace4750e48b0bf789910439c97d9cb064bdc4b5d26835f250f86f8f7b9b39172ed10533fc893d380d07fb68da5f3ca727a94bdc94596f9796ade9bdc0141fa5a4bc2c496bf7790f29dd1f40124b1232bf1cf8af79f90ae6b61db8b33c581feafb3ead85bd1a604966a4f87f78a32c5c754ea188020475eca59eaa3ba776c6bdd97f7e27b1547cd3ed1859192671816cf5496624453c10d3f6cfba016b38f7bfd63534988850b47652806873583f0ca53fc57e10c350d0e40ab2dff2906c3333240198261eaa034c84fd3e8739bcb242b98d98325ac8f983d3e12f0000ca1bbdf418315c8f7a9fd6175c14d164aebcdd3557b549d9827f3de00dbc7063e7d1aa901bef16df87d1c4dba39ccc7c021910e62e0548aca1cfb93a567509bcfa09e7400e0f092574c4f181a5e76fb2180e1deefb02ca6300602b2831b368c1d5c3655b45f9c296eb056160649e89bd0a712fd14130b97e24549aef0a1da0d2e1304b57ca3113dbe16719813f38e88b8b5122496425c5173ef644461158eae2b7162a3dc505cb17d29915374d769259f653c76cfa1a325e40a891dca212b82649307c5edded8d920a11793c4de2bd765f5cc5e4e8aaa76591d74b7974c9025a1f704ee9a31af40bac01c7e12d07f2962245c97930314ba530056bc77213a7443b3bd00029259b73262dd6b222ad9015735505924bf8f"}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 642.720231][ T962] Bluetooth: Error in BCSP hdr checksum [ 642.979305][ T3689] Bluetooth: Error in BCSP hdr checksum [ 643.238973][ T962] Bluetooth: Error in BCSP hdr checksum 05:21:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2040, 0x1a0, 0x12}, 0x18) syz_open_pts(r1, 0x28000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = dup2(r2, r2) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340003000000feb75a89fd2acc0000", @ANYRES16=r3, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x34}}, 0x0) (async) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000280)={0x80, "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"}) [ 643.787786][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 05:21:27 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af30, &(0x7f0000000180)) [ 644.177502][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 644.177824][T10190] Bluetooth: hci8: command 0x1003 tx timeout 05:21:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) [ 644.257897][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:27 executing program 0: dup(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x12) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/130, 0x82, 0x8) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 644.318429][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 644.326253][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:28 executing program 1: syz_open_dev$I2C(&(0x7f0000000000), 0x9b, 0x0) 05:21:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) 05:21:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x17) 05:21:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) [ 644.498435][T10191] Bluetooth: hci9: command 0x1003 tx timeout [ 644.499464][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r2, 0x80) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_open_pts(r2, 0x8080) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190000c93fca47366e8efb001d0100006fb71b8280c85e57f987e90b454d1306f1dfa2bc3338841c845f58033805ad440ad5ea7b709d762297c6a1f2d919b0340afbeae86739cfe203e5eb89f91884b52ab272ba0e800b62e8263c08269abc8493d3d11a8900"/116], 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r4) 05:21:28 executing program 1: write$input_event(0xffffffffffffffff, 0x0, 0x0) [ 644.543588][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 644.556773][ T3634] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 644.582926][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 644.590422][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 644.641062][T16284] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 644.658173][ T3635] Bluetooth: hci10: Opcode 0x1003 failed: -110 05:21:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) (async) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 644.692765][ T3634] Bluetooth: hci6: sending frame failed (-49) [ 644.701844][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="d62c66253a33f203db4d59354f664a1dc049bb7d68bce72ff04fd61bb31ee755415cd27e4c1ef519e6ab73daa2dfec89f43b6cc740673854ee59d44a60e39eb1fddd10585259b8805b772d39c02bff2e98b87cb7e143f8", 0x57}, {&(0x7f0000000280)="7e0bf6d2cf2e32c528ac9dcb8de9e87ac161d3db52c1ee5e0e99dee50153d2e5f19fcfc2bf0dfbe244c233eea679174afaed9794ce19e15f5b3742cb94b3503e99ee98fd08087e7eeef9263b4a2260835c03f6db065e8e0b2eebaf6559bc7cdd80cc6ec871e192ee9a1cbf20cfdd142dce08c2f2228633ada1e9f498fe47efac741bb6ea1ba14184dd0a9a82484422bcb0dc848bd9f14ec1c9f569dba10c4cedcaf9878fd7d15999eb62e5cf62512628cb7b1874dd3b4844eaf9b49b5e01287ac30baf08057f57a088b83c3742c8904ff5a18a28daee7d3972084600b6cba8e708", 0xe1}, {&(0x7f0000000180)="d2555ad025bf470bf6611eeb885d94a042e35400ed96db600a760f32ad3c653b7216097dac2805f0445fceade366c3fe97157a884ccd8137e984639d685d7908cb1af4b3da3410fa", 0x48}, {&(0x7f0000000100)="1aa5f7262c080899bf736efe0ad4b7f7ca3dda4134a492c9382f28b7629da9e361effe0734c30a1f1619af69951ee66da512d22231500260a56de1060f", 0x3d}, {&(0x7f0000000200)="0d5a56e757", 0x5}, {&(0x7f0000000380)="98454052bc81b1717924ebc0bd4d11d90609909e2228c06a", 0x18}, {&(0x7f00000003c0)="f1d28a8a7409cfb1f1a670e9b50ba976f19fbee3a793752d6a6861b675efd8df7887d828c86db75791febfe6c6431ab1", 0x30}, {&(0x7f0000000400)="ec33cebb4a8ed97871ce1b6a1c5f8c94c2c0812ba17a7286f80f49cda8123795dc340b9af176025b3ce36ff9ebf9994890b03b31ca58be7ab8d4ad6618c7c8f8180fba2627c9ce63e6c36967fca2af59325fc4fb15e5ed2034aea5c89784aa54d8724d0698eb7750cf2fd6770b3c6591c056607a1a9b484fa6d2116406dac4de06e6aa17c5c7b68b302f2504fe0640623d4a45f0106bafce938b616ce6d0d663f5d048c2b77af77f06602f07e5ae74f33e606f3f4bc608620d3ef6ac2919a66488685d5b", 0xc4}, {&(0x7f0000000500)="3698fc6c66bc7f8ed62f71353d4b5c33d579ff043a3a2dfadb08086302f5ed3bc9d16c110e9f52f7fd4cefd57f2493c325de94f6bb47a8ea696b176389767860dbd414954bdca43085f799d5b8afe28d21681e433721067b2dd5469d8cc523c3b7a9b5bf255233ec28e39efe0004cd170fa82aae68817ad16ba1299c9d179aba0fa0e0a0287f8da404405dfab3dbc328cf8c6186751705a82fb0d3e77d374c28b5b084a34752bf5f98d112e4564d99a243f9b738a510540ebbec907b20c12692aa6d915a6ff8a71ca73207d340f225d22c9b63dc61693978576cbaf76ef501af0e9c406ec730e568ecde7d1d1544ee637be2a4c98d80ee79", 0xf8}], 0x9, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb5e3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x48}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x438102, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) connect$inet6(r0, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) ioctl$KDADDIO(r1, 0x400455c8, 0x1) sendmsg$inet(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="6ff005fb1f21126c8b0b2237777ee431d1a2f95ef25cb68633cd1c2aebee4da39e347181035ca4dc33f9124d4d38800c9af2415efea26556d10b4d8cb4c07329f4", 0x41}, {&(0x7f0000000800)="de154f7d6c94ac6cb45f3616f1f2cfcf77132b6b6d2fce8597028de10852fa330fe1f32f1559a1d6e3fb51367e5190370f194441b43c9a9ea8cba3d4a4996bef31fe89f8aad321c5fa524b598a553ccddcadd6cc50f4de2668b0239fa99c9f6c27c1467880a14a7f1bf87336c19f35b7ec2dfa0ac189b8f004cad8041992abb731b60c53e221e4bd4209054cda39415e2c84b501bb3f33abb91bd4c9e6803ae5486b", 0xa2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d7de4781b107afe617e9f56865156a4311e19330e48368cec2dc497532f5d42ea4a6b0d2c873c7ff1464058d762445", 0x2f}, {&(0x7f0000001900)="31e1", 0x2}], 0x5}, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) [ 645.937515][T15868] Bluetooth: hci7: command 0x1003 tx timeout [ 645.943703][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 05:21:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r5 = dup2(r2, r2) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x17) 05:21:29 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 05:21:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x518, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x48, 0x5, 0x24, 0x0, 0x6, 0x36, 0x2, 0x36, 0xc, 0x30, 0x1, 0x3, 0xc, 0x48, 0x18, 0x9, 0x5, 0x5c, 0x5, 0x1b, 0x6, 0x6c, 0x1b, 0x36, 0xc, 0x60, 0x1b, 0x6, 0x1, 0xc, 0x78]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x6}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x5}, {0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x525, 0x3, 0x6, 0x4, 0x3, 0x620e, 0x3ed7, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {}, {0x6, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x2, 0x1, 0x1, 0x7760, 0x7ff, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x5, 0xbc9, 0x1000, 0x73, 0x8, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7fff, 0x98, 0x3, 0x3f, 0x2, 0x800, 0x54ce]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x2, 0x1b, 0x74, 0x5, 0x1, 0x4, 0x60, 0x30, 0x36, 0x6c, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x33, 0x6c, 0x9, 0x2, 0x12, 0x9, 0x24, 0x36, 0x9a54e5fb967b79fc, 0x4, 0x18, 0x12, 0x6c, 0x1, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x5, 0x1, 0x9, 0x2, 0x401, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x986, 0x1, 0x7, 0x0, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x16, 0x9, 0x16, 0x12, 0x60, 0x1, 0x18, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x200, 0x1ff, 0x8edb, 0x20, 0x101, 0xa80f, 0x2]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0xb, 0x2, 0x6, 0x40, 0x3, 0x30, 0x60, 0xc, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x1, 0x6, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x0, 0x3274, 0x8, 0x8, 0x100, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x30, 0x4, 0x24, 0x5, 0x60, 0x5, 0x1b, 0x24, 0x36, 0x36, 0x5, 0x18, 0x36, 0x2, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x8000, 0x0, 0x8, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x33a, 0x6, 0x0, 0xffff, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x18, 0x11, 0x6c, 0x30, 0x0, 0xc, 0xc, 0x48, 0x5, 0x6c, 0x48, 0x2, 0x2, 0x48, 0x6, 0xb, 0xc, 0x6c, 0x6c, 0x60, 0x16, 0x24, 0x12, 0x2, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x0, 0x7, 0x2, 0xfff7, 0x5, 0x8, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x48, 0x1b, 0x1, 0x16, 0x16, 0x51, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b13, 0x5, 0x3, 0x1, 0x4, 0x2, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0x2fb, 0x8001, 0x0, 0x9, 0x8001]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x7}, {0x3, 0x4}, {0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x20, 0x2, 0xfffa, 0x7, 0x1000, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x52c, 0x2, 0xffff, 0x400, 0x8b, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x6}, {0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {}, {0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfbc9, 0x3, 0x5, 0x7, 0x3f, 0x99]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x7f, 0x40, 0x2, 0x81, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x2, 0x9, 0x6c, 0x60, 0x3, 0x1b, 0xb, 0x25, 0x60, 0x48, 0x5, 0x12, 0x2, 0x30, 0xb, 0x16, 0x1, 0x5, 0xb, 0x48, 0xc, 0x2, 0x3, 0x6c, 0xb, 0x60, 0x48, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x1}, {0x3}, {0x4, 0xa}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x2}, {0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x4}, {0x3, 0xa}, {0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x3, 0x19}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x1, 0x5}, {0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x10}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x36, 0x35, 0x2, 0x18, 0x48, 0x5, 0x1, 0x30, 0x2, 0x3, 0x60, 0x4, 0x6, 0x48, 0x37, 0x5, 0x48, 0x1b, 0xc, 0x30, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xf84, 0x4, 0x40eb, 0x81, 0x1, 0x1000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0x401, 0x200, 0x1, 0x5, 0x2, 0x3f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x518}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = dup2(r3, r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = dup2(r7, r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x2, 0x4000fb4f3d03c275, 0x7, 0x1, 0x40, 0xfffffffffffffff0}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x27}, @ldst={0x1, 0x1, 0x0, 0x6, 0x0, 0xc, 0xfffffffffffffffc}, @generic={0x1, 0x4, 0x9, 0x40, 0x8000}, @generic={0x1f, 0x5, 0xe, 0x9, 0x10000}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xa7, &(0x7f0000000180)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r2, r6, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_pts(r0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:29 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 05:21:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x625, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x29, 0xff, 0x0, 0xfffffff7, 0x38, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x10, 0x1e4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7fff, 0x4, 0x939, 0x9, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0}, 0x20) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="d62c66253a33f203db4d59354f664a1dc049bb7d68bce72ff04fd61bb31ee755415cd27e4c1ef519e6ab73daa2dfec89f43b6cc740673854ee59d44a60e39eb1fddd10585259b8805b772d39c02bff2e98b87cb7e143f8", 0x57}, {&(0x7f0000000280)="7e0bf6d2cf2e32c528ac9dcb8de9e87ac161d3db52c1ee5e0e99dee50153d2e5f19fcfc2bf0dfbe244c233eea679174afaed9794ce19e15f5b3742cb94b3503e99ee98fd08087e7eeef9263b4a2260835c03f6db065e8e0b2eebaf6559bc7cdd80cc6ec871e192ee9a1cbf20cfdd142dce08c2f2228633ada1e9f498fe47efac741bb6ea1ba14184dd0a9a82484422bcb0dc848bd9f14ec1c9f569dba10c4cedcaf9878fd7d15999eb62e5cf62512628cb7b1874dd3b4844eaf9b49b5e01287ac30baf08057f57a088b83c3742c8904ff5a18a28daee7d3972084600b6cba8e708", 0xe1}, {&(0x7f0000000180)="d2555ad025bf470bf6611eeb885d94a042e35400ed96db600a760f32ad3c653b7216097dac2805f0445fceade366c3fe97157a884ccd8137e984639d685d7908cb1af4b3da3410fa", 0x48}, {&(0x7f0000000100)="1aa5f7262c080899bf736efe0ad4b7f7ca3dda4134a492c9382f28b7629da9e361effe0734c30a1f1619af69951ee66da512d22231500260a56de1060f", 0x3d}, {&(0x7f0000000200)="0d5a56e757", 0x5}, {&(0x7f0000000380)="98454052bc81b1717924ebc0bd4d11d90609909e2228c06a", 0x18}, {&(0x7f00000003c0)="f1d28a8a7409cfb1f1a670e9b50ba976f19fbee3a793752d6a6861b675efd8df7887d828c86db75791febfe6c6431ab1", 0x30}, {&(0x7f0000000400)="ec33cebb4a8ed97871ce1b6a1c5f8c94c2c0812ba17a7286f80f49cda8123795dc340b9af176025b3ce36ff9ebf9994890b03b31ca58be7ab8d4ad6618c7c8f8180fba2627c9ce63e6c36967fca2af59325fc4fb15e5ed2034aea5c89784aa54d8724d0698eb7750cf2fd6770b3c6591c056607a1a9b484fa6d2116406dac4de06e6aa17c5c7b68b302f2504fe0640623d4a45f0106bafce938b616ce6d0d663f5d048c2b77af77f06602f07e5ae74f33e606f3f4bc608620d3ef6ac2919a66488685d5b", 0xc4}, {&(0x7f0000000500)="3698fc6c66bc7f8ed62f71353d4b5c33d579ff043a3a2dfadb08086302f5ed3bc9d16c110e9f52f7fd4cefd57f2493c325de94f6bb47a8ea696b176389767860dbd414954bdca43085f799d5b8afe28d21681e433721067b2dd5469d8cc523c3b7a9b5bf255233ec28e39efe0004cd170fa82aae68817ad16ba1299c9d179aba0fa0e0a0287f8da404405dfab3dbc328cf8c6186751705a82fb0d3e77d374c28b5b084a34752bf5f98d112e4564d99a243f9b738a510540ebbec907b20c12692aa6d915a6ff8a71ca73207d340f225d22c9b63dc61693978576cbaf76ef501af0e9c406ec730e568ecde7d1d1544ee637be2a4c98d80ee79", 0xf8}], 0x9, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb5e3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x48}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x438102, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) connect$inet6(r0, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) sendmsg$inet(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="6ff005fb1f21126c8b0b2237777ee431d1a2f95ef25cb68633cd1c2aebee4da39e347181035ca4dc33f9124d4d38800c9af2415efea26556d10b4d8cb4c07329f4", 0x41}, {&(0x7f0000000800)="de154f7d6c94ac6cb45f3616f1f2cfcf77132b6b6d2fce8597028de10852fa330fe1f32f1559a1d6e3fb51367e5190370f194441b43c9a9ea8cba3d4a4996bef31fe89f8aad321c5fa524b598a553ccddcadd6cc50f4de2668b0239fa99c9f6c27c1467880a14a7f1bf87336c19f35b7ec2dfa0ac189b8f004cad8041992abb731b60c53e221e4bd4209054cda39415e2c84b501bb3f33abb91bd4c9e6803ae5486b", 0xa2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d7de4781b107afe617e9f56865156a4311e19330e48368cec2dc497532f5d42ea4a6b0d2c873c7ff1464058d762445", 0x2f}, {&(0x7f0000001900)="31e1", 0x2}], 0x5}, 0x0) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 05:21:29 executing program 1: request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)=')(\\\x00', 0xfffffffffffffff9) [ 646.092880][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 646.101174][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:21:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="d62c66253a33f203db4d59354f664a1dc049bb7d68bce72ff04fd61bb31ee755415cd27e4c1ef519e6ab73daa2dfec89f43b6cc740673854ee59d44a60e39eb1fddd10585259b8805b772d39c02bff2e98b87cb7e143f8", 0x57}, {&(0x7f0000000280)="7e0bf6d2cf2e32c528ac9dcb8de9e87ac161d3db52c1ee5e0e99dee50153d2e5f19fcfc2bf0dfbe244c233eea679174afaed9794ce19e15f5b3742cb94b3503e99ee98fd08087e7eeef9263b4a2260835c03f6db065e8e0b2eebaf6559bc7cdd80cc6ec871e192ee9a1cbf20cfdd142dce08c2f2228633ada1e9f498fe47efac741bb6ea1ba14184dd0a9a82484422bcb0dc848bd9f14ec1c9f569dba10c4cedcaf9878fd7d15999eb62e5cf62512628cb7b1874dd3b4844eaf9b49b5e01287ac30baf08057f57a088b83c3742c8904ff5a18a28daee7d3972084600b6cba8e708", 0xe1}, {&(0x7f0000000180)="d2555ad025bf470bf6611eeb885d94a042e35400ed96db600a760f32ad3c653b7216097dac2805f0445fceade366c3fe97157a884ccd8137e984639d685d7908cb1af4b3da3410fa", 0x48}, {&(0x7f0000000100)="1aa5f7262c080899bf736efe0ad4b7f7ca3dda4134a492c9382f28b7629da9e361effe0734c30a1f1619af69951ee66da512d22231500260a56de1060f", 0x3d}, {&(0x7f0000000200)="0d5a56e757", 0x5}, {&(0x7f0000000380)="98454052bc81b1717924ebc0bd4d11d90609909e2228c06a", 0x18}, {&(0x7f00000003c0)="f1d28a8a7409cfb1f1a670e9b50ba976f19fbee3a793752d6a6861b675efd8df7887d828c86db75791febfe6c6431ab1", 0x30}, {&(0x7f0000000400)="ec33cebb4a8ed97871ce1b6a1c5f8c94c2c0812ba17a7286f80f49cda8123795dc340b9af176025b3ce36ff9ebf9994890b03b31ca58be7ab8d4ad6618c7c8f8180fba2627c9ce63e6c36967fca2af59325fc4fb15e5ed2034aea5c89784aa54d8724d0698eb7750cf2fd6770b3c6591c056607a1a9b484fa6d2116406dac4de06e6aa17c5c7b68b302f2504fe0640623d4a45f0106bafce938b616ce6d0d663f5d048c2b77af77f06602f07e5ae74f33e606f3f4bc608620d3ef6ac2919a66488685d5b", 0xc4}, {&(0x7f0000000500)="3698fc6c66bc7f8ed62f71353d4b5c33d579ff043a3a2dfadb08086302f5ed3bc9d16c110e9f52f7fd4cefd57f2493c325de94f6bb47a8ea696b176389767860dbd414954bdca43085f799d5b8afe28d21681e433721067b2dd5469d8cc523c3b7a9b5bf255233ec28e39efe0004cd170fa82aae68817ad16ba1299c9d179aba0fa0e0a0287f8da404405dfab3dbc328cf8c6186751705a82fb0d3e77d374c28b5b084a34752bf5f98d112e4564d99a243f9b738a510540ebbec907b20c12692aa6d915a6ff8a71ca73207d340f225d22c9b63dc61693978576cbaf76ef501af0e9c406ec730e568ecde7d1d1544ee637be2a4c98d80ee79", 0xf8}], 0x9, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb5e3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x48}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x438102, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) connect$inet6(r0, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) ioctl$KDADDIO(r1, 0x400455c8, 0x1) sendmsg$inet(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="6ff005fb1f21126c8b0b2237777ee431d1a2f95ef25cb68633cd1c2aebee4da39e347181035ca4dc33f9124d4d38800c9af2415efea26556d10b4d8cb4c07329f4", 0x41}, {&(0x7f0000000800)="de154f7d6c94ac6cb45f3616f1f2cfcf77132b6b6d2fce8597028de10852fa330fe1f32f1559a1d6e3fb51367e5190370f194441b43c9a9ea8cba3d4a4996bef31fe89f8aad321c5fa524b598a553ccddcadd6cc50f4de2668b0239fa99c9f6c27c1467880a14a7f1bf87336c19f35b7ec2dfa0ac189b8f004cad8041992abb731b60c53e221e4bd4209054cda39415e2c84b501bb3f33abb91bd4c9e6803ae5486b", 0xa2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d7de4781b107afe617e9f56865156a4311e19330e48368cec2dc497532f5d42ea4a6b0d2c873c7ff1464058d762445", 0x2f}, {&(0x7f0000001900)="31e1", 0x2}], 0x5}, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="d62c66253a33f203db4d59354f664a1dc049bb7d68bce72ff04fd61bb31ee755415cd27e4c1ef519e6ab73daa2dfec89f43b6cc740673854ee59d44a60e39eb1fddd10585259b8805b772d39c02bff2e98b87cb7e143f8", 0x57}, {&(0x7f0000000280)="7e0bf6d2cf2e32c528ac9dcb8de9e87ac161d3db52c1ee5e0e99dee50153d2e5f19fcfc2bf0dfbe244c233eea679174afaed9794ce19e15f5b3742cb94b3503e99ee98fd08087e7eeef9263b4a2260835c03f6db065e8e0b2eebaf6559bc7cdd80cc6ec871e192ee9a1cbf20cfdd142dce08c2f2228633ada1e9f498fe47efac741bb6ea1ba14184dd0a9a82484422bcb0dc848bd9f14ec1c9f569dba10c4cedcaf9878fd7d15999eb62e5cf62512628cb7b1874dd3b4844eaf9b49b5e01287ac30baf08057f57a088b83c3742c8904ff5a18a28daee7d3972084600b6cba8e708", 0xe1}, {&(0x7f0000000180)="d2555ad025bf470bf6611eeb885d94a042e35400ed96db600a760f32ad3c653b7216097dac2805f0445fceade366c3fe97157a884ccd8137e984639d685d7908cb1af4b3da3410fa", 0x48}, {&(0x7f0000000100)="1aa5f7262c080899bf736efe0ad4b7f7ca3dda4134a492c9382f28b7629da9e361effe0734c30a1f1619af69951ee66da512d22231500260a56de1060f", 0x3d}, {&(0x7f0000000200)="0d5a56e757", 0x5}, {&(0x7f0000000380)="98454052bc81b1717924ebc0bd4d11d90609909e2228c06a", 0x18}, {&(0x7f00000003c0)="f1d28a8a7409cfb1f1a670e9b50ba976f19fbee3a793752d6a6861b675efd8df7887d828c86db75791febfe6c6431ab1", 0x30}, {&(0x7f0000000400)="ec33cebb4a8ed97871ce1b6a1c5f8c94c2c0812ba17a7286f80f49cda8123795dc340b9af176025b3ce36ff9ebf9994890b03b31ca58be7ab8d4ad6618c7c8f8180fba2627c9ce63e6c36967fca2af59325fc4fb15e5ed2034aea5c89784aa54d8724d0698eb7750cf2fd6770b3c6591c056607a1a9b484fa6d2116406dac4de06e6aa17c5c7b68b302f2504fe0640623d4a45f0106bafce938b616ce6d0d663f5d048c2b77af77f06602f07e5ae74f33e606f3f4bc608620d3ef6ac2919a66488685d5b", 0xc4}, {&(0x7f0000000500)="3698fc6c66bc7f8ed62f71353d4b5c33d579ff043a3a2dfadb08086302f5ed3bc9d16c110e9f52f7fd4cefd57f2493c325de94f6bb47a8ea696b176389767860dbd414954bdca43085f799d5b8afe28d21681e433721067b2dd5469d8cc523c3b7a9b5bf255233ec28e39efe0004cd170fa82aae68817ad16ba1299c9d179aba0fa0e0a0287f8da404405dfab3dbc328cf8c6186751705a82fb0d3e77d374c28b5b084a34752bf5f98d112e4564d99a243f9b738a510540ebbec907b20c12692aa6d915a6ff8a71ca73207d340f225d22c9b63dc61693978576cbaf76ef501af0e9c406ec730e568ecde7d1d1544ee637be2a4c98d80ee79", 0xf8}], 0x9, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb5e3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x48}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x438102, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) connect$inet6(r0, &(0x7f0000001a00)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) sendmsg$inet(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="6ff005fb1f21126c8b0b2237777ee431d1a2f95ef25cb68633cd1c2aebee4da39e347181035ca4dc33f9124d4d38800c9af2415efea26556d10b4d8cb4c07329f4", 0x41}, {&(0x7f0000000800)="de154f7d6c94ac6cb45f3616f1f2cfcf77132b6b6d2fce8597028de10852fa330fe1f32f1559a1d6e3fb51367e5190370f194441b43c9a9ea8cba3d4a4996bef31fe89f8aad321c5fa524b598a553ccddcadd6cc50f4de2668b0239fa99c9f6c27c1467880a14a7f1bf87336c19f35b7ec2dfa0ac189b8f004cad8041992abb731b60c53e221e4bd4209054cda39415e2c84b501bb3f33abb91bd4c9e6803ae5486b", 0xa2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d7de4781b107afe617e9f56865156a4311e19330e48368cec2dc497532f5d42ea4a6b0d2c873c7ff1464058d762445", 0x2f}, {&(0x7f0000001900)="31e1", 0x2}], 0x5}, 0x0) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) 05:21:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x518, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x48, 0x5, 0x24, 0x0, 0x6, 0x36, 0x2, 0x36, 0xc, 0x30, 0x1, 0x3, 0xc, 0x48, 0x18, 0x9, 0x5, 0x5c, 0x5, 0x1b, 0x6, 0x6c, 0x1b, 0x36, 0xc, 0x60, 0x1b, 0x6, 0x1, 0xc, 0x78]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x6}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x5}, {0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x525, 0x3, 0x6, 0x4, 0x3, 0x620e, 0x3ed7, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {}, {0x6, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x2, 0x1, 0x1, 0x7760, 0x7ff, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x5, 0xbc9, 0x1000, 0x73, 0x8, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7fff, 0x98, 0x3, 0x3f, 0x2, 0x800, 0x54ce]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x2, 0x1b, 0x74, 0x5, 0x1, 0x4, 0x60, 0x30, 0x36, 0x6c, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x33, 0x6c, 0x9, 0x2, 0x12, 0x9, 0x24, 0x36, 0x9a54e5fb967b79fc, 0x4, 0x18, 0x12, 0x6c, 0x1, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x5, 0x1, 0x9, 0x2, 0x401, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x986, 0x1, 0x7, 0x0, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x16, 0x9, 0x16, 0x12, 0x60, 0x1, 0x18, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x200, 0x1ff, 0x8edb, 0x20, 0x101, 0xa80f, 0x2]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0xb, 0x2, 0x6, 0x40, 0x3, 0x30, 0x60, 0xc, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x1, 0x6, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x0, 0x3274, 0x8, 0x8, 0x100, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x30, 0x4, 0x24, 0x5, 0x60, 0x5, 0x1b, 0x24, 0x36, 0x36, 0x5, 0x18, 0x36, 0x2, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x8000, 0x0, 0x8, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x33a, 0x6, 0x0, 0xffff, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x18, 0x11, 0x6c, 0x30, 0x0, 0xc, 0xc, 0x48, 0x5, 0x6c, 0x48, 0x2, 0x2, 0x48, 0x6, 0xb, 0xc, 0x6c, 0x6c, 0x60, 0x16, 0x24, 0x12, 0x2, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x0, 0x7, 0x2, 0xfff7, 0x5, 0x8, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x48, 0x1b, 0x1, 0x16, 0x16, 0x51, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b13, 0x5, 0x3, 0x1, 0x4, 0x2, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0x2fb, 0x8001, 0x0, 0x9, 0x8001]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x7}, {0x3, 0x4}, {0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x20, 0x2, 0xfffa, 0x7, 0x1000, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x52c, 0x2, 0xffff, 0x400, 0x8b, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x6}, {0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {}, {0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfbc9, 0x3, 0x5, 0x7, 0x3f, 0x99]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x7f, 0x40, 0x2, 0x81, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x2, 0x9, 0x6c, 0x60, 0x3, 0x1b, 0xb, 0x25, 0x60, 0x48, 0x5, 0x12, 0x2, 0x30, 0xb, 0x16, 0x1, 0x5, 0xb, 0x48, 0xc, 0x2, 0x3, 0x6c, 0xb, 0x60, 0x48, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x1}, {0x3}, {0x4, 0xa}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x2}, {0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x4}, {0x3, 0xa}, {0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x3, 0x19}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x1, 0x5}, {0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x10}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x36, 0x35, 0x2, 0x18, 0x48, 0x5, 0x1, 0x30, 0x2, 0x3, 0x60, 0x4, 0x6, 0x48, 0x37, 0x5, 0x48, 0x1b, 0xc, 0x30, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xf84, 0x4, 0x40eb, 0x81, 0x1, 0x1000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0x401, 0x200, 0x1, 0x5, 0x2, 0x3f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x518}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = dup2(r3, r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = dup2(r7, r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x2, 0x4000fb4f3d03c275, 0x7, 0x1, 0x40, 0xfffffffffffffff0}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x27}, @ldst={0x1, 0x1, 0x0, 0x6, 0x0, 0xc, 0xfffffffffffffffc}, @generic={0x1, 0x4, 0x9, 0x40, 0x8000}, @generic={0x1f, 0x5, 0xe, 0x9, 0x10000}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xa7, &(0x7f0000000180)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r2, r6, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_pts(r0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (rerun: 64) [ 646.497712][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 646.497769][T15868] Bluetooth: hci8: command 0x1003 tx timeout 05:21:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "f606ce2aea81c54bdab4bd518fadee5250181b6d350d5e6316b41bb31fd9be64723b8d92021d58894b6029d0e4e33939dee6654b557f3e0576ef10d6938e10671b56578a1a26efa41e3bc9d8519e3e053545cc4e452953eba11256ae7757d1eaed1f11c03a3dd6bada70fcb17feb2c81ffe43daa88859b8e5aec0bc42437b4b10efa8d7e7d2b6c9023f7ba59f3bb7603bec12795e2c1bf9a692f80d5ae937449ae9e1a2d8a42061cba57b7a08fed0764215c40524458d554b8c1f9791b80e3586ce5a0e39391e066b58a578e8c468cc41f16d55d2ce050a0a870bcf61e88b57d286c176e571593f1785f7a3406c9575c01dee48193a3caae0756cab5e146e3de041b867f97d79f0cac405ad67ee43c689e0c8309c31a87e58724aa2d57e0226140cb8a3db2b20f41fc63617664e84ad8ff7baafb4d44c8507b7f217c3be48cb8db5169474a35cb2101045e00449977bf1f5b85fe0880843970c3d4ed55bfd52c9eec7cd39a2dc863636d5825f583545a0cf843ae9d8dac4db55c741365516a6a355a6fec59e5feabed567203919a6220e09ed81ea441ce25b97a494137abbad2e6482efb0bd96c4eb71a24c6c3cd9a27279cbf2088856b1810f446cfac91c3edfb383921e39d629276e1ef00d613ac98739948ce10512512ee3734bf92c8a0a3d510919c7b02953c06729b1af65a88195aa812c194da17a61453c5f4cbdd48dda390a2d437915a56975a2cf9c134aaad77b9f73dbdec4735fbbd8f462526243becb025267f498ae0f07194da8afb9cf53df646f76d1f811e85b9353997426282a07a0ba356e036fa7795ac8f0c94f8245b84318d8b9c3701ca4ba081d899536ec5ee866f80cecb5fee2e15639a44122644ba5ab1e0f991de177e2178feb4e8c7959a8a45ccf617f7addf2d59f69f8b48509ba5c46c98ea759bfe2c0692a2027e763729f24593e6ec6182539adf76b0f017b29773245fc40d610dc89b1e95b78847385cfa5d5e4045880da6c5bbd912c2d139e2c1a77f2bbd7e81a613378ac5bb930117c6f97de1480aa891277b09cb5e64fca5735d3b9cfe6c874749ae6ba436b775d69c039af7d1feccf355e2d2416a3ae3e3e62d0ce5131791d3487aa48c1693179d8acf9d53fcc0524c1c8cb2eb4352c20d5206cfe93250ad67b3634079c56254659d0c0010f97d00ed3b03ef9f646084fb9e46208e3d50424b8ed5ef73fd40e203c9652aa9e44124221f651401f27b49f84a8907b45383985b6c43bda553f1cff80c64f03a8e4179f58561488de7434095d88994469377cf5b693d8357669ab9e2effa37b9ec79f9ff719f096122d9fb363173c9cc56b03570a85ab5a24fdd948631a1edc2287bb933be1f73efc4808ae7fa880aabf5a2fc200b172543481d40253ca6a62b1913f08538ae9aaaa65a6b20bb07c8a29bc353e9c9d235dcb2a792f8b14dca8a5418904e0b174993cbd377955e226eb207c6449ca0e6a5c03da37304c683909e5bf50791a95b273d00afdbe5addbf4b04134f412dfe52d55c053e35e89559b0befa4ecc85e0deb59d36e7416f97824a6254d43f4b9194ccc42f503593330a07626977c3b0dc2809deab6371fc1b5ad60a4a2d16b47458a50eea2a16f779313e7a4c41873e568e0b3e24937c6652be50ebf4776b38dc8c4cb2d624ee3ebb9c08fbe29235f68fe36a8b3eacc476e8c323884381a7bd70af37827105f6ab6ff3f28ba84c5990aec6ddbe7093745672a33cbdaa79c323272083b855e0bcfb3f09f0259d4d05617aaa26e93e3c20592d4911bc61840f717dab01821de835e654eedb5041e16eec93f8326f3643e061c1112d7eb62e12c6ca0cfd2da043071f3bc62b33b146c09577af96791768635ac45af4d1ddd9b1ac93421e2d102c7a1df2abd3dbae9c51c8de8b18bbabcf957bcc5f29a7776ec3676c9b2221148441119936ff6a4f14198d68c5bb70726d8ea873f15b48eb76bc4b6b24e96300154c2ee5e09a921f7eeeef7fa30cda2b0aff375467c4638522ccbd625e1a61537aed5d3653bdf8cc035b2b77c68282cb25eed290c47fedf0074b135577133e895ee96ad99351679a95b39e1ec0ce5f47008aaf4beb493ac53df32ddc892c0ccb60144aa5765c10d549c21937affef7ec5f4e45948373379293039939a0108094dc5b2ffc98e7e94c017b197213bd2f21c14b5d12e1b44653a8ebe487ee1d20387eb6fa709d33a52a5959f4ce090935264eb2bf9fd685756383477217dbd4284d29cc2dc5270c9610e62d3c963dec73d3c2282a9a7cd59000dd38eefc3c463324db4aba4864f46b208c4f84ec05c7ef688dea333884676bce98de27f7b4c985a7a2b9e6d17de71a995491420ddef4f460ce7019ee30f4ade1509ced32550f021860f394811516ceb251a8bd9c17fb5148a4da74df80c602dd0b4efcb0348ab1d2f0c911dca836e965c3c8273b5f45be91fb5af4c5af9d9b84b14a27e6b3cfa8895df7f3d07a65857c4c7c59bbe7b750a047d666f90662509830729ea57462d52cca8e09d1ad7f55c9d889837c942b5f3d694333f310112b7ae3befbc8a9962e35287cbb51157d6c92bd399abb65ac8dc3bcd529adad5aee1eed7c712541b15f25e349f1c99ffc22c268e4b21c3ec512547d72e966e6d37e1a1057aae7a7c00a5c09b87d1965cd17716fc9ccd72e9b8c87154d1bcb75e3aa8943431991d92378226fad15f963c828a28f3e55c79e3de0fe0afd7e41d65fc4e44b0124942bfc0510eaec62c5c20c934a33296b684b00aad1bddccfe3aabc9e3d75c91558be390fe599c673bbceeb1526e698b7b26bb4fd1f51993d1327e12250121f234c24c255d3ee2a40e55041ad1a7390c9cae39dfab388855c5ba4ddfab848f9deb7c6490adb9da50ccab70f3e53e35bea5527f72dfb0bad1ece518b7f6d14fbef0a9fc2b4ae16c42cc74477bbc12e71ddbc8708dd3ebfc7b8a69a4042aa95eb1613e76277ede7f78aaff9be2027e106a42124399dae6428de854cc78eb5d5f21e622cbf69febf9d6f825ec02f7f8539c9be94c6e1cba766cb6eddac20b06d5441baf45ed40b3e1fbdb8ff1b1df3d34801229b1e49b6d52f4cec8ee92babf9f14631abb67b0aba38c2955e6c60ab1187a75280afdfd7391576dfab520d70832225a7be7e35862c682534d815ed2a7d0aa51b209da19dcfccfef8232aa9be050e906c8bf15cafc9487abafa427a86e1642cf23119231444080871da0e230da750c31ec9e5b65bb71d16617263804c60f695f6a32781bfb602748d90c9dc4992e01c2eefe9ca2eb41d79c7053ae143253c373e504e64bff91b99cc64e00c7d0b5668918c3f823b36a398330c2fcc8f16ef96fdcb3812bfb45ef081024a4650aa7fbc2883f966682c6dfa8c049281674f597eb29d7bfcc341e3908f937a4b133e81027354c2fc0a4852b7e0dc4a3eedf9f80fb757722290d057bd5b03ed39fb70546d52d3ea343d00d6e8dcd8a1ab8480ac1d74f6ce1af88da3afa978cc8680f2cc6f4f228b0bd98fa62eecacc2c36d3a500954433af54ac338239b18829f207d969c8e3e98b0113ad5c662b04bdd38ec5ad62eaa6cff67ad378a510acf36c59805f848fe463a0df0a6cdda7e7d48663712c90e2f74c764387700c11e10a10605765f443fb30d1b7629ce4378b5e0b2d25a9287e3ecf92bb7f120a1a8378b035248785bf0a62242da39f0ea0e11fa800dc5214c2f76f30ac082ff4d00f6d80588f5976d36d613a054c129a790409e39bc94d4e41fb1f462054b3c4c0773ff96532e540e85422a03976ebad5075f4b69950c3d897c3201bbc200f942212ee4c4c9000bf719cf600a886af7a71924052b022475919c7198a855ef5c25a467677186af1e3a3450bcca95ed25fe69a83c0bcacc7b04160456a3305b050c88dd8330b18c0afda31746335a80f122b6268662688eb927ac885f953077c2454bebf7c72a228c71e52577a9906fdcd8bd7b6a585d3f6878e8ce1d63136786792c7bfddb885cba778c550ae3dc6dabe8d70b3b2e00ba917fe1d140cce87521f17e1263e5c162c72e89308cc26432ac2ae422be7c677f3aa97523ca664ae2abdae8311fa1d0d0e3fb31e5d2aa17e6f471b09143390c2eec4a84c885c9b2d95eba616c8a3129d8b3b4cde9d0a87f8f023186f8b724c28a5ca45ce9f2231f213b1fc503dc46cffd9dc9c8fe6d385f6a340561edbe0bb4600dd73f3c7f245988fc09f16f84bf9abe4d099af2e9b506506b60c835cea6db0551abb621240eae267cc978b4bb7a8ccd3fdfc7121e9f05f83be146c7bb7d28c133527fd5b8269b17ebf50ff021f6c6d5d19d11d0c5507c2954aaf6e760787337a7833ff01df55d30095595340c5d14cc7e8af3f4a79d194254233bffe9382b91a0fdb281afde2c0008c46b663ba8b49d38d008a1e27ba2aed7e24d4b4b50409791618b78a839f9ee83b6ea1af856826fc838ffbf31bb1d18bd2a48309756b4a9ef0360094a1b1118a8128251a748bf5b631bfd81e3fbf3711cc770522f5c8bcc5097a1b70588a99020aa6911fc196d4ae65d5a7f3ccc6d100b3921cf93ea1be149cd30bc092dbb5ea7450c49f336f15bcd34ad42dcd3f573208c4a9fa941447f926cbb8f54ff0032ac62d4c7cc21c53f03e6fde034bb6d690b7428b42e4076ca56ac01d8cde0900f3a5d103b9c848d34b85d11efd0408192cef529151b242b3c676e0eaa791b3fd85ef9125e68f7278171dbe3fcbaa3e2733e72fdd14fc7298fc0849f5aa7d7e82e5edd00bf20aab4268f5414f8b50a5f1d22beeaf1d894277dc4d558584712f364e413ce35127572dd19768703224899d6b7313244634585eae8b0f70d1255229381d996460c2fa37f116b687aed2678ccf18f1dbd7fa80340cb54ed3e5ecc6115728ae9e447e0cf42eae9d83e7979bb45bb14dd278e6398a7f45b8114e587bf18eaf37a416164baffdc8ba313661104afc067e64f82ff55ed96420d331c8fbd543d91e8d4c0c329f82450468c37c47e0264235b9bec9eac11d360d0e00343dc9878c077f4faee4e14841faa7f011d5ad414ac3ace4750e48b0bf789910439c97d9cb064bdc4b5d26835f250f86f8f7b9b39172ed10533fc893d380d07fb68da5f3ca727a94bdc94596f9796ade9bdc0141fa5a4bc2c496bf7790f29dd1f40124b1232bf1cf8af79f90ae6b61db8b33c581feafb3ead85bd1a604966a4f87f78a32c5c754ea188020475eca59eaa3ba776c6bdd97f7e27b1547cd3ed1859192671816cf5496624453c10d3f6cfba016b38f7bfd63534988850b47652806873583f0ca53fc57e10c350d0e40ab2dff2906c3333240198261eaa034c84fd3e8739bcb242b98d98325ac8f983d3e12f0000ca1bbdf418315c8f7a9fd6175c14d164aebcdd3557b549d9827f3de00dbc7063e7d1aa901bef16df87d1c4dba39ccc7c021910e62e0548aca1cfb93a567509bcfa09e7400e0f092574c4f181a5e76fb2180e1deefb02ca6300602b2831b368c1d5c3655b45f9c296eb056160649e89bd0a712fd14130b97e24549aef0a1da0d2e1304b57ca3113dbe16719813f38e88b8b5122496425c5173ef644461158eae2b7162a3dc505cb17d29915374d769259f653c76cfa1a325e40a891dca212b82649307c5edded8d920a11793c4de2bd765f5cc5e4e8aaa76591d74b7974c9025a1f704ee9a31af40bac01c7e12d07f2962245c97930314ba530056bc77213a7443b3bd00029259b73262dd6b222ad9015735505924bf8f"}) (async) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1a) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:30 executing program 1: pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x0, 0x0) 05:21:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x518, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4fc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe67}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x48, 0x5, 0x24, 0x0, 0x6, 0x36, 0x2, 0x36, 0xc, 0x30, 0x1, 0x3, 0xc, 0x48, 0x18, 0x9, 0x5, 0x5c, 0x5, 0x1b, 0x6, 0x6c, 0x1b, 0x36, 0xc, 0x60, 0x1b, 0x6, 0x1, 0xc, 0x78]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x6}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x7}, {0x6, 0x7}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x6}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x5}, {0x5}, {0x5, 0x9}, {0x7, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x525, 0x3, 0x6, 0x4, 0x3, 0x620e, 0x3ed7, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x1}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {}, {0x6, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x4, 0xa}, {0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x2, 0x1, 0x1, 0x7760, 0x7ff, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x5, 0xbc9, 0x1000, 0x73, 0x8, 0x1f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x7fff, 0x98, 0x3, 0x3f, 0x2, 0x800, 0x54ce]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x2, 0x1b, 0x74, 0x5, 0x1, 0x4, 0x60, 0x30, 0x36, 0x6c, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x33, 0x6c, 0x9, 0x2, 0x12, 0x9, 0x24, 0x36, 0x9a54e5fb967b79fc, 0x4, 0x18, 0x12, 0x6c, 0x1, 0x2, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x5, 0x1, 0x9, 0x2, 0x401, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x986, 0x1, 0x7, 0x0, 0xfffb]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x16, 0x9, 0x16, 0x12, 0x60, 0x1, 0x18, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e, 0x200, 0x1ff, 0x8edb, 0x20, 0x101, 0xa80f, 0x2]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0xb, 0x2, 0x6, 0x40, 0x3, 0x30, 0x60, 0xc, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x3, 0x1, 0x6, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x0, 0x3274, 0x8, 0x8, 0x100, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x30, 0x4, 0x24, 0x5, 0x60, 0x5, 0x1b, 0x24, 0x36, 0x36, 0x5, 0x18, 0x36, 0x2, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x8000, 0x0, 0x8, 0x4, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x33a, 0x6, 0x0, 0xffff, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x18, 0x11, 0x6c, 0x30, 0x0, 0xc, 0xc, 0x48, 0x5, 0x6c, 0x48, 0x2, 0x2, 0x48, 0x6, 0xb, 0xc, 0x6c, 0x6c, 0x60, 0x16, 0x24, 0x12, 0x2, 0xc, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x0, 0x7, 0x2, 0xfff7, 0x5, 0x8, 0x8001]}}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x48, 0x1b, 0x1, 0x16, 0x16, 0x51, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b13, 0x5, 0x3, 0x1, 0x4, 0x2, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x6, 0x2fb, 0x8001, 0x0, 0x9, 0x8001]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x7}, {0x3, 0x4}, {0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x2, 0x4}, {0x5}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x20, 0x2, 0xfffa, 0x7, 0x1000, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x52c, 0x2, 0xffff, 0x400, 0x8b, 0x2]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x7}, {0x3, 0x1}, {0x2, 0x7}, {0x6}, {0x4}, {0x4, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x3}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x4}, {0x3}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x4}, {0x5, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x8}, {}, {0x7}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xfbc9, 0x3, 0x5, 0x7, 0x3f, 0x99]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8000, 0x7f, 0x40, 0x2, 0x81, 0x3, 0x7]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x0, 0x2, 0x9, 0x6c, 0x60, 0x3, 0x1b, 0xb, 0x25, 0x60, 0x48, 0x5, 0x12, 0x2, 0x30, 0xb, 0x16, 0x1, 0x5, 0xb, 0x48, 0xc, 0x2, 0x3, 0x6c, 0xb, 0x60, 0x48, 0x48, 0x36]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x1}, {0x3}, {0x4, 0xa}, {0x6}, {0x0, 0x9}, {0x6, 0x8}, {}, {0x5, 0x2}, {0x3, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x6}, {0x1, 0x5}, {0x0, 0x5}, {0x2}, {0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x4}, {0x3, 0xa}, {0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0xa}, {0x3, 0x19}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x4}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x1, 0x5}, {0x6}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x10}, {0x1, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x1}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x9}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x6}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x1, 0x36, 0x35, 0x2, 0x18, 0x48, 0x5, 0x1, 0x30, 0x2, 0x3, 0x60, 0x4, 0x6, 0x48, 0x37, 0x5, 0x48, 0x1b, 0xc, 0x30, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xf84, 0x4, 0x40eb, 0x81, 0x1, 0x1000, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x200, 0x401, 0x200, 0x1, 0x5, 0x2, 0x3f]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x518}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = dup2(r3, r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r10 = dup2(r7, r7) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000080)=@raw=[@ldst={0x1, 0x2, 0x4000fb4f3d03c275, 0x7, 0x1, 0x40, 0xfffffffffffffff0}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x27}, @ldst={0x1, 0x1, 0x0, 0x6, 0x0, 0xc, 0xfffffffffffffffc}, @generic={0x1, 0x4, 0x9, 0x40, 0x8000}, @generic={0x1f, 0x5, 0xe, 0x9, 0x10000}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xa7, &(0x7f0000000180)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, r2, r6, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_pts(r0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 646.817575][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 646.817599][T15872] Bluetooth: hci6: command 0x1003 tx timeout [ 646.935457][T16350] ptm ptm1: ldisc open failed (-12), clearing slot 1 05:21:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x17) 05:21:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x625, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x29, 0xff, 0x0, 0xfffffff7, 0x38, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x10, 0x1e4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7fff, 0x4, 0x939, 0x9, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0}, 0x20) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x625, 0x7}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x29, 0xff, 0x0, 0xfffffff7, 0x38, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x10, 0x1e4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7fff, 0x4, 0x939, 0x9, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) (async) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0}, 0x20) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x90600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:31 executing program 1: openat$audio1(0xffffffffffffff9c, &(0x7f00000009c0), 0x40102, 0x0) [ 648.107716][T15868] Bluetooth: hci7: command 0x1003 tx timeout [ 648.113946][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:31 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 05:21:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x94, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="a4e0338dfe02", {0x1, 0x80}}, 0x8000, 0xb4e, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x24}, {0x30}, {0x26}, {0xb, 0x1}, {0x16}, {0x8}, {0x48}]}, @void, [{0xdd, 0x1c, "f5d970160a261ba566097542f5065902d0e37c98b43c006681c9ffd3"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4e7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000004) r6 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000000)=0x72) 05:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x90600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:31 executing program 1: bpf$LINK_GET_NEXT_ID(0x8, 0x0, 0x0) 05:21:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8744f244af0522f024e82293e10f27b42fd742a42984a796c8be2d11f186b8fd32ada10", @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) syz_open_pts(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:32 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0) 05:21:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x90600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x90600, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 648.977522][T10192] Bluetooth: hci6: command 0x1003 tx timeout [ 648.983755][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:32 executing program 1: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "4e418d118df46881fc24296e54b5b1fa54b064a3e3460809658cf93f3d02e8eff13cf06c364a0f2fdd2d83166e6b81dd25c5bc360b0e94e23324d9ca3b8bc423"}, 0x48, 0xfffffffffffffffa) 05:21:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x625, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x29, 0xff, 0x0, 0xfffffff7, 0x38, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8000, 0x10, 0x1e4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x18, 0x7fff, 0x4, 0x939, 0x9, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x48) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x0, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, 0x0}, 0x20) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3600, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10803, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x58) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) r6 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000040)={0xffff, 0x5, 0x6c5c2885, 0xa, 0x2, "0ab44a413a7af35ea0f566df32ea1c5c5f5e3b", 0x101be6, 0xd5bc}) [ 650.257664][T10190] Bluetooth: hci7: command 0x1003 tx timeout [ 650.263959][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 650.267696][T15872] Bluetooth: hci8: command 0x1003 tx timeout [ 650.276765][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:33 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 05:21:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x94, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="a4e0338dfe02", {0x1, 0x80}}, 0x8000, 0xb4e, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x24}, {0x30}, {0x26}, {0xb, 0x1}, {0x16}, {0x8}, {0x48}]}, @void, [{0xdd, 0x1c, "f5d970160a261ba566097542f5065902d0e37c98b43c006681c9ffd3"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4e7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000004) r6 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000000)=0x72) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x94, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="a4e0338dfe02", {0x1, 0x80}}, 0x8000, 0xb4e, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x24}, {0x30}, {0x26}, {0xb, 0x1}, {0x16}, {0x8}, {0x48}]}, @void, [{0xdd, 0x1c, "f5d970160a261ba566097542f5065902d0e37c98b43c006681c9ffd3"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4e7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000004) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000000)=0x72) (async) [ 650.339806][T10191] Bluetooth: hci9: command 0x1003 tx timeout [ 650.349722][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:34 executing program 1: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x2) 05:21:34 executing program 1: bpf$LINK_GET_NEXT_ID(0xd, 0x0, 0x0) [ 650.491815][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 650.500148][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 650.531463][ T3625] Bluetooth: hci10: sending frame failed (-49) 05:21:34 executing program 1: r0 = memfd_secret(0x0) write$uinput_user_dev(r0, 0x0, 0x0) [ 650.539198][ T3639] Bluetooth: hci10: Opcode 0x1003 failed: -49 05:21:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8744f244af0522f024e82293e10f27b42fd742a42984a796c8be2d11f186b8fd32ada10", @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) syz_open_pts(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x17}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=@newtfilter={0x24}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=@ipv6_delrule={0x1c}, 0x1c}}, 0x0) 05:21:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x94, r5, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x4f, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="a4e0338dfe02", {0x1, 0x80}}, 0x8000, 0xb4e, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x24}, {0x30}, {0x26}, {0xb, 0x1}, {0x16}, {0x8}, {0x48}]}, @void, [{0xdd, 0x1c, "f5d970160a261ba566097542f5065902d0e37c98b43c006681c9ffd3"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4e7}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000004) (async) r6 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r6, 0x5423, &(0x7f0000000000)=0x72) [ 651.137478][T10195] Bluetooth: hci6: command 0x1003 tx timeout [ 651.143696][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 652.417751][T15872] Bluetooth: hci7: command 0x1003 tx timeout [ 652.423875][ T3634] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10541, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x151) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 05:21:36 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 05:21:36 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_pts(0xffffffffffffffff, 0x400100) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000040)) 05:21:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8744f244af0522f024e82293e10f27b42fd742a42984a796c8be2d11f186b8fd32ada10", @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) syz_open_pts(r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8744f244af0522f024e82293e10f27b42fd742a42984a796c8be2d11f186b8fd32ada10", @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) syz_open_pts(r4, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) (rerun: 64) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x2) (async, rerun: 64) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3600, 0x0) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10803, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x58) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) (async) r6 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000040)={0xffff, 0x5, 0x6c5c2885, 0xa, 0x2, "0ab44a413a7af35ea0f566df32ea1c5c5f5e3b", 0x101be6, 0xd5bc}) [ 652.498801][T10192] Bluetooth: hci8: command 0x1003 tx timeout [ 652.507819][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) 05:21:36 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) 05:21:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10541, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x151) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xb) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) [ 652.612079][ T3634] Bluetooth: hci6: sending frame failed (-49) [ 652.619487][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 652.631865][T16440] smc: net device ip6gretap0 applied user defined pnetid SYZ0 05:21:36 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x400100) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000040)) 05:21:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 05:21:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10541, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x151) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c00, 0x0) (rerun: 32) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 05:21:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) 05:21:36 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x0, 0x32, 0xffffffffffffffff, 0x0) 05:21:36 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_pts(0xffffffffffffffff, 0x400100) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000040)) [ 653.297725][T10192] Bluetooth: hci9: command 0x1003 tx timeout [ 653.307474][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 653.445436][T16476] ptm ptm12: ldisc open failed (-12), clearing slot 12 05:21:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x800f) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x2) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3600, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10803, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x58) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) r6 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000040)={0xffff, 0x5, 0x6c5c2885, 0xa, 0x2, "0ab44a413a7af35ea0f566df32ea1c5c5f5e3b", 0x101be6, 0xd5bc}) 05:21:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0xb}) 05:21:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) (async) 05:21:38 executing program 3: r0 = memfd_secret(0x80000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 654.659370][T15868] Bluetooth: hci7: command 0x1003 tx timeout [ 654.665851][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x800f) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x800f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5450) 05:21:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) [ 654.781032][ T3634] Bluetooth: hci8: sending frame failed (-49) [ 654.788479][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:39 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc004500a, &(0x7f0000000100)=0x800) 05:21:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x800f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:39 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x6b) 05:21:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:39 executing program 3: r0 = memfd_secret(0x80000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 655.537616][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 655.537623][T15868] Bluetooth: hci6: command 0x1003 tx timeout [ 655.715302][ T3634] Bluetooth: hci8: sending frame failed (-49) [ 655.724085][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6) 05:21:40 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x6b) 05:21:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 05:21:40 executing program 2: syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="8508867cca4a8e2a5d0fce2895e5037ea0a3d62150d26306a56176b9470ca0e66110851749178749aa5861535e43c1", 0x2f, 0x1e69}, {&(0x7f00000000c0)="3790c2aec22c6de14774a145fac057a766f5c1ce64a29c2eda12529dde069993fb31a8efbe9778e3169bd131289a80eb3d9bb78c43171c8177eca6db84e0610933f8f7ef471d96fb6a3cc4969e1380d0cba1d4b68b08a6e85e3a5c092c154dbd03f8e8ac37293c5c3f11cb3789e733c8ca00a78f6862", 0x76, 0x7fffffff}, {&(0x7f0000000180)="bbde9ff7fa29345abfa76039d4bb0a7652e42b737f5d56f69deb6df2f7848ac7a67ebf8915e8167412fa109cbe8ccbfe0234bbcdca28e4dae4684fa07cfe0e8613688faa2449558d763156f0b2461ccce68f79fcf2cc16360ca8da07d3427be553bc949af372ff10550c5b5ef2eae8203b430eea7e2509e41a90ca2b7761a3bec69cbb8b6b6c82b72231be7dbe", 0x8d, 0x3f}], 0x3344008, &(0x7f0000000300)={[{'\'#/!'}, {'\'.&--)'}, {'*'}, {'/dev/ptmx\x00'}, {'-'}, {'-\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 656.737606][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:40 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x6b) [ 656.813650][T16530] loop2: detected capacity change from 0 to 264192 05:21:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) 05:21:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_ipoib', 0x400002, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 656.929465][T16533] ptm ptm3: ldisc open failed (-12), clearing slot 3 05:21:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x2) 05:21:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 05:21:40 executing program 2: syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="8508867cca4a8e2a5d0fce2895e5037ea0a3d62150d26306a56176b9470ca0e66110851749178749aa5861535e43c1", 0x2f, 0x1e69}, {&(0x7f00000000c0)="3790c2aec22c6de14774a145fac057a766f5c1ce64a29c2eda12529dde069993fb31a8efbe9778e3169bd131289a80eb3d9bb78c43171c8177eca6db84e0610933f8f7ef471d96fb6a3cc4969e1380d0cba1d4b68b08a6e85e3a5c092c154dbd03f8e8ac37293c5c3f11cb3789e733c8ca00a78f6862", 0x76, 0x7fffffff}, {&(0x7f0000000180)="bbde9ff7fa29345abfa76039d4bb0a7652e42b737f5d56f69deb6df2f7848ac7a67ebf8915e8167412fa109cbe8ccbfe0234bbcdca28e4dae4684fa07cfe0e8613688faa2449558d763156f0b2461ccce68f79fcf2cc16360ca8da07d3427be553bc949af372ff10550c5b5ef2eae8203b430eea7e2509e41a90ca2b7761a3bec69cbb8b6b6c82b72231be7dbe", 0x8d, 0x3f}], 0x3344008, &(0x7f0000000300)={[{'\'#/!'}, {'\'.&--)'}, {'*'}, {'/dev/ptmx\x00'}, {'-'}, {'-\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="8508867cca4a8e2a5d0fce2895e5037ea0a3d62150d26306a56176b9470ca0e66110851749178749aa5861535e43c1", 0x2f, 0x1e69}, {&(0x7f00000000c0)="3790c2aec22c6de14774a145fac057a766f5c1ce64a29c2eda12529dde069993fb31a8efbe9778e3169bd131289a80eb3d9bb78c43171c8177eca6db84e0610933f8f7ef471d96fb6a3cc4969e1380d0cba1d4b68b08a6e85e3a5c092c154dbd03f8e8ac37293c5c3f11cb3789e733c8ca00a78f6862", 0x76, 0x7fffffff}, {&(0x7f0000000180)="bbde9ff7fa29345abfa76039d4bb0a7652e42b737f5d56f69deb6df2f7848ac7a67ebf8915e8167412fa109cbe8ccbfe0234bbcdca28e4dae4684fa07cfe0e8613688faa2449558d763156f0b2461ccce68f79fcf2cc16360ca8da07d3427be553bc949af372ff10550c5b5ef2eae8203b430eea7e2509e41a90ca2b7761a3bec69cbb8b6b6c82b72231be7dbe", 0x8d, 0x3f}], 0x3344008, &(0x7f0000000300)={[{'\'#/!'}, {'\'.&--)'}, {'*'}, {'/dev/ptmx\x00'}, {'-'}, {'-\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 657.118338][T16553] loop2: detected capacity change from 0 to 264192 [ 657.210322][T16553] loop2: detected capacity change from 0 to 264192 [ 657.697454][T10191] Bluetooth: hci6: command 0x1003 tx timeout [ 657.703637][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 657.734564][ T3634] Bluetooth: hci6: sending frame failed (-49) 05:21:41 executing program 3: r0 = memfd_secret(0x80000) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 657.743009][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 657.861792][T16562] ptm ptm18: ldisc open failed (-12), clearing slot 18 05:21:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6) 05:21:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async, rerun: 64) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x2) 05:21:42 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000280)=0x1) 05:21:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_ipoib', 0x400002, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x37}, {0x36, 0x1}, {0x60}, {0xbe, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0xb}, {0x12}, {0x48}, {0x1b, 0x1}, {0x18, 0x1}, {0x18, 0x1}, {0xb}, {0x1b}, {0x9, 0x1}, {0x1b}, {0x3, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x48}, {0x9}, {0x24, 0x1}, {0x6c}, {0xb}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x60, 0x1}, {0x9}, {0x48}, {0x1}, {0x1, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4e}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4024811) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 658.897582][T10191] Bluetooth: hci7: command 0x1003 tx timeout [ 658.903796][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:42 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000001c0)) syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000500)="15") 05:21:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = dup2(r1, r1) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0x2) 05:21:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ib_ipoib', 0x400002, 0x0) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (rerun: 32) 05:21:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 05:21:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x840) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) 05:21:42 executing program 2: syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="8508867cca4a8e2a5d0fce2895e5037ea0a3d62150d26306a56176b9470ca0e66110851749178749aa5861535e43c1", 0x2f, 0x1e69}, {&(0x7f00000000c0)="3790c2aec22c6de14774a145fac057a766f5c1ce64a29c2eda12529dde069993fb31a8efbe9778e3169bd131289a80eb3d9bb78c43171c8177eca6db84e0610933f8f7ef471d96fb6a3cc4969e1380d0cba1d4b68b08a6e85e3a5c092c154dbd03f8e8ac37293c5c3f11cb3789e733c8ca00a78f6862", 0x76, 0x7fffffff}, {&(0x7f0000000180)="bbde9ff7fa29345abfa76039d4bb0a7652e42b737f5d56f69deb6df2f7848ac7a67ebf8915e8167412fa109cbe8ccbfe0234bbcdca28e4dae4684fa07cfe0e8613688faa2449558d763156f0b2461ccce68f79fcf2cc16360ca8da07d3427be553bc949af372ff10550c5b5ef2eae8203b430eea7e2509e41a90ca2b7761a3bec69cbb8b6b6c82b72231be7dbe", 0x8d, 0x3f}], 0x3344008, &(0x7f0000000300)={[{'\'#/!'}, {'\'.&--)'}, {'*'}, {'/dev/ptmx\x00'}, {'-'}, {'-\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 659.217554][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x442400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x101000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x44) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x8, 0x1, 0x5, 0x1c2, 0x4, "9155049cf58bffb9b7a99252dcb872469511fc"}) [ 659.330407][T16603] loop2: detected capacity change from 0 to 264192 [ 661.057523][T10195] Bluetooth: hci6: command 0x1003 tx timeout [ 661.058147][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6) 05:21:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x442400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x101000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x44) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x8, 0x1, 0x5, 0x1c2, 0x4, "9155049cf58bffb9b7a99252dcb872469511fc"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x442400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_pts(r1, 0x101000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x44) (async) fcntl$dupfd(r4, 0x0, r2) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x8, 0x1, 0x5, 0x1c2, 0x4, "9155049cf58bffb9b7a99252dcb872469511fc"}) (async) 05:21:44 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x6002, 0x0) 05:21:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x37}, {0x36, 0x1}, {0x60}, {0xbe, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0xb}, {0x12}, {0x48}, {0x1b, 0x1}, {0x18, 0x1}, {0x18, 0x1}, {0xb}, {0x1b}, {0x9, 0x1}, {0x1b}, {0x3, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x48}, {0x9}, {0x24, 0x1}, {0x6c}, {0xb}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x60, 0x1}, {0x9}, {0x48}, {0x1}, {0x1, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4e}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4024811) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 661.137965][ T3639] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:44 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000240)) 05:21:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x442400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r1, 0x101000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x44) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x8, 0x1, 0x5, 0x1c2, 0x4, "9155049cf58bffb9b7a99252dcb872469511fc"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x442400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_pts(r1, 0x101000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x44) (async) fcntl$dupfd(r4, 0x0, r2) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x8, 0x1, 0x5, 0x1c2, 0x4, "9155049cf58bffb9b7a99252dcb872469511fc"}) (async) 05:21:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000000a600)) 05:21:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x840) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x840) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) (async) [ 661.377629][T10195] Bluetooth: hci9: command 0x1003 tx timeout [ 661.383886][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 661.387584][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000000)={"e5edcb16bf5189c54cad573a4111a33d3e4e7d2b06bc58731fb133c1d935", 0x94, 0x1, 0x401, 0x1, 0x0, 0x9, 0xff, 0x1, [0x8, 0x1, 0x3ff, 0x1, 0xc7b, 0xfff, 0x8, 0xfffffffc, 0x9, 0x1e0d, 0x6, 0x5, 0x3, 0x4, 0x20, 0x1, 0x7ff, 0x8, 0xe4b0]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TCFLSH(r5, 0x540b, 0x2) 05:21:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0xfff, 0x2f, 0x11, "de46f5452f8142c5aa002a022c6ae3a434b278"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 05:21:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000007"], 0x14}}, 0x0) 05:21:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) [ 661.569599][ T3640] Bluetooth: hci10: sending frame failed (-49) [ 661.577684][ T3625] Bluetooth: hci10: Opcode 0x1003 failed: -49 [ 663.297766][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 663.307763][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 663.315682][ T3676] Bluetooth: hci7: command tx timeout 05:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xcfa4ccf9, 0x200, 0x31c, 0xa, "5074eab3df7270ca6b2e767122b4dd81f9fb01"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0xfffffc4f, 0x88, 0xfffffff8, 0x4, "6b26074df466a274d4bd389e490ed22935c2a2", 0xb8b0, 0x2000000d}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_open_pts(r0, 0x20600) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) 05:21:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, 0x0) 05:21:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0xfff, 0x2f, 0x11, "de46f5452f8142c5aa002a022c6ae3a434b278"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 05:21:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x37}, {0x36, 0x1}, {0x60}, {0xbe, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0xb}, {0x12}, {0x48}, {0x1b, 0x1}, {0x18, 0x1}, {0x18, 0x1}, {0xb}, {0x1b}, {0x9, 0x1}, {0x1b}, {0x3, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x48}, {0x9}, {0x24, 0x1}, {0x6c}, {0xb}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x60, 0x1}, {0x9}, {0x48}, {0x1}, {0x1, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4e}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4024811) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x37}, {0x36, 0x1}, {0x60}, {0xbe, 0x1}, {0x48, 0x1}, {0x5, 0x1}, {0xb}, {0x12}, {0x48}, {0x1b, 0x1}, {0x18, 0x1}, {0x18, 0x1}, {0xb}, {0x1b}, {0x9, 0x1}, {0x1b}, {0x3, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x48}, {0x9}, {0x24, 0x1}, {0x6c}, {0xb}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x60, 0x1}, {0x9}, {0x48}, {0x1}, {0x1, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4e}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4024811) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:21:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x7fffffff, 0x4, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffff8]}}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0145608, &(0x7f0000000100)={0xffffffff, 0x2, 0x2, {0x0, @pix_mp}}) 05:21:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0xfff, 0x2f, 0x11, "de46f5452f8142c5aa002a022c6ae3a434b278"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 05:21:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x38, "c30df72c4229e603905cd01c8a5f5653"}]}, 0x28}}, 0x0) [ 663.537761][T10190] Bluetooth: hci8: command 0x1003 tx timeout [ 663.537822][ T3634] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x840) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x840) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) (async) 05:21:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000000)={"e5edcb16bf5189c54cad573a4111a33d3e4e7d2b06bc58731fb133c1d935", 0x94, 0x1, 0x401, 0x1, 0x0, 0x9, 0xff, 0x1, [0x8, 0x1, 0x3ff, 0x1, 0xc7b, 0xfff, 0x8, 0xfffffffc, 0x9, 0x1e0d, 0x6, 0x5, 0x3, 0x4, 0x20, 0x1, 0x7ff, 0x8, 0xe4b0]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r4, 0x400455c8, 0x1) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TCFLSH(r5, 0x540b, 0x2) [ 663.617735][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:21:47 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 05:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xcfa4ccf9, 0x200, 0x31c, 0xa, "5074eab3df7270ca6b2e767122b4dd81f9fb01"}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0xfffffc4f, 0x88, 0xfffffff8, 0x4, "6b26074df466a274d4bd389e490ed22935c2a2", 0xb8b0, 0x2000000d}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x13) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x20600) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) 05:21:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000000000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x1, 0xb3, "e93bc38258d5ffc94b8a2ec6433041a9390c5b4116dc5a7e0bd0df525cb01851f2af4a39da0bce4f6b305404d9bb8bc684abe18017c89e76424257978c616e151fd230ec3cdacf6804ef9aca1fac4ca3b243896cc77332715cfc61f44c48af68787791438a9713c58eec1875a819e10d3006ae681a1a505c50d33f7e431dbe04f58bc389f22c9746fbecdc7e496071b5ee0575ca08d91072ff09f1f315ec26e2ae0ff41dabe72c6e8d9f8974afa1d9121ad870"}, 0xbb) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x100, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) syz_open_pts(r9, 0x404040) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) 05:21:47 executing program 1: getrandom(0x0, 0x3c, 0x2) 05:21:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xcfa4ccf9, 0x200, 0x31c, 0xa, "5074eab3df7270ca6b2e767122b4dd81f9fb01"}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x1, 0xfffffc4f, 0x88, 0xfffffff8, 0x4, "6b26074df466a274d4bd389e490ed22935c2a2", 0xb8b0, 0x2000000d}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x13) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x20600) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) 05:21:47 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000000000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x1, 0xb3, "e93bc38258d5ffc94b8a2ec6433041a9390c5b4116dc5a7e0bd0df525cb01851f2af4a39da0bce4f6b305404d9bb8bc684abe18017c89e76424257978c616e151fd230ec3cdacf6804ef9aca1fac4ca3b243896cc77332715cfc61f44c48af68787791438a9713c58eec1875a819e10d3006ae681a1a505c50d33f7e431dbe04f58bc389f22c9746fbecdc7e496071b5ee0575ca08d91072ff09f1f315ec26e2ae0ff41dabe72c6e8d9f8974afa1d9121ad870"}, 0xbb) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x100, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) syz_open_pts(r9, 0x404040) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x1) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet(0x2, 0x4000000805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) dup3(r2, r3, 0x0) (async) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000000000)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x1, 0xb3, "e93bc38258d5ffc94b8a2ec6433041a9390c5b4116dc5a7e0bd0df525cb01851f2af4a39da0bce4f6b305404d9bb8bc684abe18017c89e76424257978c616e151fd230ec3cdacf6804ef9aca1fac4ca3b243896cc77332715cfc61f44c48af68787791438a9713c58eec1875a819e10d3006ae681a1a505c50d33f7e431dbe04f58bc389f22c9746fbecdc7e496071b5ee0575ca08d91072ff09f1f315ec26e2ae0ff41dabe72c6e8d9f8974afa1d9121ad870"}, 0xbb) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x100, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) syz_open_pts(r9, 0x404040) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x1) (async) 05:21:49 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x0, 0x0, "fae288d596ce04c320d564eded12a770c2c15d4a1bfca7396dd20f32efa5fcc86bbb96509ef9dcf69bc8266729ac4d7f2a49ff98aae4e92e22273576a9cd12c4cf8d6a7759f337772b023ea3a0e27ae1"}, 0xd8) 05:21:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x80, 0x682, 0x6, 0xe410, 0x13, "497604fe68b11593f88596fad227101fc08d39"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000000000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r5, 0x1, 0xb3, "e93bc38258d5ffc94b8a2ec6433041a9390c5b4116dc5a7e0bd0df525cb01851f2af4a39da0bce4f6b305404d9bb8bc684abe18017c89e76424257978c616e151fd230ec3cdacf6804ef9aca1fac4ca3b243896cc77332715cfc61f44c48af68787791438a9713c58eec1875a819e10d3006ae681a1a505c50d33f7e431dbe04f58bc389f22c9746fbecdc7e496071b5ee0575ca08d91072ff09f1f315ec26e2ae0ff41dabe72c6e8d9f8974afa1d9121ad870"}, 0xbb) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) (async, rerun: 64) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x244000, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 32) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x100, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) syz_open_pts(r9, 0x404040) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x1) [ 665.537586][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 665.537634][T10190] Bluetooth: hci6: command 0x1003 tx timeout [ 665.690470][ T3634] Bluetooth: hci6: sending frame failed (-49) [ 665.697896][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 665.777726][T15868] Bluetooth: hci8: command 0x1003 tx timeout [ 665.778069][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 665.787891][T15868] Bluetooth: hci7: command 0x1003 tx timeout [ 665.790256][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x5, 0x6, 0x9, 0x0, 0x28}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 05:21:49 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) 05:21:49 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = dup2(r0, r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000000)={"e5edcb16bf5189c54cad573a4111a33d3e4e7d2b06bc58731fb133c1d935", 0x94, 0x1, 0x401, 0x1, 0x0, 0x9, 0xff, 0x1, [0x8, 0x1, 0x3ff, 0x1, 0xc7b, 0xfff, 0x8, 0xfffffffc, 0x9, 0x1e0d, 0x6, 0x5, 0x3, 0x4, 0x20, 0x1, 0x7ff, 0x8, 0xe4b0]}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TCFLSH(r5, 0x540b, 0x2) 05:21:49 executing program 1: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x121080, 0x0) 05:21:49 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x4) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x3) (async) 05:21:49 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) [ 666.048919][ T3641] Bluetooth: hci7: sending frame failed (-49) [ 666.056236][ T3639] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:21:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x7, 0x93, 0x100) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x5) read(r1, &(0x7f0000000000)=""/233, 0xe9) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000180)) [ 666.234893][T16767] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 666.270232][T16773] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:21:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x80, 0x682, 0x6, 0xe410, 0x13, "497604fe68b11593f88596fad227101fc08d39"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:50 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000002900)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "32f5a69496cfeee8cb845b422dcd1300c0cf1b102a095f6550ac42ba0cb0956e8537f8bbb002e9a2841f82d605822ef022867474f2a23ecd9d56cebc1299ef5f54c7a2b0715ad4edaab15d0a3d667a048d6092b58f73a20d6f65e365e1bfece28fee688bd428b18b85f9cdd2dc"}, @INET_DIAG_REQ_BYTECODE={0x17d, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcb9, 0x1, "a5b90ef47e5ad976ea902b1125f2691c41152a2bc44a50d256de09dec281da57794c5c69c87fa25393c342c2b0e412a2a440920c4bc39db9d8eefb6c4dfed1ae599e675c61a5c6f9b02cbb926a825b32907ef4e5753b1e8d73d6dde9498e6d6d7305c50089695a577f82bb9be74a08a20e7c567fbeefb63c8fa5f630c8e225093601c84ccd0ab3a71d57d18258474dbf46d866f553a7a13006e0e326ad12e72540dbe66318110c8cd146c7e4f9855d6612329f01ceba2cbfdbc098a59701201a328081ec95bd69e30bbeca4e881de77964300f35328dfc3932c4f34418da00810c1f8335b0ada0f4447b438b958eb3983e3724c327a21e528b1c013d2568797a7a023ec33a8c17f75e6112821f64511b43a4cae3f1261db64f3775d254b391a37a5cc6cb2b7b9a9eaa0584d03c649eed0c84fde70732aa9bd2bdd046155b7b6b4d881cef81391cc41a2fe1f63ac4c7c6a17e275ecb939a6d8d47fbaa7b3507b774be4b08e6360b3a9d9ddf3c4f993bb02780b65b6e0ea152132f84a43d6c698b7813ff846fe0752ab1824835fe6538f4c5499ab8ac21d155588fb2a57003f9abc9833ee1f9e10833e6965485341c78cb8a219ad246a7ff7417a56e79707f7e2b39efe9a6f97688824fd83acbfbdef8b628949c8f49d88ace4934a619d4d55d1b215fb602b08d39d831ce52d2035572d213594a34d95588c064d72de08fe710335cb1d7b96fb59c6b393e76ad6e2fda42782c0f519a1a1ef38790bbecd733573a7c73a33bd57adc7cd2081df9e631a114325caa01bd9519c68c9df2f8b38a726f65a404d43d8bdbaebc68413ad894a19363b292f5f0b7cee7732670287710766c80b073a5b8a40984fdb959209ce45248cd9eea105336086218a77ca2be2af1b5fd84e97edb1162341555f13589500e0ecb0b204a480c9a4e19acef9533cf1391932da6fb5d731b828113221c28cb358a2abe69b41c176e7c0ac37f9d14a18aecd15022243ca0ff7ff7d34156c378218ca88f6ea795afb31828460902ae20e82fb7f1e0699afc80a7251bb6fe612295a4f3875509aa51be40b915f4ffe5ea7ab2adf9bc6346e6e259062bbb2765ed4d2366fbb3a5749b75772cd1e30daf8e4a0dc2fa19a40f04fe2ab251de4409bfacbc6b8ca8d5c8d2b40e40c54d36d3e7b3ad34b6925aae5d895d41cf2988866623b0a689682b775cde67cabea666a3520e1b96a276cc8108ae2c4886a9908cc92bba114b9465ccd65b58bc738cadd42e87cca5946a168bedd4b3689d78b9065c17fe39fa6cf1b086ac35f2e69c079105bc5c96e8fba28465d1b57dfba3295afb96b410ba8b718ef8e0a9c97cbe9d512f83a94975c74fea28510c1aea00cf374f51b26c87ab9032ddf213ae7b787fc32d039aa0a714de880bda649b707b0767e715ae7952a98c8b6c52d836d7c126015bce5e2732684eeab385a4d60d9b281c5db604d448cc030a455bf9ff74a52ca6e419861350a1ac1cfd1dc450669ddeeba84572a15f89637d99d2485e586bb31a67dace1b218f596302aae6dc9398508b45b9c6067feb6baf361dee356fafb86f96997f617e43d7e113c817a6406b14967d948748a5f411e7a0fb35bd047281c3e404a72eb48669e0a8532d61d96c73df7643ba284f9527aba4b360505b952b4478cc7ca23eceaa7d8c34699e3321759b3299200f28ddec59524d44dbee231a39d0671665835f4416977dde62239d5a81a378504833861a85f38a6ab4968cbff929054e36560587a195120868a0b102d0d23bcfa6c1f15deb235af4108a05afd77b79a8db1f4d07ffa6eed3eb59f3e9f236e5f81d90e7856659308f6856aaafcaa6498755f76c09a40ac452cd41cb68a5c870c11682f8375ccf15450b59694cffd4d8fd6482c9235ffd41f8631457ccd6af0bce55702b3aab214263fbd1937d3b05f866c0c3e331519190231af19715a6bdb9007b1424b773568bf4e9894e1ba3e08b5781624a0316e5caae879c487b4070a06f34d68a4e3c94b694f3ae0f405a92237771baa943843502f53079e31b92672972060b6945065bf3fe27459ac4c7aa4d2fc286f55ff4077f95ca857eb0e4658b7962f9e82b1b71f03951eed0728909701de4b34a110759a6f3072d4f931b11273e49a347b50d4ecb04ee05a742078c2ed2b8a26376c2bcd8d7f0b3b45faa6e308a636790dc00e04fb850aaf6451975e02f6ee4e0d1adb8664a796925e2ff1b58b60e01879fe6971d73ce45c08e96a86311682a6080433733b1b58760d0331582514f0d0e548fb1d578cf243a5927a50e3301bebf16ee30c6187196f9afdbf109cdaf8dc7ed76ac8b9098bf1d3ef9bf44cd501dc140b4911bdb5b87683ac4e8532cb70bc5c89de82d2806f25062e31b3fbc91c330ee51e77a93278cfe9a8613592af75c26597aa2233764e03253b12be78af149e34a59ce72993f935931425c3196d5b697dc00f03d3c9a3c064295e80db92ee862c9d46e9f5113be61b0e9ccc3996c79daf5b6bbbaf64e9c58940ce78dca7c184ec44141b769380f7a4374a1ac3efb968ebcc80f01b3c514ceee301285950dc3aca7747dbfb2dbee0477e991c52963f5fe65c438221be105281e0b046a8f0c14882935f89f86137f489060d17809d35a884ca39d2c443cbb36384cadbd5d709d150efb7e85c1d1c30e2d8f0d9e2bc4e84326701ebf2f6f1b46c35624785fc51b966bf83bff59d16328c2066a805a4f48551e10cad72634c4d3680e9ce6b7ae802e24c5dfe0903c5ebf2612eee9942dbdfddb10934b7564bb09399f7e7a1aeeda8d78eb0ac53d28fcf5d8116b2c629f150056a1e5c35c238eaefd11cdb4b2f81fb9adc1ca9ec4d9e2b847b336574190b8379f5d8a0293ff23febb430c44355416bc5f2ab9b0ea7032b7eafb355a94d6e65d54203540dfafd2d442edc2d06fc4f0f682c448a5cc3944c4b253bc8be78ef6eec71864b711a1ac618d8159aeaadcad0706bf6a2c2a48319944303243b33354c9957800fc8d8bbbc1501d8fa331ab36d04a097c751cf8f01be0a67c3720c5017916ef4b36d56bc70827a3703d0c10a4b9f1ded768399894fd46dfaeda87604cbb7c0215aecd9e91f2be6b697be985afc99855447b8dae9595077d90ed36c5bdd5bed69b57b0b577b7e7cc2021eb53edd3eb0bd7acbc0c5e6be42ba94c29a7b5c80425769a5efd453aee9755387c7f6156b5e8bcc11ee38cc872e665fa6bbdbee75796eef2a5b729459b62f2f2e904c0a78886d71e2a1ffebd84cf9c373b917a6f36014ef015caa3856916e2bf4bddb931b72393ce7f720803169f1e59a5255cccf67201853f0940865a9a6076b9cff1bfc336b8b6cacf025c4a5a45f21b23b7a3bdc179617ac7a1c5a52bbefdc0cc81190bd6306a359d06fe35f1cacd9ec73af3995a0a303b30c6de4cf22c1145e371a8ee93aefd12c4703ff2b86899a0020f097e2a01f2493fc1b3094a4a3de79be976f075a19cc24ce722538fe4734f430dfc6d368188b848e4cee1b43bee5ed3dbccd03d5b5d2873c3a547f46a4ce5d397134309cb061bd75322c109a40811453e21c04024cf6bc22508405818b088c4d57f667fbfe3f6e3b6f5d60fcc1da9ecece3ad36777f2f037650588a4c8720a6029cb71bd14d83e529385d0349b625161ff35a41c78b1911c07b96d542455f61dd10d29ce7eff20e210515e453d151c5df0a8ec011c65e22c2873990f2a2067206901d4d384bb6eecdbe9f579e7a4631e016cd767164d2ad7f8cc0da8652d3a629d63941170f19077149ebf8c139928fbebcb7e100d7697ff57931087d13a03cd238c1524bbf9ebe26fec04b6712764d0915c8e9572c3a7ad805e33c8dfe713b657eeef0722f287e0d373fe233151f85145805e9ab9d80a864c4755eec5cb3604df1bb1c7430c9f07cea48b731775c898d89f21b72059fafd599026fe32b695e00bb23d6eff16efdb5e373aad40136388d6dd4aafb4c918c78be7267fc02e366c1abb9498d2834a7ba5d1c78ab37da0d79eda88fc78d5ae1500e630750735edbdf2418d1db25885e4bae13ec0ebfc5c1b792f88f5e05d27ed694eb7bdebf8e10ad36a17cb3b67d88685eea2c82dba6c7198e16f56c636bb4ac518d3c8ed90cc1a016171c67862f7533e8a2a39ad22f8cd7e1facc109781220b88e80a51675fee5bb42fb9673fe0aa064f14927e37e291fc956e7a08168ea11b7058053e82362df0c7d7424ad2f3dc407d31a1394dcaf25471551f5ba7cd2e7d432809b0d2dd5978aeb30f19e7ce4786b0b7a170323f24083b856a1986f5392f6ea3b151d2796c930cb4f30dbc446163dfe34cadcbc752d5f030c572b23e561f0873571e23454434fba45633b395765a5a73ae555bd6be3291e814a6b69bf74c025287c5910b7220bdf77395e265ad041217071062b89cfda0643da147e8ae668c072c9c96839a401e12b77354e88973aca3b89887ab7bf35b6d18fce3b9f3d8c0e836b3a282a963d1aae743ef4994ec0a55d7f3b4f02bb4fb57dea88098eff1cabee5e9f9330d9ca97ee1bb02a5a328206c3cdba32d3ef9e975407fc562a3323fdf063485a9e92219e3a7"}]}, 0xec4}}, 0x0) 05:21:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) 05:21:51 executing program 3: ftruncate(0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x100) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0xfffffffa, 0x6d2b178c, 0x9, 0x6, 0x1a, "0ffe7f24ea2dd9c7e2e9dc97cc8e022cee325e"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x4}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x4}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0xc4000, 0x109) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x7, 0x93, 0x100) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x5) (async, rerun: 64) read(r1, &(0x7f0000000000)=""/233, 0xe9) (rerun: 64) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000180)) 05:21:51 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 05:21:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x5) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x5, 0x6, 0x9, 0x0, 0x28}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0x80, 0x682, 0x6, 0xe410, 0x13, "497604fe68b11593f88596fad227101fc08d39"}) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 668.017653][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:21:51 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 05:21:51 executing program 2: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x5, 0x6, 0x9, 0x0, 0x28}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x80045400, &(0x7f0000000080)={{}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 05:21:51 executing program 2: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000057703c30729a2ee0520938bbdb0c08d5126438592ea18ae83904d8c4c544212b258e9c849ccf8474db09315f09f3bd5a26138cdb1091a6f17abaae0dc229705214c51852ffab7f10e565e20937977d4899682cc9ce508b8cbe5e1cf024566b5e29132104d6ca3adcba7381", @ANYRES16=r2, @ANYBLOB="01001c0001ef000000517112a9992b86c40000", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) [ 668.270710][T16814] ptm ptm3: ldisc open failed (-12), clearing slot 3 05:21:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="80a742ed7ff9586682ff030000c69af41a65ec", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000002e2f66696c653000"]) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x20, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x10, 0xff, 0x0, 0x1, 0xc8}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/57) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x5, 0x18, "a6c7142d74fe71c72bf866c4ce883bd1b9b281"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xc9) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000000c0)=""/3, 0x3}], 0x2) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) [ 668.421099][ T3634] Bluetooth: hci8: sending frame failed (-49) [ 668.428636][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:21:53 executing program 3: ftruncate(0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x100) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0xfffffffa, 0x6d2b178c, 0x9, 0x6, 0x1a, "0ffe7f24ea2dd9c7e2e9dc97cc8e022cee325e"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x4}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x4}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = open(&(0x7f0000000040)='./file0\x00', 0xc4000, 0x109) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x100) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0xfffffffa, 0x6d2b178c, 0x9, 0x6, 0x1a, "0ffe7f24ea2dd9c7e2e9dc97cc8e022cee325e"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x4}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x4}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) open(&(0x7f0000000040)='./file0\x00', 0xc4000, 0x109) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:21:53 executing program 2: getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:53 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xb7) 05:21:53 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x7, 0x93, 0x100) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x5) read(r1, &(0x7f0000000000)=""/233, 0xe9) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000180)) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/195, 0xc3}], 0x7, 0x93, 0x100) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x4) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x5) (async) read(r1, &(0x7f0000000000)=""/233, 0xe9) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000180)) (async) 05:21:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="80a742ed7ff9586682ff030000c69af41a65ec", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000002e2f66696c653000"]) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x20, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x10, 0xff, 0x0, 0x1, 0xc8}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/57) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x5, 0x18, "a6c7142d74fe71c72bf866c4ce883bd1b9b281"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xc9) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000000c0)=""/3, 0x3}], 0x2) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="80a742ed7ff9586682ff030000c69af41a65ec", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c653000"]) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x20, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x10, 0xff, 0x0, 0x1, 0xc8}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/57) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r2, r2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x5, 0x18, "a6c7142d74fe71c72bf866c4ce883bd1b9b281"}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xc9) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000000c0)=""/3, 0x3}], 0x2) (async) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) (async) [ 670.177696][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 670.184499][ T3676] Bluetooth: hci6: command tx timeout 05:21:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) r5 = syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket(0x2a, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@phonet}, 0x0) io_uring_enter(r5, 0x2039, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d81c14e1dc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x25) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:53 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x110602, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x841) socketpair(0x22, 0x0, 0x0, 0x0) 05:21:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc1282, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) 05:21:54 executing program 1: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x1}, 0x14}}, 0x0) 05:21:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc1282, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 670.417773][ T3676] Bluetooth: hci7: command 0x1003 tx timeout [ 670.425917][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000057703c30729a2ee0520938bbdb0c08d5126438592ea18ae83904d8c4c544212b258e9c849ccf8474db09315f09f3bd5a26138cdb1091a6f17abaae0dc229705214c51852ffab7f10e565e20937977d4899682cc9ce508b8cbe5e1cf024566b5e29132104d6ca3adcba7381", @ANYRES16=r2, @ANYBLOB="01001c0001ef000000517112a9992b86c40000", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000057703c30729a2ee0520938bbdb0c08d5126438592ea18ae83904d8c4c544212b258e9c849ccf8474db09315f09f3bd5a26138cdb1091a6f17abaae0dc229705214c51852ffab7f10e565e20937977d4899682cc9ce508b8cbe5e1cf024566b5e29132104d6ca3adcba7381", @ANYRES16=r2, @ANYBLOB="01001c0001ef000000517112a9992b86c40000", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) ioctl$TCFLSH(r4, 0x540b, 0x0) (async) 05:21:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) r5 = syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket(0x2a, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@phonet}, 0x0) io_uring_enter(r5, 0x2039, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d81c14e1dc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x25) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) (async) socket(0x2a, 0x2, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@phonet}, 0x0) (async) io_uring_enter(r5, 0x2039, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d81c14e1dc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x25) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:21:55 executing program 3: ftruncate(0xffffffffffffffff, 0x1) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x100) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0xfffffffa, 0x6d2b178c, 0x9, 0x6, 0x1a, "0ffe7f24ea2dd9c7e2e9dc97cc8e022cee325e"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={0x0, 0x4}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000000c0)={0x4}) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0xc4000, 0x109) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0)) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x17) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:55 executing program 1: bpf$MAP_CREATE(0xf, &(0x7f0000000080), 0x48) 05:21:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc1282, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 05:21:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="80a742ed7ff9586682ff030000c69af41a65ec", @ANYRES32=0xffffffffffffffff, @ANYBLOB="05000000000000002e2f66696c653000"]) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipmr_delroute={0x24, 0x19, 0x20, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x10, 0xff, 0x0, 0x1, 0xc8}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/57) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x34}}, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000380)={0x3, 0x3, 0x2, 0x5, 0x18, "a6c7142d74fe71c72bf866c4ce883bd1b9b281"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xc9) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) readv(r7, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000000c0)=""/3, 0x3}], 0x2) ioctl$TIOCSTI(r5, 0x5423, &(0x7f0000000000)) [ 672.337562][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 672.337574][ T917] Bluetooth: hci8: command 0x1003 tx timeout [ 672.343970][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:56 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$9p(r0, 0x0, 0x0) 05:21:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) write(r1, &(0x7f0000000000)="b8fcc217c37a", 0x6) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:56 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x333d00, 0x0) 05:21:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000013c0)='yeah\x00', 0x5) [ 672.487162][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 672.495456][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:21:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 05:21:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0x40045613, &(0x7f0000000100)={0xc, 0x0, 0x0, {0x0, @pix_mp}}) [ 672.657874][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 672.666399][T10195] Bluetooth: hci7: command 0x1003 tx timeout [ 672.667629][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000057703c30729a2ee0520938bbdb0c08d5126438592ea18ae83904d8c4c544212b258e9c849ccf8474db09315f09f3bd5a26138cdb1091a6f17abaae0dc229705214c51852ffab7f10e565e20937977d4899682cc9ce508b8cbe5e1cf024566b5e29132104d6ca3adcba7381", @ANYRES16=r2, @ANYBLOB="01001c0001ef000000517112a9992b86c40000", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000057703c30729a2ee0520938bbdb0c08d5126438592ea18ae83904d8c4c544212b258e9c849ccf8474db09315f09f3bd5a26138cdb1091a6f17abaae0dc229705214c51852ffab7f10e565e20937977d4899682cc9ce508b8cbe5e1cf024566b5e29132104d6ca3adcba7381", @ANYRES16=r2, @ANYBLOB="01001c0001ef000000517112a9992b86c40000", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) ioctl$TCFLSH(r4, 0x540b, 0x0) (async) 05:21:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) r5 = syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r8 = socket(0x2a, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@phonet}, 0x0) io_uring_enter(r5, 0x2039, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d81c14e1dc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x25) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d6000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) (async) socket(0x2a, 0x2, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000240)=@phonet}, 0x0) (async) io_uring_enter(r5, 0x2039, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r10, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="52d81c14e1dc"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x25) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 672.789063][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 672.796742][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 672.872114][T16933] ptm ptm6: ldisc open failed (-12), clearing slot 6 05:21:58 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0xc020660b) 05:21:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1b) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x422801, 0x16d) signalfd(r1, &(0x7f0000000100)={[0x200000000000]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) fcntl$getown(r1, 0x9) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) accept4(r6, 0x0, &(0x7f0000000040), 0x800) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:21:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1009) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 674.577619][ T6] Bluetooth: hci8: command 0x1003 tx timeout [ 674.577800][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:21:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040001) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x11, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10405201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:21:58 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000080)) [ 674.664699][ T3635] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 674.667441][ T917] Bluetooth: hci10: command 0x1003 tx timeout 05:21:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) write(r1, &(0x7f0000000000)="b8fcc217c37a", 0x6) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1009) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1009) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1b) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x422801, 0x16d) signalfd(r1, &(0x7f0000000100)={[0x200000000000]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) fcntl$getown(r1, 0x9) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) accept4(r6, 0x0, &(0x7f0000000040), 0x800) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1b) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x422801, 0x16d) (async) signalfd(r1, &(0x7f0000000100)={[0x200000000000]}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r2, r2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) (async) fcntl$getown(r1, 0x9) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) accept4(r6, 0x0, &(0x7f0000000040), 0x800) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:21:58 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x82902, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x40045010, &(0x7f0000000080)) 05:21:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_pts(r0, 0x40200) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1009) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 674.807683][T16950] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 674.817596][ T6] Bluetooth: hci7: command 0x1003 tx timeout [ 674.827716][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:21:58 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 05:21:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) write(r1, &(0x7f0000000000)="b8fcc217c37a", 0x6) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:21:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2f6a01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0xad5) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 674.916710][T16959] ptm ptm0: ldisc open failed (-12), clearing slot 0 05:21:58 executing program 1: bpf$MAP_CREATE(0x7, &(0x7f0000000080), 0x48) [ 675.083399][ T3634] Bluetooth: hci8: sending frame failed (-49) [ 675.090918][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040001) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x11, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10405201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040001) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x11, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10405201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:22:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1b) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x422801, 0x16d) (async) signalfd(r1, &(0x7f0000000100)={[0x200000000000]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) fcntl$getown(r1, 0x9) (async) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) accept4(r6, 0x0, &(0x7f0000000040), 0x800) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2f6a01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0xad5) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 32) 05:22:00 executing program 1: socket$rxrpc(0x21, 0x2, 0x0) 05:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@delneigh={0x24, 0x1d, 0x200, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x1cd4c2ceb2dd83fd, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1f}]}, 0x24}}, 0x20011000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000180)={'team0\x00', @ifru_ivalue}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = dup2(r0, r0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, ',\xdc\\:.@}#'}, {0x20, 'wlan0\x00'}], 0xa, "027022926f0fa3450002c8f9493be62c5e48849ed27399e81a1161c2ff3dcd6d146deccfb018e8407b1dbda779ed5bc921048596714c0bb3cd6525aeda085baf044c51f780c74ffe02366471ccfbbea1b0048a0b4b5a2ed093abccffa477900878b46a827b01aa9facbd4630fd91adb8c31584099dde2d04cf1f98334080968d739c2c70c6b19e6e19551dca0216e801267feb4190459f0262d0b84e"}, 0xb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x34008004}, 0x20000040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) [ 676.737604][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}, 0x9}, 0x0) [ 676.806669][ T3639] Bluetooth: hci6: sending frame failed (-49) [ 676.814056][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:22:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_pts(r0, 0x40200) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_pts(r0, 0x40200) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@delneigh={0x24, 0x1d, 0x200, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x1cd4c2ceb2dd83fd, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1f}]}, 0x24}}, 0x20011000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000180)={'team0\x00', @ifru_ivalue}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = dup2(r0, r0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, ',\xdc\\:.@}#'}, {0x20, 'wlan0\x00'}], 0xa, "027022926f0fa3450002c8f9493be62c5e48849ed27399e81a1161c2ff3dcd6d146deccfb018e8407b1dbda779ed5bc921048596714c0bb3cd6525aeda085baf044c51f780c74ffe02366471ccfbbea1b0048a0b4b5a2ed093abccffa477900878b46a827b01aa9facbd4630fd91adb8c31584099dde2d04cf1f98334080968d739c2c70c6b19e6e19551dca0216e801267feb4190459f0262d0b84e"}, 0xb8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x34008004}, 0x20000040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@delneigh={0x24, 0x1d, 0x200, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x1cd4c2ceb2dd83fd, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1f}]}, 0x24}}, 0x20011000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000180)={'team0\x00', @ifru_ivalue}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r0, r0) (async) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, ',\xdc\\:.@}#'}, {0x20, 'wlan0\x00'}], 0xa, "027022926f0fa3450002c8f9493be62c5e48849ed27399e81a1161c2ff3dcd6d146deccfb018e8407b1dbda779ed5bc921048596714c0bb3cd6525aeda085baf044c51f780c74ffe02366471ccfbbea1b0048a0b4b5a2ed093abccffa477900878b46a827b01aa9facbd4630fd91adb8c31584099dde2d04cf1f98334080968d739c2c70c6b19e6e19551dca0216e801267feb4190459f0262d0b84e"}, 0xb8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x34008004}, 0x20000040) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) (async) 05:22:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x165c01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2f6a01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0xad5) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) 05:22:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040001) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x11, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10405201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040001) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r6, 0x11, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10405201}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) [ 676.987701][ T917] Bluetooth: hci7: command 0x1003 tx timeout [ 676.993876][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 05:22:00 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)) 05:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@delneigh={0x24, 0x1d, 0x200, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x1cd4c2ceb2dd83fd, 0x9}, [@NDA_LINK_NETNSID={0x8, 0xa, 0x1f}]}, 0x24}}, 0x20011000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000180)={'team0\x00', @ifru_ivalue}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r6 = dup2(r0, r0) (async) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, ',\xdc\\:.@}#'}, {0x20, 'wlan0\x00'}], 0xa, "027022926f0fa3450002c8f9493be62c5e48849ed27399e81a1161c2ff3dcd6d146deccfb018e8407b1dbda779ed5bc921048596714c0bb3cd6525aeda085baf044c51f780c74ffe02366471ccfbbea1b0048a0b4b5a2ed093abccffa477900878b46a827b01aa9facbd4630fd91adb8c31584099dde2d04cf1f98334080968d739c2c70c6b19e6e19551dca0216e801267feb4190459f0262d0b84e"}, 0xb8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070200"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x34008004}, 0x20000040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) 05:22:00 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80044d76, &(0x7f0000000480)) 05:22:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x165c01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x165c01, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:00 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) read$proc_mixer(r0, 0x0, 0x5b) 05:22:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) syz_open_pts(r0, 0x40200) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) syz_open_pts(r0, 0x40200) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:22:02 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x5452, &(0x7f0000000180)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 05:22:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x165c01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup3(r4, r5, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) [ 679.147635][ T917] Bluetooth: hci7: command 0x1003 tx timeout [ 679.153816][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 679.160503][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:02 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 05:22:02 executing program 3: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000200)) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)=""/255) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0xffffffffffff7fff, 0x6, 0x0, 0x55cf6c3, 0x9, 0x1ff, 0xb34, 0x8000000000000000}, &(0x7f00000000c0)={0x80, 0x1, 0x8, 0x1, 0x7fffffffffffffff, 0x100000001, 0x10001}, &(0x7f0000000100)={0x51b, 0x2000260432ff, 0x708c, 0x5, 0x6, 0x3, 0x4, 0x4d}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000280)={&(0x7f00000001c0)={[0x3ff]}, 0x8}) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 679.295286][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 679.301994][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 679.308740][ T3671] Bluetooth: hci8: command 0x1003 tx timeout [ 679.317671][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:22:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) 05:22:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000001c0)={0x7f, 0x7f, 0xfffb}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x402100, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x6) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) getdents64(r5, &(0x7f0000000180)=""/37, 0x25) 05:22:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) [ 679.349362][T17094] ptm ptm1: ldisc open failed (-12), clearing slot 1 05:22:03 executing program 1: bpf$MAP_CREATE(0xe, &(0x7f0000000080), 0x48) [ 679.448186][ T3635] Bluetooth: hci7: sending frame failed (-49) [ 679.455558][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:22:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:22:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000001c0)={0x7f, 0x7f, 0xfffb}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x402100, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x6) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) (async) getdents64(r5, &(0x7f0000000180)=""/37, 0x25) 05:22:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) dup3(r4, r5, 0x0) (async, rerun: 32) ioctl$TCFLSH(r1, 0x540b, 0x1) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) 05:22:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) [ 679.681478][ T3634] Bluetooth: hci8: sending frame failed (-49) [ 679.690775][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 05:22:03 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8000, &(0x7f0000000540)) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) [ 679.860000][ T962] Bluetooth: hci9: Frame reassembly failed (-84) 05:22:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r1) 05:22:05 executing program 3: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000200)) (async) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)=""/255) (async) clock_gettime(0x0, 0x0) (async) pselect6(0x40, &(0x7f00000002c0)={0xffffffffffff7fff, 0x6, 0x0, 0x55cf6c3, 0x9, 0x1ff, 0xb34, 0x8000000000000000}, &(0x7f00000000c0)={0x80, 0x1, 0x8, 0x1, 0x7fffffffffffffff, 0x100000001, 0x10001}, &(0x7f0000000100)={0x51b, 0x2000260432ff, 0x708c, 0x5, 0x6, 0x3, 0x4, 0x4d}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000280)={&(0x7f00000001c0)={[0x3ff]}, 0x8}) (async) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 681.547742][T15872] Bluetooth: hci7: command 0x1003 tx timeout [ 681.554035][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) 05:22:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) dup3(r4, r5, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) 05:22:05 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x80044df9, &(0x7f0000000480)) 05:22:05 executing program 3: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000200)) (async) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300)=""/255) clock_gettime(0x0, 0x0) (async) pselect6(0x40, &(0x7f00000002c0)={0xffffffffffff7fff, 0x6, 0x0, 0x55cf6c3, 0x9, 0x1ff, 0xb34, 0x8000000000000000}, &(0x7f00000000c0)={0x80, 0x1, 0x8, 0x1, 0x7fffffffffffffff, 0x100000001, 0x10001}, &(0x7f0000000100)={0x51b, 0x2000260432ff, 0x708c, 0x5, 0x6, 0x3, 0x4, 0x4d}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000280)={&(0x7f00000001c0)={[0x3ff]}, 0x8}) (async, rerun: 64) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 681.613972][T17142] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 681.627922][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 681.636285][T15872] Bluetooth: hci6: command tx timeout 05:22:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e0ffffff0000000027"], 0x30}}, 0x0) [ 681.811631][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 681.819023][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:22:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f00000001c0)={0x7f, 0x7f, 0xfffb}) (async) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x402100, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x6) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) (async) getdents64(r5, &(0x7f0000000180)=""/37, 0x25) 05:22:05 executing program 1: sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 05:22:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) [ 681.857571][T10191] Bluetooth: hci9: command 0x1003 tx timeout [ 681.857575][T15872] Bluetooth: hci8: command 0x1003 tx timeout [ 681.869872][ T3634] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 681.876769][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r5 = socket(0x2c, 0x3, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x2, 0x7, 0x8, 0x40]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) syz_open_pts(r4, 0x40) 05:22:05 executing program 1: r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0xff) 05:22:05 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe06}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2e53}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x404c044) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x1f4, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ede66bf}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7c073e14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40008001}, 0x8040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 682.038468][ T3639] Bluetooth: hci7: sending frame failed (-49) [ 682.046573][ T3634] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:22:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048880}, 0x40094) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x9, 0x1c0000000}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"ba9dcbee72a4b7286edc574b94c62d3f", 0x0, r1, {0x9c, 0x1ff}, {0x9, 0x9}, 0xfff, [0x3, 0x8001, 0x7ff, 0x20, 0x3, 0xffffffffffffd239, 0xfffffffffffffff9, 0x1ff, 0xfb5, 0x7, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x288, 0xba2b, 0x100000001]}) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000001480)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7fff, 0x1, 0x3, 0x1, 0xb], 0x5, 0x180000, 0x0, 0xffffffffffffffff}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001300)={0x0, 0x1, 0x6, @local}, 0x10) 05:22:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x309101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70020000000089001e787be85890", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220014803f2000000018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019000000000000000000f3ff1d010000"], 0xfffffdef}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x263}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6af}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x211e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2679}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x243}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x0, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}]}, 0x160}}, 0x48015) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:05 executing program 2: sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x9}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x40, 0x100, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8a1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c800}, 0x20000080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:05 executing program 1: rt_sigsuspend(&(0x7f0000000980), 0x8) 05:22:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) r5 = socket(0x2c, 0x3, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x2, 0x7, 0x8, 0x40]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) (async) syz_open_pts(r4, 0x40) [ 682.152893][T17194] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048880}, 0x40094) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x9, 0x1c0000000}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"ba9dcbee72a4b7286edc574b94c62d3f", 0x0, r1, {0x9c, 0x1ff}, {0x9, 0x9}, 0xfff, [0x3, 0x8001, 0x7ff, 0x20, 0x3, 0xffffffffffffd239, 0xfffffffffffffff9, 0x1ff, 0xfb5, 0x7, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x288, 0xba2b, 0x100000001]}) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000001480)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7fff, 0x1, 0x3, 0x1, 0xb], 0x5, 0x180000, 0x0, 0xffffffffffffffff}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001300)={0x0, 0x1, 0x6, @local}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048880}, 0x40094) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x9, 0x1c0000000}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"ba9dcbee72a4b7286edc574b94c62d3f", 0x0, r1, {0x9c, 0x1ff}, {0x9, 0x9}, 0xfff, [0x3, 0x8001, 0x7ff, 0x20, 0x3, 0xffffffffffffd239, 0xfffffffffffffff9, 0x1ff, 0xfb5, 0x7, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x288, 0xba2b, 0x100000001]}) (async) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000001480)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7fff, 0x1, 0x3, 0x1, 0xb], 0x5, 0x180000}) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001300)={0x0, 0x1, 0x6, @local}, 0x10) (async) 05:22:05 executing program 2: sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x9}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x40, 0x100, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8a1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c800}, 0x20000080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x9}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x40, 0x100, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8a1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c800}, 0x20000080) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:22:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x309101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70020000000089001e787be85890", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220014803f2000000018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019000000000000000000f3ff1d010000"], 0xfffffdef}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x263}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6af}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x211e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2679}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x243}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x0, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}]}, 0x160}}, 0x48015) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x309101, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70020000000089001e787be85890", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220014803f2000000018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019000000000000000000f3ff1d010000"], 0xfffffdef}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r6, r6) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x263}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6af}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x211e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2679}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x243}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x0, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}]}, 0x160}}, 0x48015) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:06 executing program 2: sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x9}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x40, 0x100, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8a1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c800}, 0x20000080) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 682.356195][ T3641] Bluetooth: hci8: sending frame failed (-49) [ 682.364199][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 682.367018][T17211] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 682.380499][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 05:22:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048880}, 0x40094) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x9, 0x1c0000000}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"ba9dcbee72a4b7286edc574b94c62d3f", 0x0, r1, {0x9c, 0x1ff}, {0x9, 0x9}, 0xfff, [0x3, 0x8001, 0x7ff, 0x20, 0x3, 0xffffffffffffd239, 0xfffffffffffffff9, 0x1ff, 0xfb5, 0x7, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x288, 0xba2b, 0x100000001]}) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000001480)={0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7fff, 0x1, 0x3, 0x1, 0xb], 0x5, 0x180000, 0x0, 0xffffffffffffffff}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001300)={0x0, 0x1, 0x6, @local}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getnexthop={0x2c, 0x6a, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048880}, 0x40094) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x1, 0x9, 0x1c0000000}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"ba9dcbee72a4b7286edc574b94c62d3f", 0x0, r1, {0x9c, 0x1ff}, {0x9, 0x9}, 0xfff, [0x3, 0x8001, 0x7ff, 0x20, 0x3, 0xffffffffffffd239, 0xfffffffffffffff9, 0x1ff, 0xfb5, 0x7, 0x5, 0x7fffffffffffffff, 0xffffffff, 0x288, 0xba2b, 0x100000001]}) (async) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000001480)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x7fff, 0x1, 0x3, 0x1, 0xb], 0x5, 0x180000}) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001300)={0x0, 0x1, 0x6, @local}, 0x10) (async) 05:22:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x309101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd70020000000089001e787be85890", @ANYRES32=r3, @ANYBLOB="18001d8014000080050007000e00000006000500e3000000"], 0x34}}, 0x0) (async) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000220014803f2000000018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async, rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000019000000000000000000f3ff1d010000"], 0xfffffdef}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x160, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x19}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5b}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x263}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6af}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x211e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2679}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x243}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x80, 0x0, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}]}]}, 0x160}}, 0x48015) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:06 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe06}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2e53}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x404c044) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x1f4, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ede66bf}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7c073e14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40008001}, 0x8040) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe06}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2e53}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x404c044) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x1f4, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ede66bf}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7c073e14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40008001}, 0x8040) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) 05:22:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x107ff, 0x6, 0x6, 0x2, 0x19, "dca2ca30cd329a1c60fa29b33dc6bc75637762"}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) flock(r2, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r3 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9fce03ffa9c51598b5c43afbb34a9f6d2632479c5b87ebf5c1192af81caa7d5f7892cd1f2a1736083726754c16bacf86d77debca8b0c3baf1578f3b7b464abaecea8c5ec755eb744b310717c6e2834b6a1537508b57e7ee6fc208c8302542ed1c5f5188878918493488f1eb9cb0ce7e6c94a0c0446100927ddad5597fb4e68043ffc9eb617a31919f7c370d6a5aa91dafef3e69b28a97cab3e496643f157389d702b6fee0d0ab19650", 0xa9, 0x0, 0x0, 0x0) syz_open_pts(r3, 0x480deb46e048cafc) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup2(r1, r0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:06 executing program 1: bpf$MAP_CREATE(0x4, &(0x7f0000000000)=@base={0x17}, 0x8) [ 683.112751][ T3641] Bluetooth: hci8: sending frame failed (-49) [ 683.121764][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 683.937719][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) r5 = socket(0x2c, 0x3, 0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x8, 0x2, 0x7, 0x8, 0x40]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) syz_open_pts(r4, 0x40) 05:22:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup2(r1, r0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) dup2(r1, r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001a40), 0x4) 05:22:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x107ff, 0x6, 0x6, 0x2, 0x19, "dca2ca30cd329a1c60fa29b33dc6bc75637762"}) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) flock(r2, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r3 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x0) sendto$inet6(r2, &(0x7f0000000180)="9fce03ffa9c51598b5c43afbb34a9f6d2632479c5b87ebf5c1192af81caa7d5f7892cd1f2a1736083726754c16bacf86d77debca8b0c3baf1578f3b7b464abaecea8c5ec755eb744b310717c6e2834b6a1537508b57e7ee6fc208c8302542ed1c5f5188878918493488f1eb9cb0ce7e6c94a0c0446100927ddad5597fb4e68043ffc9eb617a31919f7c370d6a5aa91dafef3e69b28a97cab3e496643f157389d702b6fee0d0ab19650", 0xa9, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_pts(r3, 0x480deb46e048cafc) (rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 684.337487][T10191] Bluetooth: hci7: command 0x1003 tx timeout [ 684.347651][ T3634] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:08 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 05:22:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 684.539529][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 684.547025][ T3634] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:22:08 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xd1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b880)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe06}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2e53}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x404c044) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x1f4, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ede66bf}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7c073e14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x101, @loopback, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40008001}, 0x8040) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 05:22:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) dup2(r1, r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x107ff, 0x6, 0x6, 0x2, 0x19, "dca2ca30cd329a1c60fa29b33dc6bc75637762"}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) flock(r2, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) r3 = signalfd4(r2, &(0x7f0000000080)={[0x3]}, 0x8, 0x0) (rerun: 64) sendto$inet6(r2, &(0x7f0000000180)="9fce03ffa9c51598b5c43afbb34a9f6d2632479c5b87ebf5c1192af81caa7d5f7892cd1f2a1736083726754c16bacf86d77debca8b0c3baf1578f3b7b464abaecea8c5ec755eb744b310717c6e2834b6a1537508b57e7ee6fc208c8302542ed1c5f5188878918493488f1eb9cb0ce7e6c94a0c0446100927ddad5597fb4e68043ffc9eb617a31919f7c370d6a5aa91dafef3e69b28a97cab3e496643f157389d702b6fee0d0ab19650", 0xa9, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_pts(r3, 0x480deb46e048cafc) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 05:22:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 685.297452][ T3671] Bluetooth: hci8: command 0x1003 tx timeout [ 685.297616][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:09 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 05:22:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffffffc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) 05:22:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendfile(r0, r0, &(0x7f0000000080)=0x56, 0xfffffffffffffffa) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x200000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) ioctl$KDADDIO(r1, 0x400455c8, 0x100000000000001) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200f) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 685.464132][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.470520][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 05:22:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffffffc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) dup2(r0, r0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffffffc) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:09 executing program 1: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 05:22:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendfile(r0, r0, &(0x7f0000000080)=0x56, 0xfffffffffffffffa) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x200000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) ioctl$KDADDIO(r1, 0x400455c8, 0x100000000000001) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) sendfile(r0, r0, &(0x7f0000000080)=0x56, 0xfffffffffffffffa) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x200000) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x100000000000001) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:09 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:09 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x80044d76, 0x0) 05:22:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendfile(r0, r0, &(0x7f0000000080)=0x56, 0xfffffffffffffffa) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x200000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) ioctl$KDADDIO(r1, 0x400455c8, 0x100000000000001) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) sendfile(r0, r0, &(0x7f0000000080)=0x56, 0xfffffffffffffffa) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x200000) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x100000000000001) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 685.617271][T17334] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 685.641969][T17331] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 685.713630][T17347] ptm ptm0: ldisc open failed (-12), clearing slot 0 05:22:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:22:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffffffc) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x200f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 687.457676][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) 05:22:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x9) 05:22:11 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001440)={&(0x7f0000002900)={0x11b2, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x72, 0x1, "32f5a69496cfeee8cb845b422dcd1300c0cf1b102a095f6550ac42ba0cb0956e8537f8bbb002e9a2841f82d605822ef022867474f2a23ecd9d56cebc1299ef5f54c7a2b0715ad4edaab15d0a3d667a048d6092b58f73a20d6f65e365e1bfece28fee688bd428b18b85f9cdd2dcb6"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "47248ad2777f98b8e55a55c50eee7e650b216c7b1853be5c0ad8f8fc94db7e3cc99bc3a713ab5801c4973d95aa2d721cee0fe1981de6d8fefb7edf9e431397c347b4c9a38a5af34e119a35f53b90f6f7ad0a9891e79b93bddb6c0555d484eb3ada88e273bd3b1f04c9874569aad9983954d57794238a5bb36028c6c53ec6769f4de449aa2e2d26e82bcad50385ee3422ac003ca87c9dade99e7a141f67744d4063307c90"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "b7abe9791fb7c2dc2fbc2e5d7c85695e64ce95d00ea6e5262f7551fc81d13d3347fe7cd181e92c4ced1b70a57419e9e2111914248ed0bb6f9ce499c4a43bad851aaa3cebe7703be59a2207eeb0122b2901bdd28c332a934bbb0ab98648be86a2b3821859615cbc3c4c659fac523f9d8c8f387771fb2f5631ad56ce375822e1bb6d191de61ad2022855c66dfeb719b9bfe8c2cf2d53dbe2728bfb89abd2962e32f3334359d940170690fe40d88b722f3c41fa7da54d4c620db6896c6759a93ea0f191c8dfdad64f94a337fa33b962150357cd0cf036f4bfe14d6ae4ffec0ebd3b121759507770a190fb164bda0c02cdda"}, @INET_DIAG_REQ_BYTECODE={0x165, 0x1, "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"}]}, 0x1424}, 0x1, 0x0, 0x0, 0x20068850}, 0x20000000) 05:22:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x4f) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 05:22:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7020fddbdf256b04000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_open_pts(r1, 0x42) [ 687.627763][ T3671] Bluetooth: hci7: command 0x1003 tx timeout [ 687.633928][ T3634] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:11 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 687.749038][ T3635] Bluetooth: hci7: sending frame failed (-49) [ 687.762016][ T3634] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:22:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7020fddbdf256b04000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (rerun: 32) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_open_pts(r1, 0x42) [ 687.805292][ T3634] Bluetooth: hci7: sending frame failed (-49) [ 687.814607][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:22:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x4f) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 05:22:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='/'], 0x40}}, 0x0) [ 687.981049][T17404] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 05:22:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x44981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/4096) 05:22:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x9) (rerun: 32) 05:22:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x4f) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 05:22:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x16) (async) 05:22:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 05:22:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7020fddbdf256b04000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x1) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) syz_open_pts(r1, 0x42) [ 689.617653][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:13 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045878, 0x0) [ 689.719525][ T3634] Bluetooth: hci7: sending frame failed (-49) [ 689.726883][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -49 05:22:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x44981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/4096) [ 689.784020][T17428] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:22:13 executing program 1: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000240)) 05:22:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x44981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000280)=""/4096) 05:22:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) 05:22:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:15 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)) 05:22:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x9) (async) [ 691.777549][T10192] Bluetooth: hci8: command 0x1003 tx timeout [ 691.783772][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 691.787668][ T3676] Bluetooth: hci9: command 0x1003 tx timeout [ 691.790478][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 691.796388][ T3641] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:22:15 executing program 2: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000180)=[@fadd={0x58, 0x114, 0x6, {{0x40}, &(0x7f0000000080)=0x68f9c9c5, &(0x7f00000000c0)=0x8000000000000001, 0x1, 0xdf, 0xff, 0x1, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/105, 0x69}, &(0x7f0000000340), 0x89}}], 0x88, 0x4}, 0x4000001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x800, 0x5, 0x6, 0x1, 0x10, "5b617041a6a974cf91c85871dbb1f29aca8bf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$KDDELIO(r1, 0x4b35, 0xf3) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f0000000380)={0x0, 0xfb, 0x1d, 0x6, 0xfe, "2a7fb8db45fd0118b6cfc0788c1057ae", "3f083461e4905d97"}, 0x1d, 0x3) syz_open_pts(r1, 0x0) 05:22:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{j\':\x00', 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x2, 0x0, {0x0, @pix_mp}}) [ 691.930632][T17456] ptm ptm3: ldisc open failed (-12), clearing slot 3 05:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109000000000000000020"], 0x20}}, 0x0) 05:22:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x4, 0x1800, 0x0, 0x19, "451755dc730472ae"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="336512f51ad72b8143ba6f0dfb7e6bf38040011e10f2cb754614e8a953388e4e7a2e43d15cf60c6e843a933231fb3c4131e83374e85861133e55e3ee527c37891cfc7f13b82e1f5f350f5b5efcf4516cfd9981b74f62b0f730f5d1576f41ff9e19a5ce7c924db2d7f8fecb8d9f86595e6216fcd650db3f7a81f948bf3ab261853dca72cb76eefdad332df108988c48db456eb31329573e99355227038837dbfb84497665ab7a9f9974e042ded3f10ab64285e9c712") ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0109000000000000000002"], 0x20}}, 0x0) 05:22:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 692.097473][T10195] Bluetooth: hci7: command 0x1003 tx timeout [ 692.107744][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:15 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x144) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 692.176860][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 05:22:15 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000f40)) [ 692.245824][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 692.253415][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:22:15 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, 0xfffffffffffffffc, 0x0, 0x0) [ 694.017641][T10195] Bluetooth: hci8: command 0x1003 tx timeout [ 694.017764][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 694.023940][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:17 executing program 2: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000180)=[@fadd={0x58, 0x114, 0x6, {{0x40}, &(0x7f0000000080)=0x68f9c9c5, &(0x7f00000000c0)=0x8000000000000001, 0x1, 0xdf, 0xff, 0x1, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/105, 0x69}, &(0x7f0000000340), 0x89}}], 0x88, 0x4}, 0x4000001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x800, 0x5, 0x6, 0x1, 0x10, "5b617041a6a974cf91c85871dbb1f29aca8bf6"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$KDDELIO(r1, 0x4b35, 0xf3) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f0000000380)={0x0, 0xfb, 0x1d, 0x6, 0xfe, "2a7fb8db45fd0118b6cfc0788c1057ae", "3f083461e4905d97"}, 0x1d, 0x3) syz_open_pts(r1, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000180)=[@fadd={0x58, 0x114, 0x6, {{0x40}, &(0x7f0000000080)=0x68f9c9c5, &(0x7f00000000c0)=0x8000000000000001, 0x1, 0xdf, 0xff, 0x1, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/105, 0x69}, &(0x7f0000000340), 0x89}}], 0x88, 0x4}, 0x4000001) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x6) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x800, 0x5, 0x6, 0x1, 0x10, "5b617041a6a974cf91c85871dbb1f29aca8bf6"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) (async) ioctl$KDDELIO(r1, 0x4b35, 0xf3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f0000000380)={0x0, 0xfb, 0x1d, 0x6, 0xfe, "2a7fb8db45fd0118b6cfc0788c1057ae", "3f083461e4905d97"}, 0x1d, 0x3) (async) syz_open_pts(r1, 0x0) (async) 05:22:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) 05:22:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{j\':\x00', 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{j\':\x00', 0x0, r0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:17 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='trusted\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 05:22:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) fcntl$dupfd(r0, 0x4, 0xffffffffffffffff) 05:22:17 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 694.177693][ T6] Bluetooth: hci7: command 0x1003 tx timeout [ 694.187903][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 694.207527][ T3641] Bluetooth: hci8: sending frame failed (-49) [ 694.214925][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x4, 0x1800, 0x0, 0x19, "451755dc730472ae"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="336512f51ad72b8143ba6f0dfb7e6bf38040011e10f2cb754614e8a953388e4e7a2e43d15cf60c6e843a933231fb3c4131e83374e85861133e55e3ee527c37891cfc7f13b82e1f5f350f5b5efcf4516cfd9981b74f62b0f730f5d1576f41ff9e19a5ce7c924db2d7f8fecb8d9f86595e6216fcd650db3f7a81f948bf3ab261853dca72cb76eefdad332df108988c48db456eb31329573e99355227038837dbfb84497665ab7a9f9974e042ded3f10ab64285e9c712") ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x4, 0x1800, 0x0, 0x19, "451755dc730472ae"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="336512f51ad72b8143ba6f0dfb7e6bf38040011e10f2cb754614e8a953388e4e7a2e43d15cf60c6e843a933231fb3c4131e83374e85861133e55e3ee527c37891cfc7f13b82e1f5f350f5b5efcf4516cfd9981b74f62b0f730f5d1576f41ff9e19a5ce7c924db2d7f8fecb8d9f86595e6216fcd650db3f7a81f948bf3ab261853dca72cb76eefdad332df108988c48db456eb31329573e99355227038837dbfb84497665ab7a9f9974e042ded3f10ab64285e9c712") (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='{j\':\x00', 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 694.332307][T17508] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 694.339438][ T3625] Bluetooth: hci10: Opcode 0x1003 failed: -110 05:22:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x144) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@multicast, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev}}}}}, 0x0) 05:22:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x144) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x80) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000012) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000400)={0x0, 0x4, 0x4, &(0x7f00000003c0)=0x4}) [ 696.178111][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:19 executing program 2: sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000180)=[@fadd={0x58, 0x114, 0x6, {{0x40}, &(0x7f0000000080)=0x68f9c9c5, &(0x7f00000000c0)=0x8000000000000001, 0x1, 0xdf, 0xff, 0x1, 0x22, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/105, 0x69}, &(0x7f0000000340), 0x89}}], 0x88, 0x4}, 0x4000001) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x6) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x800, 0x5, 0x6, 0x1, 0x10, "5b617041a6a974cf91c85871dbb1f29aca8bf6"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$KDDELIO(r1, 0x4b35, 0xf3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f0000000380)={0x0, 0xfb, 0x1d, 0x6, 0xfe, "2a7fb8db45fd0118b6cfc0788c1057ae", "3f083461e4905d97"}, 0x1d, 0x3) (async) syz_open_pts(r1, 0x0) 05:22:19 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x20, r1, 0x4c4a997a53e05625, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:22:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x80) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000012) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000400)={0x0, 0x4, 0x4, &(0x7f00000003c0)=0x4}) 05:22:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x214000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 696.267449][T15872] Bluetooth: hci7: command 0x1003 tx timeout [ 696.274101][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:19 executing program 1: clock_gettime(0x4, &(0x7f0000000340)) 05:22:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x214000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x214000, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 696.417716][ T3671] Bluetooth: hci8: command 0x1003 tx timeout [ 696.417730][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x4, 0x1800, 0x0, 0x19, "451755dc730472ae"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="336512f51ad72b8143ba6f0dfb7e6bf38040011e10f2cb754614e8a953388e4e7a2e43d15cf60c6e843a933231fb3c4131e83374e85861133e55e3ee527c37891cfc7f13b82e1f5f350f5b5efcf4516cfd9981b74f62b0f730f5d1576f41ff9e19a5ce7c924db2d7f8fecb8d9f86595e6216fcd650db3f7a81f948bf3ab261853dca72cb76eefdad332df108988c48db456eb31329573e99355227038837dbfb84497665ab7a9f9974e042ded3f10ab64285e9c712") ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x4, 0x1800, 0x0, 0x19, "451755dc730472ae"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000080)="336512f51ad72b8143ba6f0dfb7e6bf38040011e10f2cb754614e8a953388e4e7a2e43d15cf60c6e843a933231fb3c4131e83374e85861133e55e3ee527c37891cfc7f13b82e1f5f350f5b5efcf4516cfd9981b74f62b0f730f5d1576f41ff9e19a5ce7c924db2d7f8fecb8d9f86595e6216fcd650db3f7a81f948bf3ab261853dca72cb76eefdad332df108988c48db456eb31329573e99355227038837dbfb84497665ab7a9f9974e042ded3f10ab64285e9c712") (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x80) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = dup2(r6, r6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000012) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000400)={0x0, 0x4, 0x4, &(0x7f00000003c0)=0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$KDADDIO(r4, 0x4b34, 0x80) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r6, r6) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37c}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000012) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee1, &(0x7f0000000400)={0x0, 0x4, 0x4, &(0x7f00000003c0)=0x4}) (async) 05:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4b, 0x408000) dup3(r1, r2, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x1) 05:22:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f000000a500), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}]}, 0x30}}, 0x0) [ 696.540231][ T3635] Bluetooth: hci6: sending frame failed (-49) [ 696.548054][ T3625] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 696.591708][ T3641] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 696.592153][T10195] Bluetooth: hci9: command 0x1003 tx timeout [ 696.637898][T17576] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 696.655700][T17580] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:22:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4b, 0x408000) dup3(r1, r2, 0x0) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x1) 05:22:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x214000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f00000000c0), 0x0}, 0x20) 05:22:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc00caee0, &(0x7f0000000080)={0xfc01, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 05:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4b, 0x408000) dup3(r1, r2, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x1) 05:22:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40801, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x9, 0x3}) ioctl(r0, 0xa, &(0x7f0000001300)="6fecdff93a5987fd03ce6d603d65f011d5e3cd655cad1921dce0b2a4a07605ff0b0faf0c147e38b44a2f1d7526530f0107674bfe2ef8ff49738ce49bd9452d84d1207538f1cc9096e092271defb6539b2892f25ef0dd912f9b534a14add26546dd5c66d50b70f84a36f037281645e8f0934175e782e0662e7859") ioctl$KDADDIO(r0, 0x4b34, 0xfffffffffffffffb) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001400)=0x12) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000001380)={0x0, 0x3, 0x1, &(0x7f0000000180)=0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000001280)="e10da586fad1acb8596abe580d5253fc68a17140096b1aa373b347b596ccd91787cae3dae9faaf817774465d878d9ea8a1524d901244f96ff40123361c8f25adaace2bf3f325da068f028c46c7ea8ce28e770d5edbcbb4b7e86b3a42", 0x5c, 0x8000, &(0x7f0000000100)={0xa, 0x4e20, 0x81, @private2, 0x1}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f00000013c0)=0x3) 05:22:20 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "6105923cc29d1e2a96f8fab311ca40b1f9f47b65a31e32503909391e212c0f16c0806755a72018e02b5815d9e49361793859bd6f3aebdc150751bf0c72fc9299"}, 0x48, 0xffffffffffffffff) 05:22:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2000000000001) 05:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x0) 05:22:20 executing program 1: io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/block/loop0', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 696.978808][ T3639] Bluetooth: hci8: sending frame failed (-49) [ 696.989270][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2000000000001) 05:22:22 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000001880)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@broadcast}, {@private}]}, @rr={0x7, 0x7, 0x0, [@loopback]}]}}, @info_reply}}}}, 0x0) 05:22:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x0) 05:22:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40801, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x9, 0x3}) ioctl(r0, 0xa, &(0x7f0000001300)="6fecdff93a5987fd03ce6d603d65f011d5e3cd655cad1921dce0b2a4a07605ff0b0faf0c147e38b44a2f1d7526530f0107674bfe2ef8ff49738ce49bd9452d84d1207538f1cc9096e092271defb6539b2892f25ef0dd912f9b534a14add26546dd5c66d50b70f84a36f037281645e8f0934175e782e0662e7859") ioctl$KDADDIO(r0, 0x4b34, 0xfffffffffffffffb) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001400)=0x12) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000001380)={0x0, 0x3, 0x1, &(0x7f0000000180)=0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000001280)="e10da586fad1acb8596abe580d5253fc68a17140096b1aa373b347b596ccd91787cae3dae9faaf817774465d878d9ea8a1524d901244f96ff40123361c8f25adaace2bf3f325da068f028c46c7ea8ce28e770d5edbcbb4b7e86b3a42", 0x5c, 0x8000, &(0x7f0000000100)={0xa, 0x4e20, 0x81, @private2, 0x1}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f00000013c0)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40801, 0x0) (async) read(r1, &(0x7f0000000280)=""/4096, 0x1000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x9, 0x3}) (async) ioctl(r0, 0xa, &(0x7f0000001300)="6fecdff93a5987fd03ce6d603d65f011d5e3cd655cad1921dce0b2a4a07605ff0b0faf0c147e38b44a2f1d7526530f0107674bfe2ef8ff49738ce49bd9452d84d1207538f1cc9096e092271defb6539b2892f25ef0dd912f9b534a14add26546dd5c66d50b70f84a36f037281645e8f0934175e782e0662e7859") (async) ioctl$KDADDIO(r0, 0x4b34, 0xfffffffffffffffb) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001400)=0x12) (async) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000001380)={0x0, 0x3, 0x1, &(0x7f0000000180)=0xfffffffffffffffe}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r2, r2) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r4, &(0x7f0000001280)="e10da586fad1acb8596abe580d5253fc68a17140096b1aa373b347b596ccd91787cae3dae9faaf817774465d878d9ea8a1524d901244f96ff40123361c8f25adaace2bf3f325da068f028c46c7ea8ce28e770d5edbcbb4b7e86b3a42", 0x5c, 0x8000, &(0x7f0000000100)={0xa, 0x4e20, 0x81, @private2, 0x1}, 0x1c) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f00000013c0)=0x3) (async) [ 698.897568][ T6] Bluetooth: hci6: command 0x1003 tx timeout [ 698.903919][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 698.907680][T15872] Bluetooth: hci7: command 0x1003 tx timeout [ 698.916639][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4020ae46, &(0x7f0000000000)) 05:22:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x6400, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2000000000001) 05:22:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 699.089841][T17637] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:22:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) 05:22:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x20) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:22 executing program 1: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 701.057476][ T3625] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 701.065425][T10191] Bluetooth: hci6: command 0x1003 tx timeout [ 701.067407][ T3671] Bluetooth: hci7: command tx timeout [ 701.076913][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) 05:22:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:24 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000000440)="9d725087a75f530b09cf32e647e940c80371930ac21cf762997390e8cdedd5be8ea6e15a5de99efbce93b06f5d946687a7a3c4b44f83623a541a7c0ba1e5cf4972f10f6f6a56718bb4", 0x49, 0xfb7}], 0x0, 0x0) 05:22:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40801, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x9, 0x3}) (async, rerun: 32) ioctl(r0, 0xa, &(0x7f0000001300)="6fecdff93a5987fd03ce6d603d65f011d5e3cd655cad1921dce0b2a4a07605ff0b0faf0c147e38b44a2f1d7526530f0107674bfe2ef8ff49738ce49bd9452d84d1207538f1cc9096e092271defb6539b2892f25ef0dd912f9b534a14add26546dd5c66d50b70f84a36f037281645e8f0934175e782e0662e7859") (async, rerun: 64) ioctl$KDADDIO(r0, 0x4b34, 0xfffffffffffffffb) (rerun: 64) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001400)=0x12) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000001380)={0x0, 0x3, 0x1, &(0x7f0000000180)=0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async, rerun: 32) r3 = dup2(r2, r2) (rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40800, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000001280)="e10da586fad1acb8596abe580d5253fc68a17140096b1aa373b347b596ccd91787cae3dae9faaf817774465d878d9ea8a1524d901244f96ff40123361c8f25adaace2bf3f325da068f028c46c7ea8ce28e770d5edbcbb4b7e86b3a42", 0x5c, 0x8000, &(0x7f0000000100)={0xa, 0x4e20, 0x81, @private2, 0x1}, 0x1c) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f00000013c0)=0x3) 05:22:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x0) [ 701.137507][T10192] Bluetooth: hci8: command 0x1003 tx timeout [ 701.137606][ T3635] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x6, r0, 0x0) 05:22:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) 05:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_GET_PIT(r1, 0xae60, 0x0) [ 701.315700][T17664] ptm ptm1: ldisc open failed (-12), clearing slot 1 05:22:24 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800041b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdb9}, {0x6, 0x16, 0x5ab}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xd8de}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x184d}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa22}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x81}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:25 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 05:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200882, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xb7) 05:22:25 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 05:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200882, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xb7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200882, 0x0) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xb7) (async) 05:22:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:26 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800041b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdb9}, {0x6, 0x16, 0x5ab}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xd8de}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x184d}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa22}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x81}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800041b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdb9}, {0x6, 0x16, 0x5ab}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xd8de}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x184d}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa22}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x81}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:22:26 executing program 1: userfaultfd(0x80c01) [ 703.297504][ T3671] Bluetooth: hci6: command 0x1003 tx timeout [ 703.297600][T10191] Bluetooth: hci8: command 0x1003 tx timeout [ 703.303687][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 703.309625][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 703.316000][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4c0e}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200882, 0x0) (async) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xb7) 05:22:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x81) [ 703.389103][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 703.396841][ T3635] Bluetooth: hci6: Opcode 0x1003 failed: -49 05:22:27 executing program 1: io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 05:22:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x2) 05:22:27 executing program 1: mbind(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 05:22:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 05:22:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x81) [ 703.480993][T17700] ptm ptm2: ldisc open failed (-12), clearing slot 2 05:22:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000040)=0x81) [ 703.640020][ T3639] Bluetooth: hci8: sending frame failed (-49) [ 703.648254][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:29 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800041b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdb9}, {0x6, 0x16, 0x5ab}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xd8de}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x184d}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa22}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x81}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x800041b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdb9}, {0x6, 0x16, 0x5ab}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0xd8de}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x47}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x184d}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa22}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x81}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x240480c0}, 0x20000040) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:22:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) 05:22:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4c0e}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x2) (rerun: 64) 05:22:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC=r5, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x5, 0xee00}, {0x8, 0x5, r7}, {0x8, 0x5}, {0x8, 0x0, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x8c, 0x0) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x40) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f00000000c0)) [ 705.537500][T15872] Bluetooth: hci7: command 0x1003 tx timeout [ 705.543767][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_io_uring_complete(0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 705.617772][T10263] Bluetooth: hci6: command 0x1003 tx timeout [ 705.619616][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 705.631368][ T3639] Bluetooth: hci8: sending frame failed (-49) [ 705.649376][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) [ 705.668246][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 705.675543][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 705.712148][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 705.720019][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -49 05:22:29 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x0) [ 705.764711][ T3625] Bluetooth: hci9: sending frame failed (-49) [ 705.773975][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 705.815134][T17758] ptm ptm5: ldisc open failed (-12), clearing slot 5 05:22:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) r1 = syz_io_uring_complete(0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 32) 05:22:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)={0x1c4, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x825b57c8}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x4014) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) fcntl$setstatus(r4, 0x4, 0x4000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r4) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC=r5, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x5, 0xee00}, {0x8, 0x5, r7}, {0x8, 0x5}, {0x8, 0x0, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x8c, 0x0) (async) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x40) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f00000000c0)) 05:22:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000020, &(0x7f0000001980)={0x0, 0x3938700}) [ 705.943251][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 705.950671][ T3639] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = syz_io_uring_complete(0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC=r5, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x5, 0xee00}, {0x8, 0x5, r7}, {0x8, 0x5}, {0x8, 0x0, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x8c, 0x0) r9 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x40) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c1000001", @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250c00000008000600ff0f00005000038006000400000000000600070000000000080005000a010100060004000001000006000400ff7f00001400020076657468315f746f5f68737200000000060004004000000008000500ac1414bb0c0002800800040083090000080004000700000014000280080003000200000006000f00070000003c00028008000900000000000800070004000000060002004e20000005000d000100000006000b000a00000006000f00ff01000005000d000100000008000500ffffffff0800040005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000002a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="080027bd7000fcdbdf251400000008000300", @ANYRESDEC=r5, @ANYBLOB="080001000200000008000300", @ANYRESOCT=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0c0a00040000000000000049ee686400f850b21000"], 0x48}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000000) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2}, {0x2, 0x5}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x5}, {0x8, 0x4}, {0x8, 0x5, 0xee00}, {0x8, 0x5, r7}, {0x8, 0x5}, {0x8, 0x0, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x8c, 0x0) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x40) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f00000000c0)) (async) 05:22:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x2) (rerun: 32) 05:22:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4c0e}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080e3000000"], 0x34}}, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x5) 05:22:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, 0x0}, 0x0) [ 707.617403][T10263] Bluetooth: hci7: command 0x1003 tx timeout [ 707.617555][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:31 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 707.698415][ T3634] Bluetooth: hci11: sending frame failed (-49) [ 707.708926][ T3635] Bluetooth: hci11: Opcode 0x1003 failed: -49 05:22:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) [ 707.762275][T17801] netlink: 'syz-executor.4': attribute type 29 has an invalid length. 05:22:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0xc, 0x0, 0x0) [ 708.097486][T10263] Bluetooth: hci9: command 0x1003 tx timeout [ 708.097503][T15872] Bluetooth: hci10: command 0x1003 tx timeout [ 708.109676][ T3625] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 708.116365][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:22:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)={0x1c4, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x825b57c8}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x4014) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) fcntl$setstatus(r4, 0x4, 0x4000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080e3000000"], 0x34}}, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080e3000000"], 0x34}}, 0x0) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x5) (async) 05:22:31 executing program 1: socket$kcm(0x29, 0x5, 0x0) select(0x40, &(0x7f0000000080)={0x101}, 0x0, &(0x7f0000000100)={0x8}, 0x0) 05:22:31 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/100, &(0x7f0000000000)=0x64) [ 708.188958][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 708.196450][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 708.239452][T17815] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 708.279052][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 708.287133][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 708.288185][T17815] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 708.337746][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 708.346277][T10195] Bluetooth: hci6: command 0x1003 tx timeout [ 708.347467][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x7, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x70) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) fchown(r0, r7, 0x0) 05:22:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14}, 0xa}}, 0x0) 05:22:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d8014000080e3000000"], 0x34}}, 0x0) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x5) 05:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) 05:22:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)={0x1c4, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x825b57c8}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x4014) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x1) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) (async) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async, rerun: 64) fcntl$setstatus(r4, 0x4, 0x4000) (async, rerun: 64) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:32 executing program 1: syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x40, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x0, 0x6, '\x00', [@enc_lim, @ra, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim, @ra={0x5, 0x2, 0x6}]}]}}}}}, 0x0) [ 708.541770][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 708.549362][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 708.561985][T17848] ptm ptm13: ldisc open failed (-12), clearing slot 13 05:22:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) (async) 05:22:33 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x30, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts={0x2c, 0x4, '\x00', [@enc_lim, @ra, @calipso={0x7, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim]}]}}}}}, 0x0) 05:22:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x7, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x70) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) fchown(r0, r7, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) dup2(r1, r1) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x7, 0x0], 0x3, 0x80000}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x70) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r7) (async) fchown(r0, r7, 0x0) (async) 05:22:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x414000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 709.937518][T10263] Bluetooth: hci7: command 0x1003 tx timeout [ 709.937980][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:33 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x8, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts]}}}}}, 0x0) 05:22:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x414000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x414000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) 05:22:33 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x0, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}, 0x0) [ 710.062954][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 710.070581][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 710.092196][T17858] ptm ptm4: ldisc open failed (-12), clearing slot 4 05:22:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x414000, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 32) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000006c0)={{r5}, r6, 0x2, @inherit={0x50, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x101, {0x28, 0x9, 0x8, 0x9, 0x7fffffff}, [0x3]}}, @subvolid=0x7ac}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x9) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)=0xfffffffffffffffa) [ 710.497642][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 710.498022][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 710.506497][T10195] Bluetooth: hci6: command 0x1003 tx timeout 05:22:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) (rerun: 64) 05:22:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) 05:22:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c}, 0x1c}}, 0x0) 05:22:34 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc25}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe0, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}}}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2eea9107}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x54d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0de}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x48091) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:34 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea6741", 0x18, 0x11, 0x0, @local, @private0, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 710.620769][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 710.628426][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 710.658841][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 710.666287][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 32) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x7, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x70) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) fchown(r0, r7, 0x0) 05:22:35 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc25}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe0, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}}}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2eea9107}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x54d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0de}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x48091) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000006c0)={{r5}, r6, 0x2, @inherit={0x50, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x101, {0x28, 0x9, 0x8, 0x9, 0x7fffffff}, [0x3]}}, @subvolid=0x7ac}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x9) (async) r7 = socket$inet6(0xa, 0x3, 0x5) (async) r8 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f00000000c0)) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)=0xfffffffffffffffa) 05:22:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x22, 0x0, &(0x7f0000000040)) 05:22:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) [ 712.097418][T10192] Bluetooth: hci7: command 0x1003 tx timeout [ 712.097685][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:35 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}, 0x0) 05:22:35 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'sit0\x00'}) [ 712.204224][ T3625] Bluetooth: hci8: sending frame failed (-49) [ 712.212718][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -49 05:22:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, 0x8) [ 712.255854][T17939] sit0: mtu less than device minimum 05:22:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10041, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) 05:22:36 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc25}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xe0, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}}}}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2eea9107}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x54d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0de}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x48091) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=0xffffffffffffffff) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x7, 0xfffffff9}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:36 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x330, 0x148, 0x218, 0x148, 0x148, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@remote, @private1, [], [], 'vlan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private0, @dev, [], [], 'veth0_to_team\x00', 'ip6erspan0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'veth1_vlan\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) [ 712.657575][T10192] Bluetooth: hci6: command 0x1003 tx timeout [ 712.657673][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 712.731790][ T3625] Bluetooth: hci6: sending frame failed (-49) [ 712.740078][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 712.748274][ T3639] Bluetooth: hci9: sending frame failed (-49) [ 712.755664][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 714.257501][ T6] Bluetooth: hci7: command 0x1003 tx timeout [ 714.257683][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:37 executing program 1: socketpair(0x11, 0xa, 0x82, &(0x7f0000000000)) 05:22:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10041, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCXONC(r0, 0x540a, 0x0) 05:22:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x100, 0x5, 0x3, 0x7, 0x0, 0x1]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=0xffffffffffffffff) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r7 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x7, 0xfffffff9}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) (async, rerun: 64) r5 = socket$inet6(0xa, 0x3, 0x5) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000006c0)={{r5}, r6, 0x2, @inherit={0x50, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x101, {0x28, 0x9, 0x8, 0x9, 0x7fffffff}, [0x3]}}, @subvolid=0x7ac}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x9) (async) r7 = socket$inet6(0xa, 0x3, 0x5) (async) r8 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f00000000c0)) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x43, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_hsr\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9c89b578fd0fe9b9b606e78e09f158e2fb71f53563c01413f1873f97d91d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000040)=0xfffffffffffffffa) [ 714.337408][ T6] Bluetooth: hci8: command 0x1003 tx timeout [ 714.343591][ T3640] Bluetooth: hci8: Opcode 0x1003 failed: -110 05:22:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10041, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TCXONC(r0, 0x540a, 0x0) 05:22:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x3}}}}}, 0x28}}, 0x0) io_uring_enter(r4, 0x1cf5, 0x5a1, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x8) 05:22:38 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 05:22:38 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x5) 05:22:38 executing program 1: socketpair(0x28, 0x0, 0x2, &(0x7f0000000040)) [ 716.417647][ T3640] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 716.426163][T15872] Bluetooth: hci6: command tx timeout [ 716.497642][T10192] Bluetooth: hci8: command 0x1003 tx timeout [ 716.497791][ T3625] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 716.503695][T10192] Bluetooth: hci7: command 0x1003 tx timeout [ 716.508113][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -110 05:22:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) 05:22:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2000, 0xffffffff, 0x3, 0x5, 0x9, "c349b8fe84a4011c9c600d8ed3ddadbe333b56"}) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x100, 0x5, 0x3, 0x7, 0x0, 0x1]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x100, 0x5, 0x3, 0x7, 0x0, 0x1]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) [ 716.577630][ T3639] Bluetooth: hci9: Opcode 0x1003 failed: -110 05:22:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) r5 = dup2(r2, r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=0xffffffffffffffff) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x7, 0xfffffff9}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x8946, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:40 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "dc86ab", 0x8, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@hopopts]}}}}}, 0x0) 05:22:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x3}}}}}, 0x28}}, 0x0) io_uring_enter(r4, 0x1cf5, 0x5a1, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) [ 716.631643][ T3634] Bluetooth: hci7: sending frame failed (-49) [ 716.642490][ T3635] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 716.657375][T10192] Bluetooth: hci10: command 0x1003 tx timeout [ 716.657660][ T3641] Bluetooth: hci10: Opcode 0x1003 failed: -110 05:22:40 executing program 1: socketpair(0x3, 0x0, 0xffff0001, &(0x7f0000000000)) 05:22:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 05:22:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:40 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)) 05:22:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) write$tun(r0, 0x0, 0x0) 05:22:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200c1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) [ 718.657409][T10192] Bluetooth: hci6: command 0x1003 tx timeout [ 718.657649][ T3639] Bluetooth: hci6: Opcode 0x1003 failed: -110 05:22:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2000, 0xffffffff, 0x3, 0x5, 0x9, "c349b8fe84a4011c9c600d8ed3ddadbe333b56"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:42 executing program 1: syz_emit_ethernet(0x309, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd68b7d05802d311"], 0x0) 05:22:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x16) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe3}]}]}]}, 0x34}}, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x100, 0x5, 0x3, 0x7, 0x0, 0x1]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) [ 718.737579][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 718.737659][ T6] Bluetooth: hci7: command 0x1003 tx timeout 05:22:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = dup2(r1, r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x100, 0x3}}}}}, 0x28}}, 0x0) io_uring_enter(r4, 0x1cf5, 0x5a1, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) 05:22:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)) [ 718.817552][ T3634] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 718.897678][ T3635] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 718.923105][ T3641] INFO: trying to register non-static key. [ 718.928961][ T3641] The code is fine but needs lockdep annotation, or maybe [ 718.936069][ T3641] you didn't initialize this object before use? [ 718.942298][ T3641] turning off the locking correctness validator. [ 718.948624][ T3641] CPU: 1 PID: 3641 Comm: kworker/u5:9 Not tainted 5.17.0-rc6-next-20220303-syzkaller #0 [ 718.958348][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.968413][ T3641] Workqueue: hci7 hci_cmd_work [ 718.973197][ T3641] Call Trace: [ 718.976478][ T3641] [ 718.979410][ T3641] dump_stack_lvl+0xcd/0x134 [ 718.984015][ T3641] register_lock_class+0xf04/0x11b0 [ 718.989233][ T3641] ? ret_from_fork+0x1f/0x30 05:22:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x5c82, 0x2, 0xe15, 0x7fff, 0x9, "4bce67e2f0c9e486"}) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 05:22:42 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000080)=@can_delroute={0x14}, 0xfffffdef}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x20}, 0x1, 0x0, 0x0, 0x40861}, 0x4000001) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 05:22:42 executing program 1: r0 = epoll_create1(0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)) 05:22:42 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "c43fe5", 0x10, 0x21, 0x0, @remote, @private2, {[], {{0x0, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, "613582", 0x0, "f000"}}}}}}}, 0x0) [ 718.993885][ T3641] ? is_dynamic_key.part.0+0x130/0x130 [ 718.999038][T18053] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 718.999365][ T3641] ? stack_trace_save+0x8c/0xc0 [ 718.999402][ T3641] ? __stack_depot_save+0x35/0x500 [ 719.015995][ T3641] __lock_acquire+0x10a/0x56c0 [ 719.020783][ T3641] ? mark_lock.part.0+0xee/0x1910 [ 719.025827][ T3641] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 719.031826][ T3641] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 719.037831][ T3641] lock_acquire+0x1ab/0x510 [ 719.042355][ T3641] ? hci_send_frame+0x1c0/0x370 [ 719.047220][ T3641] ? lock_release+0x720/0x720 [ 719.051924][ T3641] hci_uart_send_frame+0x8c/0x6b0 [ 719.056975][ T3641] ? hci_send_frame+0x1c0/0x370 [ 719.061839][ T3641] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 719.066040][ T3640] Bluetooth: hci9: sending frame failed (-49) [ 719.068097][ T3641] hci_send_frame+0x1c0/0x370 [ 719.068129][ T3641] hci_cmd_work+0x204/0x3c0 [ 719.068152][ T3641] process_one_work+0x996/0x1610 [ 719.068180][ T3641] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 719.068207][ T3641] ? rwlock_bug.part.0+0x90/0x90 05:22:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x280081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x4) [ 719.068237][ T3641] ? _raw_spin_lock_irq+0x41/0x50 [ 719.068273][ T3641] worker_thread+0x665/0x1080 [ 719.074339][ T3625] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 719.078962][ T3641] ? __kthread_parkme+0x15f/0x220 [ 719.078995][ T3641] ? process_one_work+0x1610/0x1610 [ 719.079019][ T3641] kthread+0x2e9/0x3a0 [ 719.128509][ T3641] ? kthread_complete_and_exit+0x40/0x40 [ 719.134168][ T3641] ret_from_fork+0x1f/0x30 [ 719.138606][ T3641] [ 719.143312][T18049] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 719.155046][T18049] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 719.163543][T18049] CPU: 0 PID: 18049 Comm: syz-executor.4 Not tainted 5.17.0-rc6-next-20220303-syzkaller #0 [ 719.173527][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.183588][T18049] RIP: 0010:__wake_up_common+0xdf/0x650 [ 719.189154][T18049] Code: 05 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 3b 3c 24 0f 84 6a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 40 05 00 00 49 8b 40 18 89 54 24 10 31 db 48 bd [ 719.208769][T18049] RSP: 0018:ffffc9000420fa40 EFLAGS: 00010046 [ 719.214845][T18049] RAX: dffffc0000000000 RBX: ffff8880728f08c8 RCX: 0000000000000000 [ 719.222824][T18049] RDX: 0000000000000001 RSI: 1ffffffff1b6bb99 RDI: 0000000000000000 [ 719.230799][T18049] RBP: ffff8880728f0918 R08: ffffffffffffffe8 R09: 0000000000000000 [ 719.238774][T18049] R10: fffff52000841f42 R11: 0000000000000000 R12: ffff8880728f08c0 [ 719.246750][T18049] R13: 0000000000000297 R14: 0000000000000000 R15: 0000000000000000 [ 719.254724][T18049] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 719.263665][T18049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.270281][T18049] CR2: 00007fd0d97ed718 CR3: 000000007f22c000 CR4: 00000000003506f0 [ 719.278257][T18049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.286233][T18049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 719.294213][T18049] Call Trace: [ 719.297493][T18049] [ 719.300431][T18049] rcu_sync_func+0x119/0x180 [ 719.305101][T18049] rcu_sync_enter+0x150/0x2e0 [ 719.309796][T18049] ? rcu_sync_enter_start+0x70/0x70 [ 719.315008][T18049] ? rcu_read_lock_sched_held+0xd/0x70 [ 719.320476][T18049] ? lock_release+0x522/0x720 [ 719.325165][T18049] ? hci_uart_close+0x1d/0x70 [ 719.329872][T18049] ? lock_downgrade+0x6e0/0x6e0 [ 719.334739][T18049] percpu_down_write+0x55/0x320 [ 719.339598][T18049] ? hci_uart_tty_close+0x162/0x2a0 [ 719.344814][T18049] ? preempt_count_add+0x74/0x140 05:22:42 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "c43fe5", 0x10, 0x21, 0x0, @remote, @private2, {[], {{0x0, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, "613582", 0x0, "f000"}}}}}}}, 0x0) [ 719.350053][T18049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 719.356320][T18049] ? hci_uart_flush+0x33e/0x550 [ 719.361200][T18049] hci_uart_tty_close+0x162/0x2a0 [ 719.366258][T18049] ? hci_uart_close+0x70/0x70 [ 719.370957][T18049] tty_ldisc_close+0x110/0x190 [ 719.375799][T18049] tty_ldisc_kill+0x94/0x150 [ 719.380923][T18049] tty_ldisc_release+0xe1/0x2a0 [ 719.385785][T18049] tty_release_struct+0x20/0xe0 [ 719.390647][T18049] tty_release+0xc70/0x1200 [ 719.395163][T18049] __fput+0x286/0x9f0 [ 719.399204][T18049] ? tty_release_struct+0xe0/0xe0 [ 719.404234][T18049] ? _raw_spin_unlock_irq+0x1f/0x40 [ 719.409445][T18049] task_work_run+0xdd/0x1a0 [ 719.413965][T18049] do_exit+0xafa/0x2a30 [ 719.418294][T18049] ? preempt_schedule_thunk+0x16/0x18 [ 719.423721][T18049] ? mm_update_next_owner+0x7a0/0x7a0 [ 719.429116][T18049] ? preempt_schedule_thunk+0x16/0x18 [ 719.434509][T18049] ? trace_hardirqs_on+0x38/0x1c0 [ 719.439577][T18049] do_group_exit+0xd2/0x2f0 [ 719.444100][T18049] __x64_sys_exit_group+0x3a/0x50 [ 719.449144][T18049] do_syscall_64+0x35/0xb0 [ 719.453579][T18049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 719.459487][T18049] RIP: 0033:0x7fa9f1c89049 [ 719.463905][T18049] Code: Unable to access opcode bytes at RIP 0x7fa9f1c8901f. [ 719.471350][T18049] RSP: 002b:00007fa9f2daabb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 719.479768][T18049] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa9f1c89049 [ 719.487744][T18049] RDX: 00007fa9f1cea282 RSI: 0000000000000000 RDI: 000000000000000b [ 719.495734][T18049] RBP: 000000000000000b R08: 00007ffcd7f62080 R09: 0000000000000003 [ 719.503708][T18049] R10: 00000000000002ce R11: 0000000000000246 R12: 0000000000000000 [ 719.511687][T18049] R13: 00007ffcd7e69f7f R14: 00007fa9f2dab300 R15: 0000000000022000 [ 719.519669][T18049] [ 719.522691][T18049] Modules linked in: [ 719.562916][T18049] ---[ end trace 0000000000000000 ]--- [ 719.568396][T18049] RIP: 0010:__wake_up_common+0xdf/0x650 [ 719.573958][T18049] Code: 05 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 3b 3c 24 0f 84 6a 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 40 05 00 00 49 8b 40 18 89 54 24 10 31 db 48 bd [ 719.593661][T18049] RSP: 0018:ffffc9000420fa40 EFLAGS: 00010046 [ 719.599736][T18049] RAX: dffffc0000000000 RBX: ffff8880728f08c8 RCX: 0000000000000000 [ 719.607713][T18049] RDX: 0000000000000001 RSI: 1ffffffff1b6bb99 RDI: 0000000000000000 [ 719.615689][T18049] RBP: ffff8880728f0918 R08: ffffffffffffffe8 R09: 0000000000000000 [ 719.623663][T18049] R10: fffff52000841f42 R11: 0000000000000000 R12: ffff8880728f08c0 [ 719.631640][T18049] R13: 0000000000000297 R14: 0000000000000000 R15: 0000000000000000 [ 719.639618][T18049] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 719.648557][T18049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.655151][T18049] CR2: 00007fd0d97ed718 CR3: 000000007f22c000 CR4: 00000000003506f0 [ 719.663133][T18049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.671111][T18049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 719.679088][T18049] Kernel panic - not syncing: Fatal exception [ 719.685303][T18049] Kernel Offset: disabled [ 719.689618][T18049] Rebooting in 86400 seconds..