) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) setuid(0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000e68ddf970c048d998095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r3, r5, 0x0, 0x11f06) (async) [ 1168.088968][ T27] audit: type=1800 audit(1659266204.577:240): pid=28493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1174 res=0 errno=0 11:16:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0000a0000000000006040000000000f93132", 0x39}], 0x1) 11:16:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200c0fe00000006040000000000f93132", 0x39}], 0x1) [ 1168.281817][ T27] audit: type=1804 audit(1659266204.587:241): pid=28493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3420998962/syzkaller.IPyKVB/78/file0" dev="sda1" ino=1174 res=1 errno=0 11:16:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x511402, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x8, 0x8, 0x8c3, 0x8, 0xf, "cd23a425620e89c8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x511402, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x8, 0x8, 0x8c3, 0x8, 0xf, "cd23a425620e89c8"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 11:16:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad001400000000000006040000000000f93132", 0x39}], 0x1) 11:16:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00ffffff0000000006040000000000f93132", 0x39}], 0x1) 11:16:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ff00000006040000000000f93132", 0x39}], 0x1) 11:16:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x511402, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async, rerun: 64) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x8, 0x8, 0x8c3, 0x8, 0xf, "cd23a425620e89c8"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (rerun: 64) [ 1168.592048][T28509] validate_nla: 31 callbacks suppressed [ 1168.592067][T28509] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1168.620317][ T8861] Bluetooth: hci6: Frame reassembly failed (-84) 11:16:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x10202) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x4, 0xffff0000, 0x80000000, 0x0, 0x7, "bd413054106fe8087f2fc17c91060a8cf19e5d", 0x0, 0x80}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1168.690273][T28507] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1168.750358][T28512] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1168.771429][T28516] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000202000000000006040000000000f93132", 0x39}], 0x1) [ 1168.802280][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1168.813339][T28517] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 11:16:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0xf23, 0x0, 0x25dfdbfd}, 0x14}}, 0x4050) 11:16:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000400ad000006040000000000f93132", 0x39}], 0x1) [ 1168.855691][T28519] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1168.884852][T28527] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0xf23, 0x0, 0x25dfdbfd}, 0x14}}, 0x4050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0xf23, 0x0, 0x25dfdbfd}, 0x14}}, 0x4050) (async) [ 1168.945075][T28528] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000203000000000006040000000000f93132", 0x39}], 0x1) [ 1168.992795][T28532] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000010006040000000000f93132", 0x39}], 0x1) [ 1169.039082][T28532] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0xf23, 0x0, 0x25dfdbfd}, 0x14}}, 0x4050) 11:16:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000204000000000006040000000000f93132", 0x39}], 0x1) 11:16:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000020006040000000000f93132", 0x39}], 0x1) [ 1170.629805][ T3680] Bluetooth: hci6: command 0x1003 tx timeout [ 1170.635976][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:16:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000030006040000000000f93132", 0x39}], 0x1) 11:16:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x10202) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x4, 0xffff0000, 0x80000000, 0x0, 0x7, "bd413054106fe8087f2fc17c91060a8cf19e5d", 0x0, 0x80}) (async) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (rerun: 32) 11:16:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000205000000000006040000000000f93132", 0x39}], 0x1) 11:16:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000040006040000000000f93132", 0x39}], 0x1) [ 1170.872138][ T3680] Bluetooth: hci7: command 0x1003 tx timeout [ 1170.878296][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1170.959905][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1170.967653][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1170.992008][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) 11:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80541, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ad00040006040000000000f93132", 0x39}], 0x1) [ 1171.093506][ T8861] Bluetooth: hci6: Frame reassembly failed (-84) [ 1171.110842][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.121053][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:16:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000206000000000006040000000000f93132", 0x39}], 0x1) 11:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80541, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80541, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1171.166833][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.205781][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.223958][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.243529][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:16:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000050006040000000000f93132", 0x39}], 0x1) 11:16:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000207000000000006040000000000f93132", 0x39}], 0x1) [ 1171.279873][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.305678][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.330631][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1171.338935][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1171.339594][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.355154][T25278] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.379110][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:16:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80541, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80541, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1171.435268][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.503859][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1171.512412][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1171.520834][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.528363][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.543976][T25278] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.566018][T28588] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1171.576661][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.590169][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.598257][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.649622][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.656867][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.663972][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.671858][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.679293][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.698924][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.708029][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.722957][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.731156][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.745827][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.757054][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.773850][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.783073][ T8861] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.796772][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.804925][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.817665][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.825703][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.839312][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.854139][T28569] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1171.868778][ T8861] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1171.880237][ T8861] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1173.029556][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1173.039730][ T3680] Bluetooth: hci7: command tx timeout 11:16:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x10202) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x4, 0xffff0000, 0x80000000, 0x0, 0x7, "bd413054106fe8087f2fc17c91060a8cf19e5d", 0x0, 0x80}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x10202) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000100)={0x4, 0xffff0000, 0x80000000, 0x0, 0x7, "bd413054106fe8087f2fc17c91060a8cf19e5d", 0x0, 0x80}) (async) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:16:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000060006040000000000f93132", 0x39}], 0x1) 11:16:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000208000000000006040000000000f93132", 0x39}], 0x1) 11:16:49 executing program 0: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000206000000000006040000000000f93132", 0x39}], 0x1) [ 1173.113111][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1173.122034][ T3680] Bluetooth: hci6: command tx timeout [ 1173.216642][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1173.226687][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1173.242622][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:16:49 executing program 0: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1173.300602][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1173.308370][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1173.316819][ T8861] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1173.330480][T28608] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:16:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000070006040000000000f93132", 0x39}], 0x1) [ 1173.420390][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:16:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000209000000000006040000000000f93132", 0x39}], 0x1) 11:16:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 11:16:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:16:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000080006040000000000f93132", 0x39}], 0x1) [ 1173.529065][ T5325] Bluetooth: hci6: Frame reassembly failed (-84) [ 1173.568630][T28616] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1173.622905][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1173.638942][T28625] validate_nla: 31 callbacks suppressed [ 1173.638962][T28625] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 11:16:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020a000000000006040000000000f93132", 0x39}], 0x1) [ 1173.701337][T28629] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) [ 1173.806757][T28630] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:50 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) r0 = syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="0913628a3abb71f4b82f16295d8cc98de5aff9672f09dca42cd733a52a7c97246be8bc8990ccea2fda471e7475bbdef1ccce2e7d6ae33e91ba66fdf3cabfb6ea16245800ea1955b8aa0b5ce8c8", 0x4d, 0x27ac}], 0xe0000, &(0x7f0000000200)={[{@acl}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}]}) write(r0, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) [ 1173.867994][T28638] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000090006040000000000f93132", 0x39}], 0x1) [ 1173.934298][T28645] loop4: detected capacity change from 0 to 39 [ 1173.953436][T28644] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020c000000000006040000000000f93132", 0x39}], 0x1) [ 1174.073257][T28647] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1174.136373][T28649] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1174.177968][T28650] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1174.204773][T28651] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:16:52 executing program 0: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3f9, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000a0006040000000000f93132", 0x39}], 0x1) 11:16:52 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) (async) r0 = syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="0913628a3abb71f4b82f16295d8cc98de5aff9672f09dca42cd733a52a7c97246be8bc8990ccea2fda471e7475bbdef1ccce2e7d6ae33e91ba66fdf3cabfb6ea16245800ea1955b8aa0b5ce8c8", 0x4d, 0x27ac}], 0xe0000, &(0x7f0000000200)={[{@acl}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}]}) write(r0, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) [ 1175.589791][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1175.599025][ T5699] Bluetooth: hci6: command tx timeout 11:16:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020e000000000006040000000000f93132", 0x39}], 0x1) 11:16:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4000000) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) [ 1175.658615][T28655] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1175.701851][T28657] loop4: detected capacity change from 0 to 39 [ 1175.735037][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) 11:16:52 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) (async) r0 = syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="0913628a3abb71f4b82f16295d8cc98de5aff9672f09dca42cd733a52a7c97246be8bc8990ccea2fda471e7475bbdef1ccce2e7d6ae33e91ba66fdf3cabfb6ea16245800ea1955b8aa0b5ce8c8", 0x4d, 0x27ac}], 0xe0000, &(0x7f0000000200)={[{@acl}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role}]}) write(r0, &(0x7f0000000240), 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) 11:16:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020f000000000006040000000000f93132", 0x39}], 0x1) 11:16:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000c0006040000000000f93132", 0x39}], 0x1) 11:16:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000210000000000006040000000000f93132", 0x39}], 0x1) 11:16:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11:16:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000e0006040000000000f93132", 0x39}], 0x1) [ 1176.110797][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1177.030937][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.037279][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 11:16:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x100) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4}) 11:16:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000216000000000006040000000000f93132", 0x39}], 0x1) 11:16:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000f0006040000000000f93132", 0x39}], 0x1) 11:16:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x4f}}, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4412357f845006cc170fea341143d0a5"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "77e29edd50ef8da0e43d80f9ba2db4bf7480e1342abcc6e2d73995bed8b87f9e"}]}, 0x58}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506330000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="006d0000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x24, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000d056c0050010006000019000000", @ANYRES32=r9], 0x20}}, 0x0) [ 1177.759623][ T8383] Bluetooth: hci6: command 0x1003 tx timeout [ 1177.765766][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:16:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000217000000000006040000000000f93132", 0x39}], 0x1) [ 1177.853978][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1177.861906][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:16:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000100006040000000000f93132", 0x39}], 0x1) 11:16:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x100) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x100) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4}) (async) [ 1178.019304][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1178.027338][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1178.033658][T28705] device bond1 entered promiscuous mode [ 1178.041251][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:16:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000218000000000006040000000000f93132", 0x39}], 0x1) 11:16:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x100) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x100) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/4}) (async) [ 1178.159666][ T3680] Bluetooth: hci7: command 0x1003 tx timeout [ 1178.165997][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:16:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000160006040000000000f93132", 0x39}], 0x1) [ 1178.215359][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1178.224873][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:16:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x4f}}, 0x0) (async) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4412357f845006cc170fea341143d0a5"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "77e29edd50ef8da0e43d80f9ba2db4bf7480e1342abcc6e2d73995bed8b87f9e"}]}, 0x58}}, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506330000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="006d0000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x24, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000d056c0050010006000019000000", @ANYRES32=r9], 0x20}}, 0x0) [ 1178.283890][T28721] ptm ptm1: ldisc open failed (-12), clearing slot 1 11:16:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00021e000000000006040000000000f93132", 0x39}], 0x1) 11:16:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000170006040000000000f93132", 0x39}], 0x1) 11:16:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="2c364db1af1b68b6328a88861036d6341dc1162ea2d90a34949ec751debd3d790edbaf18798838b615d394f461999edd503636facc326e82e978095f424a8ec3e7e82f41abb1e4779b08ea8dddaf130588625044af7adce49a26699ec34f32856c38a019a12bc2b60660dca3da809ba8991ca8ae00f251d0bc93d7a647942e0401c420eb2293df8cf8ef0d748385f31500775db0c81b91160568b82e530d9594102577f341b5a10b", 0xa8, 0x1f}], 0x2002000, &(0x7f0000000240)={[{@type={'type', 0x3d, "80de7899"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@part={'part', 0x3d, 0xffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@umask={'umask', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsdef={'smackfsdef', 0x3d, '@,\\--$&%'}}, {@uid_eq}, {@dont_appraise}, {@fsname={'fsname', 0x3d, ',.'}}, {@context={'context', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0x800, 0x3, 0x2, 0x6, 0x4, [{0x5, 0x4, 0x9, '\x00', 0x800}, {0x55, 0x7f, 0x7b, '\x00', 0xb8d}, {0x8, 0x2, 0x10000, '\x00', 0x2000}, {0xd3, 0x7ff, 0xf883b0c, '\x00', 0x3d83}]}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x4f}}, 0x0) (async) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x58, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4412357f845006cc170fea341143d0a5"}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "77e29edd50ef8da0e43d80f9ba2db4bf7480e1342abcc6e2d73995bed8b87f9e"}]}, 0x58}}, 0x0) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, r3, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506330000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="006d0000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x24, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000d056c0050010006000019000000", @ANYRES32=r9], 0x20}}, 0x0) 11:16:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000224000000000006040000000000f93132", 0x39}], 0x1) [ 1178.534426][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1178.542607][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1178.553213][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:16:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="2c364db1af1b68b6328a88861036d6341dc1162ea2d90a34949ec751debd3d790edbaf18798838b615d394f461999edd503636facc326e82e978095f424a8ec3e7e82f41abb1e4779b08ea8dddaf130588625044af7adce49a26699ec34f32856c38a019a12bc2b60660dca3da809ba8991ca8ae00f251d0bc93d7a647942e0401c420eb2293df8cf8ef0d748385f31500775db0c81b91160568b82e530d9594102577f341b5a10b", 0xa8, 0x1f}], 0x2002000, &(0x7f0000000240)={[{@type={'type', 0x3d, "80de7899"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@part={'part', 0x3d, 0xffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@umask={'umask', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsdef={'smackfsdef', 0x3d, '@,\\--$&%'}}, {@uid_eq}, {@dont_appraise}, {@fsname={'fsname', 0x3d, ',.'}}, {@context={'context', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0x800, 0x3, 0x2, 0x6, 0x4, [{0x5, 0x4, 0x9, '\x00', 0x800}, {0x55, 0x7f, 0x7b, '\x00', 0xb8d}, {0x8, 0x2, 0x10000, '\x00', 0x2000}, {0xd3, 0x7ff, 0xf883b0c, '\x00', 0x3d83}]}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1178.660441][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1178.668142][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1178.731204][T28758] validate_nla: 28 callbacks suppressed [ 1178.731216][T28758] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="2c364db1af1b68b6328a88861036d6341dc1162ea2d90a34949ec751debd3d790edbaf18798838b615d394f461999edd503636facc326e82e978095f424a8ec3e7e82f41abb1e4779b08ea8dddaf130588625044af7adce49a26699ec34f32856c38a019a12bc2b60660dca3da809ba8991ca8ae00f251d0bc93d7a647942e0401c420eb2293df8cf8ef0d748385f31500775db0c81b91160568b82e530d9594102577f341b5a10b", 0xa8, 0x1f}], 0x2002000, &(0x7f0000000240)={[{@type={'type', 0x3d, "80de7899"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@part={'part', 0x3d, 0xffff}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@umask={'umask', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, 0xee01}}], [{@smackfsdef={'smackfsdef', 0x3d, '@,\\--$&%'}}, {@uid_eq}, {@dont_appraise}, {@fsname={'fsname', 0x3d, ',.'}}, {@context={'context', 0x3d, 'root'}}, {@fowner_gt={'fowner>', 0xee01}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0x800, 0x3, 0x2, 0x6, 0x4, [{0x5, 0x4, 0x9, '\x00', 0x800}, {0x55, 0x7f, 0x7b, '\x00', 0xb8d}, {0x8, 0x2, 0x10000, '\x00', 0x2000}, {0xd3, 0x7ff, 0xf883b0c, '\x00', 0x3d83}]}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000180006040000000000f93132", 0x39}], 0x1) [ 1178.773973][T28762] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1178.882720][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1178.884441][T28763] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.890348][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:16:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1f, @local}], 0x1c) 11:16:55 executing program 5: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x5a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x1, 0xc7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x0, 0x20, 0x20, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x4, 0xff0f, 0x6b, [0xf, 0xffc030, 0x3f30, 0xff3f21]}]}, 0x7, [{0x88, &(0x7f0000000100)=@string={0x88, 0x3, "bdb0bef3deca2e737aa1603127c57e5538a6016fcdd7544b2b16f3b4a5d0e686a8f4812800d510bbd074e037a62f31b9e414ccce380e75650ebde0127af1f6422180330fcb75af90782c88342964f324c498c8c8c0c69635ac0cb2e9ae1b2f61a397ad1e2ebf18f8b88ed7be8871a32f68f1779a38ce81a80b668f764eb5d4f44ef055a7cb93"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "22858c9d85a4ac28ec2796cf9e33447bec55abeb2418433af94f8ffbe52f84d934695aa02aa857bc8f627e0febc280b4f628d1909e30e33eae458b3670c7d8abcea6f063d2d0a24ed0b4adaf6e4b2fa7dc1a1b6bda38ab596af43ae290f34f58b5393a06593b5d94b63e8153cee45c7572b83131615e597624fda7e60ba874a8e3b83246c324ce6a41673b19f5f6b03741cecce5d87c4d2b8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) read$char_usb(r2, &(0x7f00000001c0)=""/11, 0xb) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 1178.982531][T28766] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1179.023535][T28772] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000248000000000006040000000000f93132", 0x39}], 0x1) [ 1179.083257][T28776] Bluetooth: hci6: Frame reassembly failed (-84) [ 1179.134753][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1179.143781][T28774] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1179.180082][T28780] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1179.216294][T28781] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1179.419470][ T8383] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1179.840186][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1179.856538][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1180.148986][ T8383] usb 6-1: string descriptor 0 read error: -22 [ 1180.169798][ T8383] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1180.178970][ T8383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.202059][ T8383] usb 6-1: config 0 descriptor?? [ 1180.275891][ T8383] adutux 6-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 1180.490479][T28778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.511782][T28778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.571316][T21704] usb 6-1: USB disconnect, device number 5 [ 1180.639740][ T5699] Bluetooth: hci7: command 0x1003 tx timeout [ 1180.645927][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:16:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00024c000000000006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001e0006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1180.753352][T28783] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1180.783750][T28785] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:16:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000260000000000006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001f0006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000268000000000006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000240006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00026c000000000006040000000000f93132", 0x39}], 0x1) [ 1181.109793][ T8383] Bluetooth: hci6: command 0x1003 tx timeout [ 1181.116011][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:16:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = dup3(r0, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1f, @local}], 0x1c) 11:16:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000003f0006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000274000000000006040000000000f93132", 0x39}], 0x1) 11:16:57 executing program 5: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x5a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x1, 0xc7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x0, 0x20, 0x20, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x4, 0xff0f, 0x6b, [0xf, 0xffc030, 0x3f30, 0xff3f21]}]}, 0x7, [{0x88, &(0x7f0000000100)=@string={0x88, 0x3, "bdb0bef3deca2e737aa1603127c57e5538a6016fcdd7544b2b16f3b4a5d0e686a8f4812800d510bbd074e037a62f31b9e414ccce380e75650ebde0127af1f6422180330fcb75af90782c88342964f324c498c8c8c0c69635ac0cb2e9ae1b2f61a397ad1e2ebf18f8b88ed7be8871a32f68f1779a38ce81a80b668f764eb5d4f44ef055a7cb93"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "22858c9d85a4ac28ec2796cf9e33447bec55abeb2418433af94f8ffbe52f84d934695aa02aa857bc8f627e0febc280b4f628d1909e30e33eae458b3670c7d8abcea6f063d2d0a24ed0b4adaf6e4b2fa7dc1a1b6bda38ab596af43ae290f34f58b5393a06593b5d94b63e8153cee45c7572b83131615e597624fda7e60ba874a8e3b83246c324ce6a41673b19f5f6b03741cecce5d87c4d2b8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async, rerun: 64) read$char_usb(r2, &(0x7f00000001c0)=""/11, 0xb) (async, rerun: 64) read$char_usb(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_disconnect(r0) (rerun: 32) [ 1181.333579][ T2449] Bluetooth: hci6: Frame reassembly failed (-84) 11:16:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:16:58 executing program 5: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x5a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x1, 0xc7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x0, 0x20, 0x20, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x4, 0xff0f, 0x6b, [0xf, 0xffc030, 0x3f30, 0xff3f21]}]}, 0x7, [{0x88, &(0x7f0000000100)=@string={0x88, 0x3, "bdb0bef3deca2e737aa1603127c57e5538a6016fcdd7544b2b16f3b4a5d0e686a8f4812800d510bbd074e037a62f31b9e414ccce380e75650ebde0127af1f6422180330fcb75af90782c88342964f324c498c8c8c0c69635ac0cb2e9ae1b2f61a397ad1e2ebf18f8b88ed7be8871a32f68f1779a38ce81a80b668f764eb5d4f44ef055a7cb93"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "22858c9d85a4ac28ec2796cf9e33447bec55abeb2418433af94f8ffbe52f84d934695aa02aa857bc8f627e0febc280b4f628d1909e30e33eae458b3670c7d8abcea6f063d2d0a24ed0b4adaf6e4b2fa7dc1a1b6bda38ab596af43ae290f34f58b5393a06593b5d94b63e8153cee45c7572b83131615e597624fda7e60ba874a8e3b83246c324ce6a41673b19f5f6b03741cecce5d87c4d2b8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) read$char_usb(r2, &(0x7f00000001c0)=""/11, 0xb) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x5a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x1, 0xc7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x0, 0x20, 0x20, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x4, 0xff0f, 0x6b, [0xf, 0xffc030, 0x3f30, 0xff3f21]}]}, 0x7, [{0x88, &(0x7f0000000100)=@string={0x88, 0x3, "bdb0bef3deca2e737aa1603127c57e5538a6016fcdd7544b2b16f3b4a5d0e686a8f4812800d510bbd074e037a62f31b9e414ccce380e75650ebde0127af1f6422180330fcb75af90782c88342964f324c498c8c8c0c69635ac0cb2e9ae1b2f61a397ad1e2ebf18f8b88ed7be8871a32f68f1779a38ce81a80b668f764eb5d4f44ef055a7cb93"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "22858c9d85a4ac28ec2796cf9e33447bec55abeb2418433af94f8ffbe52f84d934695aa02aa857bc8f627e0febc280b4f628d1909e30e33eae458b3670c7d8abcea6f063d2d0a24ed0b4adaf6e4b2fa7dc1a1b6bda38ab596af43ae290f34f58b5393a06593b5d94b63e8153cee45c7572b83131615e597624fda7e60ba874a8e3b83246c324ce6a41673b19f5f6b03741cecce5d87c4d2b8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]}) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) read$char_usb(r2, &(0x7f00000001c0)=""/11, 0xb) (async) read$char_usb(r1, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) 11:16:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00027a000000000006040000000000f93132", 0x39}], 0x1) 11:16:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000600006040000000000f93132", 0x39}], 0x1) 11:16:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x400042, 0x1, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x19) 11:16:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002ce000000000006040000000000f93132", 0x39}], 0x1) 11:16:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000058650006040000000000f93132", 0x39}], 0x1) 11:16:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fc000000000006040000000000f93132", 0x39}], 0x1) [ 1181.749965][ T3851] Bluetooth: hci7: Frame reassembly failed (-84) [ 1181.949569][ T8383] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 1182.320232][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1182.336516][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1182.599809][ T8383] usb 6-1: string descriptor 0 read error: -22 [ 1182.606085][ T8383] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1182.626584][ T8383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.640741][ T8383] usb 6-1: config 0 descriptor?? [ 1182.694243][ T8383] adutux 6-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 1182.897342][T28829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.923163][T28829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.979143][ T8383] usb 6-1: USB disconnect, device number 6 [ 1183.201474][T28829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.229010][T28829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:16:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x14) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1f, @local}], 0x1c) 11:16:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c6d0006040000000000f93132", 0x39}], 0x1) [ 1183.349661][ T4431] Bluetooth: hci6: command 0x1003 tx timeout [ 1183.357706][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:16:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fd000000000006040000000000f93132", 0x39}], 0x1) 11:16:59 executing program 5: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001000000000904000002ca743600090503032000ff00000905840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x7, 0x2, 0x1, {0x22, 0x5a8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x1, 0xc7}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xff, 0x0, 0x20, 0x20, 0x6}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0xd, 0x4, 0x4, 0xff0f, 0x6b, [0xf, 0xffc030, 0x3f30, 0xff3f21]}]}, 0x7, [{0x88, &(0x7f0000000100)=@string={0x88, 0x3, "bdb0bef3deca2e737aa1603127c57e5538a6016fcdd7544b2b16f3b4a5d0e686a8f4812800d510bbd074e037a62f31b9e414ccce380e75650ebde0127af1f6422180330fcb75af90782c88342964f324c498c8c8c0c69635ac0cb2e9ae1b2f61a397ad1e2ebf18f8b88ed7be8871a32f68f1779a38ce81a80b668f764eb5d4f44ef055a7cb93"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x9b, &(0x7f00000002c0)=@string={0x9b, 0x3, "22858c9d85a4ac28ec2796cf9e33447bec55abeb2418433af94f8ffbe52f84d934695aa02aa857bc8f627e0febc280b4f628d1909e30e33eae458b3670c7d8abcea6f063d2d0a24ed0b4adaf6e4b2fa7dc1a1b6bda38ab596af43ae290f34f58b5393a06593b5d94b63e8153cee45c7572b83131615e597624fda7e60ba874a8e3b83246c324ce6a41673b19f5f6b03741cecce5d87c4d2b8b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80c}}]}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) read$char_usb(r2, &(0x7f00000001c0)=""/11, 0xb) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 1183.414085][T28851] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200030000000006040000000000f93132", 0x39}], 0x1) 11:17:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000810006040000000000f93132", 0x39}], 0x1) [ 1183.489778][ T2449] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ffffa8880006040000000000f93132", 0x39}], 0x1) 11:17:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200050000000006040000000000f93132", 0x39}], 0x1) [ 1183.749718][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1183.759548][ T5699] Bluetooth: hci7: command tx timeout 11:17:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 32) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x400042, 0x1, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x19) 11:17:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200060000000006040000000000f93132", 0x39}], 0x1) 11:17:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ffffffc30006040000000000f93132", 0x39}], 0x1) [ 1183.831872][T28870] validate_nla: 38 callbacks suppressed [ 1183.831890][T28870] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1183.884870][T28871] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1183.889583][ T8383] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1183.923480][T28872] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200070000000006040000000000f93132", 0x39}], 0x1) [ 1183.959123][T28870] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1183.979888][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) [ 1184.044217][T28877] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1184.082095][T28877] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1184.319704][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 1184.346504][ T8383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1184.619729][ T8383] usb 6-1: string descriptor 0 read error: -22 [ 1184.626022][ T8383] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1184.646974][ T8383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.676489][ T8383] usb 6-1: config 0 descriptor?? [ 1184.734016][ T8383] adutux 6-1:0.0: ADU100 now attached to /dev/usb/adutux0 [ 1184.987836][T28857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.007103][T28857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.079302][T18029] usb 6-1: USB disconnect, device number 7 11:17:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xc3f9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = fsmount(r1, 0x0, 0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003e80006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200090000000006040000000000f93132", 0x39}], 0x1) [ 1185.429576][T18029] Bluetooth: hci6: command 0x1003 tx timeout [ 1185.435795][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1185.506901][T28880] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1185.568171][T28885] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1185.585271][T28882] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1185.634489][T28884] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200070000000006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xc3f9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = fsmount(r1, 0x0, 0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003ee0006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000a0000000006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000c0000000006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x400042, 0x1, 0x6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x19) 11:17:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xc3f9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) r2 = fsmount(r1, 0x0, 0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xc3f9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) fsmount(r1, 0x0, 0x6) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x5) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fc0006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000180006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00026d0c0000000006040000000000f93132", 0x39}], 0x1) [ 1185.989881][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1185.990297][T18029] Bluetooth: hci7: command 0x1003 tx timeout 11:17:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffc0006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000e0000000006040000000000f93132", 0x39}], 0x1) [ 1186.215822][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1186.224384][T28899] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x69, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 11:17:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x48, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7f, 0x3}}, @IFA_LOCAL={0x14, 0x2, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x240000c1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r3, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80410100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2762e51f", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000010000000800090001ac0f0009000700152f50279b00000008003700010000003400508011000100cadd84554095baf8b2c0e780e400000005000200030000000800070002000000040005000800030005ac0f000900070099918c65a400000005000800020000000800090001ac0f0008000a00e01e20000a000600ffffffffffff000011000700936ca5c4fa0c533bd15ca28a24000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4c041}, 0x20040000) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0x8102, 0x2811fdff) ioctl$KDADDIO(r4, 0x4b34, 0x9) 11:17:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000f0000000006040000000000f93132", 0x39}], 0x1) 11:17:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fd0006040000000000f93132", 0x39}], 0x1) 11:17:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x69, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x69, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) (async) [ 1186.543989][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1186.551901][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1186.577782][ T2449] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1188.229730][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1, 0x69, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) 11:17:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200160000000006040000000000f93132", 0x39}], 0x1) 11:17:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffd0006040000000000f93132", 0x39}], 0x1) 11:17:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x48, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7f, 0x3}}, @IFA_LOCAL={0x14, 0x2, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x240000c1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r3, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80410100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2762e51f", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000010000000800090001ac0f0009000700152f50279b00000008003700010000003400508011000100cadd84554095baf8b2c0e780e400000005000200030000000800070002000000040005000800030005ac0f000900070099918c65a400000005000800020000000800090001ac0f0008000a00e01e20000a000600ffffffffffff000011000700936ca5c4fa0c533bd15ca28a24000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4c041}, 0x20040000) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0x8102, 0x2811fdff) ioctl$KDADDIO(r4, 0x4b34, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x48, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7f, 0x3}}, @IFA_LOCAL={0x14, 0x2, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x240000c1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r3, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80410100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2762e51f", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000010000000800090001ac0f0009000700152f50279b00000008003700010000003400508011000100cadd84554095baf8b2c0e780e400000005000200030000000800070002000000040005000800030005ac0f000900070099918c65a400000005000800020000000800090001ac0f0008000a00e01e20000a000600ffffffffffff000011000700936ca5c4fa0c533bd15ca28a24000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4c041}, 0x20040000) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$KDADDIO(r4, 0x4b34, 0x9) (async) 11:17:04 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "394a08bfcf24ab87a8cf355718af040ab8cefbcae22bae86823a0c776712c3bfa2c8a87307fb0d88ae582e06b0df9f6d688a081db6c4f101d6b5b6e57df0ddf5f95fb8ebb97cf6d2909cc9a051c8477f00b423639e4dc297e7bf36de44c6f6bf88a540dfc27b414e9afcc53ee80a0d725c73e4f3ee583dddffed6e0aed6577204a03da0b1487c1bee8366f35eb1deef45856dd4230fe98d6525966d76135fe0106e2c428730eec5cd5f1c4e868c36064e32bf9058922fb72ab526994a2cdafd96b962f450506ac233d39898ff8d2"}, 0xd2) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @broadcast, @broadcast}}}}, 0x0) 11:17:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200170000000006040000000000f93132", 0x39}], 0x1) 11:17:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000080fe0006040000000000f93132", 0x39}], 0x1) [ 1188.409674][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1188.412157][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1188.425180][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1188.446099][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1188.453377][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1188.483650][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200180000000006040000000000f93132", 0x39}], 0x1) 11:17:05 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "394a08bfcf24ab87a8cf355718af040ab8cefbcae22bae86823a0c776712c3bfa2c8a87307fb0d88ae582e06b0df9f6d688a081db6c4f101d6b5b6e57df0ddf5f95fb8ebb97cf6d2909cc9a051c8477f00b423639e4dc297e7bf36de44c6f6bf88a540dfc27b414e9afcc53ee80a0d725c73e4f3ee583dddffed6e0aed6577204a03da0b1487c1bee8366f35eb1deef45856dd4230fe98d6525966d76135fe0106e2c428730eec5cd5f1c4e868c36064e32bf9058922fb72ab526994a2cdafd96b962f450506ac233d39898ff8d2"}, 0xd2) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @broadcast, @broadcast}}}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "394a08bfcf24ab87a8cf355718af040ab8cefbcae22bae86823a0c776712c3bfa2c8a87307fb0d88ae582e06b0df9f6d688a081db6c4f101d6b5b6e57df0ddf5f95fb8ebb97cf6d2909cc9a051c8477f00b423639e4dc297e7bf36de44c6f6bf88a540dfc27b414e9afcc53ee80a0d725c73e4f3ee583dddffed6e0aed6577204a03da0b1487c1bee8366f35eb1deef45856dd4230fe98d6525966d76135fe0106e2c428730eec5cd5f1c4e868c36064e32bf9058922fb72ab526994a2cdafd96b962f450506ac233d39898ff8d2"}, 0xd2) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @broadcast, @broadcast}}}}, 0x0) (async) [ 1188.574386][T28947] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000c0fe0006040000000000f93132", 0x39}], 0x1) 11:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002001e0000000006040000000000f93132", 0x39}], 0x1) 11:17:05 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)={'syz0', "394a08bfcf24ab87a8cf355718af040ab8cefbcae22bae86823a0c776712c3bfa2c8a87307fb0d88ae582e06b0df9f6d688a081db6c4f101d6b5b6e57df0ddf5f95fb8ebb97cf6d2909cc9a051c8477f00b423639e4dc297e7bf36de44c6f6bf88a540dfc27b414e9afcc53ee80a0d725c73e4f3ee583dddffed6e0aed6577204a03da0b1487c1bee8366f35eb1deef45856dd4230fe98d6525966d76135fe0106e2c428730eec5cd5f1c4e868c36064e32bf9058922fb72ab526994a2cdafd96b962f450506ac233d39898ff8d2"}, 0xd2) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @broadcast, @broadcast}}}}, 0x0) 11:17:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002931e0000000006040000000000f93132", 0x39}], 0x1) 11:17:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffe0006040000000000f93132", 0x39}], 0x1) [ 1188.850621][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1188.858357][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1188.869682][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1188.904751][T28983] validate_nla: 35 callbacks suppressed [ 1188.904769][T28983] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1189.036658][T28985] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1189.066972][T28987] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1189.094871][T28986] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x48, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7f, 0x3}}, @IFA_LOCAL={0x14, 0x2, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x240000c1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r3, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80410100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2762e51f", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000010000000800090001ac0f0009000700152f50279b00000008003700010000003400508011000100cadd84554095baf8b2c0e780e400000005000200030000000800070002000000040005000800030005ac0f000900070099918c65a400000005000800020000000800090001ac0f0008000a00e01e20000a000600ffffffffffff000011000700936ca5c4fa0c533bd15ca28a24000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4c041}, 0x20040000) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r4, 0x100000011, 0x8102, 0x2811fdff) ioctl$KDADDIO(r4, 0x4b34, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x800, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x48, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7f, 0x3}}, @IFA_LOCAL={0x14, 0x2, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x240000c1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r3, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80410100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2762e51f", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000010000000800090001ac0f0009000700152f50279b00000008003700010000003400508011000100cadd84554095baf8b2c0e780e400000005000200030000000800070002000000040005000800030005ac0f000900070099918c65a400000005000800020000000800090001ac0f0008000a00e01e20000a000600ffffffffffff000011000700936ca5c4fa0c533bd15ca28a24000000"], 0xbc}, 0x1, 0x0, 0x0, 0x4c041}, 0x20040000) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r4, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$KDADDIO(r4, 0x4b34, 0x9) (async) 11:17:07 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x1, 0x1b, {0x1b, 0xe, "7e1f7aee9da97436a564e364a44a06d833b05b51b7da89196c"}}, &(0x7f0000000080)={0x0, 0x3, 0x10, @string={0x10, 0x3, "330988c33d2878787c2df79a228e"}}, &(0x7f00000000c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x2, [@generic={0xb5, 0x10, 0xa, "7cf29e79a76034fec0b52a69ad9f1c05175a7d2a0e0bb512587179913b7e4434cb3291c962804d815d2fc92ec3104dbcb384cf9a6dc2534d2cae2b76048ca96e1a20ed4dfe8ad9e0966a808cdde18928da96a0bd03ab65c6ef2fb700abd901232fbec5e6031e79328a479dd028402e0ee8c8557121c082bbd9ecfa03ac1d40139f09749f33283c8ffa9ff6ecf4cb14f9221e42523bfa0813734a6171e1e4cf97a47dc9db62410d98cbc9555697c3d37ef4da"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x4, 0x5, 0x5, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x93, 0x40, 'Nu\a2', "bc743375"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x5, 0x5, 0xf6, 0xb50e, 0x9}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x10, 0xc0, "f94856bdd127962519e34d798be4e296d41b4e484b3f5a78b4454b59331a9793590f8bfbc033a938feb2e4d775cbff8cbb6615e2fd4c2e718eb497400e58867eb3fd0b1db1a9acadd23c75cbc381860d6503d39c9529945f680fff64ed2c8e4c31a966c29a9b673b52461a055288148111909b2182e8f734c9f4b983041083ba7386fde31f88d1222fca1b3ecc8f9bb8d0bb97ebdbfcc7ee2cea1c3955550f1ab15377d4b2e02cb9b34f9e487b8f672fb0920f23177dc02402b9766eb5201f54"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f0000000800)=ANY=[@ANYBLOB="2000080000000001400052d30297a02dbec8872a0f00000061e41c60c3da70eb5461ca1444a6ecef64d59727b5dc11abbaae9a8b8294896810648f2b3ae72b167141fd554ae98db38430cb5f575870b5cbb3e9bdc7fc0e84f79270c6116cc8fbb535263fd6120beb70318c0375d538531d9419a5ce8766d84ded13d6887dfb31ed4afc92769ed749ed213278cdf02e5bf90501abc730db330e50c0ace3d8d6f4633e52ef2e9b57ed2109c20d6ab5f017b3988df8725b4ffeeb241522f267da57ccd4432209f6357f628ffbc01adc7fb2cb6833293e40e28496cd551fd66292113bf667d7deb4"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a644"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "e40b"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000900)={0x0, 0x9, 0xc0, {0xc0, 0x31, "293345f04c31b8c0c4a6a5a352e9368f6ebd0eeb2afdf9efbe233d5c26090f43c83d0a525271d12b34b275cac1129beb4d9e5571a9af6d7cdce025e18b255154cb7990fc25dfec1e04dcfcd06f25d80c9ebc0effce8051200c9980b8c61aff101facd32a0025cc917820ce6e7ebb75038aad932beca023818471f5ff96bf845bba71fdb1cc839fdba2aae6834ac7d835ff2ec0e63190f7f8da41f5a9ec27e7361ff1f9b5c76670402cf30ea4f2ba4134a9a99ab7a910b2e6e14ce10aade6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000a00)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "47c69ceb"}, @global=@item_012={0x0, 0x1, 0x7}, @main, @main=@item_4={0x3, 0x0, 0xa, "f4d85386"}, @main=@item_012={0x2, 0x0, 0xc, "69c3"}, @main=@item_4={0x3, 0x0, 0xb, "7c83b267"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x2, 0x1, {0x22, 0x10}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0xe, 0x30, "92d30be4a1b3f6f679f2f49353b83b7a57fb2877aecc08fcbf679f36ce09a7b31a6f3cbbe76317c825885124f5ee3fc0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000b80)={0x20, 0x1, 0x83, "ad6d7e9c1889f46ffc740e9e3f44ccb981dcf56696349886ae445c2db66f34ade995d5852ad1a7af722bb2fb06166c2d8f26dab1e3a21f49eacbe2a9a4f88c057dd2d46670fd94af31d42620f59d787b2c9d259ba768905787c63eb45d779719be2e3af4e1366440541f40922bda7db2229eee9db759b2dda3c0a1edcc85741f23a2ab"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x9}}) 11:17:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (rerun: 32) 11:17:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000ff0006040000000000f93132", 0x39}], 0x1) 11:17:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002001f0000000006040000000000f93132", 0x39}], 0x1) [ 1190.469543][ T8383] Bluetooth: hci6: command 0x1003 tx timeout [ 1190.469909][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1190.528163][T28990] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1190.624279][T28994] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1190.646922][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1190.662700][T28999] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1b1040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1190.684994][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1190.694026][T29001] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020088a8ffff0006040000000000f93132", 0x39}], 0x1) 11:17:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200200000000006040000000000f93132", 0x39}], 0x1) 11:17:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1b1040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1190.812052][T29016] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1190.829520][T21709] usb 6-1: new high-speed USB device number 8 using dummy_hcd 11:17:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1b1040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002007fffffff0006040000000000f93132", 0x39}], 0x1) [ 1190.889034][T29020] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200240000000006040000000000f93132", 0x39}], 0x1) [ 1191.069555][T21709] usb 6-1: Using ep0 maxpacket: 8 [ 1191.190314][T21709] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1191.198455][T21709] usb 6-1: config 0 has no interface number 0 [ 1191.220085][T21709] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1191.239434][T21709] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1191.259450][T21709] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1191.289432][T21709] usb 6-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1191.302724][T21709] usb 6-1: config 0 interface 65 has no altsetting 0 [ 1191.309704][T21709] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1191.318762][T21709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.339724][T21709] usb 6-1: config 0 descriptor?? [ 1191.385309][T21709] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input22 11:17:09 executing program 0: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x1, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x2}, {0x2, 0x3, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0xff, 0x1}, {0x0, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1}, 0xfe}, {0x0, 0x2, {0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x4}, {0x2, 0x0, 0x1}, 0x0, 0xfe}], 0xa0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1192.709761][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1192.827165][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1192.835835][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:10 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x1, 0x1b, {0x1b, 0xe, "7e1f7aee9da97436a564e364a44a06d833b05b51b7da89196c"}}, &(0x7f0000000080)={0x0, 0x3, 0x10, @string={0x10, 0x3, "330988c33d2878787c2df79a228e"}}, &(0x7f00000000c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x2, [@generic={0xb5, 0x10, 0xa, "7cf29e79a76034fec0b52a69ad9f1c05175a7d2a0e0bb512587179913b7e4434cb3291c962804d815d2fc92ec3104dbcb384cf9a6dc2534d2cae2b76048ca96e1a20ed4dfe8ad9e0966a808cdde18928da96a0bd03ab65c6ef2fb700abd901232fbec5e6031e79328a479dd028402e0ee8c8557121c082bbd9ecfa03ac1d40139f09749f33283c8ffa9ff6ecf4cb14f9221e42523bfa0813734a6171e1e4cf97a47dc9db62410d98cbc9555697c3d37ef4da"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x4, 0x5, 0x5, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x93, 0x40, 'Nu\a2', "bc743375"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x5, 0x5, 0xf6, 0xb50e, 0x9}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x10, 0xc0, "f94856bdd127962519e34d798be4e296d41b4e484b3f5a78b4454b59331a9793590f8bfbc033a938feb2e4d775cbff8cbb6615e2fd4c2e718eb497400e58867eb3fd0b1db1a9acadd23c75cbc381860d6503d39c9529945f680fff64ed2c8e4c31a966c29a9b673b52461a055288148111909b2182e8f734c9f4b983041083ba7386fde31f88d1222fca1b3ecc8f9bb8d0bb97ebdbfcc7ee2cea1c3955550f1ab15377d4b2e02cb9b34f9e487b8f672fb0920f23177dc02402b9766eb5201f54"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f0000000800)=ANY=[@ANYBLOB="2000080000000001400052d30297a02dbec8872a0f00000061e41c60c3da70eb5461ca1444a6ecef64d59727b5dc11abbaae9a8b8294896810648f2b3ae72b167141fd554ae98db38430cb5f575870b5cbb3e9bdc7fc0e84f79270c6116cc8fbb535263fd6120beb70318c0375d538531d9419a5ce8766d84ded13d6887dfb31ed4afc92769ed749ed213278cdf02e5bf90501abc730db330e50c0ace3d8d6f4633e52ef2e9b57ed2109c20d6ab5f017b3988df8725b4ffeeb241522f267da57ccd4432209f6357f628ffbc01adc7fb2cb6833293e40e28496cd551fd66292113bf667d7deb4"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a644"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "e40b"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000900)={0x0, 0x9, 0xc0, {0xc0, 0x31, "293345f04c31b8c0c4a6a5a352e9368f6ebd0eeb2afdf9efbe233d5c26090f43c83d0a525271d12b34b275cac1129beb4d9e5571a9af6d7cdce025e18b255154cb7990fc25dfec1e04dcfcd06f25d80c9ebc0effce8051200c9980b8c61aff101facd32a0025cc917820ce6e7ebb75038aad932beca023818471f5ff96bf845bba71fdb1cc839fdba2aae6834ac7d835ff2ec0e63190f7f8da41f5a9ec27e7361ff1f9b5c76670402cf30ea4f2ba4134a9a99ab7a910b2e6e14ce10aade6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000a00)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "47c69ceb"}, @global=@item_012={0x0, 0x1, 0x7}, @main, @main=@item_4={0x3, 0x0, 0xa, "f4d85386"}, @main=@item_012={0x2, 0x0, 0xc, "69c3"}, @main=@item_4={0x3, 0x0, 0xb, "7c83b267"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x2, 0x1, {0x22, 0x10}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0xe, 0x30, "92d30be4a1b3f6f679f2f49353b83b7a57fb2877aecc08fcbf679f36ce09a7b31a6f3cbbe76317c825885124f5ee3fc0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000b80)={0x20, 0x1, 0x83, "ad6d7e9c1889f46ffc740e9e3f44ccb981dcf56696349886ae445c2db66f34ade995d5852ad1a7af722bb2fb06166c2d8f26dab1e3a21f49eacbe2a9a4f88c057dd2d46670fd94af31d42620f59d787b2c9d259ba768905787c63eb45d779719be2e3af4e1366440541f40922bda7db2229eee9db759b2dda3c0a1edcc85741f23a2ab"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x9}}) 11:17:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200c3ffffff0006040000000000f93132", 0x39}], 0x1) 11:17:10 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x85}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) 11:17:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002003f0000000006040000000000f93132", 0x39}], 0x1) 11:17:10 executing program 0: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x1, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x2}, {0x2, 0x3, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0xff, 0x1}, {0x0, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1}, 0xfe}, {0x0, 0x2, {0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x4}, {0x2, 0x0, 0x1}, 0x0, 0xfe}], 0xa0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x1, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x2}, {0x2, 0x3, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0xff, 0x1}, {0x0, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1}, 0xfe}, {0x0, 0x2, {0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x4}, {0x2, 0x0, 0x1}, 0x0, 0xfe}], 0xa0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1193.546193][ T4431] usb 6-1: USB disconnect, device number 8 [ 1193.559618][ C0] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1193.578486][ T4431] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1193.646199][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1193.654486][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1193.686073][ T3851] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1193.714968][ T6000] Bluetooth: hci7: Frame reassembly failed (-84) [ 1193.731064][ T6000] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200480000000006040000000000f93132", 0x39}], 0x1) 11:17:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fcffffff0006040000000000f93132", 0x39}], 0x1) [ 1193.756036][T29048] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:10 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x85}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x9) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) 11:17:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002004c0000000006040000000000f93132", 0x39}], 0x1) 11:17:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fdffffff0006040000000000f93132", 0x39}], 0x1) [ 1193.941901][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1193.949788][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:10 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x85}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x9) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) [ 1194.034786][T29063] validate_nla: 14 callbacks suppressed [ 1194.034807][T29063] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1194.083672][T29064] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1194.112124][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1194.121390][ T4431] usb 6-1: new high-speed USB device number 9 using dummy_hcd 11:17:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200feffffff0006040000000000f93132", 0x39}], 0x1) [ 1194.132396][T29068] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1194.153339][T29063] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1194.209467][T29070] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1194.236896][T29070] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1194.359565][ T4431] usb 6-1: Using ep0 maxpacket: 8 [ 1194.479592][ T5699] Bluetooth: hci4: command 0x0406 tx timeout [ 1194.479715][ T4431] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1194.504822][ T4431] usb 6-1: config 0 has no interface number 0 [ 1194.516563][ T4431] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1194.538601][ T4431] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1194.559691][ T4431] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1194.569911][ T4431] usb 6-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1194.583219][ T4431] usb 6-1: config 0 interface 65 has no altsetting 0 [ 1194.590103][ T4431] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1194.599259][ T4431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.626306][ T4431] usb 6-1: config 0 descriptor?? [ 1194.683764][ T4431] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input23 [ 1195.669669][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1196.159534][ T5699] Bluetooth: hci6: command 0x1003 tx timeout [ 1196.166212][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:13 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904414017ff5d010009050f1f010000000009058303"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x1, 0x1b, {0x1b, 0xe, "7e1f7aee9da97436a564e364a44a06d833b05b51b7da89196c"}}, &(0x7f0000000080)={0x0, 0x3, 0x10, @string={0x10, 0x3, "330988c33d2878787c2df79a228e"}}, &(0x7f00000000c0)={0x0, 0xf, 0xc5, {0x5, 0xf, 0xc5, 0x2, [@generic={0xb5, 0x10, 0xa, "7cf29e79a76034fec0b52a69ad9f1c05175a7d2a0e0bb512587179913b7e4434cb3291c962804d815d2fc92ec3104dbcb384cf9a6dc2534d2cae2b76048ca96e1a20ed4dfe8ad9e0966a808cdde18928da96a0bd03ab65c6ef2fb700abd901232fbec5e6031e79328a479dd028402e0ee8c8557121c082bbd9ecfa03ac1d40139f09749f33283c8ffa9ff6ecf4cb14f9221e42523bfa0813734a6171e1e4cf97a47dc9db62410d98cbc9555697c3d37ef4da"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x4, 0x5, 0x5, 0x4}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x93, 0x40, 'Nu\a2', "bc743375"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x5, 0x5, 0xf6, 0xb50e, 0x9}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x0, 0x10, 0xc0, "f94856bdd127962519e34d798be4e296d41b4e484b3f5a78b4454b59331a9793590f8bfbc033a938feb2e4d775cbff8cbb6615e2fd4c2e718eb497400e58867eb3fd0b1db1a9acadd23c75cbc381860d6503d39c9529945f680fff64ed2c8e4c31a966c29a9b673b52461a055288148111909b2182e8f734c9f4b983041083ba7386fde31f88d1222fca1b3ecc8f9bb8d0bb97ebdbfcc7ee2cea1c3955550f1ab15377d4b2e02cb9b34f9e487b8f672fb0920f23177dc02402b9766eb5201f54"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f0000000800)=ANY=[@ANYBLOB="2000080000000001400052d30297a02dbec8872a0f00000061e41c60c3da70eb5461ca1444a6ecef64d59727b5dc11abbaae9a8b8294896810648f2b3ae72b167141fd554ae98db38430cb5f575870b5cbb3e9bdc7fc0e84f79270c6116cc8fbb535263fd6120beb70318c0375d538531d9419a5ce8766d84ded13d6887dfb31ed4afc92769ed749ed213278cdf02e5bf90501abc730db330e50c0ace3d8d6f4633e52ef2e9b57ed2109c20d6ab5f017b3988df8725b4ffeeb241522f267da57ccd4432209f6357f628ffbc01adc7fb2cb6833293e40e28496cd551fd66292113bf667d7deb4"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000500)={0x40, 0xb, 0x2, "a644"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, "e40b"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000900)={0x0, 0x9, 0xc0, {0xc0, 0x31, "293345f04c31b8c0c4a6a5a352e9368f6ebd0eeb2afdf9efbe233d5c26090f43c83d0a525271d12b34b275cac1129beb4d9e5571a9af6d7cdce025e18b255154cb7990fc25dfec1e04dcfcd06f25d80c9ebc0effce8051200c9980b8c61aff101facd32a0025cc917820ce6e7ebb75038aad932beca023818471f5ff96bf845bba71fdb1cc839fdba2aae6834ac7d835ff2ec0e63190f7f8da41f5a9ec27e7361ff1f9b5c76670402cf30ea4f2ba4134a9a99ab7a910b2e6e14ce10aade6"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000000a00)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x0, "47c69ceb"}, @global=@item_012={0x0, 0x1, 0x7}, @main, @main=@item_4={0x3, 0x0, 0xa, "f4d85386"}, @main=@item_012={0x2, 0x0, 0xc, "69c3"}, @main=@item_4={0x3, 0x0, 0xb, "7c83b267"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x2, 0x1, {0x22, 0x10}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x40, 0xe, 0x30, "92d30be4a1b3f6f679f2f49353b83b7a57fb2877aecc08fcbf679f36ce09a7b31a6f3cbbe76317c825885124f5ee3fc0"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000b80)={0x20, 0x1, 0x83, "ad6d7e9c1889f46ffc740e9e3f44ccb981dcf56696349886ae445c2db66f34ade995d5852ad1a7af722bb2fb06166c2d8f26dab1e3a21f49eacbe2a9a4f88c057dd2d46670fd94af31d42620f59d787b2c9d259ba768905787c63eb45d779719be2e3af4e1366440541f40922bda7db2229eee9db759b2dda3c0a1edcc85741f23a2ab"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x9}}) 11:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000265580000000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000200000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 0: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x3, 0x1, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x2}, {0x2, 0x3, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0xff, 0x1}, {0x0, 0x0, {0x2, 0xff, 0x1}, {0x0, 0x1}, 0xfe}, {0x0, 0x2, {0x0, 0x1}, {0x0, 0x1, 0x2}, 0xfe, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x4}, {0x2, 0x0, 0x1}, 0x0, 0xfe}], 0xa0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x24880, 0x0) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x101100, 0x102) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x2) r3 = open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x1000) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @empty, 0xfffffffb}, 0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1196.651926][ T8383] usb 6-1: USB disconnect, device number 9 [ 1196.659436][ C0] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1196.690612][ T8383] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1196.710352][T29077] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1196.725831][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1196.734353][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1196.758957][ T3851] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1196.776470][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x751080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x1000, 0x4, 0x9, 0x7f, "f62187775d9ff56ede5da10b2ac15a2a1209de", 0x8, 0x8}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8103, 0x2811fe03) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xc9) [ 1196.862191][T29078] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1196.897163][T29086] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200600000000006040000000000f93132", 0x39}], 0x1) [ 1196.932151][T29087] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000300000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000258650000000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200680000000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000400000006040000000000f93132", 0x39}], 0x1) 11:17:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x751080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x1000, 0x4, 0x9, 0x7f, "f62187775d9ff56ede5da10b2ac15a2a1209de", 0x8, 0x8}) (async) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8103, 0x2811fe03) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xc9) [ 1197.177148][ T8383] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1197.449651][ T8383] usb 6-1: Using ep0 maxpacket: 8 [ 1197.569764][ T8383] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1197.600962][ T8383] usb 6-1: config 0 has no interface number 0 [ 1197.617737][ T8383] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1197.631313][ T8383] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1197.649489][ T8383] usb 6-1: config 0 interface 65 altsetting 64 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1197.669198][ T8383] usb 6-1: config 0 interface 65 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1197.689516][ T8383] usb 6-1: config 0 interface 65 has no altsetting 0 [ 1197.706116][ T8383] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1197.719015][ T8383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.734846][ T8383] usb 6-1: config 0 descriptor?? [ 1197.804969][ T8383] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input24 [ 1198.791619][T21704] Bluetooth: hci7: command 0x1003 tx timeout [ 1198.802133][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x0, 0x0, 0x9}, 0x48) 11:17:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002006c0000000006040000000000f93132", 0x39}], 0x1) 11:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000500000006040000000000f93132", 0x39}], 0x1) 11:17:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x751080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x2, 0x1000, 0x4, 0x9, 0x7f, "f62187775d9ff56ede5da10b2ac15a2a1209de", 0x8, 0x8}) (async) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8103, 0x2811fe03) (async) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xc9) 11:17:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x24880, 0x0) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x101100, 0x102) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x2) (async) r3 = open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x1000) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @empty, 0xfffffffb}, 0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1199.777830][ T4431] usb 6-1: USB disconnect, device number 10 [ 1199.789449][ C1] xpad 6-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1199.797689][ T4431] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1199.828234][T29111] validate_nla: 10 callbacks suppressed [ 1199.828252][T29111] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:16 executing program 5: r0 = open(&(0x7f0000000200)='./bus\x00', 0x602c2, 0x0) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x8000, 0xa0de) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x101, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x20000000, 0xff01}) socket(0x0, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x0, @inherit={0x88, &(0x7f0000001400)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYBLOB]}, @devid}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x88c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20048014) [ 1199.937504][T29110] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1199.983889][T29119] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1200.015653][T29120] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000600000006040000000000f93132", 0x39}], 0x1) 11:17:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020c6d0000000006040000000000f93132", 0x39}], 0x1) [ 1200.167351][T29127] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1200.214384][T29127] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @dev}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f00000004c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000009000000000100000006000200080000"], 0x60}}, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0xc, r6}, 0x14) 11:17:16 executing program 5: unshare(0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x20, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x8000002}, 0x1c) r3 = socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f", 0xb0, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 11:17:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000700000006040000000000f93132", 0x39}], 0x1) [ 1200.257489][T29129] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1200.376767][T29135] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200740000000006040000000000f93132", 0x39}], 0x1) [ 1200.429771][T29138] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1200.494453][T29142] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1200.531345][ T6000] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 11:17:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e"], 0x3c}}, 0x0) [ 1200.543781][ T6000] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000800000006040000000000f93132", 0x39}], 0x1) 11:17:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002007a0000000006040000000000f93132", 0x39}], 0x1) 11:17:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='hrtimer_init\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1200.643349][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1201.909478][ T4431] Bluetooth: hci6: command 0x1003 tx timeout [ 1201.922117][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x24880, 0x0) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x101100, 0x102) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x2) (async) r3 = open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x1000) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @empty, 0xfffffffb}, 0x1c) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000900000006040000000000f93132", 0x39}], 0x1) 11:17:18 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\f', 0x1, r0) keyctl$clear(0x7, r0) 11:17:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fe800000000006040000000000f93132", 0x39}], 0x1) [ 1202.084209][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1202.092447][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @dev}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f00000004c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000009000000000100000006000200080000"], 0x60}}, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0xc, r6}, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @dev}, 0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r5, &(0x7f00000004c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000009000000000100000006000200080000"], 0x60}}, 0x0) (async) bind$packet(r3, &(0x7f0000000140)={0x11, 0xc, r6}, 0x14) (async) 11:17:19 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) creat(&(0x7f0000001600)='./file0\x00', 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 11:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200810000000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000a00000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) [ 1202.549562][ T5699] Bluetooth: hci7: command 0x1003 tx timeout [ 1202.549688][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:19 executing program 5: r0 = socket(0x2, 0x3, 0x8) connect(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80) 11:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00021e930000000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000c00000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) 11:17:19 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) [ 1202.774561][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1202.782154][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1202.790409][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1202.811844][T29185] ptm ptm1: ldisc open failed (-12), clearing slot 1 11:17:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)={0x10}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000180)=0xc4ab) 11:17:19 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) 11:17:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @dev}, 0x10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 32) r5 = socket(0x11, 0x800000003, 0x0) (rerun: 32) bind(r5, &(0x7f00000004c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async, rerun: 32) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000009000000000100000006000200080000"], 0x60}}, 0x0) bind$packet(r3, &(0x7f0000000140)={0x11, 0xc, r6}, 0x14) 11:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fec00000000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000e00000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 5: pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)={0x3b1d}, &(0x7f0000000780)={0x0, 0x3938700}, 0x0) 11:17:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ce0000000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x2, &(0x7f0000000800)=@raw=[@map_idx_val], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x8, 0x3}, 0x8, 0x10, 0x0}, 0x80) 11:17:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000f00000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000240)) 11:17:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fc0000000006040000000000f93132", 0x39}], 0x1) 11:17:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x5, 0x10, "9562de0fe477280b"}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x420080, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:19 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x6, 0x0, 0x0) 11:17:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001000000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fd0000000006040000000000f93132", 0x39}], 0x1) [ 1203.448388][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1203.455968][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x5, 0x10, "9562de0fe477280b"}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x5, 0x10, "9562de0fe477280b"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = dup3(r0, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x40) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r2, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) dup3(r0, r2, 0x0) [ 1203.550431][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1203.558361][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:20 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5193eb3577255a5b", "f7fbfb23d936e8c52f5bfa30b3d3ae333600534a2829c824c94977cb2ca11a22"}) [ 1203.636436][ T3851] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1203.665888][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000280fe0000000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x5, 0x10, "9562de0fe477280b"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001600000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)={0x18, r1, 0x1b, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x18}}, 0x0) 11:17:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002c0fe0000000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5452, &(0x7f0000000240)={0x8dd6, 0x0, 'client0\x00', 0x0, "5193eb3577255a5b", "f7fbfb23d936e8c52f5bfa30b3d3ae333600534a2829c824c94977cb2ca11a22"}) 11:17:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001700000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) 11:17:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ff0000000006040000000000f93132", 0x39}], 0x1) 11:17:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001800000006040000000000f93132", 0x39}], 0x1) 11:17:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = dup3(r0, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x40) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r2 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r2, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) dup3(r0, r2, 0x0) 11:17:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020400ad00000006040000000000f93132", 0x39}], 0x1) [ 1205.669567][T21709] Bluetooth: hci7: command 0x1003 tx timeout [ 1205.682228][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:22 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x38) [ 1205.751785][T29295] validate_nla: 44 callbacks suppressed [ 1205.751804][T29295] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1205.829845][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1205.840530][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1205.863859][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x200000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001e00000006040000000000f93132", 0x39}], 0x1) 11:17:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) [ 1205.883731][ T7260] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1205.897155][T29299] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = dup3(r0, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x40) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r2 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r2, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) dup3(r0, r2, 0x0) 11:17:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8916, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x200000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1206.027294][T29304] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002ffffe000000006040000000000f93132", 0x39}], 0x1) [ 1206.116688][ T6000] Bluetooth: hci6: Frame reassembly failed (-84) [ 1206.130258][T29306] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1206.143917][ T6000] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1206.190854][T29316] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x200000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_pts(r0, 0x200000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:22 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xd6, &(0x7f0000000380)=""/214, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:17:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200002400000006040000000000f93132", 0x39}], 0x1) 11:17:22 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x20000400) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0) [ 1206.286091][T29317] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1206.320003][T29321] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000001000006040000000000f93132", 0x39}], 0x1) [ 1206.333853][T29326] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) dup2(r0, r0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{0x400, 0x9}, {0xffff, 0x9bd2}, {0x7ff}, {0x9, 0x6}, {0x3, 0x6}, {0x1f, 0x2}, {0x80, 0x2}, {0x1, 0x7}, {0x7, 0x100}]}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400882, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x30) [ 1206.401527][T29329] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:17:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006000000006040000000000f93132", 0x39}], 0x1) [ 1206.442712][T29332] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1206.495552][ T7260] Bluetooth: hci7: Frame reassembly failed (-84) [ 1206.554188][T29335] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b43, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1208.149681][ T8383] Bluetooth: hci6: command 0x1003 tx timeout [ 1208.155937][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1}}) 11:17:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000002000006040000000000f93132", 0x39}], 0x1) 11:17:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fc00000006040000000000f93132", 0x39}], 0x1) 11:17:24 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x21, 0x0, 0x0, &(0x7f0000000a40)) 11:17:25 executing program 5: eventfd2(0x0, 0x802) 11:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003000006040000000000f93132", 0x39}], 0x1) 11:17:25 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0xa0ac00, 0x0) 11:17:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fd00000006040000000000f93132", 0x39}], 0x1) 11:17:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) dup2(r0, r0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{0x400, 0x9}, {0xffff, 0x9bd2}, {0x7ff}, {0x9, 0x6}, {0x3, 0x6}, {0x1f, 0x2}, {0x80, 0x2}, {0x1, 0x7}, {0x7, 0x100}]}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400882, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VT_RELDISP(r0, 0x5605) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) (async) dup2(r0, r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{0x400, 0x9}, {0xffff, 0x9bd2}, {0x7ff}, {0x9, 0x6}, {0x3, 0x6}, {0x1f, 0x2}, {0x80, 0x2}, {0x1, 0x7}, {0x7, 0x100}]}) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000001c0)) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400882, 0x0) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1208.559725][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:25 executing program 5: syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001480)={[], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@audit}]}) [ 1208.666296][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1208.676458][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:17:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000004000006040000000000f93132", 0x39}], 0x1) [ 1208.806009][T29366] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1208.827323][T29368] qnx4: no qnx4 filesystem (no root dir). [ 1210.309528][T21709] Bluetooth: hci6: command 0x1003 tx timeout [ 1210.309723][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b43, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003000006040000000000f93132", 0x39}], 0x1) 11:17:26 executing program 5: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) 11:17:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) dup2(r0, r0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0xffffffff, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) (async) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{0x400, 0x9}, {0xffff, 0x9bd2}, {0x7ff}, {0x9, 0x6}, {0x3, 0x6}, {0x1f, 0x2}, {0x80, 0x2}, {0x1, 0x7}, {0x7, 0x100}]}) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400882, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000000c0)=0x30) 11:17:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ad0004000006040000000000f93132", 0x39}], 0x1) 11:17:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000002940)) 11:17:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000e803000006040000000000f93132", 0x39}], 0x1) [ 1210.445007][ T3851] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000005000006040000000000f93132", 0x39}], 0x1) [ 1210.527601][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1210.535967][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:17:27 executing program 5: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x8a) 11:17:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b43, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ee03000006040000000000f93132", 0x39}], 0x1) 11:17:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000006000006040000000000f93132", 0x39}], 0x1) 11:17:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xea) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r1) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_open_pts(r0, 0x40200) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x555141, 0x0) [ 1210.765732][T29409] validate_nla: 20 callbacks suppressed [ 1210.765751][T29409] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1210.840185][T29411] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1210.875863][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000007000006040000000000f93132", 0x39}], 0x1) [ 1210.885145][T29415] Bluetooth: hci7: Frame reassembly failed (-84) [ 1210.899013][T29412] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1210.919318][ T5325] Bluetooth: hci7: Frame reassembly failed (-84) [ 1210.921881][T29416] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000005000006040000000000f93132", 0x39}], 0x1) [ 1211.021759][T29419] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1211.064645][T29420] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1211.096975][T29419] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1211.131281][T29421] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8981, 0x0) 11:17:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000008000006040000000000f93132", 0x39}], 0x1) 11:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000006000006040000000000f93132", 0x39}], 0x1) [ 1212.469464][T21709] Bluetooth: hci6: command 0x1003 tx timeout [ 1212.469688][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}}, 0x0) [ 1212.521210][T29425] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:29 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000580)={0x1d11}) 11:17:29 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_folio_dirty\x00'}, 0x10) [ 1212.641520][T29428] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:29 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) 11:17:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000009000006040000000000f93132", 0x39}], 0x1) 11:17:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xea) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r1) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_open_pts(r0, 0x40200) (async, rerun: 64) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x555141, 0x0) (rerun: 64) 11:17:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000007000006040000000000f93132", 0x39}], 0x1) 11:17:29 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)) [ 1212.949586][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1212.958983][T21704] Bluetooth: hci7: command tx timeout [ 1213.129081][ T3851] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000a000006040000000000f93132", 0x39}], 0x1) 11:17:31 executing program 5: syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x4001) 11:17:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000009000006040000000000f93132", 0x39}], 0x1) [ 1214.549474][ T4431] Bluetooth: hci6: command 0x1003 tx timeout [ 1214.549799][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:31 executing program 5: syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="ae59cd760720955fedffb8ce8cf4bd644a4ebac268b925bbde3c86319a4bd5c05eea4347e54c93817ece49bb5eb417fc78b3e149b2b5788708fe07364ff0663de70a4eb62dee586d7162afb4f7a9abeef912dd0aaedc823f0049c13a12b4dc29d427421dc7a75b03ff480ebe2b95b3c6947b44d6a8d02568752825042a898505468056feb984d29c0d") 11:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c000006040000000000f93132", 0x39}], 0x1) 11:17:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000a000006040000000000f93132", 0x39}], 0x1) [ 1214.769270][ T5325] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000e000006040000000000f93132", 0x39}], 0x1) 11:17:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c000006040000000000f93132", 0x39}], 0x1) 11:17:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xea) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r1) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0) (async, rerun: 64) syz_open_pts(r0, 0x40200) (rerun: 64) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x555141, 0x0) 11:17:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000f000006040000000000f93132", 0x39}], 0x1) 11:17:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006d0c000006040000000000f93132", 0x39}], 0x1) [ 1215.189716][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1215.278252][T29480] Bluetooth: hci7: Frame reassembly failed (-84) [ 1215.321829][ T8200] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1215.350353][ T3851] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1215.362057][ T3851] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:33 executing program 5: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x7, 0xa83c}) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x1, 0x0, 0x0, 0x0, "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"}, 0x1010) syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x1, &(0x7f0000001440)=[{&(0x7f0000001380)='Z', 0x1, 0x401}], 0x0, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@measure}, {@audit}]}) 11:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000010000006040000000000f93132", 0x39}], 0x1) [ 1216.789749][T21704] Bluetooth: hci6: command 0x1003 tx timeout [ 1216.806252][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000e000006040000000000f93132", 0x39}], 0x1) [ 1216.859825][T29488] validate_nla: 22 callbacks suppressed [ 1216.859845][T29488] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1216.871384][T29486] loop5: detected capacity change from 0 to 128 [ 1216.895855][T29488] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000016000006040000000000f93132", 0x39}], 0x1) [ 1216.906912][T29490] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1216.919081][T29486] qnx4: no qnx4 filesystem (no root dir). [ 1216.944169][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1216.952399][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1216.999175][T29493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1217.008561][ T3851] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1217.038083][T29497] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 11:17:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000f000006040000000000f93132", 0x39}], 0x1) [ 1217.084816][T29495] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1217.104910][T29497] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1217.133047][T29503] must specify a size in bytes for the device 11:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000017000006040000000000f93132", 0x39}], 0x1) [ 1217.166018][T29505] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) [ 1217.273826][T29506] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1217.310483][T29508] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCNXCL(r1, 0x540d) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x5727b000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 11:17:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1217.331697][T29510] Bluetooth: hci6: Frame reassembly failed (-84) [ 1217.346399][ T8200] Bluetooth: hci6: Frame reassembly failed (-84) [ 1217.349950][T21709] Bluetooth: hci7: command 0x1003 tx timeout [ 1217.358842][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000016000006040000000000f93132", 0x39}], 0x1) [ 1217.476810][T29511] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1217.500356][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1217.508126][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1217.521200][ T3851] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:34 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 11:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000018000006040000000000f93132", 0x39}], 0x1) 11:17:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x5727b000) (async, rerun: 64) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) [ 1217.693118][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1217.711482][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:17:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000015c0), r0) 11:17:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000017000006040000000000f93132", 0x39}], 0x1) 11:17:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = syz_open_pts(r0, 0x80000) ioctl$TIOCNXCL(r1, 0x540d) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x5727b000) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) syz_open_pts(r0, 0x80000) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x5727b000) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) 11:17:34 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000180), 0xc) [ 1217.861211][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1217.871941][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1217.883403][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1217.894202][T29534] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001e000006040000000000f93132", 0x39}], 0x1) 11:17:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) 11:17:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000018000006040000000000f93132", 0x39}], 0x1) 11:17:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x2082) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000000)) 11:17:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001f000006040000000000f93132", 0x39}], 0x1) 11:17:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x1, 0xfffffc00, 0xf59, 0x0, "a82d8fb51d72b65f295ea77b6bc5a8c6ba7b93", 0x2, 0x56}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1219.349541][T21709] Bluetooth: hci6: command 0x1003 tx timeout [ 1219.360374][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:35 executing program 5: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x3d26a8e4e59e5632) 11:17:36 executing program 5: sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1219.459305][ T3851] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000020000006040000000000f93132", 0x39}], 0x1) 11:17:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001e000006040000000000f93132", 0x39}], 0x1) 11:17:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) (async) 11:17:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000024000006040000000000f93132", 0x39}], 0x1) 11:17:36 executing program 5: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)) 11:17:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001f000006040000000000f93132", 0x39}], 0x1) [ 1219.658520][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1219.660110][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1219.672877][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1219.697986][T29570] Bluetooth: hci7: Frame reassembly failed (-84) 11:17:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000003f000006040000000000f93132", 0x39}], 0x1) [ 1219.708327][T29571] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:17:36 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) write$vga_arbiter(r0, 0x0, 0x0) [ 1219.772554][ T2449] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1219.772912][T29570] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:36 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 11:17:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x1, 0xfffffc00, 0xf59, 0x0, "a82d8fb51d72b65f295ea77b6bc5a8c6ba7b93", 0x2, 0x56}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x893f, 0x7, 0x20, 0x340, 0x4, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000024000006040000000000f93132", 0x39}], 0x1) 11:17:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000048000006040000000000f93132", 0x39}], 0x1) 11:17:38 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x1}) [ 1221.509528][ T3680] Bluetooth: hci6: command 0x1003 tx timeout [ 1221.509705][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:38 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrusage(0x1, &(0x7f0000000000)) 11:17:38 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 11:17:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000003f000006040000000000f93132", 0x39}], 0x1) 11:17:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000004c000006040000000000f93132", 0x39}], 0x1) 11:17:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0x9e80083d}, 0x0) [ 1221.707189][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1221.714914][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1221.715950][ T7260] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006558000006040000000000f93132", 0x39}], 0x1) 11:17:38 executing program 5: syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_mount_image$qnx4(&(0x7f00000012c0), 0x0, 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000001340)='{', 0x1}], 0x0, &(0x7f0000001480)={[{'{%:'}]}) 11:17:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x1, 0xfffffc00, 0xf59, 0x0, "a82d8fb51d72b65f295ea77b6bc5a8c6ba7b93", 0x2, 0x56}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1221.897512][T29614] validate_nla: 30 callbacks suppressed [ 1221.897530][T29614] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1221.922725][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1221.930105][ T8200] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1221.937669][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1221.984755][T29617] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x893f, 0x7, 0x20, 0x340, 0x4, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x893f, 0x7, 0x20, 0x340, 0x4, 0x4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1223.671102][T21703] Bluetooth: hci6: command 0x1003 tx timeout [ 1223.677296][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 11:17:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000060000006040000000000f93132", 0x39}], 0x1) 11:17:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = io_uring_setup(0x6d60, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TCFLSH(r0, 0x540b, 0x2) [ 1223.747688][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1223.756822][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1223.757633][ T8200] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000060000006040000000000f93132", 0x39}], 0x1) [ 1223.795556][T29628] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:40 executing program 5: socket(0x28, 0x0, 0x2) [ 1223.841395][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1223.850138][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1223.873919][T29631] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = io_uring_setup(0x6d60, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) 11:17:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x893f, 0x7, 0x20, 0x340, 0x4, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}}, 0x0) [ 1224.000747][T29632] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:40 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x11) 11:17:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200005865000006040000000000f93132", 0x39}], 0x1) [ 1224.056395][T29633] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1224.087134][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) [ 1224.097914][T25278] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x4000003, 0x1ff, 0x91, 0x11, "67e0fe1c929c6ccfc16f708832cd848716343e"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200005865000006040000000000f93132", 0x39}], 0x1) [ 1224.174525][T29648] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:40 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x3f, "ffdbb221f22223dbf42f7f4a8e1c68c74aa2707c9ab7ec5c09819206c7873a29"}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x2082) read$midi(r1, &(0x7f0000000100)=""/188, 0xbc) [ 1224.231643][T29653] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x28}}, 0x0) 11:17:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000068000006040000000000f93132", 0x39}], 0x1) [ 1224.272333][T29654] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:40 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000a40)) [ 1224.332850][T29657] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000c6d000006040000000000f93132", 0x39}], 0x1) [ 1226.149834][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = io_uring_setup(0x6d60, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TCFLSH(r0, 0x540b, 0x2) 11:17:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000006c000006040000000000f93132", 0x39}], 0x1) 11:17:42 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) 11:17:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fe80000006040000000000f93132", 0x39}], 0x1) 11:17:42 executing program 5: syz_mount_image$qnx4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000001380)='Z', 0x1}], 0x0, 0x0) [ 1226.319769][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1226.323264][T21709] Bluetooth: hci7: command 0x1003 tx timeout [ 1226.359828][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1226.367784][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x4000003, 0x1ff, 0x91, 0x11, "67e0fe1c929c6ccfc16f708832cd848716343e"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x4000003, 0x1ff, 0x91, 0x11, "67e0fe1c929c6ccfc16f708832cd848716343e"}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000081000006040000000000f93132", 0x39}], 0x1) 11:17:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000c6d000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}], 0x8) [ 1226.528898][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1226.540361][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1226.556591][T29685] ptm ptm0: ldisc open failed (-12), clearing slot 0 11:17:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fec0000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000001780), 0x2, 0x20000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x3f71, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x7800, 0x9, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000e1607d2f08cd617fb4f685aab33a13fb7fc66f53f7a05585f3e8be247f4f316941b9b60c33b385ebc2e7f54bd11efe68e0f102c562586a0b330a18654cf22ed858566bba48dcc4c47410fdbbaa013a3e58545522387e6a9eb44346e508fe308c67cd25c928ffc7b80ef1d118a8703817435ad36415dfb80c129271cf8b719e6a9a64bb26bdb95f22e4271f0146383b1b10ab39147fa365f7faf206931142b9c091a7da0cfb99a9f5fb9a8ca24ba7cbd49fd0adf35eb8bc28a6592e1186c3cb1a000dc89c133fa1cd200000", @ANYRES32=r0, @ANYBLOB="00000073ece386d0fdb6c8e100000000002e2f66696c653000"]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20803, 0x6) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x0, &(0x7f00000017c0), &(0x7f0000001800)='syzkaller\x00', 0x3, 0x68, &(0x7f0000001840)=""/104, 0x100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x4, 0x800, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, r4, 0x1, 0x1]}, 0x80) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x80) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x490080) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3d4d36f78eec6a0d1550"]) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000000280)=""/4094, 0xffe}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001500)=""/130, 0x82}, {&(0x7f00000015c0)=""/3, 0x3}], 0x8}, 0x7fff}], 0x1, 0x2120, &(0x7f00000016c0)) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffff192c9681bad463fe254b00000000"]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000050601"], 0x20}}, 0x0) 11:17:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000074000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x4000003, 0x1ff, 0x91, 0x11, "67e0fe1c929c6ccfc16f708832cd848716343e"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1, 0x4000003, 0x1ff, 0x91, 0x11, "67e0fe1c929c6ccfc16f708832cd848716343e"}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1226.673470][T29697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 11:17:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14}, 0x14}, 0x300}, 0x0) [ 1226.734413][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1226.742621][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1226.755665][T29700] ptm ptm1: ldisc open failed (-12), clearing slot 1 11:17:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000001780), 0x2, 0x20000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x3f71, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x7800, 0x9, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000e1607d2f08cd617fb4f685aab33a13fb7fc66f53f7a05585f3e8be247f4f316941b9b60c33b385ebc2e7f54bd11efe68e0f102c562586a0b330a18654cf22ed858566bba48dcc4c47410fdbbaa013a3e58545522387e6a9eb44346e508fe308c67cd25c928ffc7b80ef1d118a8703817435ad36415dfb80c129271cf8b719e6a9a64bb26bdb95f22e4271f0146383b1b10ab39147fa365f7faf206931142b9c091a7da0cfb99a9f5fb9a8ca24ba7cbd49fd0adf35eb8bc28a6592e1186c3cb1a000dc89c133fa1cd200000", @ANYRES32=r0, @ANYBLOB="00000073ece386d0fdb6c8e100000000002e2f66696c653000"]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20803, 0x6) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x0, &(0x7f00000017c0), &(0x7f0000001800)='syzkaller\x00', 0x3, 0x68, &(0x7f0000001840)=""/104, 0x100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x4, 0x800, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, r4, 0x1, 0x1]}, 0x80) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x80) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x490080) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3d4d36f78eec6a0d1550"]) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000000280)=""/4094, 0xffe}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001500)=""/130, 0x82}, {&(0x7f00000015c0)=""/3, 0x3}], 0x8}, 0x7fff}], 0x1, 0x2120, &(0x7f00000016c0)) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffff192c9681bad463fe254b00000000"]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_dev$mouse(&(0x7f0000001780), 0x2, 0x20000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x3f71, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x7800, 0x9, 0x1}}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000e1607d2f08cd617fb4f685aab33a13fb7fc66f53f7a05585f3e8be247f4f316941b9b60c33b385ebc2e7f54bd11efe68e0f102c562586a0b330a18654cf22ed858566bba48dcc4c47410fdbbaa013a3e58545522387e6a9eb44346e508fe308c67cd25c928ffc7b80ef1d118a8703817435ad36415dfb80c129271cf8b719e6a9a64bb26bdb95f22e4271f0146383b1b10ab39147fa365f7faf206931142b9c091a7da0cfb99a9f5fb9a8ca24ba7cbd49fd0adf35eb8bc28a6592e1186c3cb1a000dc89c133fa1cd200000", @ANYRES32=r0, @ANYBLOB="00000073ece386d0fdb6c8e100000000002e2f66696c653000"]) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20803, 0x6) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x0, &(0x7f00000017c0), &(0x7f0000001800)='syzkaller\x00', 0x3, 0x68, &(0x7f0000001840)=""/104, 0x100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x4, 0x800, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, r4, 0x1, 0x1]}, 0x80) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r5, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x80) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x490080) (async) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3d4d36f78eec6a0d1550"]) (async) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000000280)=""/4094, 0xffe}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001500)=""/130, 0x82}, {&(0x7f00000015c0)=""/3, 0x3}], 0x8}, 0x7fff}], 0x1, 0x2120, &(0x7f00000016c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffff192c9681bad463fe254b00000000"]) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000003e8000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000007a000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vcan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) 11:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1226.920053][T29714] validate_nla: 16 callbacks suppressed [ 1226.920073][T29714] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1226.991279][T29713] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0xf0ff7f00000000}}, 0x0) [ 1227.044099][T29719] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1227.114715][ T27] audit: type=1804 audit(1659266263.667:242): pid=29726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir541171615/syzkaller.89j1IU/1195/file0" dev="sda1" ino=1169 res=1 errno=0 [ 1227.151048][T29722] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$mouse(&(0x7f0000001780), 0x2, 0x20000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x3f71, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x7800, 0x9, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000e1607d2f08cd617fb4f685aab33a13fb7fc66f53f7a05585f3e8be247f4f316941b9b60c33b385ebc2e7f54bd11efe68e0f102c562586a0b330a18654cf22ed858566bba48dcc4c47410fdbbaa013a3e58545522387e6a9eb44346e508fe308c67cd25c928ffc7b80ef1d118a8703817435ad36415dfb80c129271cf8b719e6a9a64bb26bdb95f22e4271f0146383b1b10ab39147fa365f7faf206931142b9c091a7da0cfb99a9f5fb9a8ca24ba7cbd49fd0adf35eb8bc28a6592e1186c3cb1a000dc89c133fa1cd200000", @ANYRES32=r0, @ANYBLOB="00000073ece386d0fdb6c8e100000000002e2f66696c653000"]) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20803, 0x6) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x0, &(0x7f00000017c0), &(0x7f0000001800)='syzkaller\x00', 0x3, 0x68, &(0x7f0000001840)=""/104, 0x100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x4, 0x800, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, r4, 0x1, 0x1]}, 0x80) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r5, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x80) r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x490080) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3d4d36f78eec6a0d1550"]) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000000280)=""/4094, 0xffe}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001500)=""/130, 0x82}, {&(0x7f00000015c0)=""/3, 0x3}], 0x8}, 0x7fff}], 0x1, 0x2120, &(0x7f00000016c0)) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffff192c9681bad463fe254b00000000"]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_dev$mouse(&(0x7f0000001780), 0x2, 0x20000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x2f, 0xff, 0x2, 0x3f71, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8000, 0x7800, 0x9, 0x1}}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000e1607d2f08cd617fb4f685aab33a13fb7fc66f53f7a05585f3e8be247f4f316941b9b60c33b385ebc2e7f54bd11efe68e0f102c562586a0b330a18654cf22ed858566bba48dcc4c47410fdbbaa013a3e58545522387e6a9eb44346e508fe308c67cd25c928ffc7b80ef1d118a8703817435ad36415dfb80c129271cf8b719e6a9a64bb26bdb95f22e4271f0146383b1b10ab39147fa365f7faf206931142b9c091a7da0cfb99a9f5fb9a8ca24ba7cbd49fd0adf35eb8bc28a6592e1186c3cb1a000dc89c133fa1cd200000", @ANYRES32=r0, @ANYBLOB="00000073ece386d0fdb6c8e100000000002e2f66696c653000"]) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20803, 0x6) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xc, 0x0, &(0x7f00000017c0), &(0x7f0000001800)='syzkaller\x00', 0x3, 0x68, &(0x7f0000001840)=""/104, 0x100, 0x2, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x4, 0x800, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, r4, 0x1, 0x1]}, 0x80) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r5, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001700)=0x80) (async) syz_open_dev$vcsu(&(0x7f0000000140), 0x81, 0x490080) (async) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000100)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="3d4d36f78eec6a0d1550"]) (async) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000000280)=""/4094, 0xffe}, {&(0x7f0000001280)=""/193, 0xc1}, {&(0x7f0000001380)=""/58, 0x3a}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001500)=""/130, 0x82}, {&(0x7f00000015c0)=""/3, 0x3}], 0x8}, 0x7fff}], 0x1, 0x2120, &(0x7f00000016c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000017c0)=ANY=[@ANYBLOB="ffffffff192c9681bad463fe254b00000000"]) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async, rerun: 64) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000003ee000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000100)=0x7ff, 0x4) 11:17:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000081000006040000000000f93132", 0x39}], 0x1) 11:17:43 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 11:17:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1227.337152][T29751] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1227.408983][T29752] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1227.457725][T29755] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x4}]}, 0x18}}, 0x0) 11:17:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002ffffa888000006040000000000f93132", 0x39}], 0x1) 11:17:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) syz_open_pts(r0, 0x300) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1227.512370][T29753] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x80000001, 0x8, 0x0, 0x9, 0x14, "108143600afae52bf951c68c038a17585a6b98"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x66) 11:17:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fc000006040000000000f93132", 0x39}], 0x1) [ 1227.637264][T29776] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x80000001, 0x8, 0x0, 0x9, 0x14, "108143600afae52bf951c68c038a17585a6b98"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x66) 11:17:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x80000001, 0x8, 0x0, 0x9, 0x14, "108143600afae52bf951c68c038a17585a6b98"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x66) [ 1227.884641][T29781] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fd000006040000000000f93132", 0x39}], 0x1) 11:17:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001e93000006040000000000f93132", 0x39}], 0x1) 11:17:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 11:17:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) syz_open_pts(r0, 0x300) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x19) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) (async) syz_open_pts(r0, 0x300) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:44 executing program 5: syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001480)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@audit}]}) 11:17:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000080fe000006040000000000f93132", 0x39}], 0x1) 11:17:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002ffffffc3000006040000000000f93132", 0x39}], 0x1) [ 1228.135890][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1228.143910][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1228.194854][T29809] loop5: detected capacity change from 0 to 128 [ 1228.203348][ T2449] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1228.223908][T29809] qnx4: no qnx4 filesystem (no root dir). [ 1228.253245][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) [ 1228.277457][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1228.292554][T29807] ptm ptm2: ldisc open failed (-12), clearing slot 2 11:17:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0xf00}}, 0x0) [ 1228.301165][T26186] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:17:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000c0fe000006040000000000f93132", 0x39}], 0x1) [ 1228.351852][T26186] Buffer I/O error on dev loop5, logical block 0, async page read [ 1228.385434][T26186] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:17:45 executing program 5: socket(0x1, 0x0, 0x400000) [ 1228.414795][T26186] Buffer I/O error on dev loop5, logical block 2, async page read [ 1228.449534][T26186] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:17:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000ce000006040000000000f93132", 0x39}], 0x1) [ 1228.480821][T26186] Buffer I/O error on dev loop5, logical block 3, async page read [ 1228.490623][T26186] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1228.500155][T26186] Buffer I/O error on dev loop5, logical block 4, async page read [ 1228.508593][T26186] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:17:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000ff000006040000000000f93132", 0x39}], 0x1) 11:17:45 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xf}]}]}}, &(0x7f0000000200)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 1228.557266][T26186] Buffer I/O error on dev loop5, logical block 5, async page read [ 1228.594965][T26186] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 11:17:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1228.617191][T26186] Buffer I/O error on dev loop5, logical block 6, async page read [ 1228.642153][T26186] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1228.683445][T26186] Buffer I/O error on dev loop5, logical block 7, async page read [ 1230.241667][ T8383] Bluetooth: hci7: command 0x1003 tx timeout [ 1230.247916][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:17:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x18) (async) syz_open_pts(r0, 0x300) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xc) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (rerun: 32) 11:17:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fc000006040000000000f93132", 0x39}], 0x1) 11:17:46 executing program 5: syz_mount_image$qnx4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:17:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000400ad0006040000000000f93132", 0x39}], 0x1) 11:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1230.382006][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1230.399345][T20010] Bluetooth: hci7: sending frame failed (-49) [ 1230.401487][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1230.408110][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:17:47 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_usbip_server_init(0x2) [ 1230.457265][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.493640][ T8861] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fffffffc000006040000000000f93132", 0x39}], 0x1) [ 1230.501319][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.508777][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.529630][T29857] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1230.536199][T29857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1230.549842][T29857] vhci_hcd vhci_hcd.0: Device attached 11:17:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000106040000000000f93132", 0x39}], 0x1) [ 1230.558157][T29855] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1230.588696][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.591929][T29858] vhci_hcd: connection closed [ 1230.595882][ T2449] vhci_hcd: stop threads [ 1230.605230][ T2449] vhci_hcd: release socket [ 1230.615138][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.635514][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.638883][ T2449] vhci_hcd: disconnect device 11:17:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fd000006040000000000f93132", 0x39}], 0x1) [ 1230.692087][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.759828][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.766626][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.787297][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:17:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2580, 0x10) 11:17:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000206040000000000f93132", 0x39}], 0x1) [ 1230.814427][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.822417][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fffffffd000006040000000000f93132", 0x39}], 0x1) [ 1230.860406][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.894859][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.919781][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.929911][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1230.950237][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1230.960056][T20010] Bluetooth: hci6: sending frame failed (-49) [ 1230.968031][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1230.973170][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1231.035267][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1231.078414][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1231.119916][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1231.170257][T29843] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1231.187877][ T6000] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1231.229506][ T6000] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x40, 0x1, 0x40, 0x7f5, 0x2, 0x6, 0x7, 0x29a, 0x40, 0x1a2, 0x1, 0x9, 0x38, 0x2, 0x7, 0x2, 0x1}, [{0x60000000, 0x37c, 0x96b, 0x5, 0x4, 0x9, 0x361f, 0x1}, {0x6474e551, 0x9, 0x2, 0x20, 0x5, 0x3f, 0x0, 0x3}], "a59a14733fec05ffa812370511e71fb68f8ad4a5351374845e3865b05ac85ce8c353b4d1986ae3af18ccb926f3c736598f22c88844011c5630120bddb5f33987afcda13a91777ac28c77d3875d055e8b988656bf08a88114df5f27fcc56b4f386df54a27b5e090a8d7ecb63237f3634f6073297607764832dbdd29d8825429096eee074beec6bd14e3cb29b5288732487afc76beabfc2a7f4d08dc9301f7364366f08102fe18bef3029963fef9afe42d5dceed3763a7a9766a15ff47cbbb19117c671ff3796cb574ced7e36a5b000ca3492531d5a9d7883c9ddaa075bd0d5c6672865360ba29a6c83c426462ace237c9a8e8ea208664540bfc4c72e54e8fa0aba308803cadce5b2805e29143032efb93354a4e2ffe0f8fb4feb1b20a2f2c9fc5798869416aa3748322722b47e5b9f3255fc780687aad609ed95d428bf2454e618d8fb498729eccc88113940d03278011c7a7872b2f703db4f2b82c09d974844debaf2b40de66e269ce70c949d86d13215bfda0b11ac2f5334c15004ca30741c9092af5517d88fb80265e35706948889e87b908b4df441873980ab4494f1575792553a27668a6ccae75ec2cd4d3bb2130352e88d2ced273e29e62c6bb57d69002373b918820004a5a8c7e9a0c08eace5f7248d30da089b048feace7be6404027a9f74e81b02dda8a4a8bd76211afe167b0ee2fe5478459a1db4153cfab7a7aebe4609cd2c8163851347528c6151b5d6a407a64dfdcfa835b574dee2a2b6d7977c051802d711102b89c9f1c46d5d480eac00cea9166d8c66494fa4e127388ccbc8d1b5b448002dfebc15c931ebd031760a8887ae0ed67b77f6f3e9be2106219826abdc1bc617346fe6c72abe3df0f92b13d7bf55615353ea41a2342123123455d67410cf391bfe720d00053bf413d960d1ebd2b33a5299de2c92313beb64a3cf376c29f49a2b5a07a5ea6b92114faea10e007b12ab1eeabaac0d9ce8f14023f38f257f553eb35e7b4ace5495feaeba26f07560b199fe68322638b6571d6131f33d4d7993c2d35d9e931328621046964c7c77163293182d5df6ad8551781951427c6c90e4fc6d37399db7181336a99cd50c8c344131d32bdaef29469a581d6bc6520b269ac76a841c048d58483ea2c37ae1a236edacaf9a4dc8636966817bb9ae8033542f643f1454a38bb3078d096f5674b1bcd63aad5439fb0887ae7f7b71dd191309c35cdc31a47dd9842dc24f02b4ce70fa0b19d6a7e86e987935ed6a90bea49b4101c004c7d60cb4cd7b06dd055ab49ef5794ae67c9c4b6a42912e3a623bee60a06b25d81f615f3f273e3e12e5b597dff354230a690efa5e17756b86d3fb8dbe2cbcf1110053891dd6e6c15e53454f8cc6307001a891c760cea03805f084301b6bb22e21fae858856e26c165ead07af7552d7306ecd0369dc871b126bc1072d0198c9b3ae5dbd2e2d95924333a8177abf562b2cfe019d7ff7dd46b0c3a9e0d471ebd61311e86666ec353a343ecca389bde333a511acd1ab17417ac42a53d19568a51f08a583ff685da8b81809135bd6332a9a8aada3209b8c8adbf35b82d9d7d7fe8589e3268804e95e900355115e4c06107920412e7195cbc27e399e77eb9e673d21d2a0130b25f5ce79235783dbf7345586f4c6a1025b195f4b393a8ce2c6a533d7977e539b1149b2e6260b06dc3750eaf41a150165549fe484560ab0b6173faba6c577a4fd5251c556664b2e7d34c138d0f44fc42f5bd3efaf8f6b42aba5f5c004c6f73b692cd9cc3b41266c17003cea505c800277b89c0598b6434223da4ebf058cd0e91bba22fdac05fc7ca11eee2c5aa85f491e86fcbca994826caa7f7013315114b2be72c957c8326332b146ef9b7bbc96345bf1cc6e0b5d5362917b22ea00697efade14213855d438e22b42f881e6a1de74eec7bd653a5d2c30ea24d482f16dfe377e921ccfe575b0bc4bad2beb0bc84782292c7e8ee076cfca4210b5a28711720177471a4fac9a613c921efd41f81b777c9941cc6de634be4f97013a3a99783a10d9cd8b823fe23ea1d80e9418eeaceb0e04239c31ba9d43eca80cd396a8b7245cef0da76c0984715797b5b7e13901340e8e84f5a0ac0f7235682154ed491d71a08f6c33945d7fe5069c9afd8a6e6c90bbe20d55fcafd174d5421116ef47e252a6066a2c8ff6c701acc0130f90efac1dc09efd3179b60945b54883daad4d6abd97dafbf568d29ed8d75566d287234bea3138cb6cdcd8273aa6346802128d9b6b2bcca2d4387469fa5b1206ddfa2a7f368254ba9b4c5ab195401f2cebb24584ff8ba31c5d4fb86e0543bba97b0fbfef7f8bb7767f6370b91fa190cd88f1fe1da0adf91561a8c31f336353fff3e95798ce53bc8e989513d6fe42c1fab41c4a9d9f66d4f6ea8485ff481a25ca3bc4b5371b6aac665867759b650879bffd1992d1d37302ed722c351fbe9228ae1d4cc6f9e595f2aac015a597fc6ce5fef2d9b3e9244f2474537ec403934e2cac86dbd20fce83fba8bb7edd980cd7cd31ded511dcc03bcd2bc03c22bad8411ca30c0af95ce3b7fa964eb0d60177b7b3ffbea66667411b12e0c297e00137b2fa19ccbba18d2edcf3beeb94e83de1747d5b36d74e1a77435e1287982e0e8341a66152526f0dadd2d468a86ceec7ac1e2550c5d3770b68424c77a83742573e465efd59366aa4de1e02afc906e43adaafb32bbcbc50c4923e0e80ce3795d3ebc0f8705904be9451fcafb5736d061681d4ee76ea0452c6939c67edc6ee695cc91995ba8c9abe19128e3e826c24d1b220223efa4d2d32b37e9a0cc9263ddd3647a0a5959af8e1da640c9f717c62a304d9f0a2ee50a46e48fb5ced0cfa7cb016d48e7be340eaf53b55cd80e0e239a382432a5f56d720441c20a851872afb510c39e4d6615abd720ceac45f696d8ad96697705df049b4c22db9d2b59202583557590f7d7be0f7b79a65cfa018816e9752369fd44ef705c9133dbe3927433914dd347e1f7ad59543eec66940a40f376992e3d562bd409a44b1b3b44d00e8af23e0647c2134e1b58f94cbf74f8df16e40881c86da399a96a1184cb909f8089b95bd12301685a2e0084b05caf96b5da65ec08a1038fa82d6a019b02e9f73fdf7d6f07193ebcc6104838958e857032a21a00e9cd846717cc21fbd94b59a8bd21482d6f5dbcbb9f9fd0cb23f36007c2ca6f6ecd7e86e3e87991682885d11f12a3f71e6782df0a6c7a84d2c9cb7eb75a21e53ae599679300f8b7894a23ab47b657838eb9c78e48b2b9c676f76cd0ea9fea096c614a394c37aed8f557fedb1d195a29a9808c02e7b4d00aea7c3ac7d85a7a7f021b44f0e6055a4d0dbe99a43f38755622aa0534c6b1ad91597a73966f4a620d121a501bfee4ff772041a938510e031e231e400886ec839f73879ae5a8bb1ceb09ba8287befeb481cd0bfded81225d16f783b069096e54c23dff53067f59cf0c977319f8b4d6cf0fa7f8e53dd70f37bb4e20230818b5cf1e44dfc948747e0dcbf731ea6f4a1afe80febdba5600f4a6c78ee54fbc59fb7d776fdcba7555392c65f6d76a90788765ac1aee04db6deb3b28ad2bdc058c733363d788f2812856e2045f3bb56a4dabb2a7ed0c8f495a2641b6b1cc7ef50f5cabda49b12d0cd1090372a691ddb6331a85e4fd609839634d7cbe6de66ca493fcc6cc7e3521f6f3e3438a77498abae7f1fab59aa04a0b9680257bec4b030225f4b4ae026996a8b362d2ad7b554ffba138b6ee5363ff8c091fff72d0b067b630aabc1f45cd869fcf29bb99879a231f0c2138a67b10b3f405ce3f71609ab15945cd792e282a05fe76970bd33a6181f45979cae5f619e3e57bb3ea1ce0df5510a60d2a0efc0d8df07ecb85d1e98c764fdc22591a3980239a57ff704cd23ff3fdbe6572f8ccbd32b33516d9af485652f25603668ffb3a6d59f6dff388361ad8d3eba687e95c779d9a90475127304f2e6caeb9dd35fed972e9c008d3520c797a72315ef3eb3d7b91007bfc41429f7e50e60ddc7ea7b3940ad6caf35130e1044e9956d3eb5008f1c0a0fb2ebceb8beb6d4f8d0c8d2ef40406400996da61f1fa2895276276cd7e651e0265b765606185b397021dac3df82615dd5e0ae6606742e497ae5afe2de6c034e92bf3286bd41beab3eede83b17744a8a4b929536519139c0ad3dd2b2322b5d78b4e7f4d418da48b975ea01a87ecc2cf4536ebee2e7d409548a6060a245f69af522fddc0fd3631fa53f4a5854b4fa646defe81e9a9ef2994fc3b60c1cca1d365cc5573ea7a0754c6b1fc73e74004caabb3d5932dd133f8c05b60abc6a48f4e40ecb3c5ec8bfb4f128ca9bab62ee141b575aac802a047545746217dd72214c822e767ced3cb83f6e9c58c30dff2a8f8d291f422c4cf27ee3ba9e28b53ee836e0a600ff65848084c94c720bb7f053f0ccc2e8b37566a1668f1f9c2c16f64b7e7852f97ec9b3a9da7647640d90a63d90eae7929a66e162ce07bc3f4aef7f5ee2632e6e6627c8cf245f917b2343ffc8d7ef99837a8b1965240c07db0b4ab02e7983a9b87fcb3caaea4ce84fcce92c6c36cc16e0c74fb398d91a7b08c134e1df0836a82a809996984cc3b37805cf45e885ff6b8712f5091ae9ee82afeb0c5ca18d6461508ba1b71431349a11e74063cdc54c76a9a94e54b15b8ad0b7f75a2106a09c9214ae1666732b5ed19d52b90bcbd7234bb9f9de2cc6a515fb99ad4c9b23c6e3233402f9aec2cbea333687a9710a337627ae6d81ba60a77f4a72aff28acb0daab07a8ced20c2579e192ad491b4e28f1c8003f027e8f62e01f7f6da7a5db7ddca65d75dd5e87b945d49fb3a0f66e3e29d146376a3fa7b4181996d434c447df6b0e2a766ae80e957cc7889f7355ab8af9fcfcda38935e9041de4fea9d8547ed4e1ef5c6f3943d82c08f4d893de3a006edd94432625ea4c5d63af5e6729b112be16f272672d45cbf4028a9ce395046430560c88d8e6a00ac6864ea927e89db1ebc4821ac9a9b24ad9852d60982623c0ec17aff3e5c1f3585df1e1d7f4a9728f2b4e016eae7d672efa1500cac99fd8fd2394f000c3810e3a7c8fd9320e04ff0266cc46399609b18fe64a5545f1f1f1858834d31b52ad88916c1bbde942a4739e40803b8edd15322fad029f01b12402d775b8d819ad59f0605e6d5413d73edaa9c68dd7bc62b8d7ade756dc93a23d6871d32525026787da6db118cf61d8ac30b37601039150b36c29d9ddda6c6b4266d40b1fd034c3a3a10fdd026aa14f361d91995590bf332809baa2408ff0b6aa3c453ba7caa2c1d5eaba673ba520ff9a29b878c1d7031cd9cfc4b294d7acff0d6751fda5b98ce9489003d3b041c58c62f3f6c75ec472b0a1a5c46a580161ed17b175917557fc95e30ee646d15028bb48449d5495d02fcf227ceda53641beb12105b95b322ed8ae62164039651dd1ffab6ed123cbcf709a5a294b0e3007ef0153ed74f1c253693eaf149b7e68fa30425ea37ef9e9956ebd09c1c9d5f62d9539a67248eac729e4cd31c68dba8dca866bd22aa37407dd862013cd2bbf3ffab6cce2faa1cd1247d19a8f8f8cb3e2e079d03d613f64f659380c064a9657e45f470b49b664399daf71130b1413a914508a5ef60d648ecb9a5d11f47608ade63d3f32f4189cae196980e71c1e37cc9a476a6b14520a1f917f2888aa518f07b136df20668e1c558d355db7075511465bf22ae9338b6e02d04d102b7a21e7d04c4a38fae71b9386972c67fbf68aa9d24f56bb4a3186865780c1c735d9bb2aef4bb9f40", ['\x00', '\x00', '\x00', '\x00']}, 0x14b0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0xf4b77000) 11:17:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000080fe000006040000000000f93132", 0x39}], 0x1) 11:17:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000306040000000000f93132", 0x39}], 0x1) 11:17:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x18, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x18}}, 0x0) 11:17:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2580, 0x10) 11:17:47 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x20, 0x82082) write$midi(r0, &(0x7f00000000c0)="9c", 0x19c000) 11:17:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000406040000000000f93132", 0x39}], 0x1) 11:17:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000c0fe000006040000000000f93132", 0x39}], 0x1) 11:17:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fffffffe000006040000000000f93132", 0x39}], 0x1) 11:17:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x40, 0x1, 0x40, 0x7f5, 0x2, 0x6, 0x7, 0x29a, 0x40, 0x1a2, 0x1, 0x9, 0x38, 0x2, 0x7, 0x2, 0x1}, [{0x60000000, 0x37c, 0x96b, 0x5, 0x4, 0x9, 0x361f, 0x1}, {0x6474e551, 0x9, 0x2, 0x20, 0x5, 0x3f, 0x0, 0x3}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x14b0) (async) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0xf4b77000) [ 1231.442116][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:48 executing program 5: syz_mount_image$qnx4(&(0x7f00000012c0), 0x0, 0x10000, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001480)={[], [{@permit_directio}]}) 11:17:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000ff000006040000000000f93132", 0x39}], 0x1) 11:17:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x40, 0x1, 0x40, 0x7f5, 0x2, 0x6, 0x7, 0x29a, 0x40, 0x1a2, 0x1, 0x9, 0x38, 0x2, 0x7, 0x2, 0x1}, [{0x60000000, 0x37c, 0x96b, 0x5, 0x4, 0x9, 0x361f, 0x1}, {0x6474e551, 0x9, 0x2, 0x20, 0x5, 0x3f, 0x0, 0x3}], "a59a14733fec05ffa812370511e71fb68f8ad4a5351374845e3865b05ac85ce8c353b4d1986ae3af18ccb926f3c736598f22c88844011c5630120bddb5f33987afcda13a91777ac28c77d3875d055e8b988656bf08a88114df5f27fcc56b4f386df54a27b5e090a8d7ecb63237f3634f6073297607764832dbdd29d8825429096eee074beec6bd14e3cb29b5288732487afc76beabfc2a7f4d08dc9301f7364366f08102fe18bef3029963fef9afe42d5dceed3763a7a9766a15ff47cbbb19117c671ff3796cb574ced7e36a5b000ca3492531d5a9d7883c9ddaa075bd0d5c6672865360ba29a6c83c426462ace237c9a8e8ea208664540bfc4c72e54e8fa0aba308803cadce5b2805e29143032efb93354a4e2ffe0f8fb4feb1b20a2f2c9fc5798869416aa3748322722b47e5b9f3255fc780687aad609ed95d428bf2454e618d8fb498729eccc88113940d03278011c7a7872b2f703db4f2b82c09d974844debaf2b40de66e269ce70c949d86d13215bfda0b11ac2f5334c15004ca30741c9092af5517d88fb80265e35706948889e87b908b4df441873980ab4494f1575792553a27668a6ccae75ec2cd4d3bb2130352e88d2ced273e29e62c6bb57d69002373b918820004a5a8c7e9a0c08eace5f7248d30da089b048feace7be6404027a9f74e81b02dda8a4a8bd76211afe167b0ee2fe5478459a1db4153cfab7a7aebe4609cd2c8163851347528c6151b5d6a407a64dfdcfa835b574dee2a2b6d7977c051802d711102b89c9f1c46d5d480eac00cea9166d8c66494fa4e127388ccbc8d1b5b448002dfebc15c931ebd031760a8887ae0ed67b77f6f3e9be2106219826abdc1bc617346fe6c72abe3df0f92b13d7bf55615353ea41a2342123123455d67410cf391bfe720d00053bf413d960d1ebd2b33a5299de2c92313beb64a3cf376c29f49a2b5a07a5ea6b92114faea10e007b12ab1eeabaac0d9ce8f14023f38f257f553eb35e7b4ace5495feaeba26f07560b199fe68322638b6571d6131f33d4d7993c2d35d9e931328621046964c7c77163293182d5df6ad8551781951427c6c90e4fc6d37399db7181336a99cd50c8c344131d32bdaef29469a581d6bc6520b269ac76a841c048d58483ea2c37ae1a236edacaf9a4dc8636966817bb9ae8033542f643f1454a38bb3078d096f5674b1bcd63aad5439fb0887ae7f7b71dd191309c35cdc31a47dd9842dc24f02b4ce70fa0b19d6a7e86e987935ed6a90bea49b4101c004c7d60cb4cd7b06dd055ab49ef5794ae67c9c4b6a42912e3a623bee60a06b25d81f615f3f273e3e12e5b597dff354230a690efa5e17756b86d3fb8dbe2cbcf1110053891dd6e6c15e53454f8cc6307001a891c760cea03805f084301b6bb22e21fae858856e26c165ead07af7552d7306ecd0369dc871b126bc1072d0198c9b3ae5dbd2e2d95924333a8177abf562b2cfe019d7ff7dd46b0c3a9e0d471ebd61311e86666ec353a343ecca389bde333a511acd1ab17417ac42a53d19568a51f08a583ff685da8b81809135bd6332a9a8aada3209b8c8adbf35b82d9d7d7fe8589e3268804e95e900355115e4c06107920412e7195cbc27e399e77eb9e673d21d2a0130b25f5ce79235783dbf7345586f4c6a1025b195f4b393a8ce2c6a533d7977e539b1149b2e6260b06dc3750eaf41a150165549fe484560ab0b6173faba6c577a4fd5251c556664b2e7d34c138d0f44fc42f5bd3efaf8f6b42aba5f5c004c6f73b692cd9cc3b41266c17003cea505c800277b89c0598b6434223da4ebf058cd0e91bba22fdac05fc7ca11eee2c5aa85f491e86fcbca994826caa7f7013315114b2be72c957c8326332b146ef9b7bbc96345bf1cc6e0b5d5362917b22ea00697efade14213855d438e22b42f881e6a1de74eec7bd653a5d2c30ea24d482f16dfe377e921ccfe575b0bc4bad2beb0bc84782292c7e8ee076cfca4210b5a28711720177471a4fac9a613c921efd41f81b777c9941cc6de634be4f97013a3a99783a10d9cd8b823fe23ea1d80e9418eeaceb0e04239c31ba9d43eca80cd396a8b7245cef0da76c0984715797b5b7e13901340e8e84f5a0ac0f7235682154ed491d71a08f6c33945d7fe5069c9afd8a6e6c90bbe20d55fcafd174d5421116ef47e252a6066a2c8ff6c701acc0130f90efac1dc09efd3179b60945b54883daad4d6abd97dafbf568d29ed8d75566d287234bea3138cb6cdcd8273aa6346802128d9b6b2bcca2d4387469fa5b1206ddfa2a7f368254ba9b4c5ab195401f2cebb24584ff8ba31c5d4fb86e0543bba97b0fbfef7f8bb7767f6370b91fa190cd88f1fe1da0adf91561a8c31f336353fff3e95798ce53bc8e989513d6fe42c1fab41c4a9d9f66d4f6ea8485ff481a25ca3bc4b5371b6aac665867759b650879bffd1992d1d37302ed722c351fbe9228ae1d4cc6f9e595f2aac015a597fc6ce5fef2d9b3e9244f2474537ec403934e2cac86dbd20fce83fba8bb7edd980cd7cd31ded511dcc03bcd2bc03c22bad8411ca30c0af95ce3b7fa964eb0d60177b7b3ffbea66667411b12e0c297e00137b2fa19ccbba18d2edcf3beeb94e83de1747d5b36d74e1a77435e1287982e0e8341a66152526f0dadd2d468a86ceec7ac1e2550c5d3770b68424c77a83742573e465efd59366aa4de1e02afc906e43adaafb32bbcbc50c4923e0e80ce3795d3ebc0f8705904be9451fcafb5736d061681d4ee76ea0452c6939c67edc6ee695cc91995ba8c9abe19128e3e826c24d1b220223efa4d2d32b37e9a0cc9263ddd3647a0a5959af8e1da640c9f717c62a304d9f0a2ee50a46e48fb5ced0cfa7cb016d48e7be340eaf53b55cd80e0e239a382432a5f56d720441c20a851872afb510c39e4d6615abd720ceac45f696d8ad96697705df049b4c22db9d2b59202583557590f7d7be0f7b79a65cfa018816e9752369fd44ef705c9133dbe3927433914dd347e1f7ad59543eec66940a40f376992e3d562bd409a44b1b3b44d00e8af23e0647c2134e1b58f94cbf74f8df16e40881c86da399a96a1184cb909f8089b95bd12301685a2e0084b05caf96b5da65ec08a1038fa82d6a019b02e9f73fdf7d6f07193ebcc6104838958e857032a21a00e9cd846717cc21fbd94b59a8bd21482d6f5dbcbb9f9fd0cb23f36007c2ca6f6ecd7e86e3e87991682885d11f12a3f71e6782df0a6c7a84d2c9cb7eb75a21e53ae599679300f8b7894a23ab47b657838eb9c78e48b2b9c676f76cd0ea9fea096c614a394c37aed8f557fedb1d195a29a9808c02e7b4d00aea7c3ac7d85a7a7f021b44f0e6055a4d0dbe99a43f38755622aa0534c6b1ad91597a73966f4a620d121a501bfee4ff772041a938510e031e231e400886ec839f73879ae5a8bb1ceb09ba8287befeb481cd0bfded81225d16f783b069096e54c23dff53067f59cf0c977319f8b4d6cf0fa7f8e53dd70f37bb4e20230818b5cf1e44dfc948747e0dcbf731ea6f4a1afe80febdba5600f4a6c78ee54fbc59fb7d776fdcba7555392c65f6d76a90788765ac1aee04db6deb3b28ad2bdc058c733363d788f2812856e2045f3bb56a4dabb2a7ed0c8f495a2641b6b1cc7ef50f5cabda49b12d0cd1090372a691ddb6331a85e4fd609839634d7cbe6de66ca493fcc6cc7e3521f6f3e3438a77498abae7f1fab59aa04a0b9680257bec4b030225f4b4ae026996a8b362d2ad7b554ffba138b6ee5363ff8c091fff72d0b067b630aabc1f45cd869fcf29bb99879a231f0c2138a67b10b3f405ce3f71609ab15945cd792e282a05fe76970bd33a6181f45979cae5f619e3e57bb3ea1ce0df5510a60d2a0efc0d8df07ecb85d1e98c764fdc22591a3980239a57ff704cd23ff3fdbe6572f8ccbd32b33516d9af485652f25603668ffb3a6d59f6dff388361ad8d3eba687e95c779d9a90475127304f2e6caeb9dd35fed972e9c008d3520c797a72315ef3eb3d7b91007bfc41429f7e50e60ddc7ea7b3940ad6caf35130e1044e9956d3eb5008f1c0a0fb2ebceb8beb6d4f8d0c8d2ef40406400996da61f1fa2895276276cd7e651e0265b765606185b397021dac3df82615dd5e0ae6606742e497ae5afe2de6c034e92bf3286bd41beab3eede83b17744a8a4b929536519139c0ad3dd2b2322b5d78b4e7f4d418da48b975ea01a87ecc2cf4536ebee2e7d409548a6060a245f69af522fddc0fd3631fa53f4a5854b4fa646defe81e9a9ef2994fc3b60c1cca1d365cc5573ea7a0754c6b1fc73e74004caabb3d5932dd133f8c05b60abc6a48f4e40ecb3c5ec8bfb4f128ca9bab62ee141b575aac802a047545746217dd72214c822e767ced3cb83f6e9c58c30dff2a8f8d291f422c4cf27ee3ba9e28b53ee836e0a600ff65848084c94c720bb7f053f0ccc2e8b37566a1668f1f9c2c16f64b7e7852f97ec9b3a9da7647640d90a63d90eae7929a66e162ce07bc3f4aef7f5ee2632e6e6627c8cf245f917b2343ffc8d7ef99837a8b1965240c07db0b4ab02e7983a9b87fcb3caaea4ce84fcce92c6c36cc16e0c74fb398d91a7b08c134e1df0836a82a809996984cc3b37805cf45e885ff6b8712f5091ae9ee82afeb0c5ca18d6461508ba1b71431349a11e74063cdc54c76a9a94e54b15b8ad0b7f75a2106a09c9214ae1666732b5ed19d52b90bcbd7234bb9f9de2cc6a515fb99ad4c9b23c6e3233402f9aec2cbea333687a9710a337627ae6d81ba60a77f4a72aff28acb0daab07a8ced20c2579e192ad491b4e28f1c8003f027e8f62e01f7f6da7a5db7ddca65d75dd5e87b945d49fb3a0f66e3e29d146376a3fa7b4181996d434c447df6b0e2a766ae80e957cc7889f7355ab8af9fcfcda38935e9041de4fea9d8547ed4e1ef5c6f3943d82c08f4d893de3a006edd94432625ea4c5d63af5e6729b112be16f272672d45cbf4028a9ce395046430560c88d8e6a00ac6864ea927e89db1ebc4821ac9a9b24ad9852d60982623c0ec17aff3e5c1f3585df1e1d7f4a9728f2b4e016eae7d672efa1500cac99fd8fd2394f000c3810e3a7c8fd9320e04ff0266cc46399609b18fe64a5545f1f1f1858834d31b52ad88916c1bbde942a4739e40803b8edd15322fad029f01b12402d775b8d819ad59f0605e6d5413d73edaa9c68dd7bc62b8d7ade756dc93a23d6871d32525026787da6db118cf61d8ac30b37601039150b36c29d9ddda6c6b4266d40b1fd034c3a3a10fdd026aa14f361d91995590bf332809baa2408ff0b6aa3c453ba7caa2c1d5eaba673ba520ff9a29b878c1d7031cd9cfc4b294d7acff0d6751fda5b98ce9489003d3b041c58c62f3f6c75ec472b0a1a5c46a580161ed17b175917557fc95e30ee646d15028bb48449d5495d02fcf227ceda53641beb12105b95b322ed8ae62164039651dd1ffab6ed123cbcf709a5a294b0e3007ef0153ed74f1c253693eaf149b7e68fa30425ea37ef9e9956ebd09c1c9d5f62d9539a67248eac729e4cd31c68dba8dca866bd22aa37407dd862013cd2bbf3ffab6cce2faa1cd1247d19a8f8f8cb3e2e079d03d613f64f659380c064a9657e45f470b49b664399daf71130b1413a914508a5ef60d648ecb9a5d11f47608ade63d3f32f4189cae196980e71c1e37cc9a476a6b14520a1f917f2888aa518f07b136df20668e1c558d355db7075511465bf22ae9338b6e02d04d102b7a21e7d04c4a38fae71b9386972c67fbf68aa9d24f56bb4a3186865780c1c735d9bb2aef4bb9f40", ['\x00', '\x00', '\x00', '\x00']}, 0x14b0) (async) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0xf4b77000) 11:17:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000ad000406040000000000f93132", 0x39}], 0x1) [ 1231.675921][T29911] loop5: detected capacity change from 0 to 128 11:17:48 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000040)={'veth0_vlan\x00'}) 11:17:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000506040000000000f93132", 0x39}], 0x1) [ 1231.938815][T29926] validate_nla: 45 callbacks suppressed [ 1231.938835][T29926] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2580, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2580, 0x10) (async) 11:17:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000288a8ffff000006040000000000f93132", 0x39}], 0x1) 11:17:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 11:17:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000606040000000000f93132", 0x39}], 0x1) [ 1233.509654][T21709] Bluetooth: hci6: command 0x1003 tx timeout [ 1233.515840][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:17:50 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000002c0), 0x4) [ 1233.601652][T29934] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1233.630618][ T2449] Bluetooth: hci6: Frame reassembly failed (-84) [ 1233.728597][T29932] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1233.758397][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000408010200000000000000000200000824000480080001408000000008000140000000090800014000000005080001400001080006"], 0x40}}, 0x0) [ 1233.784487][T29937] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1233.806608][T29940] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1233.824280][T29938] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200e0ffff000006040000000000f93132", 0x39}], 0x1) 11:17:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000706040000000000f93132", 0x39}], 0x1) 11:17:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1233.897791][T29948] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:17:50 executing program 5: socket(0x11, 0x3, 0x200) [ 1233.969025][T29950] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1233.983678][T29951] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00027fffffff000006040000000000f93132", 0x39}], 0x1) [ 1234.089144][T29954] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1234.141361][T29958] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1235.669517][ T4431] Bluetooth: hci6: command 0x1003 tx timeout [ 1235.675778][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1235.749747][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1235.760437][ T5699] Bluetooth: hci7: command tx timeout 11:17:52 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x3f, "ffdbb221f22223dbf42f7f4a8e1c68c74aa2707c9ab7ec5c09819206c7873a29"}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x2082) read$midi(r1, &(0x7f0000000100)=""/188, 0xbc) 11:17:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) 11:17:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:17:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 11:17:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002c3ffffff000006040000000000f93132", 0x39}], 0x1) 11:17:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000806040000000000f93132", 0x39}], 0x1) [ 1235.929138][ T2449] Bluetooth: hci6: Frame reassembly failed (-84) [ 1235.951041][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 11:17:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00'}) [ 1235.985005][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) [ 1236.014337][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:17:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fcffffff000006040000000000f93132", 0x39}], 0x1) 11:17:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000906040000000000f93132", 0x39}], 0x1) 11:17:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x8, 0x5}, 0x14}}, 0x0) 11:17:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fdffffff000006040000000000f93132", 0x39}], 0x1) 11:17:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000a06040000000000f93132", 0x39}], 0x1) 11:17:52 executing program 5: socket(0xa, 0x2, 0x8) 11:17:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 1237.989606][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1237.989700][ T3680] Bluetooth: hci7: command 0x1003 tx timeout [ 1237.990201][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1237.999182][T21709] Bluetooth: hci6: command tx timeout 11:17:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:17:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002feffffff000006040000000000f93132", 0x39}], 0x1) 11:17:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000c06040000000000f93132", 0x39}], 0x1) 11:17:54 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x8912, 0x0) 11:17:54 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) [ 1238.090741][T30000] validate_nla: 13 callbacks suppressed [ 1238.090760][T30000] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1238.176891][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1238.184498][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:17:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x14}, 0x14}}, 0x0) 11:17:54 executing program 5: syz_mount_image$qnx4(0x0, &(0x7f0000001300)='./file0\x00', 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340)='{', 0x1, 0x8}, {&(0x7f0000001380)='Z', 0x1}], 0x0, &(0x7f0000001480)={[{'{%:'}], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}]}) [ 1238.223326][ T7260] Bluetooth: hci7: Frame reassembly failed (-84) [ 1238.252440][T30003] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async, rerun: 64) ioctl$TCFLSH(r1, 0x540b, 0x1) (rerun: 64) [ 1238.380136][T30013] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xb) [ 1238.422559][T30015] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1238.470605][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.477079][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 11:17:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000e06040000000000f93132", 0x39}], 0x1) 11:17:55 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@null, 0x0, 'veth1_virt_wifi\x00'}) 11:17:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200020000000006040000000000f93132", 0x39}], 0x1) [ 1238.545448][T30027] Bluetooth: hci6: Frame reassembly failed (-84) [ 1238.560179][T30029] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1238.569514][ T8861] Bluetooth: hci6: Frame reassembly failed (-84) [ 1238.656350][T30036] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1238.699628][T30033] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1238.729899][T30035] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KDADDIO(r0, 0x4b34, 0xbc62) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) 11:17:56 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001c00), 0x4000, 0x0) 11:17:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200030000000006040000000000f93132", 0x39}], 0x1) 11:17:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000f06040000000000f93132", 0x39}], 0x1) 11:17:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000053fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x101, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {r4}, {r4}, {0x0, r6}, {}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r7, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r8, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054fc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {0x0, r6}, {r8}], 0x6, "900a50ee413b7f"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1240.231556][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1240.239971][ T5699] Bluetooth: hci7: command 0x1003 tx timeout 11:17:56 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000100), 0x4) [ 1240.287070][T30042] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1240.318977][T30043] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:17:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x38}}, 0x0) 11:17:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200040000000006040000000000f93132", 0x39}], 0x1) 11:17:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001006040000000000f93132", 0x39}], 0x1) 11:17:57 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @local}, &(0x7f0000000040)=0xc) 11:17:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xb) (async) 11:17:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200050000000006040000000000f93132", 0x39}], 0x1) [ 1240.549726][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1240.628011][T20925] Bluetooth: hci6: sending frame failed (-49) [ 1240.640251][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1240.640623][T30066] Bluetooth: hci6: Frame reassembly failed (-84) [ 1240.730432][T30067] Bluetooth: hci6: Frame reassembly failed (-84) 11:17:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KDADDIO(r0, 0x4b34, 0xbc62) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$KDADDIO(r0, 0x4b34, 0xbc62) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) 11:17:59 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 11:17:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200060000000006040000000000f93132", 0x39}], 0x1) 11:17:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001606040000000000f93132", 0x39}], 0x1) 11:17:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xb) (async) 11:17:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r2, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000053fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x101, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {r4}, {r4}, {0x0, r6}, {}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r7, 0x8108551b, &(0x7f0000000380)) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005a700)={0x0}) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r8, "c2309dbd1dc2d4ea1ac5c0e02025964ab4b43c8d68c8af59f43097a5e015627a42a530077135f1597d2d391afa0c7b8e6805bf0ccd4460c025805dc1b33a3d17fdba3e36bf1ecd809a31357e392dffd2067f02bb0ceb4bd851c0b48b750a0c851f60638b7b41a60e16fd3da01b5a9f54f11f34f8b351ba9b8f2a122786018d8ee6655452eb39aea37e1817c2ed5795fdc1bf882893dc9981980f211283adec98c42eef1cbf07b4a638c614686328b4138a2dc903abf48ac44d7a4561d273f8eb7de0d1cb4a7f225ab2ada261f990506ba3315f5920fda614bbcbadc569baaf211b0595c3ddfaf7ed5d2246497aef5773acbc125c18cb944419243c3a9a455c03", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054fc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {0x0, r6}, {r8}], 0x6, "900a50ee413b7f"}) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1242.390589][ T4431] Bluetooth: hci7: command 0x1003 tx timeout [ 1242.398375][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1242.399565][ T3680] Bluetooth: hci8: command 0x1003 tx timeout [ 1242.411399][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1242.524126][T30074] hub 9-0:1.0: USB hub found [ 1242.534594][T30075] Bluetooth: hci6: Frame reassembly failed (-84) [ 1242.540995][ T8861] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1242.561482][ T5325] Bluetooth: hci7: Frame reassembly failed (-84) [ 1242.561583][T30080] ptm ptm3: ldisc open failed (-12), clearing slot 3 11:17:59 executing program 5: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) 11:17:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200070000000006040000000000f93132", 0x39}], 0x1) 11:17:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000053fc0)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x101, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {r4}, {r4}, {0x0, r6}, {}, {}, {r5, r6}, {0x0, r6}, {0x0, r6}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r4, r6}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {r4}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r4}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {r5, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5, r6}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r5, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) (async) ioctl$USBDEVFS_IOCTL(r7, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005a700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000013c0)={0x0, r8, "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", "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"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054fc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {0x0, r6}, {r8}], 0x6, "900a50ee413b7f"}) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1242.579040][T30074] hub 9-0:1.0: 8 ports detected [ 1242.584166][ T8861] Bluetooth: hci6: Frame reassembly failed (-84) [ 1242.593849][T30075] ptm ptm4: ldisc open failed (-12), clearing slot 4 11:17:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001706040000000000f93132", 0x39}], 0x1) 11:17:59 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) 11:17:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200080000000006040000000000f93132", 0x39}], 0x1) [ 1242.735861][T30098] hub 9-0:1.0: USB hub found [ 1242.754483][T30098] hub 9-0:1.0: 8 ports detected [ 1244.549703][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$KDADDIO(r0, 0x4b34, 0xbc62) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$KDADDIO(r0, 0x4b34, 0xbc62) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) (async) 11:18:01 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x1052c2, 0x0) 11:18:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001806040000000000f93132", 0x39}], 0x1) 11:18:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200090000000006040000000000f93132", 0x39}], 0x1) 11:18:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x0, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6c}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xa5, 0x5b, "590e3ed0621486b60f14d95e11a2e8e6a24f84bd59e1e80a865b2b8cf639e669a2f96343cfdc19b2213201a47988d888ab20b35c6d0a5561637b73ba696c12d58649ce709a614f960f50350d8a45314c7bc6e6818a826873ec6ff21b5a7b4c8f90ba8f54d617952d4522e7fceabfa42b03f803db6d8a223cbd69b9eee845a160b805f5ada578ad122961818a8a8c194a737063a91878d208c1fc144e2a0998fca3"}, @NL80211_ATTR_FRAME_MATCH={0x21, 0x5b, "ef0b5a05948b5fd222efc3a96ae6c0d607a075c873a189730f018572d4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x40050) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x35}}}}, [@NL80211_ATTR_MAC={0x27, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x40810) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x31}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r5, 0x5412, &(0x7f00000000c0)=0x30) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1f) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r8, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r8, 0x70c, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xac}}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@random="45932673269b", @device_b, @device_b}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000080) [ 1244.629652][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1244.629705][T21707] Bluetooth: hci7: command 0x1003 tx timeout 11:18:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8937, &(0x7f0000000800)={'vcan0\x00'}) 11:18:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) close(r0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) [ 1244.706089][T30116] validate_nla: 18 callbacks suppressed [ 1244.706108][T30116] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1244.719560][ T8383] Bluetooth: hci8: command 0x1003 tx timeout [ 1244.720618][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1244.773079][ T7260] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1244.782830][T30117] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1244.803016][T30113] Bluetooth: hci7: Frame reassembly failed (-84) [ 1244.827890][T25278] Bluetooth: hci6: Frame reassembly failed (-84) [ 1244.828078][ T8200] Bluetooth: hci7: Frame reassembly failed (-84) [ 1244.859307][T30120] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1244.868248][T20925] Bluetooth: hci8: sending frame failed (-49) 11:18:01 executing program 5: r0 = socket(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 11:18:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001e06040000000000f93132", 0x39}], 0x1) 11:18:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000a0000000006040000000000f93132", 0x39}], 0x1) [ 1244.876415][T20922] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1244.886419][T30127] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) close(r0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) (rerun: 32) 11:18:01 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x419, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 1245.026812][T30135] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1245.058139][T20925] Bluetooth: hci8: sending frame failed (-49) [ 1245.066363][T20922] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1245.114212][T30143] must specify at least one socket [ 1245.122109][T30137] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1245.166284][T30142] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1245.212988][T30144] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:18:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000c0000000006040000000000f93132", 0x39}], 0x1) 11:18:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001f06040000000000f93132", 0x39}], 0x1) [ 1246.789707][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x0, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6c}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xa5, 0x5b, "590e3ed0621486b60f14d95e11a2e8e6a24f84bd59e1e80a865b2b8cf639e669a2f96343cfdc19b2213201a47988d888ab20b35c6d0a5561637b73ba696c12d58649ce709a614f960f50350d8a45314c7bc6e6818a826873ec6ff21b5a7b4c8f90ba8f54d617952d4522e7fceabfa42b03f803db6d8a223cbd69b9eee845a160b805f5ada578ad122961818a8a8c194a737063a91878d208c1fc144e2a0998fca3"}, @NL80211_ATTR_FRAME_MATCH={0x21, 0x5b, "ef0b5a05948b5fd222efc3a96ae6c0d607a075c873a189730f018572d4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x40050) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x35}}}}, [@NL80211_ATTR_MAC={0x27, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x40810) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x31}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r5, 0x5412, &(0x7f00000000c0)=0x30) (async) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1f) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r8, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r8, 0x70c, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xac}}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@random="45932673269b", @device_b, @device_b}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000080) 11:18:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) close(r0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5) [ 1246.835355][T30150] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1246.853130][T30148] must specify at least one socket [ 1246.869555][ T3646] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:18:03 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 11:18:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:03 executing program 5: syz_open_dev$vcsn(&(0x7f00000006c0), 0x1, 0x1) 11:18:03 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x0, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6c}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xa5, 0x5b, "590e3ed0621486b60f14d95e11a2e8e6a24f84bd59e1e80a865b2b8cf639e669a2f96343cfdc19b2213201a47988d888ab20b35c6d0a5561637b73ba696c12d58649ce709a614f960f50350d8a45314c7bc6e6818a826873ec6ff21b5a7b4c8f90ba8f54d617952d4522e7fceabfa42b03f803db6d8a223cbd69b9eee845a160b805f5ada578ad122961818a8a8c194a737063a91878d208c1fc144e2a0998fca3"}, @NL80211_ATTR_FRAME_MATCH={0x21, 0x5b, "ef0b5a05948b5fd222efc3a96ae6c0d607a075c873a189730f018572d4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x40050) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x35}}}}, [@NL80211_ATTR_MAC={0x27, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x40810) (rerun: 64) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x31}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r5, 0x400455c8, 0x800000000000004) (rerun: 64) ioctl$TIOCSETD(r5, 0x5412, &(0x7f00000000c0)=0x30) (async) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1f) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r8, 0x401, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r8, 0x70c, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x20, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xac}}, @sec_chan_ofs={0x3e, 0x1}, @link_id={0x65, 0x12, {@random="45932673269b", @device_b, @device_b}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000080) [ 1247.008318][T30151] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000002406040000000000f93132", 0x39}], 0x1) 11:18:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000e0000000006040000000000f93132", 0x39}], 0x1) [ 1247.110517][T20922] Bluetooth: hci7: sending frame failed (-49) [ 1247.119627][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1247.131603][ T5325] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:05 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 11:18:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 32) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:05 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc4e1]}, 0x8) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x4, r1}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) 11:18:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000003f06040000000000f93132", 0x39}], 0x1) 11:18:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000f0000000006040000000000f93132", 0x39}], 0x1) [ 1249.029506][T21704] Bluetooth: hci6: command 0x1003 tx timeout [ 1249.039665][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:05 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f00000010c0), &(0x7f0000001100), 0x0) 11:18:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200100000000006040000000000f93132", 0x39}], 0x1) 11:18:05 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc4e1]}, 0x8) (async, rerun: 64) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) (rerun: 64) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) (async) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x4, r1}, 0x0) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) 11:18:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@unlock_all, 0xb) 11:18:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000006006040000000000f93132", 0x39}], 0x1) 11:18:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000586506040000000000f93132", 0x39}], 0x1) [ 1251.189805][T21707] Bluetooth: hci6: command 0x1003 tx timeout [ 1251.196744][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200160000000006040000000000f93132", 0x39}], 0x1) 11:18:07 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) 11:18:07 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc4e1]}, 0x8) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x4, r1}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xc4e1]}, 0x8) (async) io_uring_setup(0x6d61, &(0x7f0000000180)) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) (async) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x4, r1}, 0x0) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000c6d06040000000000f93132", 0x39}], 0x1) 11:18:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1251.270137][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:18:07 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x200) [ 1251.342471][T30221] validate_nla: 16 callbacks suppressed [ 1251.342490][T30221] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1251.374982][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1251.386013][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -49 11:18:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) fallocate(r2, 0x8, 0x1000, 0xfffffffffffff7d5) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x18) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/203) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1251.397789][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1251.419908][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) [ 1251.433546][T30226] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402182, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000005) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) 11:18:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402182, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000005) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402182, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000005) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) (async) [ 1251.515482][ T5282] Bluetooth: hci6: Frame reassembly failed (-84) [ 1251.522156][ T5282] Bluetooth: hci6: Frame reassembly failed (-84) [ 1251.538493][T30241] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x800}) [ 1251.582147][T30242] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402182, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000005) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x33) 11:18:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200170000000006040000000000f93132", 0x39}], 0x1) 11:18:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000008106040000000000f93132", 0x39}], 0x1) 11:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x7, 0x1, 0x503}, 0x14}}, 0x0) 11:18:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x81) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1251.719774][T30261] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1251.765405][T30265] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:08 executing program 5: openat$pfkey(0xffffffffffffff9c, 0x0, 0x71b000, 0x0) [ 1251.815077][T30266] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1251.841369][T30268] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1251.887054][T20925] Bluetooth: hci8: sending frame failed (-49) [ 1251.897565][T20922] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:18:10 executing program 3: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x4, 0x3, 0x20000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:10 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1253.429753][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1253.509719][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1253.538714][T30244] sp0: Synchronizing with TNC 11:18:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) fallocate(r2, 0x8, 0x1000, 0xfffffffffffff7d5) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x18) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/203) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) (async) fallocate(r2, 0x8, 0x1000, 0xfffffffffffff7d5) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x18) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/203) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ffffa88806040000000000f93132", 0x39}], 0x1) 11:18:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200180000000006040000000000f93132", 0x39}], 0x1) 11:18:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x81) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x81) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:10 executing program 5: syz_mount_image$qnx4(0x0, &(0x7f0000001300)='./file0\x00', 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340), 0x0, 0x8}, {&(0x7f0000001380)='Z', 0x1}], 0x5959024f804f1af1, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}]}) 11:18:10 executing program 3: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x4, 0x3, 0x20000}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1253.680979][T30282] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:10 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='ext4_sync_fs\x00'}, 0x10) [ 1253.723175][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1253.736893][ T2449] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:10 executing program 3: ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x4, 0x3, 0x20000}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x4, 0x3, 0x20000}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1253.787321][T30281] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1253.821118][ T2449] Bluetooth: hci7: Frame reassembly failed (-84) 11:18:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002001e0000000006040000000000f93132", 0x39}], 0x1) 11:18:10 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000100), 0x4) 11:18:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ffffffc306040000000000f93132", 0x39}], 0x1) 11:18:10 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, 0x0) [ 1255.749698][ T3646] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1255.829572][ T5699] Bluetooth: hci7: command 0x1003 tx timeout [ 1255.829744][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1255.855874][T30301] sp0: Synchronizing with TNC 11:18:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000003e806040000000000f93132", 0x39}], 0x1) 11:18:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x81) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200240000000006040000000000f93132", 0x39}], 0x1) 11:18:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) fallocate(r2, 0x8, 0x1000, 0xfffffffffffff7d5) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x18) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/203) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:12 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xeb, 0x200000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x0) 11:18:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200480000000006040000000000f93132", 0x39}], 0x1) 11:18:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000003ee06040000000000f93132", 0x39}], 0x1) 11:18:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x2082) write$midi(r0, &(0x7f00000000c0)="9c", 0x8800000) [ 1256.042078][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1256.046355][T20925] Bluetooth: hci7: sending frame failed (-49) [ 1256.049738][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1256.056883][T20922] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:18:12 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 11:18:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8102) ioctl$TIOCCBRK(r2, 0x5428) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000100)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x1, 0x8, @start={0x0, 0x0, "d789519f7c6ecafb795d50f66f69e00fcc4bfca5b0a056c6458c4d0cccc7ab90e8d5efb7f39949b348d34f381acb3e63b90a59d267dade644383efba16fa7a0be9e2f5e74972d896eabd9159644461641ce966e4b99fcdb358f686bda3c542f8fb09a06b6a04b32d5dc1d1824bc68e1197c1f7f9d958c15b8a3a2bb09eb1d030384a5879d4d0d3beb61c47ed064c2f8dd68daab397920498a48a2d62c932428be9ec58565fd8be8e260d6decec95c39a9df84f7b7a75339f896e1f5bd997afccaa9d022d14c8c7a4314c68a434a619d1a9fef0de1eaaf870171d13f5c85139d769c807f965702cfc1c2e1b21c871034ccb64f76db532516707bcc732d31ea2bb93f2745c27e99449eafcbd19b7efe8f776096d926dc2e00191e096857153f105f3a9fb884d03fd54a404fed2f1a075faf094d989018d72793ddc8e0d0c0b82b59a655f036f6d3d40c672d592ab41fa3060a1fddedc75d81d4448aacc486919f41523fd3b794f66ed086d16099cbaf567d6165313233580eaeb484c686e2bea75bfe0ff778b731b300e5d36d5373a3b94610a1c0913db4a42a463bb7054897b28c3756bcb2e18595e1fe62a55fa946dd2a6cd95e5057cbc919d4882e1f2100d8a00a714de6b04e364ef9dd1c46490521b056694806d103d8b9bc08352fa26888e95c8de1ed0e718306a94e52c48b1391dae0d5648698d189fe9c679b502b0399f3c085276a0d95f0fb785e13877c9d49c667ba0676bac3cdc061337132420c4a7dae7c56936e4fddadb3a6172ce33abb7efea82c25e6bf2f961dad72aaf03a589526f5ac4cdb68a3185d50063527bdad7615f92921ef6b1686d83b88f59280cd2b9b241794ca771527b953e19362979e54012c9addbcf16ab795579e3d1474ade3dc6ce46ac6ce8c8be3a816734ac8ea38018b367526ad75fb3fe184dcfb145247757f2657ceb7134ff35bd1fb5b6ee97112a59246afccbb254a5a3ce1a3d8d68db4738ffe9b9aa19536fcbcea78022a44cf8a1ed362c606d9f1b4d6f7634c18a665ee0685040cef4a7e2ae899e2ab45f1c3f7c76b1d47fbcba98f6ae5f8a3c230a0664b620271c3ead56b2664bc64ad6988c84ccecd478e97ed6e0bbd027957e3a69a9b53033516d286fb86bb93df16ea6cbc5e4132f5415f7ee2f2ac4080b1580f7e4e7328b670f277cfba09bb25070ed49dc0ff71e1d91ee4d08d381f4366dcad6bcb97bb23f9c652a9d707f421f83db2644af3c2da90232111ab06d282e6c8f3c9a17b0d924bab077276b8446423b73164fd0d31ee625a54d478d72b6622908e01c23d490aa9dd18891c38fcae1a6c67435cfdb5409b67daa020589ceab03bb0f65d274d0ead41f6baf408810a5647f2f5a5c346aa495629fd739f991f6e1854c702d60525c6fcad6f084a9b1c923948267f3439b83735763530212195277d5", "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"}, [0x1, 0xffffffff, 0x3, 0x8000000000000001, 0x9, 0x4e931dcd, 0x355ab41f, 0x5, 0x71b3, 0xfff, 0x9, 0x8, 0xa34c, 0x4, 0x80000001, 0x7, 0x80000000, 0xd3, 0x7, 0xffffffff, 0x1fd, 0x7, 0x7, 0xffffffff, 0x3, 0x100, 0x5, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8000, 0x4, 0xfffffffffffffffa, 0xe36, 0x0, 0x3c8, 0x400, 0x100, 0x11, 0x2800000000000, 0x9, 0xff, 0x7, 0xffffffffffff742a, 0x3, 0xb467, 0x6, 0x6c3, 0x1, 0x10001, 0x3, 0x800, 0x800, 0x9000000000000, 0x7ff, 0x1, 0x5, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffe, 0x3]}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002004c0000000006040000000000f93132", 0x39}], 0x1) 11:18:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000000fc06040000000000f93132", 0x39}], 0x1) [ 1256.255055][ T5325] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1256.255667][T30356] sp0: Synchronizing with TNC 11:18:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) [ 1256.361219][T30360] validate_nla: 15 callbacks suppressed [ 1256.361239][T30360] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1256.379664][T20010] Bluetooth: hci7: sending frame failed (-49) [ 1256.381718][ T7260] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1256.394221][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:18:13 executing program 5: socket(0x1d, 0x0, 0x1) [ 1256.424665][T30365] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1256.493612][T30367] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200600000000006040000000000f93132", 0x39}], 0x1) 11:18:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fffffffc06040000000000f93132", 0x39}], 0x1) 11:18:14 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 11:18:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8102) ioctl$TIOCCBRK(r2, 0x5428) (async) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000100)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x1, 0x8, @start={0x0, 0x0, "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", "8f0b339ea3e5edf143cc5ce3f19fec6a32ddb9ba873037a47659504b7eac6af0d1cf3868874f9b444b22439be4cee916c56ebeec2eabc1b39242cb873684ea95cb2b5fbea9dc1b78dbfe26b923d63f4e754b2a50d5a132fe50d5528d7940c07de8572ed516d086809d55919de96b3e2766b88e46b09c3ec29044e9fa6aa1907b933908843c9484e9e418e01e5711fef982a3d2859488a2d76e29d094abcddb1d865d506bfba6b19a094d8ec3889b733a1986f818218a18eaeb9b9c9b5807ee82774ca6844bbcc4392e02b4ec1584bc41a28b7c632a984f8088d3efe22a4e7507c91c3362cfe3060ce6873577fa39b3c39838b1106de323c036efd6407a87e7e4deb5d083a8148209b801b164a22eac75a65abd874447b3082ed135382b299ed523ddf70c2952fedf2598fd9d442099a11c313dd883d4bf12790caca9f9c4373a57946266cfdc3560dd46a1e8c6b3fa9b6a4ae81a57a08b7a02172230c0878c6076918ad8a687077dc49bacea19fe0dac516040adabf68b56a733d4cb0692206e5bb825b7b56808f8ff82b28fc52f85a3aae74fff736cbe49f2ef2e60153cf83184e9b2fa0290283e89bf99bdde88dcd23ca4ef3fb9047a328e3fbb599a4554efed59235d42bffa972d0b1e77c29db62ab0204ed996666c31625d6f4328b09b6d1ac6462cdb5203d3c7ca0e62f97a1f4826af42d8b0177179c348b03e58165c875342d58299fea6b28a18959cb5b056c238e86b4d2eab1a0cd864046c7308012145902fdcf3f3883c18d335b5678586d23fc77259ab018cf7711c7a83e9b54dfaf379a108ae745869c3432f412c61b87bd6db07b9c923de487930bd766fd15e89a69de98c004491cf475ffb13cfacf2bf3d2f4c1208de2c7ed615e72b9684eede7c8ac9c7fc473bd678eaceb89af0a8e6dd19a45362771b9a3acb09e914afc551cf0aa6f8dc8ee5994818a85136548a6d7caf3a879b348e7914db4c12fe9e05c5296a79050f3f84178820dda4c4d86cbba77c9fd3fa80818bdb1605891852184a63b8a58b6d1b4f504a427bc75527a91d11ec4cdab47e2972fc975fb92fd497a6a6771a3e7f61b17ac6520c39d9cc51750e4c5bf70cb1e9914d26b3eea3a333ce0fdf6cb709f3e4490e8c501af13049a4acc2f459754274100f07b65f04dd8d4fef732a423db20d727fa69474bc9d78e532a48a0eebd1348f589a84aac814459630a65eb0ce4c2c97492b9560a51b4605e463252ed3b44dbfa17c98263d6d82169c353c756406bd5116d4b22c4b30250b10ba624c9cbb59b4e32594c77dd12b007a3f80743097d7f9e0dcb3d09c0e4a2f9cb824fe986809e7b16a4869d9c3b500ff0787e10fa3b25215c1c566100b4b56266a1725fc9a952c4b5cece436e447c874cd33553c0278810d8da6cab99ef6c231b2b819f82b64423f79a290034e582e07"}, [0x1, 0xffffffff, 0x3, 0x8000000000000001, 0x9, 0x4e931dcd, 0x355ab41f, 0x5, 0x71b3, 0xfff, 0x9, 0x8, 0xa34c, 0x4, 0x80000001, 0x7, 0x80000000, 0xd3, 0x7, 0xffffffff, 0x1fd, 0x7, 0x7, 0xffffffff, 0x3, 0x100, 0x5, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8000, 0x4, 0xfffffffffffffffa, 0xe36, 0x0, 0x3c8, 0x400, 0x100, 0x11, 0x2800000000000, 0x9, 0xff, 0x7, 0xffffffffffff742a, 0x3, 0xb467, 0x6, 0x6c3, 0x1, 0x10001, 0x3, 0x800, 0x800, 0x9000000000000, 0x7ff, 0x1, 0x5, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffe, 0x3]}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1258.229550][T18029] Bluetooth: hci6: command 0x1003 tx timeout [ 1258.230063][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:14 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000100)=0x40, 0x4) [ 1258.295416][T30375] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1258.336702][T30375] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1258.348580][ T2449] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200680000000006040000000000f93132", 0x39}], 0x1) [ 1258.383123][T30376] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1258.389470][T30382] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1258.419474][T25278] Bluetooth: hci6: Frame reassembly failed (-84) [ 1258.421347][T30383] Falling back ldisc for ptm2. 11:18:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) [ 1258.455291][T30388] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1258.489789][T30394] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000000fd06040000000000f93132", 0x39}], 0x1) 11:18:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8102) ioctl$TIOCCBRK(r2, 0x5428) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x1, 0x8, @start={0x0, 0x0, "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", "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"}, [0x1, 0xffffffff, 0x3, 0x8000000000000001, 0x9, 0x4e931dcd, 0x355ab41f, 0x5, 0x71b3, 0xfff, 0x9, 0x8, 0xa34c, 0x4, 0x80000001, 0x7, 0x80000000, 0xd3, 0x7, 0xffffffff, 0x1fd, 0x7, 0x7, 0xffffffff, 0x3, 0x100, 0x5, 0x200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x8000, 0x4, 0xfffffffffffffffa, 0xe36, 0x0, 0x3c8, 0x400, 0x100, 0x11, 0x2800000000000, 0x9, 0xff, 0x7, 0xffffffffffff742a, 0x3, 0xb467, 0x6, 0x6c3, 0x1, 0x10001, 0x3, 0x800, 0x800, 0x9000000000000, 0x7ff, 0x1, 0x5, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffe, 0x3]}) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local, 0x8}], 0x1c) [ 1258.528184][T30395] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1258.604710][T30399] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1258.653730][T30401] sp0: Synchronizing with TNC [ 1260.389632][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002006c0000000006040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fffffffd06040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 11:18:17 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x44014, &(0x7f0000001140), 0x12) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000001280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001740), 0x4) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 11:18:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1260.469758][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1260.477175][T21709] Bluetooth: hci7: command tx timeout 11:18:17 executing program 5: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x2d55}], 0x0, &(0x7f00000004c0)={[{'/dev/snd/midiC#D#\x00'}]}) [ 1260.553925][T20922] Bluetooth: hci6: sending frame failed (-49) [ 1260.568956][T20925] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1260.585512][T30410] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x0, 0x6, 0x2, 0x2}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1e) [ 1260.622623][ T7260] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200740000000006040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000080fe06040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) (async) [ 1260.711394][T30427] loop5: detected capacity change from 0 to 45 [ 1260.745346][T30427] befs: Unrecognized mount option "/dev/snd/midiC#D#" or missing value [ 1260.789140][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) [ 1260.800387][T30428] Bluetooth: hci6: Frame reassembly failed (-84) [ 1260.811581][T30427] befs: (loop5): cannot parse mount options [ 1260.830944][T20010] Bluetooth: hci8: sending frame failed (-49) 11:18:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002007a0000000006040000000000f93132", 0x39}], 0x1) [ 1260.839973][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1260.851382][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1260.874731][T30434] Bluetooth: hci8: Frame reassembly failed (-84) 11:18:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8a280, 0x0) 11:18:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000c0fe06040000000000f93132", 0x39}], 0x1) [ 1260.888714][T30435] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1260.909841][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1260.911978][T30434] ptm ptm3: ldisc open failed (-12), clearing slot 3 11:18:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fffffffe06040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ce0000000006040000000000f93132", 0x39}], 0x1) 11:18:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) (async) [ 1261.037621][T21707] Bluetooth: hci5: command 0x0406 tx timeout [ 1261.080542][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1261.089035][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1261.098049][T30445] Bluetooth: hci8: Frame reassembly failed (-84) [ 1261.125984][T25278] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1261.161393][T30445] ptm ptm3: ldisc open failed (-12), clearing slot 3 11:18:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1262.629844][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:18:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 1262.701736][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1262.709162][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:18:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x0, 0x6, 0x2, 0x2}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1e) 11:18:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fc0000000006040000000000f93132", 0x39}], 0x1) 11:18:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000000ff06040000000000f93132", 0x39}], 0x1) 11:18:19 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9ba27811, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="a67b0eb0c047036e9366ed0866d1245dabd26365cbd5e2737ac2f1325a570485a42e80028e3faf878bd614dadc9494c5cfe3ba732ffecd2b617396b0ae287b9546eab57e7d72cec7dbc4d1453f47434fa1397e8845ef36b911824accb7110c5415e19bf2a1d02152c169f5b73001f6d79784c4817ac4a191a1e92fbe337f989ece7f70fe5a8b7e28f16d9c807e0a3fac91e904b98b6f741d52a12d82582bb7e213b8649a6801c5886a709ded7b301f9db5b216e23e9bdcabaf2f38750073d464b3efc664b735526d2c037decbcfb8fdb5f791e6891afb1b4e2395a2ae7587ae38b0d8e8caffde77e738b", 0xea}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="35560bc7d4062c019bc0e8cd7e88f2e710d40a9b3be5b22faee7d0580e8801f2b36c9c42350b89cf351eb51a67c89b1474717c959292d67e17390b7dd1e69913c4a41c24dfd1f11e4aa26612b91fe4e0682c6b0a62c83edb33cadca3a570bc89cfa120e887c1baf0a7f4bdbbaf73610e35c5e527d6d857d156211b46f19ec683b267871e37fd6a30b4270427cccd720278b2c4eddb1fabd0a07447e2b1", 0x9d}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x50}, 0x24000081) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 11:18:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0x9effffff00000000}}, 0x0) 11:18:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1262.799153][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1262.799631][T21703] Bluetooth: hci6: command 0x1003 tx timeout 11:18:19 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1262.851981][T30463] validate_nla: 17 callbacks suppressed [ 1262.851993][T30463] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1262.925888][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1262.934478][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1262.960148][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) [ 1262.987545][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1262.990147][T30465] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1262.995424][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1263.003640][T30475] Bluetooth: hci7: Frame reassembly failed (-84) [ 1263.016251][T30466] ptm ptm3: ldisc open failed (-12), clearing slot 3 11:18:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$eventfd(r0, 0x0, 0x0) 11:18:19 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9ba27811, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="a67b0eb0c047036e9366ed0866d1245dabd26365cbd5e2737ac2f1325a570485a42e80028e3faf878bd614dadc9494c5cfe3ba732ffecd2b617396b0ae287b9546eab57e7d72cec7dbc4d1453f47434fa1397e8845ef36b911824accb7110c5415e19bf2a1d02152c169f5b73001f6d79784c4817ac4a191a1e92fbe337f989ece7f70fe5a8b7e28f16d9c807e0a3fac91e904b98b6f741d52a12d82582bb7e213b8649a6801c5886a709ded7b301f9db5b216e23e9bdcabaf2f38750073d464b3efc664b735526d2c037decbcfb8fdb5f791e6891afb1b4e2395a2ae7587ae38b0d8e8caffde77e738b", 0xea}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="35560bc7d4062c019bc0e8cd7e88f2e710d40a9b3be5b22faee7d0580e8801f2b36c9c42350b89cf351eb51a67c89b1474717c959292d67e17390b7dd1e69913c4a41c24dfd1f11e4aa26612b91fe4e0682c6b0a62c83edb33cadca3a570bc89cfa120e887c1baf0a7f4bdbbaf73610e35c5e527d6d857d156211b46f19ec683b267871e37fd6a30b4270427cccd720278b2c4eddb1fabd0a07447e2b1", 0x9d}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x50}, 0x24000081) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) dup(0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9ba27811, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="a67b0eb0c047036e9366ed0866d1245dabd26365cbd5e2737ac2f1325a570485a42e80028e3faf878bd614dadc9494c5cfe3ba732ffecd2b617396b0ae287b9546eab57e7d72cec7dbc4d1453f47434fa1397e8845ef36b911824accb7110c5415e19bf2a1d02152c169f5b73001f6d79784c4817ac4a191a1e92fbe337f989ece7f70fe5a8b7e28f16d9c807e0a3fac91e904b98b6f741d52a12d82582bb7e213b8649a6801c5886a709ded7b301f9db5b216e23e9bdcabaf2f38750073d464b3efc664b735526d2c037decbcfb8fdb5f791e6891afb1b4e2395a2ae7587ae38b0d8e8caffde77e738b", 0xea}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="35560bc7d4062c019bc0e8cd7e88f2e710d40a9b3be5b22faee7d0580e8801f2b36c9c42350b89cf351eb51a67c89b1474717c959292d67e17390b7dd1e69913c4a41c24dfd1f11e4aa26612b91fe4e0682c6b0a62c83edb33cadca3a570bc89cfa120e887c1baf0a7f4bdbbaf73610e35c5e527d6d857d156211b46f19ec683b267871e37fd6a30b4270427cccd720278b2c4eddb1fabd0a07447e2b1", 0x9d}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x50}, 0x24000081) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) [ 1263.074299][T30470] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1263.114774][T30473] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000088a8ffff06040000000000f93132", 0x39}], 0x1) 11:18:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fd0000000006040000000000f93132", 0x39}], 0x1) 11:18:19 executing program 5: socket(0x18, 0x0, 0x4c6) 11:18:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x0, 0x6, 0x2, 0x2}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1e) [ 1263.233290][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1263.250874][T30486] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1263.269177][T25278] Bluetooth: hci7: Frame reassembly failed (-84) 11:18:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/consoles\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000100)=""/215, 0xd7) [ 1263.292480][T30493] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1263.317663][T30491] ptm ptm3: ldisc open failed (-12), clearing slot 3 11:18:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000300000006040000000000f93132", 0x39}], 0x1) 11:18:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0xc020660b, 0x0) [ 1263.340911][T30500] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1263.357656][T30486] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200007fffffff06040000000000f93132", 0x39}], 0x1) [ 1263.400101][T30504] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1263.450662][T30504] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:21 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={0x0, &(0x7f0000000200)=""/4096, 0x0, 0x1000}, 0x20) 11:18:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000500000006040000000000f93132", 0x39}], 0x1) [ 1264.949527][T21707] Bluetooth: hci6: command 0x1003 tx timeout [ 1264.959871][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1265.071967][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1265.085351][T25278] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:21 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9ba27811, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="a67b0eb0c047036e9366ed0866d1245dabd26365cbd5e2737ac2f1325a570485a42e80028e3faf878bd614dadc9494c5cfe3ba732ffecd2b617396b0ae287b9546eab57e7d72cec7dbc4d1453f47434fa1397e8845ef36b911824accb7110c5415e19bf2a1d02152c169f5b73001f6d79784c4817ac4a191a1e92fbe337f989ece7f70fe5a8b7e28f16d9c807e0a3fac91e904b98b6f741d52a12d82582bb7e213b8649a6801c5886a709ded7b301f9db5b216e23e9bdcabaf2f38750073d464b3efc664b735526d2c037decbcfb8fdb5f791e6891afb1b4e2395a2ae7587ae38b0d8e8caffde77e738b", 0xea}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="35560bc7d4062c019bc0e8cd7e88f2e710d40a9b3be5b22faee7d0580e8801f2b36c9c42350b89cf351eb51a67c89b1474717c959292d67e17390b7dd1e69913c4a41c24dfd1f11e4aa26612b91fe4e0682c6b0a62c83edb33cadca3a570bc89cfa120e887c1baf0a7f4bdbbaf73610e35c5e527d6d857d156211b46f19ec683b267871e37fd6a30b4270427cccd720278b2c4eddb1fabd0a07447e2b1", 0x9d}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x50}, 0x24000081) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) dup(0xffffffffffffffff) (async) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x9ba27811, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000180)="a67b0eb0c047036e9366ed0866d1245dabd26365cbd5e2737ac2f1325a570485a42e80028e3faf878bd614dadc9494c5cfe3ba732ffecd2b617396b0ae287b9546eab57e7d72cec7dbc4d1453f47434fa1397e8845ef36b911824accb7110c5415e19bf2a1d02152c169f5b73001f6d79784c4817ac4a191a1e92fbe337f989ece7f70fe5a8b7e28f16d9c807e0a3fac91e904b98b6f741d52a12d82582bb7e213b8649a6801c5886a709ded7b301f9db5b216e23e9bdcabaf2f38750073d464b3efc664b735526d2c037decbcfb8fdb5f791e6891afb1b4e2395a2ae7587ae38b0d8e8caffde77e738b", 0xea}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="35560bc7d4062c019bc0e8cd7e88f2e710d40a9b3be5b22faee7d0580e8801f2b36c9c42350b89cf351eb51a67c89b1474717c959292d67e17390b7dd1e69913c4a41c24dfd1f11e4aa26612b91fe4e0682c6b0a62c83edb33cadca3a570bc89cfa120e887c1baf0a7f4bdbbaf73610e35c5e527d6d857d156211b46f19ec683b267871e37fd6a30b4270427cccd720278b2c4eddb1fabd0a07447e2b1", 0x9d}], 0x3, &(0x7f0000001380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}], 0x50}, 0x24000081) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) 11:18:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000c3ffffff06040000000000f93132", 0x39}], 0x1) 11:18:21 executing program 5: socket(0x22, 0x0, 0x80) 11:18:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000600000006040000000000f93132", 0x39}], 0x1) [ 1265.269762][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1265.277088][T21709] Bluetooth: hci7: command tx timeout 11:18:21 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000280)={'pim6reg0\x00'}) 11:18:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xf100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) [ 1265.337869][T20010] Bluetooth: hci7: sending frame failed (-49) [ 1265.346732][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 1265.363843][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1265.370884][T21707] Bluetooth: hci8: command 0x1003 tx timeout 11:18:22 executing program 5: socket(0xa, 0x0, 0xc46) 11:18:22 executing program 5: syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0xc442) [ 1265.414496][T25278] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x2082) write$midi(r0, &(0x7f00000000c0)="9c", 0x19c000) [ 1265.565546][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1265.583518][T20925] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:18:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x4dd, 0x80, 0x9, 0xd9, 0x9, 0x4}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 11:18:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000700000006040000000000f93132", 0x39}], 0x1) 11:18:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fcffffff06040000000000f93132", 0x39}], 0x1) 11:18:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 11:18:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2a00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xf100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xf100, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) (async) [ 1267.109605][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000004080102000000000000000002000008240004800800014080000000080001400000000908000140000000050800014000010800060002"], 0x40}}, 0x0) 11:18:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fdffffff06040000000000f93132", 0x39}], 0x1) 11:18:23 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x599582, 0x0) [ 1267.217403][ T5325] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000900000006040000000000f93132", 0x39}], 0x1) [ 1267.273364][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}}, 0x0) 11:18:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000feffffff06040000000000f93132", 0x39}], 0x1) 11:18:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x4dd, 0x80, 0x9, 0xd9, 0x9, 0x4}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 11:18:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2a00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000a00000006040000000000f93132", 0x39}], 0x1) 11:18:24 executing program 5: syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="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") 11:18:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000001040000000000f93132", 0x39}], 0x1) [ 1267.636897][ T7260] Bluetooth: hci7: Frame reassembly failed (-84) 11:18:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xf100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0xf100, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) (async) 11:18:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2a00) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) syz_open_dev$audion(&(0x7f0000000040), 0x3, 0x2a00) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000002000006040000000000f93132", 0x39}], 0x1) 11:18:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000c00000006040000000000f93132", 0x39}], 0x1) 11:18:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x18, 0xa, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_EXPRESSIONS={0x4}]}, 0x18}}, 0x0) [ 1269.269818][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:25 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0xa0ac00, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1269.334242][T30596] validate_nla: 22 callbacks suppressed [ 1269.334262][T30596] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1269.401196][T30599] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1269.429304][T25278] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1269.442987][ T5325] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:26 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x80b82, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000001680), 0x2) [ 1269.460933][ T5282] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1269.541245][T30602] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1269.575905][T30614] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1269.638787][T30617] misc userio: Begin command sent, but we're already running [ 1269.678126][ T5699] Bluetooth: hci7: command 0x1003 tx timeout 11:18:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x4dd, 0x80, 0x9, 0xd9, 0x9, 0x4}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 11:18:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x12) 11:18:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002006d0c00000006040000000000f93132", 0x39}], 0x1) 11:18:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003000006040000000000f93132", 0x39}], 0x1) [ 1269.679649][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1269.754482][T30621] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1269.798226][T25278] Bluetooth: hci7: Frame reassembly failed (-84) [ 1269.828029][T30626] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1269.866962][T30628] Bluetooth: hci7: Frame reassembly failed (-84) [ 1269.881199][ T5325] Bluetooth: hci8: Frame reassembly failed (-84) 11:18:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000e00000006040000000000f93132", 0x39}], 0x1) [ 1269.972720][T30621] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1269.983440][T30631] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1270.036043][T30633] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1270.090653][T30634] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xac81, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) syz_open_pts(r0, 0x242080) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x6d) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) 11:18:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000004000006040000000000f93132", 0x39}], 0x1) 11:18:28 executing program 5: getresuid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001180)) 11:18:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000f00000006040000000000f93132", 0x39}], 0x1) [ 1271.429594][ T5699] Bluetooth: hci6: command 0x1003 tx timeout [ 1271.429695][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 11:18:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40200102}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14}, 0x14}}, 0x0) [ 1271.506912][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000005000006040000000000f93132", 0x39}], 0x1) 11:18:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001600000006040000000000f93132", 0x39}], 0x1) [ 1271.648939][T30647] Bluetooth: hci6: Frame reassembly failed (-84) [ 1271.829560][ T3680] Bluetooth: hci7: command 0x1003 tx timeout [ 1271.839848][T20925] Bluetooth: hci7: Opcode 0x1003 failed: -110 11:18:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000006000006040000000000f93132", 0x39}], 0x1) 11:18:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 11:18:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001700000006040000000000f93132", 0x39}], 0x1) 11:18:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x12) 11:18:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0xa5) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0x1, 0x1000, 0x93, "2140174405e049f46141e4306da7469b19ebb5"}) [ 1271.909723][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1272.032609][ T7260] Bluetooth: hci7: Frame reassembly failed (-84) 11:18:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8000000000000001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xac81, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async, rerun: 32) syz_open_pts(r0, 0x242080) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x6d) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) 11:18:30 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000001280), 0x4) 11:18:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000007000006040000000000f93132", 0x39}], 0x1) 11:18:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001800000006040000000000f93132", 0x39}], 0x1) 11:18:30 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) [ 1273.509575][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1273.509588][T21707] Bluetooth: hci6: command 0x1003 tx timeout 11:18:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001e00000006040000000000f93132", 0x39}], 0x1) [ 1273.639473][ T7260] Bluetooth: hci6: Frame reassembly failed (-84) 11:18:30 executing program 5: clock_adjtime(0x3, 0x0) 11:18:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000008000006040000000000f93132", 0x39}], 0x1) 11:18:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200931e00000006040000000000f93132", 0x39}], 0x1) 11:18:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000009000006040000000000f93132", 0x39}], 0x1) 11:18:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x12) 11:18:30 executing program 5: socket(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) [ 1274.069714][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1274.070964][T21703] Bluetooth: hci7: command 0x1003 tx timeout [ 1274.078642][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1274.167448][ T3646] Bluetooth: hci7: sending frame failed (-49) [ 1274.176728][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -49 11:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x8000000000000001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xac81, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) syz_open_pts(r0, 0x242080) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x6d) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) 11:18:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000a000006040000000000f93132", 0x39}], 0x1) 11:18:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001f00000006040000000000f93132", 0x39}], 0x1) 11:18:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0xa5) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0x1, 0x1000, 0x93, "2140174405e049f46141e4306da7469b19ebb5"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0xa5) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0x1, 0x1000, 0x93, "2140174405e049f46141e4306da7469b19ebb5"}) (async) 11:18:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x2082) write$midi(r0, 0x0, 0x0) 11:18:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x294c00, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) [ 1275.669567][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1275.676891][T18029] Bluetooth: hci6: command tx timeout [ 1275.731635][T30708] validate_nla: 24 callbacks suppressed [ 1275.731656][T30708] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:18:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x208) [ 1275.781664][ T7260] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000050601030000000000000000010000050900030073797a3127"], 0x20}}, 0x0) 11:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x11, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) r3 = gettid() fcntl$lock(r2, 0x6, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x7f, r3}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1275.865164][T30715] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:32 executing program 5: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, 0x0}) write$nbd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x2, &(0x7f0000001440)=[{0x0, 0x0, 0x8}, {&(0x7f0000001380)="5a62aafe8d03f49429aee28835182419dce6b1bf037ae1eedda542e423f4a72f4ef33bd355f61610446e42721f5f19aaf24efc43259818719a9fa212cdd482854a28521e9d9ffc840ea536b564262764546cd3df05e47d39f3b0544ecbdc1b968fcd32135126c5a420a7e5857694889538b1ae30252c227383e22ba36d5a90b46070512fb26fd8", 0x87, 0x401}], 0x0, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}]}) [ 1275.939735][T30719] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1275.966472][T20228] Bluetooth: hci8: sending frame failed (-49) [ 1275.976487][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x11, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) r3 = gettid() fcntl$lock(r2, 0x6, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x7f, r3}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x11, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x80) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) (async) gettid() (async) fcntl$lock(r2, 0x6, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x7f, r3}) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c000006040000000000f93132", 0x39}], 0x1) [ 1276.005201][T30720] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1276.080799][T30737] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:18:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200002000000006040000000000f93132", 0x39}], 0x1) [ 1276.124641][T20228] Bluetooth: hci8: sending frame failed (-49) [ 1276.125746][T30735] loop5: detected capacity change from 0 to 128 [ 1276.136826][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1276.147746][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1276.157065][T30739] ptm ptm4: ldisc open failed (-12), clearing slot 4 11:18:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000e000006040000000000f93132", 0x39}], 0x1) [ 1276.168415][T30740] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1276.191221][T30735] qnx4: no qnx4 filesystem (no root dir). 11:18:32 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) [ 1276.226821][T30752] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1276.362902][T30753] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1276.429146][ T7260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.574498][ T7260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.686245][ T7260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.756136][ T7260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.677937][ T7260] device hsr_slave_0 left promiscuous mode [ 1277.699112][ T7260] device hsr_slave_1 left promiscuous mode [ 1277.730318][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1277.754883][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1277.792148][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1277.813626][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1277.829565][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1277.838407][ T8383] Bluetooth: hci6: command tx timeout 11:18:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0xa5) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0x1, 0x1000, 0x93, "2140174405e049f46141e4306da7469b19ebb5"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0xa5) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0x1, 0x1000, 0x93, "2140174405e049f46141e4306da7469b19ebb5"}) (async) 11:18:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x11, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x80) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) r3 = gettid() fcntl$lock(r2, 0x6, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x7f, r3}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x11, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x5}, 0x10, 0xffffffffffffffff}, 0x80) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x141000, 0x0) (async) gettid() (async) fcntl$lock(r2, 0x6, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x7f, r3}) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:18:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000f000006040000000000f93132", 0x39}], 0x1) 11:18:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x294c00, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 11:18:34 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) [ 1277.892190][ T7260] device bridge_slave_1 left promiscuous mode [ 1277.898487][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.916896][T20010] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1277.926737][ T3680] Bluetooth: hci7: command tx timeout 11:18:34 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}], 0x10) [ 1278.090734][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1278.100241][T20922] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1278.116100][ T7260] device bridge_slave_0 left promiscuous mode [ 1278.130927][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.141649][ T5282] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 11:18:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x715001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x24c081, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1278.233094][ T7260] device veth1_macvtap left promiscuous mode [ 1278.255777][ T7260] device veth0_macvtap left promiscuous mode [ 1278.309987][ T7260] device veth1_vlan left promiscuous mode [ 1278.353326][ T7260] device veth0_vlan left promiscuous mode [ 1278.371943][T30797] ptm ptm0: ldisc open failed (-12), clearing slot 0 11:18:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x715001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x24c081, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:18:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x715001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x24c081, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1279.017482][ T7260] team0 (unregistering): Port device team_slave_1 removed [ 1279.047193][ T7260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.078203][ T7260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.184979][ T7260] bond0 (unregistering): Released all slaves [ 1279.276193][T30777] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1279.303741][T30779] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1280.069590][T20010] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1280.078088][ T8383] Bluetooth: hci2: command tx timeout [ 1284.006030][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1284.017028][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1284.026108][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1284.034785][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1284.043740][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1284.059778][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1284.231133][T30898] chnl_net:caif_netlink_parms(): no params data found [ 1284.307789][T30898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.316888][T30898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.337488][T30898] device bridge_slave_0 entered promiscuous mode [ 1284.347986][T30898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.355407][T30898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.363481][T30898] device bridge_slave_1 entered promiscuous mode [ 1284.390388][T30898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.404912][T30898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.437020][T30898] team0: Port device team_slave_0 added [ 1284.446993][T30898] team0: Port device team_slave_1 added [ 1284.474451][T30898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.481763][T30898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.508009][T30898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.530669][T30898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.538331][T30898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.569567][T30898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.606045][T30898] device hsr_slave_0 entered promiscuous mode [ 1284.613072][T30898] device hsr_slave_1 entered promiscuous mode [ 1284.620998][T30898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1284.628582][T30898] Cannot create hsr debugfs directory [ 1284.760953][T30898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.768088][T30898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.775560][T30898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.782731][T30898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.876220][T30898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.893450][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1284.906651][T21703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.915698][T21703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.924687][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1284.950233][T30898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.963081][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1284.980010][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.987135][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.057058][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1285.077332][T21704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.084504][T21704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.104952][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1285.121570][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1285.140361][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1285.152084][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1285.161307][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1285.183036][T30898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1285.207985][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1285.216120][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1285.230087][T30898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.649544][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1285.658392][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1285.673075][T30898] device veth0_vlan entered promiscuous mode [ 1285.686504][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1285.694795][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1285.704738][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1285.712804][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1285.725419][T30898] device veth1_vlan entered promiscuous mode [ 1285.746954][T30898] device veth0_macvtap entered promiscuous mode [ 1285.756122][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1285.765525][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1285.773872][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1285.782621][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1285.791422][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1285.801582][T30898] device veth1_macvtap entered promiscuous mode [ 1285.816850][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1285.827820][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.837959][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1285.850475][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.860388][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1285.872166][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.882391][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1285.898456][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.908321][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1285.919576][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.930731][T30898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.939846][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1285.947968][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1285.956806][T21704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1285.967977][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1285.979103][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.991266][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1286.002085][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.011977][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1286.022509][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.032424][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1286.042896][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.052737][T30898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1286.063200][T30898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.075380][T30898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.084918][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1286.093733][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1286.149654][ T5699] Bluetooth: hci2: command 0x0409 tx timeout [ 1286.160686][T25276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.169563][T25276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.193819][ T2449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.195699][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1286.209914][ T2449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.226429][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:18:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200002400000006040000000000f93132", 0x39}], 0x1) 11:18:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'hsr0\x00', {'bridge_slave_0\x00'}, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 11:18:42 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 1286.275083][T31000] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1286.306332][T31000] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1286.356885][T31005] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1286.404644][T31005] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1286.418378][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1286.429814][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1288.230694][ T3680] Bluetooth: hci2: command 0x041b tx timeout [ 1290.309834][T18029] Bluetooth: hci2: command 0x040f tx timeout [ 1292.389597][ T8383] Bluetooth: hci2: command 0x0419 tx timeout [ 1299.911149][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.917475][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 11:19:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async, rerun: 32) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x294c00, 0x0) (rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 11:19:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000010000006040000000000f93132", 0x39}], 0x1) 11:19:29 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x42440, 0x0) 11:19:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200003f00000006040000000000f93132", 0x39}], 0x1) 11:19:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'hsr0\x00', {'bridge_slave_0\x00'}, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'hsr0\x00', {'bridge_slave_0\x00'}, 0x6}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) 11:19:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="b9b6c747626f6710d4835b35093a10c8584b31d68fb203beff08140225073a364bb17c1ff5f752280d705896ffb2aa3515281a55f264898a10a221a90a4e36223f3cd0", 0x43}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) 11:19:29 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x42440, 0x0) [ 1333.005099][T31197] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1333.036658][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1333.045815][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1333.065506][ T7260] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.073788][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 1333.081806][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1333.096124][T31202] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:29 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x42440, 0x0) [ 1333.118472][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.123678][T31206] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1333.155226][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.163839][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.170781][T31213] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1333.172173][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.187603][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.197114][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.204803][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.212639][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:19:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, 'hsr0\x00', {'bridge_slave_0\x00'}, 0x6}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 11:19:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000016000006040000000000f93132", 0x39}], 0x1) [ 1333.224553][T31216] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1333.225976][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.240786][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.247813][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.265624][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:19:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200004800000006040000000000f93132", 0x39}], 0x1) 11:19:29 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x42440, 0x0) [ 1333.339822][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.348274][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.357389][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 1333.365036][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1333.418162][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.426420][T31228] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1333.446391][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.503696][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.524391][T31229] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1333.547836][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.559859][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.579878][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.591815][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.592687][T31233] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1333.610350][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.617358][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.632039][T31232] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1333.635680][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.654584][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.682138][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.702164][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.729799][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.737309][T31203] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1333.760130][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1333.772218][ T5325] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 11:19:30 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) 11:19:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) tee(r0, 0xffffffffffffffff, 0x8, 0x1) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0x17) 11:19:30 executing program 5: syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)) 11:19:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200004c00000006040000000000f93132", 0x39}], 0x1) 11:19:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000017000006040000000000f93132", 0x39}], 0x1) [ 1333.885447][T31239] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1333.955876][T31240] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1335.989638][ T3680] Bluetooth: hci6: command 0x1003 tx timeout [ 1335.995857][T20010] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1338.401388][ T3646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1338.411803][ T3646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1338.420734][ T3646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1338.428957][ T3646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1338.437228][ T3646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1338.444528][ T3646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1338.539346][T31247] chnl_net:caif_netlink_parms(): no params data found [ 1338.587143][T31247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.594757][T31247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.604749][T31247] device bridge_slave_0 entered promiscuous mode [ 1338.614147][T31247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.621696][T31247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.630306][T31247] device bridge_slave_1 entered promiscuous mode [ 1338.655845][T31247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.667940][T31247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.696093][T31247] team0: Port device team_slave_0 added [ 1338.704433][T31247] team0: Port device team_slave_1 added [ 1338.730314][T31247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.737281][T31247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.764259][T31247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.777474][T31247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.789026][T31247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.816882][T31247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.847312][T31247] device hsr_slave_0 entered promiscuous mode [ 1338.854128][T31247] device hsr_slave_1 entered promiscuous mode [ 1338.866507][T31247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1338.874693][T31247] Cannot create hsr debugfs directory [ 1338.953901][T31247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.961002][T31247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.968287][T31247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.975425][T31247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.024698][T31247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.042877][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1339.052221][T21709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.060298][T21709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.069140][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1339.083467][T31247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.094503][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1339.108327][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.115432][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.146804][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1339.155566][T21709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.162664][T21709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.172506][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1339.189339][T31247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1339.201416][T31247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1339.215809][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1339.225362][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1339.234759][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1339.243400][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1339.252614][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1339.271850][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1339.279850][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1339.289156][T31247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.611442][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1339.620626][T21703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1339.635783][T31247] device veth0_vlan entered promiscuous mode [ 1339.643765][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1339.652694][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1339.664333][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1339.673945][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1339.686270][T31247] device veth1_vlan entered promiscuous mode [ 1339.708607][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1339.716573][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1339.724959][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1339.734597][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1339.746306][T31247] device veth0_macvtap entered promiscuous mode [ 1339.759124][T31247] device veth1_macvtap entered promiscuous mode [ 1339.782154][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.792790][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.803169][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.813894][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.823974][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.835631][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.845897][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.857044][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.867117][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.877744][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.887944][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1339.898638][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.910833][T31247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1339.921387][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1339.929633][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1339.938024][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1339.946765][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1339.958016][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.969829][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1339.979777][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1339.991011][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.000946][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1340.011420][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.021409][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1340.031926][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.043417][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1340.054002][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.063854][T31247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1340.074979][T31247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.087029][T31247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.095908][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1340.105090][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1340.185858][ T5325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.201449][ T5325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.220275][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1340.237233][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.246082][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.262606][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:19:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="b9b6c747626f6710d4835b35093a10c8584b31d68fb203beff08140225073a364bb17c1ff5f752280d705896ffb2aa3515281a55f264898a10a221a90a4e36223f3cd0", 0x43}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) 11:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 11:19:36 executing program 4: getresuid(&(0x7f00000010c0), &(0x7f0000001100), 0x0) 11:19:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000018000006040000000000f93132", 0x39}], 0x1) 11:19:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200655800000006040000000000f93132", 0x39}], 0x1) 11:19:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) (async) tee(r0, 0xffffffffffffffff, 0x8, 0x1) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0x17) 11:19:36 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x208) [ 1340.387936][T31274] validate_nla: 2 callbacks suppressed [ 1340.387956][T31274] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:37 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x44014, &(0x7f0000001140), 0x12) [ 1340.469544][T21709] Bluetooth: hci6: command 0x0409 tx timeout [ 1340.505959][T31273] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={&(0x7f0000001380), 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0xfffffffffffffd98}, 0x14}}, 0x0) 11:19:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) tee(r0, 0xffffffffffffffff, 0x8, 0x1) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0x17) (rerun: 64) 11:19:37 executing program 4: clock_nanosleep(0x0, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 11:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006000000006040000000000f93132", 0x39}], 0x1) [ 1340.560915][T31283] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1340.595907][T31284] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="b9b6c747626f6710d4835b35093a10c8584b31d68fb203beff08140225073a364bb17c1ff5f752280d705896ffb2aa3515281a55f264898a10a221a90a4e36223f3cd0", 0x43}], 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) 11:19:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001e000006040000000000f93132", 0x39}], 0x1) 11:19:37 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000200)) 11:19:37 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 11:19:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x28}}, 0x0) [ 1340.760054][T31302] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:19:37 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x0) read$midi(r0, &(0x7f0000000100)=""/188, 0xbc) [ 1340.832814][T31305] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:37 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x100, 0x20, 0x2}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x45, "9088b2b771a29251afcd0b01774da66327b7f2751f07b1b35ef2151710014c3547d8b8c9ca7464e566361016e804667c04c745b0825bdbe872fec5060883c6f2340f6b93a9"}, &(0x7f00000001c0)=0x4d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4000f) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x391880, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) 11:19:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x500}, 0x0) 11:19:37 executing program 4: r0 = syz_open_dev$vcsn(0x0, 0x5, 0xc442) write$nbd(0xffffffffffffffff, &(0x7f0000000280), 0x10) r1 = syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340)="7b9fc945cff32acf", 0x8, 0x8}, {&(0x7f0000001380)="5a62aafe8d03f49429aee28835182419dce6b1bf037ae1eedda542e423f4a72f4ef33bd355f61610446e42721f5f19aaf24efc43259818719a9fa212cdd482854a28521e9d9ffc840ea536b564262764546cd3df05e47d39f3b0544ecbdc1b968fcd32135126c5a420a7e5857694889538b1ae30252c227383e22ba36d5a90b46070512fb26fd898d22f0e", 0x8b, 0x401}], 0x5959024f804f1af1, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}, {@audit}]}) io_submit(0x0, 0x8, &(0x7f0000002c80)=[&(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x8001, r1, &(0x7f0000001500)="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", 0x1000, 0x800, 0x0, 0x1, r0}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000002540)="9223502f4b6918c60182c7aa999019151163053db4955061856fdc7bd5a6236050", 0x21, 0x573}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000002600)="91a8948b14f8221daf9e0e3522a8355a91479a5e68f65e7544ae6564f3c48840987e89ac239396992ac1c127e5ac578bbaf9d01bb6e58a29389108ce598f24a4456d24a3250feab33774506297ee6e7180b8b46c9d4f3e7627a2acbd9b59077e63971ed255279c728a4dd464dcd71aafd8f7ce9157412be3976a5153267e72", 0x7f, 0x4, 0x0, 0x2, r0}, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x5, 0x3ff, 0xffffffffffffffff, &(0x7f00000026c0)="308066834af8e3ff4a84b497193710ddc6d20495b85aa206fac274ccc8365282dd22377e9caf0f72b4ccb2eae9dc1f876754d381c65b0f8f2d528cb17569408e7d81fd8215d461eca94ce0bfee7d9333404097b27256c7a6977681ebb464be9294d3754fa901f70cd757d3fa0e8bdc9fcc2e6a01e1a7d335229776d9753482432884dc104a5cea4f3c3535c8d02cc5f2ca378b9328384bc6dba9186220702844c259dc871f68dbcfdeec00c7d6db594a4317f29440c08dc5f832ccf90b6f86b37794fcecfdffa3ce089ddda2", 0xcc, 0x8001, 0x0, 0x3}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x7, 0x7f, 0xffffffffffffffff, &(0x7f0000002800)="0ab9d7b18e831e1cfd1ebbaf89e874ac495dac6dbb5dfad99e61c5a7ec8237c2f3a819f6691972a9bcd6d8f55d1938734c8fe004ac589a904108b804f6a2d2bce953e42cfd0c8cdf3ba4b8a7ebbee71a197b09ecc3185b68e78097fc64dfadcc669bdcd6e4b354e671d9038ff6397ef42c02d3dc3683134b280f15b531de13bb43212972510f9299127c1ed574afe840e40b657af01de51051211afadb0a630a6108486b77", 0xa5, 0x2, 0x0, 0x2}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000002900)="e4107bf3787183dcda1ef6bc57a810a870d47a7700d5946a86abc6629f3708630d16ec1c0f125b7720a21875230abae49690fa98ac2ba348a31fb23e8ed8abd02855b4d3360426c26e434eddc195439fca784ae3f0f20fe07c7ec2e3f96c64eb362a84c49c", 0x65, 0xb41, 0x0, 0x1, r0}, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffffffff, &(0x7f0000002a40)="6906401af5a843a99786bb62a9785d07e62036693415c3205ac67f03b58359f28ec1c9a29a2a2853d6471d14b0e94374cf816f27c0cb489cfb183b4183dda95e79532aaf10418e32301e452ab4fdff54101ff154d6e7fb976807342800e024a7a23a94c2e67dc28e862a2b0dda535374344a0c2472fd9e3f55ae862a7398cbc5ca44", 0x82, 0x5e, 0x0, 0x1, r0}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x2, 0x91, 0xffffffffffffffff, &(0x7f0000002bc0)="24c2d89e47fb8d3c8aa38d8c5133718a39e8", 0x12, 0x0, 0x0, 0x2}]) [ 1340.978874][T31316] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:37 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x100, 0x20, 0x2}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x45, "9088b2b771a29251afcd0b01774da66327b7f2751f07b1b35ef2151710014c3547d8b8c9ca7464e566361016e804667c04c745b0825bdbe872fec5060883c6f2340f6b93a9"}, &(0x7f00000001c0)=0x4d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4000f) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x391880, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x100, 0x20, 0x2}, 0x18) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x45, "9088b2b771a29251afcd0b01774da66327b7f2751f07b1b35ef2151710014c3547d8b8c9ca7464e566361016e804667c04c745b0825bdbe872fec5060883c6f2340f6b93a9"}, &(0x7f00000001c0)=0x4d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4000f) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x391880, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) (async) 11:19:37 executing program 5: socket$inet(0x2, 0x2, 0x74) 11:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200586500000006040000000000f93132", 0x39}], 0x1) [ 1341.072461][T31318] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1341.093080][T31334] loop4: detected capacity change from 0 to 128 11:19:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) 11:19:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000024000006040000000000f93132", 0x39}], 0x1) 11:19:37 executing program 4: socket(0x0, 0xa00, 0x0) [ 1341.238522][T31347] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1341.253011][T31341] ptm ptm1: ldisc open failed (-12), clearing slot 1 11:19:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14}, 0xc0}}, 0x0) 11:19:37 executing program 0: syz_mount_image$qnx4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[{0x0}], 0x0, 0x0) 11:19:37 executing program 3: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x100, 0x20, 0x2}, 0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x45, "9088b2b771a29251afcd0b01774da66327b7f2751f07b1b35ef2151710014c3547d8b8c9ca7464e566361016e804667c04c745b0825bdbe872fec5060883c6f2340f6b93a9"}, &(0x7f00000001c0)=0x4d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4000f) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x391880, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x100, 0x20, 0x2}, 0x18) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x45, "9088b2b771a29251afcd0b01774da66327b7f2751f07b1b35ef2151710014c3547d8b8c9ca7464e566361016e804667c04c745b0825bdbe872fec5060883c6f2340f6b93a9"}, &(0x7f00000001c0)=0x4d) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4000f) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x391880, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xd) (async) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) (async) [ 1341.306997][T31348] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:38 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$x25(r0, &(0x7f0000000300)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 11:19:38 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000100), 0x4) 11:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006800000006040000000000f93132", 0x39}], 0x1) 11:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000060000006040000000000f93132", 0x39}], 0x1) 11:19:38 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 11:19:38 executing program 4: getresuid(&(0x7f00000010c0), 0x0, 0x0) 11:19:38 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x2082) write$midi(r0, 0x0, 0xeffdffff) 11:19:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 11:19:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xb) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="3d743e9114e6fa6eab63874ad83615a8c61eb639989077a87d14de4628181df3d0f8bd66ac63a9a8b8c74c6ae67e9925d219e7a0f69eb6f264d8685d95029559026295e9fa5993dc6e0add940972e4a0aee654f61753eda3d17c77be93bf793c03e1edd9cbe309ebe3ab01969c930a6b9c7910") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 11:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fc000006040000000000f93132", 0x39}], 0x1) 11:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200006c00000006040000000000f93132", 0x39}], 0x1) 11:19:38 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x10c, 0x8, 0x0, 0x0) 11:19:38 executing program 0: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xc0f) syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340)="7b9fc945cff32acf", 0x8, 0x8}, {0x0}], 0x0, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}, {@audit}]}) io_submit(0x0, 0x0, 0x0) 11:19:38 executing program 4: r0 = socket(0x1d, 0x3, 0x1) bind$x25(r0, 0x0, 0x0) 11:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000c6d00000006040000000000f93132", 0x39}], 0x1) [ 1341.964835][ T5325] Bluetooth: hci8: Frame reassembly failed (-84) 11:19:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fd000006040000000000f93132", 0x39}], 0x1) 11:19:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)={0x18, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_EXPRESSIONS={0x4}]}, 0x18}}, 0x0) 11:19:38 executing program 4: syz_mount_image$befs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x3f00, &(0x7f00000004c0)) 11:19:38 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0bff"], 0x208) 11:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200007400000006040000000000f93132", 0x39}], 0x1) [ 1342.549674][ T4431] Bluetooth: hci6: command 0x041b tx timeout 11:19:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xb) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="3d743e9114e6fa6eab63874ad83615a8c61eb639989077a87d14de4628181df3d0f8bd66ac63a9a8b8c74c6ae67e9925d219e7a0f69eb6f264d8685d95029559026295e9fa5993dc6e0add940972e4a0aee654f61753eda3d17c77be93bf793c03e1edd9cbe309ebe3ab01969c930a6b9c7910") (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 11:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000030006040000000000f93132", 0x39}], 0x1) 11:19:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 11:19:40 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@null, 0x0, 'ip6_vti0\x00'}) 11:19:40 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000100)=0x8000, 0x4) 11:19:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200007a00000006040000000000f93132", 0x39}], 0x1) [ 1343.989716][T18029] Bluetooth: hci8: command 0x1003 tx timeout [ 1343.989775][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:19:40 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) 11:19:40 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000001400)) 11:19:40 executing program 4: syz_mount_image$qnx4(0x0, &(0x7f0000001300)='./file0\x00', 0x0, 0x2, &(0x7f0000001440)=[{0x0, 0x0, 0x8}, {&(0x7f0000001380)}], 0x5959024f804f1af1, &(0x7f0000001480)={[{'/dev/vcs#\x00'}, {'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}]}) 11:19:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 64) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xb) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="3d743e9114e6fa6eab63874ad83615a8c61eb639989077a87d14de4628181df3d0f8bd66ac63a9a8b8c74c6ae67e9925d219e7a0f69eb6f264d8685d95029559026295e9fa5993dc6e0add940972e4a0aee654f61753eda3d17c77be93bf793c03e1edd9cbe309ebe3ab01969c930a6b9c7910") (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 11:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000e8030006040000000000f93132", 0x39}], 0x1) 11:19:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fe8000000006040000000000f93132", 0x39}], 0x1) 11:19:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000200)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 11:19:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000640)={@rand_addr, @multicast1}, 0xc) 11:19:40 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x48002, 0x0) 11:19:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000ee030006040000000000f93132", 0x39}], 0x1) 11:19:40 executing program 5: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x5b3c9e0b92d72a4) [ 1344.326504][T25276] Bluetooth: hci8: Frame reassembly failed (-84) [ 1344.335419][T25276] Bluetooth: hci8: Frame reassembly failed (-84) 11:19:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 11:19:40 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x422200, 0x0) 11:19:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200008100000006040000000000f93132", 0x39}], 0x1) 11:19:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0xf0ff7f}}, 0x0) [ 1344.629606][T18029] Bluetooth: hci6: command 0x040f tx timeout 11:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) 11:19:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000050006040000000000f93132", 0x39}], 0x1) 11:19:42 executing program 4: syz_open_dev$vcsn(&(0x7f0000002c00), 0x1, 0x60000) 11:19:42 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000100), 0x4) 11:19:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002001e9300000006040000000000f93132", 0x39}], 0x1) [ 1346.389689][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1346.389788][T18029] Bluetooth: hci8: command 0x1003 tx timeout 11:19:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:19:43 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, 0x0) 11:19:43 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 11:19:43 executing program 0: syz_open_dev$vcsn(&(0x7f0000000b40), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) [ 1346.478295][T31517] validate_nla: 28 callbacks suppressed [ 1346.478321][T31517] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={0x0}}, 0x0) [ 1346.556740][T25278] Bluetooth: hci8: Frame reassembly failed (-84) 11:19:43 executing program 4: syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) 11:19:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x3c}}, 0x0) [ 1346.603419][T31519] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1346.614071][T25276] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 11:19:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 1346.686927][T31523] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1346.709593][ T5699] Bluetooth: hci6: command 0x0419 tx timeout [ 1346.723585][T31524] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000060006040000000000f93132", 0x39}], 0x1) 11:19:43 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x14940, 0x0) 11:19:43 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:19:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fec000000006040000000000f93132", 0x39}], 0x1) [ 1346.863181][T31545] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1346.899292][T31546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1346.930383][T31545] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1346.948938][T31546] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) (rerun: 64) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:19:45 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000000c0)={0x0, "6310a40c99ada2a7f0a2c775c40d9248472df8bdc1b0055922cbfc6a74348632826a2ef860e989cc7310b10a1b3addfd4e562ebcfe38fc8e0d24c61abd0a6a690e8df06abb6711d85b54fba21fc4e1d92e53d22cf188184e4358244ffaf21a26901c28c52dad179e0ef0d7276daaed61fb0042d6e14af09d38e94fb158651b0c"}) 11:19:45 executing program 4: openat$vnet(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) 11:19:45 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x0) 11:19:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ce00000006040000000000f93132", 0x39}], 0x1) 11:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000070006040000000000f93132", 0x39}], 0x1) [ 1348.629721][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1348.636909][ T4431] Bluetooth: hci8: command tx timeout 11:19:45 executing program 4: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='user\x00', &(0x7f0000000080)='v\x86\xf6y\xd2.\xf3\xa8\xef\xf7\xd19\x14\fican0\x00') 11:19:45 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 11:19:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000002c0)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "6a4ffba379525b1e39168746b5fcf263d4a5e10338e672395c400ecb603493b3", "c0bdf4da0972191e897c111661fdaa8c36af236370a77045db0aa358a84da7e5"}}}]}, 0x268}}, 0x0) [ 1348.730844][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1348.734789][T31555] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1348.740732][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:19:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0xc000}, 0x0) [ 1348.792048][T31556] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fc00000006040000000000f93132", 0x39}], 0x1) 11:19:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000090006040000000000f93132", 0x39}], 0x1) 11:19:45 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) 11:19:45 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x298041, 0x0) 11:19:45 executing program 0: socketpair(0x0, 0xde5ecc9494071b63, 0x0, 0x0) 11:19:45 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 11:19:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000040801020000000000000000020000082400048008000140800000000800014000000009"], 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 11:19:45 executing program 5: syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x440040) [ 1348.993383][ T2449] Bluetooth: hci8: Frame reassembly failed (-84) [ 1349.020591][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 11:19:45 executing program 0: syz_mount_image$qnx4(&(0x7f00000012c0), 0x0, 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000001340)='{', 0x1}], 0x0, &(0x7f0000001480)) 11:19:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000fd00000006040000000000f93132", 0x39}], 0x1) 11:19:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) [ 1349.072321][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 11:19:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000a0006040000000000f93132", 0x39}], 0x1) 11:19:47 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x1, 0x41, "45c342b94f77ccac6fc330dae820ff0f00000000000095da9dc1d57720442386358f6aced3e24afce6f10920b4c83bd91cca2f48c317d6d9da263311b6558e3ff8"}) 11:19:47 executing program 0: timer_create(0x2, 0x0, &(0x7f00000000c0)) 11:19:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 11:19:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020080fe00000006040000000000f93132", 0x39}], 0x1) 11:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000c0006040000000000f93132", 0x39}], 0x1) [ 1351.029635][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:19:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x31) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xb) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x5a3d1ca333814a88, @bcast, @bpq0, 0x3, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7b9, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:19:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001180)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 11:19:47 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 11:19:47 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x101001) write$midi(r0, &(0x7f00000000c0)="9c", 0x1) [ 1351.139117][T25276] Bluetooth: hci8: Frame reassembly failed (-84) [ 1351.170490][T31611] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 2 11:19:47 executing program 0: socket(0x23, 0x0, 0x8) 11:19:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200c0fe00000006040000000000f93132", 0x39}], 0x1) 11:19:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000006d0c0006040000000000f93132", 0x39}], 0x1) 11:19:47 executing program 4: clock_adjtime(0x0, &(0x7f0000000140)) 11:19:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000200)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 11:19:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ff00000006040000000000f93132", 0x39}], 0x1) 11:19:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}, 0x1, 0x0, 0xc0}, 0x0) 11:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000e0006040000000000f93132", 0x39}], 0x1) [ 1351.515070][T31638] validate_nla: 19 callbacks suppressed [ 1351.515090][T31638] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1351.561355][T31635] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1351.577070][T31640] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x31) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xb) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x5a3d1ca333814a88, @bcast, @bpq0, 0x3, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7b9, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:19:49 executing program 0: syz_mount_image$qnx4(0x0, &(0x7f0000001300)='./file0\x00', 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340)='{', 0x1, 0x8}, {&(0x7f0000001380)}], 0x0, &(0x7f0000001480)={[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 11:19:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8983, &(0x7f0000000800)={'vcan0\x00'}) 11:19:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000f0006040000000000f93132", 0x39}], 0x1) 11:19:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000400ad000006040000000000f93132", 0x39}], 0x1) 11:19:49 executing program 5: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x7, 0xa83c}) write$nbd(0xffffffffffffffff, &(0x7f0000000280)={0x67446698, 0x1, 0x0, 0x0, 0x0, "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"}, 0xfc0) syz_mount_image$qnx4(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x10000, 0x2, &(0x7f0000001440)=[{&(0x7f0000001340)="7b9fc945cff32acf", 0x8, 0x8}, {&(0x7f0000001380)="5a62aafe8d03f49429aee28835182419dce6b1bf037ae1eedda542e423f4a72f4ef33bd355f61610446e42721f5f19aaf24efc43259818719a9fa212cdd482854a28521e9d9ffc840ea536b564262764546cd3df05e47d39f3b0544ecbdc1b968fcd32135126c5a420a7e5857694889538b1ae30252c227383e22ba36d5a90b46070512fb26fd898d22f0e", 0x8b}], 0x0, &(0x7f0000001480)={[{'{%:'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@permit_directio}, {@measure}, {@audit}]}) [ 1353.189612][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:19:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) [ 1353.261588][T31646] loop5: detected capacity change from 0 to 128 [ 1353.278371][T31647] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1353.308207][T31646] qnx4: no qnx4 filesystem (no root dir). 11:19:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0xf000}}, 0x0) [ 1353.368371][T31649] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:19:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x31) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xb) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x5a3d1ca333814a88, @bcast, @bpq0, 0x3, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7b9, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11:19:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) 11:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1353.570256][T31657] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1353.602428][T31659] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000160006040000000000f93132", 0x39}], 0x1) 11:19:50 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x10c, 0x4, 0x0, 0x4) 11:19:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ffffe0000006040000000000f93132", 0x39}], 0x1) 11:19:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) 11:19:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="fa", 0x1}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x8}, 0x0, 0x0, 0x0) 11:19:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:19:50 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000200000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1353.751798][T31677] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1353.848428][T31681] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1353.883044][T31683] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:19:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x66f, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 11:19:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000170006040000000000f93132", 0x39}], 0x1) [ 1354.099656][ T3680] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1354.470000][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.482768][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.492805][ T3680] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1354.502044][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.997776][ T3680] wacom 0003:056A:0331.000B: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1355.194129][T31685] wacom 0003:056A:0331.000B: pid 31685 passed too short report [ 1355.203614][T21703] usb 1-1: USB disconnect, device number 31 11:19:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000100), 0x4) 11:19:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000010006040000000000f93132", 0x39}], 0x1) 11:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000180006040000000000f93132", 0x39}], 0x1) [ 1355.669725][T21709] Bluetooth: hci8: command 0x1003 tx timeout [ 1355.669904][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:19:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xf}, 0x18}}, 0x0) 11:19:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:19:52 executing program 5: sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000003000000002000000040000", 0x47, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011a00)}, {0x0, 0x0, 0xc000}, {0x0}, {0x0}], 0x0, &(0x7f0000000380)=ANY=[]) ioctl$TCSETS2(0xffffffffffffffff, 0x5453, 0x0) 11:19:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 11:19:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) syz_open_pts(r2, 0x103002) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r1, r3, &(0x7f0000000100)=0xa5bd, 0x77) 11:19:52 executing program 4: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) [ 1355.821628][T31708] loop5: detected capacity change from 0 to 192 11:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001e0006040000000000f93132", 0x39}], 0x1) 11:19:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000020006040000000000f93132", 0x39}], 0x1) [ 1355.866611][T31708] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1355.883409][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1355.893065][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:19:52 executing program 5: statfs(&(0x7f0000000040)='./file0/file0\x00', 0x0) 11:19:52 executing program 5: set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x3) syz_read_part_table(0x0, 0x1, &(0x7f00000017c0)=[{&(0x7f0000000000)="b29a775a", 0x4, 0x9d8b}]) [ 1356.071404][T18029] usb 1-1: new high-speed USB device number 32 using dummy_hcd 11:19:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) syz_open_pts(r2, 0x103002) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r1, r3, &(0x7f0000000100)=0xa5bd, 0x77) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) (async) syz_open_pts(r2, 0x103002) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe2) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) sendfile(r1, r3, &(0x7f0000000100)=0xa5bd, 0x77) (async) [ 1356.119029][T31724] loop5: detected capacity change from 0 to 157 11:19:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x710046a2d881a673, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 11:19:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000030006040000000000f93132", 0x39}], 0x1) [ 1356.283313][T20010] Bluetooth: hci5: sending frame failed (-49) [ 1356.291174][ T3646] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1356.376373][ T2449] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1356.407595][T31726] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1356.469729][T18029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.490313][T18029] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.519945][T18029] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1356.550860][T18029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.076787][T18029] wacom 0003:056A:0331.000C: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1357.147520][T25278] device hsr_slave_0 left promiscuous mode [ 1357.157468][T25278] device hsr_slave_1 left promiscuous mode [ 1357.184405][T25278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.207822][T25278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.235121][T25278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.259679][T25278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.282541][T25278] device bridge_slave_1 left promiscuous mode [ 1357.299144][T25278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.320718][T25278] device bridge_slave_0 left promiscuous mode [ 1357.326993][T25278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.335192][T31703] wacom 0003:056A:0331.000C: pid 31703 passed too short report [ 1357.360688][T18029] usb 1-1: USB disconnect, device number 32 [ 1357.374871][T25278] device veth1_macvtap left promiscuous mode [ 1357.412391][T25278] device veth0_macvtap left promiscuous mode [ 1357.418562][T25278] device veth1_vlan left promiscuous mode [ 1357.434872][T25278] device veth0_vlan left promiscuous mode [ 1357.756713][T25278] team0 (unregistering): Port device team_slave_1 removed [ 1357.772380][T25278] team0 (unregistering): Port device team_slave_0 removed [ 1357.785547][T25278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.801210][T25278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 11:19:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x8102, 0x2811fdff) syz_open_pts(r2, 0x103002) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe2) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r1, r3, &(0x7f0000000100)=0xa5bd, 0x77) 11:19:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000040006040000000000f93132", 0x39}], 0x1) 11:19:54 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x33fe0}}, 0x0) 11:19:54 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 11:19:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) [ 1357.882299][T25278] bond0 (unregistering): Released all slaves [ 1357.968661][T20010] Bluetooth: hci5: sending frame failed (-49) [ 1357.976934][ T3646] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1358.015838][T31750] validate_nla: 11 callbacks suppressed [ 1358.015857][T31750] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1358.070008][T31755] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1358.209598][T21709] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1358.569712][T21709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.587824][T21709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.608852][T21709] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1358.628449][T21709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.153929][T21709] wacom 0003:056A:0331.000D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1359.369296][T31754] wacom 0003:056A:0331.000D: pid 31754 passed too short report [ 1359.386583][ T5699] usb 1-1: USB disconnect, device number 33 [ 1361.350585][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.356929][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.151301][ T3646] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 1365.136998][T20010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1365.146725][T20010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1365.154822][T20010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1365.163673][T20010] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1365.171397][T20010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1365.178602][T20010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1365.274731][T31763] chnl_net:caif_netlink_parms(): no params data found [ 1365.320274][T31763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.327492][T31763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.337171][T31763] device bridge_slave_0 entered promiscuous mode [ 1365.346305][T31763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.354165][T31763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.362128][T31763] device bridge_slave_1 entered promiscuous mode [ 1365.386736][T31763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.397763][T31763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.425352][T31763] team0: Port device team_slave_0 added [ 1365.434761][T31763] team0: Port device team_slave_1 added [ 1365.458002][T31763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.465083][T31763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.491120][T31763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.504014][T31763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.511057][T31763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.537579][T31763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.567940][T31763] device hsr_slave_0 entered promiscuous mode [ 1365.575036][T31763] device hsr_slave_1 entered promiscuous mode [ 1365.581716][T31763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.589285][T31763] Cannot create hsr debugfs directory [ 1365.665201][T31763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.672337][T31763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.679736][T31763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.686876][T31763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.733630][T31763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.748495][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.758419][T21709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.767783][T21709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.777161][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1365.792495][T31763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.811630][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.820213][T21709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.827304][T21709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.836491][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.845554][T21709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.852658][T21709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.875768][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1365.894203][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1365.902916][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1365.912331][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1365.920852][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1365.932303][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1365.955350][T31763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1365.963087][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1365.971179][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.299774][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1366.308567][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.328466][T31763] device veth0_vlan entered promiscuous mode [ 1366.335918][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1366.344986][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.358103][T31763] device veth1_vlan entered promiscuous mode [ 1366.367164][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.375654][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.384248][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1366.408746][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1366.416794][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.425522][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.438316][T31763] device veth0_macvtap entered promiscuous mode [ 1366.447985][T31763] device veth1_macvtap entered promiscuous mode [ 1366.464523][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.479233][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.498350][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.509211][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.520192][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.530859][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.541253][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.552635][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.563564][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.574258][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.584393][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.595047][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.606216][T31763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.616552][T31728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.625270][T31728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1366.633946][T31728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1366.643644][T31728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.655436][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.666953][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.676964][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.687789][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.697994][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.708657][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.719168][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.733131][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.743231][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.753966][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.764673][T31763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.775340][T31763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.786503][T31763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.812411][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.826235][T18029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.904056][T25276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.920265][T25276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.934940][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.940477][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1366.949048][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.967191][T21709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:20:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001f0006040000000000f93132", 0x39}], 0x1) 11:20:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030", 0x3d, 0x1600}, {0x0}], 0x0, &(0x7f0000000380)=ANY=[]) 11:20:03 executing program 5: r0 = socket(0x28, 0x5, 0x0) sendto$x25(r0, 0x0, 0x400300, 0x0, 0x0, 0x0) 11:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000ad00040006040000000000f93132", 0x39}], 0x1) 11:20:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000180)=0x3f) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x40000) ioctl$TCXONC(r4, 0x540a, 0x3) r5 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r5, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) r6 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="019e23555b4b02ef9fc29e0c9e69f85badd888fe0d46496131637cbe5b036e8229715c2f79885e01e740ef12fa74ef5862c8fea89747fde9a776747320bb151557fd2c14eff6e55e401148b7189d2a1c03ca01c5c63123b0669b137ca8a878fbb2f8acbb6d801d0f01b3c2ebc49cc38b3cc8e6267b1e774944c02254e80647b8ec66ac58bc742470f37e5a6fa8980000000000"], 0x20) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x9, 0xb00) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000240)={r6}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) [ 1367.014432][T31784] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.034848][T31784] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.078728][T31791] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1367.087961][T31792] loop4: detected capacity change from 0 to 1024 11:20:03 executing program 5: r0 = socket(0x25, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1367.120074][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 1367.128421][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:20:03 executing program 5: r0 = socket(0x2a, 0x2, 0x0) connect$x25(r0, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) [ 1367.178691][T31796] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1367.206966][T31792] EXT4-fs error (device loop4): ext4_ext_check_inode:497: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1367.234548][T31799] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.250509][ T27] audit: type=1804 audit(1659266403.807:243): pid=31794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2438296449/syzkaller.IqlnIW/1139/file0" dev="sda1" ino=1141 res=1 errno=0 [ 1367.277594][T31728] Bluetooth: hci5: command 0x0409 tx timeout 11:20:03 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x8912, &(0x7f0000000000)={@null, 0x0, 'bridge_slave_0\x00'}) 11:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000050006040000000000f93132", 0x39}], 0x1) [ 1367.300319][T31792] EXT4-fs error (device loop4): ext4_quota_enable:6772: comm syz-executor.4: Bad quota inode # 3 [ 1367.329458][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.352096][T31803] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.353525][T31792] EXT4-fs warning (device loop4): ext4_enable_quotas:6809: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 1367.375288][T21709] usb 1-1: new high-speed USB device number 34 using dummy_hcd 11:20:03 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000380)=ANY=[]) 11:20:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) (rerun: 32) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000180)=0x3f) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x40000) ioctl$TCXONC(r4, 0x540a, 0x3) (async) r5 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r5, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async, rerun: 64) r6 = io_uring_setup(0x6d61, &(0x7f0000000180)) (rerun: 64) io_uring_register$IORING_REGISTER_PROBE(r6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="019e23555b4b02ef9fc29e0c9e69f85badd888fe0d46496131637cbe5b036e8229715c2f79885e01e740ef12fa74ef5862c8fea89747fde9a776747320bb151557fd2c14eff6e55e401148b7189d2a1c03ca01c5c63123b0669b137ca8a878fbb2f8acbb6d801d0f01b3c2ebc49cc38b3cc8e6267b1e774944c02254e80647b8ec66ac58bc742470f37e5a6fa8980000000000"], 0x20) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x9, 0xb00) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000240)={r6}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (rerun: 64) 11:20:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000240006040000000000f93132", 0x39}], 0x1) [ 1367.408088][T31809] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1367.465212][T31811] loop5: detected capacity change from 0 to 1024 [ 1367.477481][T31792] EXT4-fs (loop4): mount failed [ 1367.509735][T31812] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1367.542080][T25276] Bluetooth: hci8: Frame reassembly failed (-84) [ 1367.588584][T31819] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.597508][ T27] audit: type=1804 audit(1659266404.157:244): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2438296449/syzkaller.IqlnIW/1140/file0" dev="sda1" ino=1162 res=1 errno=0 11:20:04 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/keys\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x31000580) 11:20:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000060006040000000000f93132", 0x39}], 0x1) [ 1367.647481][T31811] EXT4-fs error (device loop5): ext4_quota_enable:6772: comm syz-executor.5: Bad quota inode # 4 [ 1367.678658][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.704782][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1367.713065][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1367.720369][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1367.727338][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1367.736164][T31811] EXT4-fs warning (device loop5): ext4_enable_quotas:6809: Failed to enable quota tracking (type=1, err=-116). Please run e2fsck to fix. [ 1367.770816][T31820] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1367.792739][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 11:20:04 executing program 4: r0 = socket(0x1, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1367.816657][T31811] EXT4-fs (loop5): mount failed [ 1367.840647][T21709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 11:20:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000003f0006040000000000f93132", 0x39}], 0x1) [ 1367.864653][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.872768][T21709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.885766][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.901833][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.927533][T21709] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1367.941567][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1367.959572][T21709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.972590][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1367.979834][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.030453][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.059837][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.070338][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.077918][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.088551][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.098889][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.106832][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.115335][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.124335][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.133608][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.141526][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.149100][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.156345][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.164282][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.171201][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.178761][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.185643][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.193935][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.202034][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.209812][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.216593][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.224306][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.234800][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.244559][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.255403][ T5282] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.263166][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.270531][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.277556][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.286784][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.300522][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.307347][ T7260] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.318149][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.325356][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.333209][T31816] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 1368.351915][ T2449] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1368.494409][T21709] wacom 0003:056A:0331.000E: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1368.704370][T31788] wacom 0003:056A:0331.000E: pid 31788 passed too short report [ 1368.717215][ T3680] usb 1-1: USB disconnect, device number 34 11:20:05 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 11:20:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000070006040000000000f93132", 0x39}], 0x1) 11:20:05 executing program 5: r0 = socket(0x25, 0x5, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 11:20:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000065580006040000000000f93132", 0x39}], 0x1) 11:20:05 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x400) 11:20:05 executing program 4: r0 = socket(0x1e, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1369.359814][T21709] Bluetooth: hci5: command 0x041b tx timeout [ 1369.589600][T18029] Bluetooth: hci8: command 0x1003 tx timeout [ 1369.589775][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000180)=0x3f) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x100) ioctl$TIOCGPTPEER(r3, 0x5441, 0x80000000) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x40000) ioctl$TCXONC(r4, 0x540a, 0x3) r5 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r5, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) r6 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="019e23555b4b02ef9fc29e0c9e69f85badd888fe0d46496131637cbe5b036e8229715c2f79885e01e740ef12fa74ef5862c8fea89747fde9a776747320bb151557fd2c14eff6e55e401148b7189d2a1c03ca01c5c63123b0669b137ca8a878fbb2f8acbb6d801d0f01b3c2ebc49cc38b3cc8e6267b1e774944c02254e80647b8ec66ac58bc742470f37e5a6fa8980000000000"], 0x20) (async) r7 = syz_open_dev$mouse(&(0x7f0000000280), 0x9, 0xb00) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000240)={r6}) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:06 executing program 5: r0 = socket(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) 11:20:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000600006040000000000f93132", 0x39}], 0x1) 11:20:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000080006040000000000f93132", 0x39}], 0x1) 11:20:06 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) [ 1369.629941][T31728] usb 1-1: new high-speed USB device number 35 using dummy_hcd 11:20:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 1369.876373][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1369.883131][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1370.040972][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.052076][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.062255][T31728] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1370.072680][T31728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.576394][T31728] wacom 0003:056A:0331.000F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1370.773467][T21704] usb 1-1: USB disconnect, device number 35 11:20:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 11:20:07 executing program 5: r0 = socket(0xa, 0x6, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)={0x228, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x228}}, 0x0) 11:20:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000090006040000000000f93132", 0x39}], 0x1) 11:20:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000058650006040000000000f93132", 0x39}], 0x1) 11:20:07 executing program 4: r0 = socket(0xa, 0x6, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 11:20:07 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1371.429970][ T3680] Bluetooth: hci5: command 0x040f tx timeout [ 1371.619497][T21703] usb 1-1: new high-speed USB device number 36 using dummy_hcd 11:20:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:08 executing program 4: r0 = syz_io_uring_setup(0x501d, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 11:20:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c6d0006040000000000f93132", 0x39}], 0x1) 11:20:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000a0006040000000000f93132", 0x39}], 0x1) 11:20:08 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x541b, 0x0) [ 1371.909987][ T3680] Bluetooth: hci8: command 0x1003 tx timeout [ 1371.909994][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:08 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000000)={@null, 0x0, 'bridge_slave_0\x00'}) [ 1372.014388][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1372.023276][T31902] validate_nla: 18 callbacks suppressed [ 1372.023289][T31902] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1372.039701][T21703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.070205][T21703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.081668][T21703] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1372.100907][T21703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.174846][T31905] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1372.633574][T21703] wacom 0003:056A:0331.0010: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1372.835774][ T3680] usb 1-1: USB disconnect, device number 36 11:20:09 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000080)=""/4117, 0x27, 0x1015, 0x1}, 0x20) 11:20:09 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f5}, 0x18}}, 0x0) 11:20:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000c0006040000000000f93132", 0x39}], 0x1) 11:20:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fe800006040000000000f93132", 0x39}], 0x1) 11:20:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) 11:20:09 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendmsg$qrtr(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001400)="4f1e", 0x2}], 0x1, &(0x7f0000001400)=ANY=[], 0x188}, 0x38) [ 1373.370339][T31913] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1373.408883][T31914] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1373.452495][T31913] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1373.492773][T31919] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1373.510089][T18029] Bluetooth: hci5: command 0x0419 tx timeout [ 1373.689509][T21704] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1374.049700][T21704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.060942][T21704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.071307][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1374.080152][T18029] Bluetooth: hci8: command tx timeout [ 1374.080643][T21704] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 11:20:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:20:10 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x7ffff000}}, 0x0) 11:20:10 executing program 4: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 11:20:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000810006040000000000f93132", 0x39}], 0x1) 11:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000e0006040000000000f93132", 0x39}], 0x1) [ 1374.104023][T21704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:20:10 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$MRT_ADD_VIF(r0, 0x29, 0x4b, 0x0, 0x0) 11:20:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1374.160719][T31928] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:10 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x8918, 0x0) [ 1374.203458][T31929] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1374.259235][T31863] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1374.275642][T31863] Bluetooth: hci8: Frame reassembly failed (-84) [ 1374.282247][T31928] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000f0006040000000000f93132", 0x39}], 0x1) 11:20:10 executing program 4: r0 = socket(0xa, 0x6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8c0) [ 1374.308233][T31934] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1374.603603][T21704] wacom 0003:056A:0331.0011: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 1374.806488][ T3680] usb 1-1: USB disconnect, device number 37 11:20:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000fec00006040000000000f93132", 0x39}], 0x1) [ 1375.619570][ T3680] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1375.989789][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.006948][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.016998][ T3680] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1376.032747][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:20:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/10) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:12 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x18}, 0x300}, 0x0) 11:20:12 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendto$x25(r0, 0x0, 0x400300, 0x0, 0x0, 0x0) 11:20:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000100006040000000000f93132", 0x39}], 0x1) 11:20:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003e80006040000000000f93132", 0x39}], 0x1) [ 1376.309693][T18029] Bluetooth: hci8: command 0x1003 tx timeout [ 1376.309793][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:12 executing program 5: r0 = socket(0x23, 0x2, 0x0) bind$can_j1939(r0, 0x0, 0x0) 11:20:12 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x8905, 0x0) 11:20:13 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3eb}, 0x18}}, 0x0) 11:20:13 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x89a0, &(0x7f0000000000)={@null, 0x0, 'bridge_slave_0\x00'}) 11:20:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000003ee0006040000000000f93132", 0x39}], 0x1) [ 1376.444405][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1376.470091][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1376.579770][ T3680] usbhid 1-1:1.0: can't add hid device: -71 [ 1376.585941][ T3680] usbhid: probe of 1-1:1.0 failed with error -71 [ 1376.645095][ T3680] usb 1-1: USB disconnect, device number 38 11:20:13 executing program 5: r0 = socket(0x2, 0x3, 0x4) connect$x25(r0, &(0x7f0000000000), 0x12) 11:20:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000160006040000000000f93132", 0x39}], 0x1) [ 1377.034992][T31982] validate_nla: 10 callbacks suppressed [ 1377.035011][T31982] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1377.065897][T31982] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:15 executing program 3: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_open_pts(r1, 0x280) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fc0006040000000000f93132", 0x39}], 0x1) 11:20:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000030000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xe3, &(0x7f0000000080)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x201) 11:20:15 executing program 5: r0 = socket(0xa, 0x2, 0x0) setsockopt$MRT6_PIM(r0, 0x11, 0xcf, 0x0, 0x0) 11:20:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000170006040000000000f93132", 0x39}], 0x1) [ 1378.479694][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1378.480856][T21703] Bluetooth: hci8: command 0x1003 tx timeout 11:20:15 executing program 5: r0 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 11:20:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011a00)}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000000380)=ANY=[]) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x5453, 0x0) dup2(r3, 0xffffffffffffffff) [ 1378.550889][T31992] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1378.630213][T31994] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:15 executing program 5: r0 = socket(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40020022, 0x0, 0x0) 11:20:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fd0006040000000000f93132", 0x39}], 0x1) [ 1378.680329][T31997] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1378.715674][T31999] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1378.809456][T32005] loop4: detected capacity change from 0 to 1024 [ 1379.188808][T32005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1379.311875][T32009] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1138: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 11:20:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000180006040000000000f93132", 0x39}], 0x1) 11:20:16 executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x38) [ 1379.611959][T32012] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1379.623071][ T3793] EXT4-fs (loop4): unmounting filesystem. [ 1379.643860][T32012] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1379.669801][T31728] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1379.713144][T32014] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1379.759558][T32014] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1380.039958][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.057356][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.067203][T31728] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1380.077440][T31728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:20:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000080fe0006040000000000f93132", 0x39}], 0x1) 11:20:17 executing program 5: r0 = socket(0x2, 0xa, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 1380.609709][T31728] usbhid 1-1:1.0: can't add hid device: -71 [ 1380.615729][T31728] usbhid: probe of 1-1:1.0 failed with error -71 [ 1380.625672][T31728] usb 1-1: USB disconnect, device number 39 [ 1380.629877][T21709] Bluetooth: hci8: command 0x1003 tx timeout [ 1380.632116][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:17 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendto$x25(r0, &(0x7f0000000140)='p', 0x1, 0x0, &(0x7f0000000240), 0x12) 11:20:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001e0006040000000000f93132", 0x39}], 0x1) 11:20:17 executing program 3: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_open_pts(r1, 0x280) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) syz_open_pts(r1, 0x280) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:20:17 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x8918, 0x0) 11:20:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000c0fe0006040000000000f93132", 0x39}], 0x1) 11:20:17 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000100), 0x0, 0x0) 11:20:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 11:20:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000ff0006040000000000f93132", 0x39}], 0x1) 11:20:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001f0006040000000000f93132", 0x39}], 0x1) 11:20:17 executing program 4: syz_clone(0x80000, &(0x7f0000000600)="cbc319cf904336717d3f4192f8af2939b5a13622d2dd6cad908c7b8f8e0205c6891baad54983af55c5fdc3da7a2c10a318d068165808977803cba33bd90c041218e6c0a77d8767675e075d1711e0804a1cfd89f037cb5b4faadc0c646cf32e287501746bda0724ffa1442839ccb1251abdf5fab55a33c39b5187146d2748c46449722745150718a2af798aec9458cedd108218207a68ad36dfaaf8b7758d4fbbce7e53c6dab6", 0xa6, 0x0, &(0x7f0000000700), &(0x7f0000000740)) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000480)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000500)="c429c4fa50cdf7767628831361fc1936358422a0e3a6811340421204ac35bf575eb91b9b29e32b9dac49aab09a5724585d7334fb3f80576356e997edb671e6328cb756e37f863fbdf3c226413355e22c8cf4ad4edf386ba4c30553e52a95e1f8e4617a1de088dcb4fcc193c21840d78f83b2c6f438cf33c309c64f51cc2d23876e8fa57e172a3773167188cf0e01ddc58aab0fb25b8c7ac8d5d1be48a92dfa9fbfed5efa4ae1", 0xa6) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x404000) [ 1381.210181][T31865] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1381.221383][T31865] Bluetooth: hci8: Frame reassembly failed (-84) 11:20:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000200006040000000000f93132", 0x39}], 0x1) [ 1381.469545][T31728] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1381.849559][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.860792][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.871115][T31728] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1381.880611][T31728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.431527][T31728] usbhid 1-1:1.0: can't add hid device: -71 [ 1382.440062][T31728] usbhid: probe of 1-1:1.0 failed with error -71 [ 1382.453935][T31728] usb 1-1: USB disconnect, device number 40 11:20:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000010040000000000f93132", 0x39}], 0x1) 11:20:19 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000080), 0x48) 11:20:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000240006040000000000f93132", 0x39}], 0x1) [ 1382.888066][T32059] validate_nla: 12 callbacks suppressed [ 1382.888085][T32059] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1382.922538][T32061] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1382.956930][T32062] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1382.971700][T32063] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:19 executing program 3: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x1, 0xffffffffffffffff}) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) syz_open_pts(r1, 0x280) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:19 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 11:20:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:19 executing program 4: r0 = socket(0xa, 0x3, 0x7) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 11:20:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000003f0006040000000000f93132", 0x39}], 0x1) 11:20:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000014040000000000f93132", 0x39}], 0x1) [ 1383.269698][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1383.269720][T21704] Bluetooth: hci8: command 0x1003 tx timeout 11:20:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x814}, 0x48) 11:20:19 executing program 4: syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0xc0) 11:20:19 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x121101, 0x0) [ 1383.348575][T32074] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:19 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) [ 1383.448330][T32072] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1383.476946][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1383.484615][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:20:20 executing program 5: pselect6(0x40, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 11:20:20 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000380)=""/91) [ 1383.492605][T32081] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000021040000000000f93132", 0x39}], 0x1) 11:20:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000480006040000000000f93132", 0x39}], 0x1) [ 1383.599691][T31728] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1383.633603][T32094] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1383.706913][T32098] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1383.739942][T32097] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1383.959738][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.971656][T31728] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.981707][T31728] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1383.991041][T31728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.549541][T31728] usbhid 1-1:1.0: can't add hid device: -71 [ 1384.555526][T31728] usbhid: probe of 1-1:1.0 failed with error -71 [ 1384.572301][T31728] usb 1-1: USB disconnect, device number 41 11:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="24a6428748743c2f90f7c4e53ea0d944904003092649fb66bc628abd90b70fb6e915ae6dbac2292100c9763ce137cf105eb5cc3153b6041f27821f4cefc1234c43a1", 0x42, 0x9}], 0x800010, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nobarrier}, {@order_relaxed}, {@nodiscard}, {}, {@snapshot}, {@nodiscard}, {}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) r2 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000380)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000740)=[{&(0x7f0000000d00)="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", 0x1000, 0x1}, {&(0x7f00000003c0)="a761cbff8df404c0ab404b28a150f45f991587040b180ae367873f333799eec4815ca0484b59cdec833a14f2e3bcd0bd9db65716229a535579353a560e9f51fecac5154ab85ce9ad6414e82aeacea4d5014ff01b89fadf1f5c783b1e5a3d8fdbb2c9454dd4faaec90ae9d65796e72a1cec91439fabbbb332b09cac16e3894251d99617687a2d778f12a6e600c6a456c84c6ca6dcd7b3d66522b2f47984c9d7814fc8b258bbab142a9331ea9521b0f60dd67ab75ff1f136fff8d66235219b6a73200579721ba87da49cd102799365fc180ded8bd0b3b2a474e3557ca9", 0xdc, 0xd72}, {&(0x7f00000004c0)="830a7d68599ab2a58f6b4aae27c024760724892ce9e05f2b3f4c4821354ff1aba3bb947ae95463f3de4bb2371a055c46afce13fcb4e2a0c4a058b7a897bb9a9a21744d52375b6cf43577dc7933c3f8a0a5f48b19a21a402b58961f6705d5d5d2fe30457700942b13b68a9a533a1e28375bddedc90debdb33eab25df5262c20650d7719cd8d57e349ab649a0ccca80196402c39323203c6e03012f7d782f8c17532724e12399447e5b8ca5ef4f9bc46aced23cc75a18c9db6467f4ea1b31a64acff90bba48fc0", 0xc6, 0x100000000}, {&(0x7f00000005c0)="8f4db80bb2e74b38754aeef2d3c2985705f527937aea84fa0f2e998fc7e2a53469cc2db19fcde130acbe1ce8a4baf235fdf64f5c5d82f2094d82fc2a6eef0c08016d7bbc1d2eedac093b506e23d6072617c6647b69392a068b3a16d33faa4891d44d2cb7f65c1f896b34dd708353d232e969a40c50d6310faaec27f603f0fcf78407b0f4744d909019d448d42539caeebcab", 0x92, 0x3}, {&(0x7f0000000680)="13d4670c703bd3d33fbfd66e2258b3980cb3729232fb1e39ab1d3b1b892e14368d2c27494b727d2a383870f0dfa10dc18e7d3870e6f6ac14f35a642caf744624e683b1eeb0ad2f991a5cc888eb844d8fa3e737b795230a4475a3969a88e05dcb776c5b1c819e91cea45f8c1fed33dfad1af00bea9de568a7678afb81159bbea2ce5d740bde65053802c0a85944", 0x8d, 0x2}], 0x2002000, &(0x7f00000007c0)={[{@discard}, {@localcaching}], [{@subj_user={'subj_user', 0x3d, '@^&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x61, 0x66, 0x1, 0x64, 0x64, 0x36], 0x2d, [0x64, 0x34, 0x61, 0x33], 0x2d, [0x35, 0x63, 0x61, 0x63], 0x2d, [0x63, 0x30, 0x34, 0x65], 0x2d, [0xa, 0x39, 0x39, 0x32, 0x72, 0x39, 0x62, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@permit_directio}]}) r3 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x122882, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_open_pts(r3, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:21 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) 11:20:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/116) 11:20:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000004c0006040000000000f93132", 0x39}], 0x1) 11:20:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000024040000000000f93132", 0x39}], 0x1) 11:20:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:21 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) 11:20:21 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) getrusage(0x1, &(0x7f0000000140)) 11:20:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000600006040000000000f93132", 0x39}], 0x1) 11:20:21 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/146) 11:20:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000025040000000000f93132", 0x39}], 0x1) 11:20:21 executing program 4: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000480)='u', 0x1, 0xfffffffffffffffd) [ 1385.143119][ C1] I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1385.154520][T32108] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 1385.213215][T31865] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1385.222209][T32108] NILFS (loop3): couldn't find nilfs on the device [ 1385.238711][T31865] Bluetooth: hci8: Frame reassembly failed (-84) [ 1385.340367][ T26] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1385.709569][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.720665][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.730814][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1385.740099][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.290364][ T26] usbhid 1-1:1.0: can't add hid device: -71 [ 1386.296407][ T26] usbhid: probe of 1-1:1.0 failed with error -71 [ 1386.309790][ T26] usb 1-1: USB disconnect, device number 42 11:20:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="24a6428748743c2f90f7c4e53ea0d944904003092649fb66bc628abd90b70fb6e915ae6dbac2292100c9763ce137cf105eb5cc3153b6041f27821f4cefc1234c43a1", 0x42, 0x9}], 0x800010, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nobarrier}, {@order_relaxed}, {@nodiscard}, {}, {@snapshot}, {@nodiscard}, {}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) r2 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000380)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000740)=[{&(0x7f0000000d00)="b35bcb82028aedf202589b1cd16d6a34c8e1f2e218e327eaac3fb12295316df0c22a162614f57520484a65de9287981f543d8fedd803dbf1bb9cec681f25c0bed7ed861b7127ef6262a6b146caf65329113ca2d9f4d53f6c093519d45e34e582c6469257838ef257b3747fa4420f55681a6ad1b6fc332b6932e7691b1409138dfda2409e4085a2fd209ac99e4b7a4f8aa6263246f6830c9e3f5b3a5795c0be5717429a0ff66e4d3c6a493b51dc20c93e70682ccb55b35131ece2ae3e7e8b3d6499877153c104421b3f5904d746bebf5db037c3344e01c97f92c95c755f18ebccbd927bc7ac9669eee6d0eb0b636dd97b8d65c4c9c8edfcfffc926ae1a071c193daa51cf4092c76a17c375d1d1493c90723df5de2898018162f6087ffd5638e21243eb701e683f4e43e9f8547c4235b90d70ebc99a2e7c027f852536b46808aad8bc217355772fc342020c59c8e54cd08f8231aa17bab085168c8672babcf1eb4309ac37abc281de99695326ba07462fd6a74798cf4bd9b0677f90d41ce749220efb1e9ba8c62e329e3802f3baafc34768762d1026c9fd5ba93b294dc4b14f185ddb4076dbf2bfee2e164017ddedd34fb86a73a5ef4350e2780fb8a3e5a026ac4a42dcab789e66a61e7d6f85cab384e67869950e790a33c122c9e0ed1089a75c47cd7bae2813ec2edccd66a07da86d80b6e85a7e6f13423ee9c7f1c8d712c37c0e751c5b5d6a682b993743c26a5a97566537943ee7a30f1e5d080177ade5c9ac0a370a37a310b15f8309e1f8034382ecaaeaf76f323d65040d8f7d02163a91f209cd931ec687c1d38061c74f0fc01d7df9d9deffa9f8fb33b7b675b910a49328064c4a51d2c699e0ba903e538981503e795237cdb5ee312c92947b8c89d0e652427809b8e8169dde451ddd89fc86694e75e7f9fc2be67549fc6cfe84f606bbb0b630d7d43295c01376145f95ed29e3d03c1808efc43fe970717fa3860b1c360fb4119ffbeece68dc29b009fcc4db06b852f76e3c6eab54f9d4851f10c66bfc64b09c738906c32a15dadf63d594b57241bebae1eb1658edc0249072d00c899ddef4e08949e553e708e37d7d1f8ae3b6ba828131d1b6828d76f9b42b2bbb2e30e0eedc4cd04f3bd4c313ed5585e399db94af866a5f27bfa8ba8c18d137e981f04ec5c2977238a8cc43710c403338f3c25ac8660a2fad9657c19cb70fd1562bd94b285ba91f82715303072d8847024d450555fc2a62e9d457fcd6c3103ba9c273727264d24635e53c85169af8f7cecf89e3c33e41a3d764291d636a5481e20531420aa75b5f735bb9c75c08b6b77a32e73b32f7eaef9ee32ad6900c870a52df1526e9d85fb4a2460e82e9d4a66d9d413c0ca6fbba5f37b88ec05bba8426d41e0d05b3719306f29cede331d788c9c089a364daedbc9a42f41ed350f41d2886e3cdd02cff21bdddd6470bd674b840cdefc946497896788d36466f189c1152bfb180010d5f2caa601d389bf45939e5ef3014a94a83dab5da830cf79cf4da760f8ae623522b34926303ee7577e2c94ed05712b737104106857ad7a60b72d51745fc6fc0cfe4b1679a05b1f108e0797a3bed823e72bc8a80c2919fb01b0895362ccbe95f3c6033cd83ab33db06b8bb138f2caf1e5d79d41473aaf93a1483ad0f2260b193a1665d083ba937b97f2ab954520f833b2bd9a705486e8f617dc1c1d76c0d5aed877d49cdb628d3e576ce50109ba31d9e8911a60592e372a1176551303e73938e84b0a4a275c596c3de293480ad4d5c82edad7dbefd77d6ea50206c7ed07c3a69a5b2b1ef30130794f7a08a0a527ac409f835dee5edb756c88b89fab35cf3ef8d57e9647546e612601f2288e63db669e3086b9b9b55b5171d21137a0051eba4c535ce0ce1890498d7d6f0da7f3b81dc94de34164afb50d41305eab2c5d86e2617a7b05a266a6c73bb2388826ffb0cb6f241f1c677fa177cbbb5241c24a86cce710acf8cd9cc9764a3ad709e88c0086098d5a6bf6b8d2c55bff3d7e0a4a58f7b74e0f4ec0cbd3fee6a3654b6d5f2f4bb89f9bb95fa9e936ad4607f0c0f802b4aab86c4f93976ab71868f0608c414a112b0e9a1e033920e25aaa88709f9d31f259ff36b57dbeacf68994c105d2fffb86756bcc6648c069ed2fa3e22bb2685ee8f672a390ce11aa73f22e316e7d6a1c7b77d5190a240d26ae9a7a18ebadcd967a1bdd247ea713bfc3a309d31e797f49900868912389c2dd5b66e2aa3496d044acc1d549b729e3833a848e4a9dd4a8a05408fb2e2685fd597e7e9cbe4295163096209940ff1e411325cba87be3b70b5a1b47f803e38e75ca0db8c4734eb42118b1db4517eac368532b37114ff1a0b64bd0618f4e585676cc99ef1a887e69e03b63bb2c41a49227f7ba1cd92bd26c0fbb836b285220b617784e5f9dd1b7c0cd262c57b6eab232ff0508463b4e9f937ed0269cd581155cbcb066b9c9f243c35900df05f111d7f63dec5d92c6353aa8926823d7309c77fcb76d3f98d2ce91f8f80a14c08cd09de90253e485224e7870d260919bb40c13e455f9a08bcf4a4ee43e3fca54eeaab5e5879a6406075f19f568ff6f63acf884d7d54be9d5195ee62161b981785473db4be61b49994975f23e6aa60cdb9cac25a60061f2e08694118bdc6c46ef63264c19872ed3cdf9a55ee7bdc27035a3f62e5ef9b77fae83482718874952f0c58f4b37fdd7f00faaed02b18f88b6e161ffd19f1fbac4fd4848eff6bf719823bd701c70e6bf5a165f272f7222fd04b09f6da553473438ea7b85582ff2f21cfee62ef5865ddeb4009826f7b77198965077d35231d477d1c3997d11e9194ab73748ce4eb12533fba090d2dad0c4df096d5f5d088fc902485cd0454084008a1f71e67e5c42d0b654e3fe1e3cf12844c2b35c452f47d238002a8d120e7173860a4a07039fab4f0c12087b2fd78f2f4f6bd9ee0dadee0569f50e8f77ffb7265a586f9a62754284ccd47d961f31e51de72fed45babb9bb4d44bed7c74285a9c539c7e7f2c7b365074542011f5117ba758e31c086d4b5a4035c84de5e5532c7d38de4d59229e421dbd5a8881a2c2a6621752bb82e9190d15583ed2b9de83d2f53c4a8c2a1828b4235a3e5247e61c989614799352e3f61aca643ef7d5a1bd45a2b81e9ef09e8be7676dffe0665e3d64890d3a1502cabc6b506a977974e6da18cf2274dc686196ba8400aee2128b1dc835eaac4785a025c47ebf2215280f3cbb0b279b36af04f02f86831f2188a2b14f3f84f548c4063474bb1e16f1b4b5df0918549c799e0e772f4ddb7f3c782ca58d419923e0cb1c605c5bb5c6dbfbbff3308f0f545debc504eadb62fcbc44c920911f4932880c115f2db0c465a64b28182af031a8bbbee2a3beef98596d3bf5e5faba2eee508b9311d030f000236b5fd950bb72acd2c6bd52d2f4a43ccfadffdabb2bed9b8a45defa748d069273e767c3235fe390a62e5d34ff295ef28748ac1dee790117e63850be2815153ac5e75972f904dd03ddba9efd7d499e32389c34887a0812eec1941ffc859ee61b83298d77c4addcfe00a44d02b94241794266769769a18603d5db3a00b57548fdf72b0181dd39cd0d69b8a1110b84d8d5813d58815eb910d73aa355573863bf6e9aa7e1d1a4415c83dc76b98c92526f1fae17ab6c50a2aea5134cf0404ca61e9e19b98a16bfd8f9d06baf1ace868f565656add590b810997db4bbf355cded23bfcc01844d211c3fbb180769542fe404a763c58819406eb2e50500ed2a76f7efc3e7804a665881c578f6542b3e60dd42f97b5342ee089f274b9ae074ac583ceab3cb47acb60016845c35edbb217e4162842892194ce00b8ed1d661eaf9e9d4754b6efc7006ba4215809612b4870f9d69364bbaf9d51a51e8f90b4a05f93db311eb181def6005b3e76048e333611a43f96f9c26eb34d9dc009781e9bd5b171280143321ea498da5eb122eee03ee2410b49b45de489918f1b3615f4daebcdb70c3d0ab22fa9e2317d7aec8d92f3cbea6639fd4f9e4455bb27c7185a63224ddfceae89395f1c43c72178a0e75e3abc54c5501b1a4d7524ca98440550cd4df4d45b26c7e66ea919bdfabd02cb8ab22dc500c45486eb2d48da511877f1f3cdd104efbf65c19a49132950a2c8414781d7751772c3c1426d7a7f1a4a54313b4889a16a31df43b46737e17f3843760e45e87bb38a6f894673ed64a480d69474ce9d142a609d051aa433d12b4498fb905a8e9822ee38764e16bc1e930650c292484b7009d8ca2aa9449918cfdbbc0c89dd8eee2efe19917f7ab8cf34f71a626dea7ef20d56c5704e90e94bd6da6c5df1ebd847605085cdf3ed9c28fbdd24b7ead2c04394a79829e50419ef6f4901bfe4a2c0579a2fc6cdfab75a736069943e7d5b5dba5c1e7c86270a8f337b17c16d3a9ec661e762c4f0a2d5b66c376ec66487699200d4a4d2cb226b48b1ab7eef8f71ee063261b34a9d7e7484aabb7e574810fe4869bbea6ec2a405716e929edfd39acce2f7f6eaa0d0886f434e03a1e797554c4c395f090e5c62ae5afa0c110545ee13a17f16cfacbcacbfe831894a73f2ab5b14bab7a04a77ce1885a16056114d29b7cced6ea0ace586aebb1eff8b94a7de37b9fd8451563d1ca39ed876127b937688561f9f919dfe5999de8b8d8979b3475f514d896bb2945cef8c21050855f61475ce852a4feff7051ca1a238e4308afd80791f9c27404cde6f91bd81053e50005bcc96e7095347b736a9286f000da21f788e01765bb195c40b1288e964e7d7649eff8d4155e0db4964985f3ce3265d42ec0ffe732a94d3a54ba0151d5a4db69369aa9d4a98f2b744c3fa63e7b173ba7b4f95027f6c657a4750b60225a7fbea3bece8aea3a939fd06f9c09925aaf94305d89cb1a68023fffcdc2664b6b48945d2019111997a135bd18778f34e1171d293d2f80ca5deb60b55c67de2fe8c15feb4d910258f1c3735a506e2e6c9d858050afaccbc9cc462372e99d80bc1c7ccdc29a5acd160482298aa9722b922ca53a6dbf029b0417ee54265817b4db3d0ff87f93fcb04c7f8e4f9084a5430a1db9ccab4b199f8f5c744faab48eddce6c1efc0d58c18abfdd49d8e539a8e24b3d1c7d0984bdbc67fb123fc9c505f78f41b0c978f9e56bcff8fed21108cca477003c755b1d3910ce416c63f7c22b06f29a94118491b23604ef8f888c13174abe23212388953bd4f34e2c2d7bb5ea359bcf971686d4b973f32363a6021a1d4166bb9d6794599a744bd103f50f7963d3bb0e71823d1dc4a84146b80d6c5b3385dd38d1900af641275b66c3545b72a4914622da0f3b09a1559bfe07c348fea61296155c426fcfd32cc0feddedb4b16758585a9bbe2d1fdf2b3974da4fa9671e7ebbdb95f222865ef0bda7ea48546f5913eca281031ca8d7f308ffe3b92025dc2f49837c3aad31dfa82b51260b3119dfbb486b328b682719ef899a2accba96667ed687b79be089f89acfd5401ba31f262f4472f654e58ee6b7b580dbf7d866adbdcf27dde43e6d0dbe018b2144a00acadcf4fc5f9ebdb7068bb5cd41ddb4c2dc4e9535a244ea8c23acf878f35d6f852eef5a12092128445fa9448883a7a1e54871269ca9b80e0eb4d0d9ae3dbfe6b343abd7b53813b084526f89aadfb78c59fe56a2ed7345b0fe1cabdbea93f261275c855b81133bc7a5a016d0ea9137a09b18e30c5e5d81c3355ac84b6256ab39545fc86c16d300003e59be67549eae5d50bbf9b307eecc1bb7eaf9943bb4da1c6cce6ae9046ff213", 0x1000, 0x1}, {&(0x7f00000003c0)="a761cbff8df404c0ab404b28a150f45f991587040b180ae367873f333799eec4815ca0484b59cdec833a14f2e3bcd0bd9db65716229a535579353a560e9f51fecac5154ab85ce9ad6414e82aeacea4d5014ff01b89fadf1f5c783b1e5a3d8fdbb2c9454dd4faaec90ae9d65796e72a1cec91439fabbbb332b09cac16e3894251d99617687a2d778f12a6e600c6a456c84c6ca6dcd7b3d66522b2f47984c9d7814fc8b258bbab142a9331ea9521b0f60dd67ab75ff1f136fff8d66235219b6a73200579721ba87da49cd102799365fc180ded8bd0b3b2a474e3557ca9", 0xdc, 0xd72}, {&(0x7f00000004c0)="830a7d68599ab2a58f6b4aae27c024760724892ce9e05f2b3f4c4821354ff1aba3bb947ae95463f3de4bb2371a055c46afce13fcb4e2a0c4a058b7a897bb9a9a21744d52375b6cf43577dc7933c3f8a0a5f48b19a21a402b58961f6705d5d5d2fe30457700942b13b68a9a533a1e28375bddedc90debdb33eab25df5262c20650d7719cd8d57e349ab649a0ccca80196402c39323203c6e03012f7d782f8c17532724e12399447e5b8ca5ef4f9bc46aced23cc75a18c9db6467f4ea1b31a64acff90bba48fc0", 0xc6, 0x100000000}, {&(0x7f00000005c0)="8f4db80bb2e74b38754aeef2d3c2985705f527937aea84fa0f2e998fc7e2a53469cc2db19fcde130acbe1ce8a4baf235fdf64f5c5d82f2094d82fc2a6eef0c08016d7bbc1d2eedac093b506e23d6072617c6647b69392a068b3a16d33faa4891d44d2cb7f65c1f896b34dd708353d232e969a40c50d6310faaec27f603f0fcf78407b0f4744d909019d448d42539caeebcab", 0x92, 0x3}, {&(0x7f0000000680)="13d4670c703bd3d33fbfd66e2258b3980cb3729232fb1e39ab1d3b1b892e14368d2c27494b727d2a383870f0dfa10dc18e7d3870e6f6ac14f35a642caf744624e683b1eeb0ad2f991a5cc888eb844d8fa3e737b795230a4475a3969a88e05dcb776c5b1c819e91cea45f8c1fed33dfad1af00bea9de568a7678afb81159bbea2ce5d740bde65053802c0a85944", 0x8d, 0x2}], 0x2002000, &(0x7f00000007c0)={[{@discard}, {@localcaching}], [{@subj_user={'subj_user', 0x3d, '@^&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x61, 0x66, 0x1, 0x64, 0x64, 0x36], 0x2d, [0x64, 0x34, 0x61, 0x33], 0x2d, [0x35, 0x63, 0x61, 0x63], 0x2d, [0x63, 0x30, 0x34, 0x65], 0x2d, [0xa, 0x39, 0x39, 0x32, 0x72, 0x39, 0x62, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@permit_directio}]}) r3 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x122882, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_open_pts(r3, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) (async) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="24a6428748743c2f90f7c4e53ea0d944904003092649fb66bc628abd90b70fb6e915ae6dbac2292100c9763ce137cf105eb5cc3153b6041f27821f4cefc1234c43a1", 0x42, 0x9}], 0x800010, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nobarrier}, {@order_relaxed}, {@nodiscard}, {}, {@snapshot}, {@nodiscard}, {}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async) syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000380)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000740)=[{&(0x7f0000000d00)="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", 0x1000, 0x1}, {&(0x7f00000003c0)="a761cbff8df404c0ab404b28a150f45f991587040b180ae367873f333799eec4815ca0484b59cdec833a14f2e3bcd0bd9db65716229a535579353a560e9f51fecac5154ab85ce9ad6414e82aeacea4d5014ff01b89fadf1f5c783b1e5a3d8fdbb2c9454dd4faaec90ae9d65796e72a1cec91439fabbbb332b09cac16e3894251d99617687a2d778f12a6e600c6a456c84c6ca6dcd7b3d66522b2f47984c9d7814fc8b258bbab142a9331ea9521b0f60dd67ab75ff1f136fff8d66235219b6a73200579721ba87da49cd102799365fc180ded8bd0b3b2a474e3557ca9", 0xdc, 0xd72}, {&(0x7f00000004c0)="830a7d68599ab2a58f6b4aae27c024760724892ce9e05f2b3f4c4821354ff1aba3bb947ae95463f3de4bb2371a055c46afce13fcb4e2a0c4a058b7a897bb9a9a21744d52375b6cf43577dc7933c3f8a0a5f48b19a21a402b58961f6705d5d5d2fe30457700942b13b68a9a533a1e28375bddedc90debdb33eab25df5262c20650d7719cd8d57e349ab649a0ccca80196402c39323203c6e03012f7d782f8c17532724e12399447e5b8ca5ef4f9bc46aced23cc75a18c9db6467f4ea1b31a64acff90bba48fc0", 0xc6, 0x100000000}, {&(0x7f00000005c0)="8f4db80bb2e74b38754aeef2d3c2985705f527937aea84fa0f2e998fc7e2a53469cc2db19fcde130acbe1ce8a4baf235fdf64f5c5d82f2094d82fc2a6eef0c08016d7bbc1d2eedac093b506e23d6072617c6647b69392a068b3a16d33faa4891d44d2cb7f65c1f896b34dd708353d232e969a40c50d6310faaec27f603f0fcf78407b0f4744d909019d448d42539caeebcab", 0x92, 0x3}, {&(0x7f0000000680)="13d4670c703bd3d33fbfd66e2258b3980cb3729232fb1e39ab1d3b1b892e14368d2c27494b727d2a383870f0dfa10dc18e7d3870e6f6ac14f35a642caf744624e683b1eeb0ad2f991a5cc888eb844d8fa3e737b795230a4475a3969a88e05dcb776c5b1c819e91cea45f8c1fed33dfad1af00bea9de568a7678afb81159bbea2ce5d740bde65053802c0a85944", 0x8d, 0x2}], 0x2002000, &(0x7f00000007c0)={[{@discard}, {@localcaching}], [{@subj_user={'subj_user', 0x3d, '@^&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x61, 0x66, 0x1, 0x64, 0x64, 0x36], 0x2d, [0x64, 0x34, 0x61, 0x33], 0x2d, [0x35, 0x63, 0x61, 0x63], 0x2d, [0x63, 0x30, 0x34, 0x65], 0x2d, [0xa, 0x39, 0x39, 0x32, 0x72, 0x39, 0x62, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@permit_directio}]}) (async) openat(r2, &(0x7f0000000340)='./file0\x00', 0x122882, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (async) syz_open_pts(r3, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:20:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/hid_logitech_hidpp', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), r0) 11:20:23 executing program 4: write$evdev(0xffffffffffffffff, 0x0, 0x0) getrusage(0x1, &(0x7f0000000140)) 11:20:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000036040000000000f93132", 0x39}], 0x1) 11:20:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000058650006040000000000f93132", 0x39}], 0x1) 11:20:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) [ 1387.269566][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1387.277160][ T26] Bluetooth: hci8: command tx timeout 11:20:23 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 11:20:23 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) [ 1387.392754][ C0] I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1387.404674][T32136] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 1387.435336][T32136] NILFS (loop3): couldn't find nilfs on the device 11:20:24 executing program 5: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 11:20:24 executing program 4: syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 11:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000040040000000000f93132", 0x39}], 0x1) 11:20:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000680006040000000000f93132", 0x39}], 0x1) [ 1387.483297][T32145] loop3: detected capacity change from 0 to 264192 [ 1387.491342][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1387.518295][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read [ 1387.561597][ T2970] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1387.581750][ T2970] Buffer I/O error on dev loop3, logical block 0, async page read [ 1387.587346][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1387.595405][ T2970] ldm_validate_partition_table(): Disk read failed. [ 1387.600908][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1387.612972][T31865] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1387.656350][ T2970] Dev loop3: unable to read RDB block 0 [ 1387.662235][ T2970] loop3: unable to read partition table [ 1387.668196][ T2970] loop3: partition table beyond EOD, truncated [ 1387.679551][ T3680] usb 1-1: new high-speed USB device number 43 using dummy_hcd 11:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r1, 0x100000011, 0x8102, 0x2811fdff) ioctl$TCFLSH(r1, 0x540b, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="24a6428748743c2f90f7c4e53ea0d944904003092649fb66bc628abd90b70fb6e915ae6dbac2292100c9763ce137cf105eb5cc3153b6041f27821f4cefc1234c43a1", 0x42, 0x9}], 0x800010, &(0x7f0000000280)={[{@nobarrier}, {@norecovery}, {@nobarrier}, {@order_relaxed}, {@nodiscard}, {}, {@snapshot}, {@nodiscard}, {}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) (async, rerun: 64) r2 = syz_mount_image$gfs2(&(0x7f0000000100), &(0x7f0000000380)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000740)=[{&(0x7f0000000d00)="b35bcb82028aedf202589b1cd16d6a34c8e1f2e218e327eaac3fb12295316df0c22a162614f57520484a65de9287981f543d8fedd803dbf1bb9cec681f25c0bed7ed861b7127ef6262a6b146caf65329113ca2d9f4d53f6c093519d45e34e582c6469257838ef257b3747fa4420f55681a6ad1b6fc332b6932e7691b1409138dfda2409e4085a2fd209ac99e4b7a4f8aa6263246f6830c9e3f5b3a5795c0be5717429a0ff66e4d3c6a493b51dc20c93e70682ccb55b35131ece2ae3e7e8b3d6499877153c104421b3f5904d746bebf5db037c3344e01c97f92c95c755f18ebccbd927bc7ac9669eee6d0eb0b636dd97b8d65c4c9c8edfcfffc926ae1a071c193daa51cf4092c76a17c375d1d1493c90723df5de2898018162f6087ffd5638e21243eb701e683f4e43e9f8547c4235b90d70ebc99a2e7c027f852536b46808aad8bc217355772fc342020c59c8e54cd08f8231aa17bab085168c8672babcf1eb4309ac37abc281de99695326ba07462fd6a74798cf4bd9b0677f90d41ce749220efb1e9ba8c62e329e3802f3baafc34768762d1026c9fd5ba93b294dc4b14f185ddb4076dbf2bfee2e164017ddedd34fb86a73a5ef4350e2780fb8a3e5a026ac4a42dcab789e66a61e7d6f85cab384e67869950e790a33c122c9e0ed1089a75c47cd7bae2813ec2edccd66a07da86d80b6e85a7e6f13423ee9c7f1c8d712c37c0e751c5b5d6a682b993743c26a5a97566537943ee7a30f1e5d080177ade5c9ac0a370a37a310b15f8309e1f8034382ecaaeaf76f323d65040d8f7d02163a91f209cd931ec687c1d38061c74f0fc01d7df9d9deffa9f8fb33b7b675b910a49328064c4a51d2c699e0ba903e538981503e795237cdb5ee312c92947b8c89d0e652427809b8e8169dde451ddd89fc86694e75e7f9fc2be67549fc6cfe84f606bbb0b630d7d43295c01376145f95ed29e3d03c1808efc43fe970717fa3860b1c360fb4119ffbeece68dc29b009fcc4db06b852f76e3c6eab54f9d4851f10c66bfc64b09c738906c32a15dadf63d594b57241bebae1eb1658edc0249072d00c899ddef4e08949e553e708e37d7d1f8ae3b6ba828131d1b6828d76f9b42b2bbb2e30e0eedc4cd04f3bd4c313ed5585e399db94af866a5f27bfa8ba8c18d137e981f04ec5c2977238a8cc43710c403338f3c25ac8660a2fad9657c19cb70fd1562bd94b285ba91f82715303072d8847024d450555fc2a62e9d457fcd6c3103ba9c273727264d24635e53c85169af8f7cecf89e3c33e41a3d764291d636a5481e20531420aa75b5f735bb9c75c08b6b77a32e73b32f7eaef9ee32ad6900c870a52df1526e9d85fb4a2460e82e9d4a66d9d413c0ca6fbba5f37b88ec05bba8426d41e0d05b3719306f29cede331d788c9c089a364daedbc9a42f41ed350f41d2886e3cdd02cff21bdddd6470bd674b840cdefc946497896788d36466f189c1152bfb180010d5f2caa601d389bf45939e5ef3014a94a83dab5da830cf79cf4da760f8ae623522b34926303ee7577e2c94ed05712b737104106857ad7a60b72d51745fc6fc0cfe4b1679a05b1f108e0797a3bed823e72bc8a80c2919fb01b0895362ccbe95f3c6033cd83ab33db06b8bb138f2caf1e5d79d41473aaf93a1483ad0f2260b193a1665d083ba937b97f2ab954520f833b2bd9a705486e8f617dc1c1d76c0d5aed877d49cdb628d3e576ce50109ba31d9e8911a60592e372a1176551303e73938e84b0a4a275c596c3de293480ad4d5c82edad7dbefd77d6ea50206c7ed07c3a69a5b2b1ef30130794f7a08a0a527ac409f835dee5edb756c88b89fab35cf3ef8d57e9647546e612601f2288e63db669e3086b9b9b55b5171d21137a0051eba4c535ce0ce1890498d7d6f0da7f3b81dc94de34164afb50d41305eab2c5d86e2617a7b05a266a6c73bb2388826ffb0cb6f241f1c677fa177cbbb5241c24a86cce710acf8cd9cc9764a3ad709e88c0086098d5a6bf6b8d2c55bff3d7e0a4a58f7b74e0f4ec0cbd3fee6a3654b6d5f2f4bb89f9bb95fa9e936ad4607f0c0f802b4aab86c4f93976ab71868f0608c414a112b0e9a1e033920e25aaa88709f9d31f259ff36b57dbeacf68994c105d2fffb86756bcc6648c069ed2fa3e22bb2685ee8f672a390ce11aa73f22e316e7d6a1c7b77d5190a240d26ae9a7a18ebadcd967a1bdd247ea713bfc3a309d31e797f49900868912389c2dd5b66e2aa3496d044acc1d549b729e3833a848e4a9dd4a8a05408fb2e2685fd597e7e9cbe4295163096209940ff1e411325cba87be3b70b5a1b47f803e38e75ca0db8c4734eb42118b1db4517eac368532b37114ff1a0b64bd0618f4e585676cc99ef1a887e69e03b63bb2c41a49227f7ba1cd92bd26c0fbb836b285220b617784e5f9dd1b7c0cd262c57b6eab232ff0508463b4e9f937ed0269cd581155cbcb066b9c9f243c35900df05f111d7f63dec5d92c6353aa8926823d7309c77fcb76d3f98d2ce91f8f80a14c08cd09de90253e485224e7870d260919bb40c13e455f9a08bcf4a4ee43e3fca54eeaab5e5879a6406075f19f568ff6f63acf884d7d54be9d5195ee62161b981785473db4be61b49994975f23e6aa60cdb9cac25a60061f2e08694118bdc6c46ef63264c19872ed3cdf9a55ee7bdc27035a3f62e5ef9b77fae83482718874952f0c58f4b37fdd7f00faaed02b18f88b6e161ffd19f1fbac4fd4848eff6bf719823bd701c70e6bf5a165f272f7222fd04b09f6da553473438ea7b85582ff2f21cfee62ef5865ddeb4009826f7b77198965077d35231d477d1c3997d11e9194ab73748ce4eb12533fba090d2dad0c4df096d5f5d088fc902485cd0454084008a1f71e67e5c42d0b654e3fe1e3cf12844c2b35c452f47d238002a8d120e7173860a4a07039fab4f0c12087b2fd78f2f4f6bd9ee0dadee0569f50e8f77ffb7265a586f9a62754284ccd47d961f31e51de72fed45babb9bb4d44bed7c74285a9c539c7e7f2c7b365074542011f5117ba758e31c086d4b5a4035c84de5e5532c7d38de4d59229e421dbd5a8881a2c2a6621752bb82e9190d15583ed2b9de83d2f53c4a8c2a1828b4235a3e5247e61c989614799352e3f61aca643ef7d5a1bd45a2b81e9ef09e8be7676dffe0665e3d64890d3a1502cabc6b506a977974e6da18cf2274dc686196ba8400aee2128b1dc835eaac4785a025c47ebf2215280f3cbb0b279b36af04f02f86831f2188a2b14f3f84f548c4063474bb1e16f1b4b5df0918549c799e0e772f4ddb7f3c782ca58d419923e0cb1c605c5bb5c6dbfbbff3308f0f545debc504eadb62fcbc44c920911f4932880c115f2db0c465a64b28182af031a8bbbee2a3beef98596d3bf5e5faba2eee508b9311d030f000236b5fd950bb72acd2c6bd52d2f4a43ccfadffdabb2bed9b8a45defa748d069273e767c3235fe390a62e5d34ff295ef28748ac1dee790117e63850be2815153ac5e75972f904dd03ddba9efd7d499e32389c34887a0812eec1941ffc859ee61b83298d77c4addcfe00a44d02b94241794266769769a18603d5db3a00b57548fdf72b0181dd39cd0d69b8a1110b84d8d5813d58815eb910d73aa355573863bf6e9aa7e1d1a4415c83dc76b98c92526f1fae17ab6c50a2aea5134cf0404ca61e9e19b98a16bfd8f9d06baf1ace868f565656add590b810997db4bbf355cded23bfcc01844d211c3fbb180769542fe404a763c58819406eb2e50500ed2a76f7efc3e7804a665881c578f6542b3e60dd42f97b5342ee089f274b9ae074ac583ceab3cb47acb60016845c35edbb217e4162842892194ce00b8ed1d661eaf9e9d4754b6efc7006ba4215809612b4870f9d69364bbaf9d51a51e8f90b4a05f93db311eb181def6005b3e76048e333611a43f96f9c26eb34d9dc009781e9bd5b171280143321ea498da5eb122eee03ee2410b49b45de489918f1b3615f4daebcdb70c3d0ab22fa9e2317d7aec8d92f3cbea6639fd4f9e4455bb27c7185a63224ddfceae89395f1c43c72178a0e75e3abc54c5501b1a4d7524ca98440550cd4df4d45b26c7e66ea919bdfabd02cb8ab22dc500c45486eb2d48da511877f1f3cdd104efbf65c19a49132950a2c8414781d7751772c3c1426d7a7f1a4a54313b4889a16a31df43b46737e17f3843760e45e87bb38a6f894673ed64a480d69474ce9d142a609d051aa433d12b4498fb905a8e9822ee38764e16bc1e930650c292484b7009d8ca2aa9449918cfdbbc0c89dd8eee2efe19917f7ab8cf34f71a626dea7ef20d56c5704e90e94bd6da6c5df1ebd847605085cdf3ed9c28fbdd24b7ead2c04394a79829e50419ef6f4901bfe4a2c0579a2fc6cdfab75a736069943e7d5b5dba5c1e7c86270a8f337b17c16d3a9ec661e762c4f0a2d5b66c376ec66487699200d4a4d2cb226b48b1ab7eef8f71ee063261b34a9d7e7484aabb7e574810fe4869bbea6ec2a405716e929edfd39acce2f7f6eaa0d0886f434e03a1e797554c4c395f090e5c62ae5afa0c110545ee13a17f16cfacbcacbfe831894a73f2ab5b14bab7a04a77ce1885a16056114d29b7cced6ea0ace586aebb1eff8b94a7de37b9fd8451563d1ca39ed876127b937688561f9f919dfe5999de8b8d8979b3475f514d896bb2945cef8c21050855f61475ce852a4feff7051ca1a238e4308afd80791f9c27404cde6f91bd81053e50005bcc96e7095347b736a9286f000da21f788e01765bb195c40b1288e964e7d7649eff8d4155e0db4964985f3ce3265d42ec0ffe732a94d3a54ba0151d5a4db69369aa9d4a98f2b744c3fa63e7b173ba7b4f95027f6c657a4750b60225a7fbea3bece8aea3a939fd06f9c09925aaf94305d89cb1a68023fffcdc2664b6b48945d2019111997a135bd18778f34e1171d293d2f80ca5deb60b55c67de2fe8c15feb4d910258f1c3735a506e2e6c9d858050afaccbc9cc462372e99d80bc1c7ccdc29a5acd160482298aa9722b922ca53a6dbf029b0417ee54265817b4db3d0ff87f93fcb04c7f8e4f9084a5430a1db9ccab4b199f8f5c744faab48eddce6c1efc0d58c18abfdd49d8e539a8e24b3d1c7d0984bdbc67fb123fc9c505f78f41b0c978f9e56bcff8fed21108cca477003c755b1d3910ce416c63f7c22b06f29a94118491b23604ef8f888c13174abe23212388953bd4f34e2c2d7bb5ea359bcf971686d4b973f32363a6021a1d4166bb9d6794599a744bd103f50f7963d3bb0e71823d1dc4a84146b80d6c5b3385dd38d1900af641275b66c3545b72a4914622da0f3b09a1559bfe07c348fea61296155c426fcfd32cc0feddedb4b16758585a9bbe2d1fdf2b3974da4fa9671e7ebbdb95f222865ef0bda7ea48546f5913eca281031ca8d7f308ffe3b92025dc2f49837c3aad31dfa82b51260b3119dfbb486b328b682719ef899a2accba96667ed687b79be089f89acfd5401ba31f262f4472f654e58ee6b7b580dbf7d866adbdcf27dde43e6d0dbe018b2144a00acadcf4fc5f9ebdb7068bb5cd41ddb4c2dc4e9535a244ea8c23acf878f35d6f852eef5a12092128445fa9448883a7a1e54871269ca9b80e0eb4d0d9ae3dbfe6b343abd7b53813b084526f89aadfb78c59fe56a2ed7345b0fe1cabdbea93f261275c855b81133bc7a5a016d0ea9137a09b18e30c5e5d81c3355ac84b6256ab39545fc86c16d300003e59be67549eae5d50bbf9b307eecc1bb7eaf9943bb4da1c6cce6ae9046ff213", 0x1000, 0x1}, {&(0x7f00000003c0)="a761cbff8df404c0ab404b28a150f45f991587040b180ae367873f333799eec4815ca0484b59cdec833a14f2e3bcd0bd9db65716229a535579353a560e9f51fecac5154ab85ce9ad6414e82aeacea4d5014ff01b89fadf1f5c783b1e5a3d8fdbb2c9454dd4faaec90ae9d65796e72a1cec91439fabbbb332b09cac16e3894251d99617687a2d778f12a6e600c6a456c84c6ca6dcd7b3d66522b2f47984c9d7814fc8b258bbab142a9331ea9521b0f60dd67ab75ff1f136fff8d66235219b6a73200579721ba87da49cd102799365fc180ded8bd0b3b2a474e3557ca9", 0xdc, 0xd72}, {&(0x7f00000004c0)="830a7d68599ab2a58f6b4aae27c024760724892ce9e05f2b3f4c4821354ff1aba3bb947ae95463f3de4bb2371a055c46afce13fcb4e2a0c4a058b7a897bb9a9a21744d52375b6cf43577dc7933c3f8a0a5f48b19a21a402b58961f6705d5d5d2fe30457700942b13b68a9a533a1e28375bddedc90debdb33eab25df5262c20650d7719cd8d57e349ab649a0ccca80196402c39323203c6e03012f7d782f8c17532724e12399447e5b8ca5ef4f9bc46aced23cc75a18c9db6467f4ea1b31a64acff90bba48fc0", 0xc6, 0x100000000}, {&(0x7f00000005c0)="8f4db80bb2e74b38754aeef2d3c2985705f527937aea84fa0f2e998fc7e2a53469cc2db19fcde130acbe1ce8a4baf235fdf64f5c5d82f2094d82fc2a6eef0c08016d7bbc1d2eedac093b506e23d6072617c6647b69392a068b3a16d33faa4891d44d2cb7f65c1f896b34dd708353d232e969a40c50d6310faaec27f603f0fcf78407b0f4744d909019d448d42539caeebcab", 0x92, 0x3}, {&(0x7f0000000680)="13d4670c703bd3d33fbfd66e2258b3980cb3729232fb1e39ab1d3b1b892e14368d2c27494b727d2a383870f0dfa10dc18e7d3870e6f6ac14f35a642caf744624e683b1eeb0ad2f991a5cc888eb844d8fa3e737b795230a4475a3969a88e05dcb776c5b1c819e91cea45f8c1fed33dfad1af00bea9de568a7678afb81159bbea2ce5d740bde65053802c0a85944", 0x8d, 0x2}], 0x2002000, &(0x7f00000007c0)={[{@discard}, {@localcaching}], [{@subj_user={'subj_user', 0x3d, '@^&'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x61, 0x66, 0x1, 0x64, 0x64, 0x36], 0x2d, [0x64, 0x34, 0x61, 0x33], 0x2d, [0x35, 0x63, 0x61, 0x63], 0x2d, [0x63, 0x30, 0x34, 0x65], 0x2d, [0xa, 0x39, 0x39, 0x32, 0x72, 0x39, 0x62, 0x39]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@permit_directio}]}) (rerun: 64) r3 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x122882, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_open_pts(r3, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:24 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000c80)='highspeed\x00', 0xa) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), 0xffffffffffffffff) 11:20:24 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r0, 0x7fff) io_submit(0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0xf) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000fa1000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x300000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000002040)={{0x0, 0x7ff}, 0x100, './bus\x00'}) io_destroy(r1) readv(0xffffffffffffffff, &(0x7f0000003400)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 11:20:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000006c0006040000000000f93132", 0x39}], 0x1) 11:20:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000081040000000000f93132", 0x39}], 0x1) [ 1387.944665][ C0] I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1387.966023][T32177] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 1388.021854][T32177] NILFS (loop3): couldn't find nilfs on the device [ 1388.061934][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.084570][ T3680] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.101676][ T3680] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1388.137802][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.699577][ T3680] usbhid 1-1:1.0: can't add hid device: -71 [ 1388.705549][ T3680] usbhid: probe of 1-1:1.0 failed with error -71 [ 1388.723271][ T3680] usb 1-1: USB disconnect, device number 43 11:20:25 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r0, 0x0, 0x0) 11:20:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000020006040000000000f93132", 0x39}], 0x1) 11:20:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000000c6d0006040000000000f93132", 0x39}], 0x1) 11:20:25 executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0x46, 0xe0, 0x0, 0x0, 0x3, 0x6, 0xffff, 0x15f, 0x40, 0x2f8, 0x10001, 0x0, 0x38, 0x2, 0x3, 0x0, 0x4}, [{0x0, 0x400, 0x1, 0x1, 0x53, 0x2, 0x7fff, 0x100}, {0x673e1e619e07c8f5, 0x54, 0x9, 0x4, 0x8001, 0x3, 0x0, 0x9}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1ab0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r0, 0x7fff) io_submit(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000000000000000000000000008cf0051aa70dfefef665947328e7ca6bb032ba59b219d30ea18b3f04a3b2c6a8"], 0xf) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x484}, 0x48) mmap(&(0x7f0000fa1000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x300000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000002040)={{0x5, 0x7ff}, 0x100, './bus\x00'}) io_destroy(r1) readv(0xffffffffffffffff, &(0x7f0000003400)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 11:20:25 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x8102, 0x2811fdff) write$UHID_INPUT(r0, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x28) memfd_secret(0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) 11:20:25 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r0, 0x7fff) io_getevents(r1, 0x6, 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x0) io_getevents(r1, 0x6, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) pidfd_open(0xffffffffffffffff, 0x0) [ 1389.168423][T32191] validate_nla: 21 callbacks suppressed [ 1389.168442][T32191] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:25 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x8102, 0x2811fdff) (async) write$UHID_INPUT(r0, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x28) (async) memfd_secret(0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) [ 1389.226373][T32192] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1389.255870][T32195] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000030006040000000000f93132", 0x39}], 0x1) 11:20:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000740006040000000000f93132", 0x39}], 0x1) [ 1389.292221][T32196] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:25 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000011, 0x8102, 0x2811fdff) write$UHID_INPUT(r0, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x28) memfd_secret(0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) fallocate(r0, 0x100000011, 0x8102, 0x2811fdff) (async) write$UHID_INPUT(r0, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x28) (async) memfd_secret(0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x30) (async) [ 1389.357443][T32204] pty pty26: ldisc open failed (-12), clearing slot 26 [ 1389.367748][T32210] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:25 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x4, 0xf5, &(0x7f0000000340)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1389.424997][T32212] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1389.474472][T32213] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fallocate(r1, 0x0, 0x2, 0x7fffffff) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"a2e3ad08ed6b52f99cfbf4c0879b45b4d04fe7ff7fc6e5539b3c68093b546a9b37649437089be0878fdb1ac6e7049b71b4956c0a9a472a5b47f3988f7ef31952a981ffe8d178708c523c921b1b9b580a169b50d336cd3b78130daa61d8e809ea882f6e02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4da0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71bfc31870262f5e801119242ca5b6bfc821e7e20002451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713cf39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987b67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0eee26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6000200000000000065d5e880576286522449df466c632b356f243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0004000000008000bea37de0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025907f8ea2e2f05dd3318271a1f5f8528f227e79c13800000000492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2360fe763c43470833ac96d3f3357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5307000000d92dad99dac44c3f0008047096a44060bebc2420aed92fa9b6c6224779415d97b9a6d6d5495c1180459043f41c2fc4f4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e67d1d7232f17696294378ce716dacfc5e3e03cfffffffffffff001034ef655b253ca509383815b1b6fc6522d4e2d48604665fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b5f668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d767d9a7a508ae54a3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11dbe200000000000000bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebd2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bc09ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f71c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be7fc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5d3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cdcffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebfeffffff82bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864d0270d81eaee5ee6cf1d0ab3785e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f362815687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bf0129165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc0488506dbd17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57234ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b937fe43c06d21e35810d8fe98b0000ea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a6045951f9a93ab5d99c066f7aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d068edc746b0827cbf652f406c6b95f2722e58c050400ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36de00bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f16c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0463ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071ffdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad7084c29743bc613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654575576e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274018c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb8d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c34c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce85dbd02ee46c5cd5892587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec660080934b33ad61b4f65d77e86abd6859cddf4bbae1f0930462df090000008562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b010a3ad0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000200", 0x1000}}, 0x1006) [ 1389.521599][T32214] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:26 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r0, 0x0, 0x0) 11:20:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000040006040000000000f93132", 0x39}], 0x1) 11:20:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$KDADDIO(r0, 0x4b34, 0x6) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 11:20:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000007a0006040000000000f93132", 0x39}], 0x1) 11:20:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b083b310000313b00000000000000000000000000000072"], 0x78) [ 1389.738403][T32234] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1389.785778][T32235] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:26 executing program 5: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x890b, 0x0) 11:20:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b083b31000031070000000000000000000000000000006d"], 0x78) 11:20:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000050006040000000000f93132", 0x39}], 0x1) 11:20:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000810006040000000000f93132", 0x39}], 0x1) 11:20:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000024c0)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 11:20:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000060006040000000000f93132", 0x39}], 0x1) 11:20:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b083b310031313b0000000048"], 0x78) 11:20:26 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r0, 0x0, 0x0) 11:20:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ffffa8880006040000000000f93132", 0x39}], 0x1) [ 1391.839614][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1391.856821][T32236] mkiss: ax0: crc mode is auto. 11:20:28 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:20:28 executing program 5: r0 = socket(0x2, 0x3, 0x8) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x6, 0x0, 0x0) 11:20:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000070006040000000000f93132", 0x39}], 0x1) 11:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000001e930006040000000000f93132", 0x39}], 0x1) 11:20:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x9) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$KDADDIO(r0, 0x4b34, 0x6) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 11:20:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:28 executing program 5: prlimit64(0x0, 0x0, &(0x7f00000000c0)={0xfc6f}, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000e5ff0000000040000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000000c0)=ANY=[]) 11:20:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prlimit64(0xffffffffffffffff, 0xe, 0x0, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) getpgid(r0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b083b00000031300000000000000000000000000000006d10930000000000004000000000000000000000000000000001000000000038000000000000000000000000fffffffe00000000000000000000000000000000000000000000000000000000000000000000000000003afdf4835ae11e5d3b7359baf8aa5ed48ce7d89c0333072575f27f17340c41707d966c7c0347202e481f747cb7acd06fe92fb15bfb5334c35bb7425969117213f923720c068c4f18aeec87a7540f1177cbaa5023237349225f"], 0x78) 11:20:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$KDADDIO(r0, 0x4b34, 0x6) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 11:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200ffffffc30006040000000000f93132", 0x39}], 0x1) 11:20:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000080006040000000000f93132", 0x39}], 0x1) [ 1392.140629][T32287] FAT-fs (loop5): Unrecognized mount option "oü" or missing value [ 1392.217981][T31864] Bluetooth: hci8: Frame reassembly failed (-84) 11:20:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000ce0006040000000000f93132", 0x39}], 0x1) 11:20:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000090006040000000000f93132", 0x39}], 0x1) 11:20:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:29 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/23, 0x17}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) r1 = dup(r0) read(r1, &(0x7f00000000c0)=""/230, 0xe6) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:20:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000a0006040000000000f93132", 0x39}], 0x1) 11:20:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fc0006040000000000f93132", 0x39}], 0x1) 11:20:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000c0006040000000000f93132", 0x39}], 0x1) 11:20:29 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 11:20:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffc0006040000000000f93132", 0x39}], 0x1) [ 1394.229479][T21709] Bluetooth: hci8: command 0x1003 tx timeout [ 1394.238268][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1394.265208][T32294] mkiss: ax0: crc mode is auto. 11:20:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000e0006040000000000f93132", 0x39}], 0x1) 11:20:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fd0006040000000000f93132", 0x39}], 0x1) 11:20:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prlimit64(0xffffffffffffffff, 0xe, 0x0, &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) getpgid(r0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1b5b083b00000031300000000000000000000000000000006d10930000000000004000000000000000000000000000000001000000000038000000000000000000000000fffffffe00000000000000000000000000000000000000000000000000000000000000000000000000003afdf4835ae11e5d3b7359baf8aa5ed48ce7d89c0333072575f27f17340c41707d966c7c0347202e481f747cb7acd06fe92fb15bfb5334c35bb7425969117213f923720c068c4f18aeec87a7540f1177cbaa5023237349225f4a775e73836bcc147408e3809022441c2c712267e47601e003b78a8f936f67b73d64d82c6690af8396db982215dd827f716e036b9f80cda393da3142a50509fa"], 0x78) 11:20:30 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1394.371786][T32326] validate_nla: 30 callbacks suppressed [ 1394.371805][T32326] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1394.441947][T25278] Bluetooth: hci8: Frame reassembly failed (-84) [ 1394.464117][T32327] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffd0006040000000000f93132", 0x39}], 0x1) [ 1394.516259][T32334] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1394.534825][T32333] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000f0006040000000000f93132", 0x39}], 0x1) [ 1394.658769][T32338] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1394.713532][T32340] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1394.747010][T32341] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000100006040000000000f93132", 0x39}], 0x1) 11:20:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000080fe0006040000000000f93132", 0x39}], 0x1) [ 1394.774153][T32342] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:31 executing program 4: pselect6(0x40, &(0x7f0000000280)={0x1}, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 11:20:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) [ 1394.871578][T32345] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1394.934192][T32347] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1395.279486][ T3680] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1395.479651][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1395.749537][ T3680] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1395.939460][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1396.063489][ T3680] usb usb1-port1: attempt power cycle 11:20:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:33 executing program 4: syz_usb_connect$uac1(0x0, 0xd0, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @extension_unit={0xd, 0x24, 0x8, 0x0, 0x0, 0x0, "0dda768c968c"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xfb, 0x3}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x1, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "a2cd38"}, @as_header={0x7}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "37cf8e8bdf"}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x5, {0x7, 0x25, 0x1, 0x183, 0x2, 0x5950}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x9, 0xea, {0x7, 0x25, 0x1, 0x82, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0x6, 0x81, 0x0, 0x2}, 0xbb, &(0x7f0000000180)={0x5, 0xf, 0xbb, 0x1, [@generic={0xb6, 0x10, 0x1, "9d5dca9d46e05a84af53eb08a7d2d81f7d10ad89e0ace1b93bde33412fe2f9ae077f71ee0791934484840fbee419fc2665e6fe788217d629fc7433b7b691ff9bfc6a6471a97d7c29511602923c163a7f8569a28ff97617e6b42dc8e925deedd260b79ca1d48a6d9876129b501a35f286e9da024d437d0c8bd5c150ab71046f0034dcea7568fb58f5c6abe24fd29e2f7b39867438929c2e1ea78d9267ca2ae2d2ddde67d1fff4e9cd92f5ac33fe6d23f35f17bc"}]}, 0x6, [{0x50, &(0x7f0000000240)=@string={0x50, 0x3, "05a492af0d712cbc18335d607de31545480b688c97a9263cfd3ecf9fe1bb097a072da4d4693a6fe162a8322a7cbf53e84300a3d4ecdfded982ef52e7b23e495f6d144106b07408e26ac507c199da"}}, {0x21, &(0x7f0000000300)=@string={0x21, 0x3, "8d973e34c3233bd05246e0bfcf32630199404e15c20b506dc6cd4564f761f8"}}, {0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="66031c75a589133f050c93aad6b244b0432a752bc62fc0155d62ff00d1a1d36fda5391a27305614527a4f4050de50f53fb5461b160422b6b2400e82c6bffff4170c798ae4e1857ba6241a75da44239d3e85dbac2b007a784422aaf7c3384357aed5a152131e9"]}, {0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "aeb234e6a70545e6b9b8943c2adb2a12327593824fa28489c089657ef1b94ff1387d43f353346e970c29cb98f1cd12eb9090a1b05766df5230b3d2548691eea939839a6a8683f662061be3bbf9"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x404}}, {0x9a, &(0x7f0000000480)=@string={0x9a, 0x3, "4ae236bfaa8a78bd8e6aa5b73e97d8c58e8c86d6c997a7104db55185f7d1dd4a0de0a84c65d1412ade1f8f47d28ebc5bedb397efaf73ae2221faf67c472ea008fc285ea66978da249da9c961fa2a99d1231f08b910bdb1bc325a009f283b6377ccee629bfc3c0644188825bab3c763d568815e7f6e950d5822b788ad4ddb17027c984f14071440e40d5d56f630d54c58c2ba34b1995635d2"}}]}) 11:20:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000c0fe0006040000000000f93132", 0x39}], 0x1) [ 1396.469669][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1396.470527][ T4431] Bluetooth: hci8: command 0x1003 tx timeout [ 1396.478572][ T3680] usb 1-1: new high-speed USB device number 46 using dummy_hcd 11:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000160006040000000000f93132", 0x39}], 0x1) 11:20:33 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 11:20:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fffffffe0006040000000000f93132", 0x39}], 0x1) 11:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000170006040000000000f93132", 0x39}], 0x1) [ 1396.669728][ T3680] usb 1-1: device descriptor read/8, error -61 11:20:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000ff0006040000000000f93132", 0x39}], 0x1) 11:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000180006040000000000f93132", 0x39}], 0x1) 11:20:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000001e0006040000000000f93132", 0x39}], 0x1) 11:20:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020088a8ffff0006040000000000f93132", 0x39}], 0x1) [ 1396.879864][T21709] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1396.959591][ T3680] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1397.139708][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1397.259665][ T3680] usb usb1-port1: unable to enumerate USB device [ 1397.319716][T21709] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1397.329756][T21709] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 1397.534050][T21709] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1397.543383][T21709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.551645][T21709] usb 5-1: Product: 甜覥㼓అꪓ닖ë„⩃⭵⿆ᗀæ‰Ã¿ê‡‘æ¿“åšêŠ‘ճ䕡ê§×´î”åŒå“»ë…¡ä‰ æ¬«$⳨ォ䇿ì°êº˜á¡Žë©—䅢嶧䊤팹巨슺ް蒧⩂粯è³ç¨µå«­â„•î¤± [ 1397.568234][T21709] usb 5-1: Manufacturer: éžã¾âƒí€»ä™’ë¿ ã‹Å£ä‚™á•Žà¯‚æµì·†æ‘…懷 [ 1397.576725][T21709] usb 5-1: SerialNumber: 늮֧뢹㲔ሪ甲芓ê‰è¦„觀繥맱ï…ç´¸ïƒã‘“é®â¤Œé£‹ì·±î¬’é‚낡晗募댰哒醆ꧮ茹檚莆拶ᬆ믣 11:20:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) [ 1397.920279][T21709] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1397.950592][T21709] usb 5-1: USB disconnect, device number 27 [ 1397.989059][T32126] udevd[32126]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.439526][ T3680] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1398.629663][ T3680] usb 1-1: device descriptor read/64, error 18 11:20:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000e0ffff0006040000000000f93132", 0x39}], 0x1) 11:20:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000240006040000000000f93132", 0x39}], 0x1) 11:20:35 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 11:20:35 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) sched_getattr(r2, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) [ 1398.709780][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:20:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000600006040000000000f93132", 0x39}], 0x1) 11:20:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002007fffffff0006040000000000f93132", 0x39}], 0x1) 11:20:35 executing program 4: bpf$OBJ_GET_PROG(0x15, &(0x7f0000000480)={&(0x7f0000000440)='.\x00'}, 0x10) [ 1398.929461][ T3680] usb 1-1: new high-speed USB device number 49 using dummy_hcd 11:20:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fc0006040000000000f93132", 0x39}], 0x1) 11:20:35 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1399.149628][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1399.271180][ T3680] usb usb1-port1: attempt power cycle [ 1399.699577][ T3680] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1399.899804][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1400.179619][ T3680] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1400.349603][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1400.475765][ T3680] usb usb1-port1: unable to enumerate USB device [ 1400.789938][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1400.798962][T21709] Bluetooth: hci8: command tx timeout 11:20:37 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200c3ffffff0006040000000000f93132", 0x39}], 0x1) 11:20:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000fd0006040000000000f93132", 0x39}], 0x1) 11:20:37 executing program 4: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa}, 0x44, 0x0}) 11:20:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001280)={&(0x7f00000011c0), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, 0x3, 0x6, 0x801}, 0x14}}, 0x0) 11:20:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) [ 1401.022636][T32404] validate_nla: 28 callbacks suppressed [ 1401.022656][T32404] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x125f, 0x0) [ 1401.074031][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 1401.075556][T32409] Bluetooth: hci8: Frame reassembly failed (-84) [ 1401.087378][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1401.111763][T32413] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000000) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) 11:20:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fcffffff0006040000000000f93132", 0x39}], 0x1) 11:20:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x3, 0x0, @local}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}}) [ 1401.177404][T32415] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1401.194775][T32416] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000306040000000000f93132", 0x39}], 0x1) [ 1401.254518][T32419] Bluetooth: hci8: Frame reassembly failed (-84) [ 1401.286866][T31865] Bluetooth: hci8: Frame reassembly failed (-84) [ 1401.301880][T32422] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:37 executing program 5: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000480)={&(0x7f0000000440)='.\x00'}, 0x10) [ 1401.344154][T32428] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1401.349480][T21704] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1401.397706][T32422] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1401.425745][T32431] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1401.482283][ T4431] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1401.679533][ T4431] usb 1-1: device descriptor read/64, error 18 [ 1401.769547][T21704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1401.813042][T21704] usb 5-1: not running at top speed; connect to a high speed hub [ 1401.899904][T21704] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1401.909907][T21704] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1401.949500][ T4431] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1402.079684][T21704] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 1402.093346][T21704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.106057][T21704] usb 5-1: Product: syz [ 1402.112742][T21704] usb 5-1: Manufacturer: syz [ 1402.117405][T21704] usb 5-1: SerialNumber: syz [ 1402.139873][ T4431] usb 1-1: device descriptor read/64, error 18 [ 1402.259766][ T4431] usb usb1-port1: attempt power cycle [ 1402.399789][T21704] usbhid 5-1:1.0: can't add hid device: -22 [ 1402.405759][T21704] usbhid: probe of 5-1:1.0 failed with error -22 [ 1402.426694][T21704] usb 5-1: USB disconnect, device number 28 [ 1402.669644][ T4431] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1402.852603][ T4431] usb 1-1: device descriptor read/8, error -61 [ 1403.119594][ T4431] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1403.269723][T21704] Bluetooth: hci8: command 0x1003 tx timeout [ 1403.279706][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1403.297627][ T4431] usb 1-1: device descriptor read/8, error -61 [ 1403.430161][ T4431] usb usb1-port1: unable to enumerate USB device 11:20:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:40 executing program 5: socket$pptp(0x18, 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) 11:20:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200fdffffff0006040000000000f93132", 0x39}], 0x1) 11:20:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000e80306040000000000f93132", 0x39}], 0x1) 11:20:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000000) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) 11:20:40 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$erofs(&(0x7f0000000680), 0x0, 0x8001, 0x1, &(0x7f0000001740)=[{&(0x7f0000001700)="51f04ce3294142d65d532d3219f0956106dfbbf7d030cb49fc5c1db4b69952fd532b80f0ac9a656513371b9b34fe715ebe254521dddd2ad62773c9", 0x3b}], 0x11, &(0x7f0000001780)={[{@noacl}, {@fault_injection={'fault_injection', 0x3d, 0x401}}], [{@euid_gt={'euid>', 0xee00}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x1b}}]}) 11:20:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, 0x0, 0xfffffffffffffd08) [ 1404.087108][T32437] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1404.126800][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 1404.137938][T20010] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:20:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}) [ 1404.192528][T32442] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x40ad81) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) 11:20:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200feffffff0006040000000000f93132", 0x39}], 0x1) [ 1404.243561][T32452] loop4: detected capacity change from 0 to 64 11:20:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000ee0306040000000000f93132", 0x39}], 0x1) [ 1404.529583][ T3680] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1404.729469][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1405.009577][ T3680] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1405.199586][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1405.320255][ T3680] usb usb1-port1: attempt power cycle [ 1405.729589][ T3680] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1405.899599][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1406.169517][ T3680] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1406.339720][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1406.460458][ T3680] usb usb1-port1: unable to enumerate USB device 11:20:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:43 executing program 4: pselect6(0x8, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x1}, &(0x7f0000000280), 0x0) 11:20:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x40ad81) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) 11:20:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000200000006040000000000f93132", 0x39}], 0x1) 11:20:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000506040000000000f93132", 0x39}], 0x1) 11:20:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x1264, 0x0) 11:20:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000004c0)=0x3, 0x4) [ 1407.145163][T32473] validate_nla: 6 callbacks suppressed [ 1407.145182][T32473] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:43 executing program 5: pselect6(0x40, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 11:20:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r0, 0x40ad81) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) 11:20:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x5411, 0x0) 11:20:43 executing program 4: bpf$MAP_CREATE(0x15, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1407.213311][T32480] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1407.250097][T32468] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000300000006040000000000f93132", 0x39}], 0x1) [ 1407.304119][T32479] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1407.421207][T32497] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1407.460590][T32497] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1407.589620][ T3680] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1407.786103][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1408.059601][ T3680] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1408.249533][ T3680] usb 1-1: device descriptor read/64, error 18 [ 1408.369857][ T3680] usb usb1-port1: attempt power cycle [ 1408.779579][ T3680] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1408.969569][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1409.249577][ T3680] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1409.439758][ T3680] usb 1-1: device descriptor read/8, error -61 [ 1409.509623][T21709] Bluetooth: hci2: command 0x0406 tx timeout [ 1409.559648][ T3680] usb usb1-port1: unable to enumerate USB device 11:20:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:20:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000606040000000000f93132", 0x39}], 0x1) 11:20:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) 11:20:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc00000000000004) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000140)) 11:20:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000400000006040000000000f93132", 0x39}], 0x1) [ 1410.220920][T32502] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:46 executing program 5: syz_clone(0x608bae3084049207, &(0x7f0000000440)="95d22b1b8806467308e0a03e4eb0159a2eb698d281e863c615716fff35329f726b5e8e0a01198f1291e43f01e6e67ca4eec70ca23d408ff4845fbdab24dd49b712c0a1de6573b1aafd09d2a5a5981dca44c8936ba4cd8574aead2a467df9b7181aaa39d71f31a34351f614b370ec2b8fa2f65415e96c6da14bde1631d0f738c6cd5943f38996823c875400e41d236aa172d6eec07be7182ad0e5c5f67a5b690809e0", 0xa2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) pipe(0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5460, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000640)=""/4096, 0x1000}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000180)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x6, 0x0) syz_clone(0x42000100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1410.268229][T31866] Bluetooth: hci8: Frame reassembly failed (-84) [ 1410.286049][T32504] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:46 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) [ 1410.327755][T31866] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1410.347266][T32512] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000500000006040000000000f93132", 0x39}], 0x1) 11:20:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000706040000000000f93132", 0x39}], 0x1) [ 1410.375593][T32511] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:47 executing program 4: bpf$OBJ_GET_PROG(0x2, &(0x7f0000000480)={&(0x7f0000000440)='.\x00'}, 0x10) [ 1410.464681][T32519] fs-verity: sha256 using implementation "sha256-avx2" 11:20:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000600000006040000000000f93132", 0x39}], 0x1) [ 1410.688267][ T4431] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1410.909542][ T4431] usb 1-1: device descriptor read/64, error 18 [ 1411.154321][T32519] fs-verity (sda1, inode 1140): Error -4 building Merkle tree [ 1411.179603][ T4431] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1411.390247][ T4431] usb 1-1: device descriptor read/64, error 18 [ 1411.510626][ T4431] usb usb1-port1: attempt power cycle [ 1411.929619][ T4431] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1412.109736][ T4431] usb 1-1: device descriptor read/8, error -61 [ 1412.316476][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1412.326525][T21704] Bluetooth: hci8: command tx timeout [ 1412.399509][ T4431] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1412.579808][ T4431] usb 1-1: device descriptor read/8, error -61 [ 1412.707132][ T4431] usb usb1-port1: unable to enumerate USB device 11:20:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000906040000000000f93132", 0x39}], 0x1) 11:20:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1, 0x8, 0x3ff, 0x4a, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 11:20:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000700000006040000000000f93132", 0x39}], 0x1) 11:20:49 executing program 5: syz_clone(0x608bae3084049207, &(0x7f0000000440)="95d22b1b8806467308e0a03e4eb0159a2eb698d281e863c615716fff35329f726b5e8e0a01198f1291e43f01e6e67ca4eec70ca23d408ff4845fbdab24dd49b712c0a1de6573b1aafd09d2a5a5981dca44c8936ba4cd8574aead2a467df9b7181aaa39d71f31a34351f614b370ec2b8fa2f65415e96c6da14bde1631d0f738c6cd5943f38996823c875400e41d236aa172d6eec07be7182ad0e5c5f67a5b690809e0", 0xa2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) pipe(0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5460, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000640)=""/4096, 0x1000}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000180)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x6, 0x0) syz_clone(0x42000100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:20:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xc00000000000004) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000140)) [ 1413.289232][T32539] validate_nla: 6 callbacks suppressed [ 1413.289251][T32539] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1413.328540][ T46] Bluetooth: hci8: Frame reassembly failed (-84) 11:20:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x125d, 0x0) [ 1413.348722][T32535] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @private}, {0x2, 0x0, @broadcast}, 0x500}) [ 1413.416611][T32548] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1413.429212][T32549] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000800000006040000000000f93132", 0x39}], 0x1) 11:20:50 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000d40)) 11:20:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000a06040000000000f93132", 0x39}], 0x1) [ 1413.554775][T32557] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:50 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x1000000) [ 1413.625482][T32561] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1413.674771][T32562] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1413.695787][T32563] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1413.729554][T21704] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1414.093164][T21704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.108021][T21704] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1414.124289][T21704] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1414.139506][T21704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.162366][T32553] fs-verity (sda1, inode 1172): Error -4 building Merkle tree [ 1415.349556][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1415.358610][T21709] Bluetooth: hci8: command tx timeout 11:20:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000c06040000000000f93132", 0x39}], 0x1) 11:20:52 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000002740), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='fdinfo/4\x00') 11:20:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000900000006040000000000f93132", 0x39}], 0x1) 11:20:52 executing program 5: syz_clone(0x608bae3084049207, &(0x7f0000000440)="95d22b1b8806467308e0a03e4eb0159a2eb698d281e863c615716fff35329f726b5e8e0a01198f1291e43f01e6e67ca4eec70ca23d408ff4845fbdab24dd49b712c0a1de6573b1aafd09d2a5a5981dca44c8936ba4cd8574aead2a467df9b7181aaa39d71f31a34351f614b370ec2b8fa2f65415e96c6da14bde1631d0f738c6cd5943f38996823c875400e41d236aa172d6eec07be7182ad0e5c5f67a5b690809e0", 0xa2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) pipe(0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5460, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000640)=""/4096, 0x1000}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000180)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x6, 0x0) syz_clone(0x42000100, 0x0, 0x0, 0x0, 0x0, 0x0) 11:20:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc00000000000004) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xc00000000000004) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x6}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000140)) (async) 11:20:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') write$snddsp(r0, 0x0, 0x0) [ 1416.306227][T21709] usb 1-1: USB disconnect, device number 68 [ 1416.340267][T32571] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1416.393082][T31864] Bluetooth: hci8: Frame reassembly failed (-84) 11:20:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000006d0c06040000000000f93132", 0x39}], 0x1) [ 1416.433520][T32577] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1416.449685][ T46] Bluetooth: hci8: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1416.473646][T32585] ptm ptm1: ldisc open failed (-12), clearing slot 1 11:20:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10001, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) 11:20:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000a00000006040000000000f93132", 0x39}], 0x1) 11:20:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000e06040000000000f93132", 0x39}], 0x1) 11:20:53 executing program 4: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 11:20:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000c00000006040000000000f93132", 0x39}], 0x1) 11:20:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000f06040000000000f93132", 0x39}], 0x1) 11:20:53 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$unix(r0, &(0x7f0000000180)=@abs, 0x6e) [ 1416.759636][T21709] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1417.119678][T21709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.136911][T21709] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1417.156025][T21709] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1417.184107][T21709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:20:53 executing program 5: syz_clone(0x608bae3084049207, &(0x7f0000000440)="95d22b1b8806467308e0a03e4eb0159a2eb698d281e863c615716fff35329f726b5e8e0a01198f1291e43f01e6e67ca4eec70ca23d408ff4845fbdab24dd49b712c0a1de6573b1aafd09d2a5a5981dca44c8936ba4cd8574aead2a467df9b7181aaa39d71f31a34351f614b370ec2b8fa2f65415e96c6da14bde1631d0f738c6cd5943f38996823c875400e41d236aa172d6eec07be7182ad0e5c5f67a5b690809e0", 0xa2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) pipe(0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x5460, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000640)=""/4096, 0x1000}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3ed8000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000180)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=0x6, 0x0) syz_clone(0x42000100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1417.229922][T32593] fs-verity (sda1, inode 1172): Error -4 building Merkle tree [ 1418.242203][T32615] fs-verity (sda1, inode 1148): Error -4 building Merkle tree [ 1418.389907][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 11:20:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000002740), 0x4, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x11, r0, 0x82000000) 11:20:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000e00000006040000000000f93132", 0x39}], 0x1) 11:20:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001606040000000000f93132", 0x39}], 0x1) 11:20:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = signalfd(r1, &(0x7f0000000140)={[0x400]}, 0x8) ioctl$TCFLSH(r2, 0x540b, 0x1) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) r3 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r3, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) splice(r1, &(0x7f0000000000)=0x100, r3, &(0x7f0000000100)=0x9, 0xfffffffffffffff7, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r3, 0x10000000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x41) 11:20:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0) [ 1419.358835][T21709] usb 1-1: USB disconnect, device number 69 11:20:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc08c5335, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5193eb3577255a5b", "f7fbfb23d936e8c52f5bfa30b3d3ae333600534a2829c824c94977cb2ca11a22"}) 11:20:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000002740), 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x7fffdf006000, 0x0, 0x12, r0, 0x0) [ 1419.416972][T32627] validate_nla: 12 callbacks suppressed [ 1419.416991][T32627] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:56 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 11:20:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 11:20:56 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) [ 1419.516455][T32624] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) [ 1419.585010][T32632] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1419.635206][T32633] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1419.799593][T21709] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1420.169684][T21709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.186033][T21709] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1420.205446][T21709] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 1420.226422][T21709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.509636][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1421.509645][T21703] Bluetooth: hci8: command 0x1003 tx timeout 11:20:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f00000004c0)={0x0, 0x0, 0x18, {0x18, 0x0, "a418720210fed1ef23b45daf3edc5853edbf924253db"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x2) write$hidraw(r1, 0x0, 0x0) 11:20:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000f00000006040000000000f93132", 0x39}], 0x1) 11:20:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="6ed8c65aa506204b3e87d702919b4816", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) 11:20:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}) 11:20:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001706040000000000f93132", 0x39}], 0x1) 11:20:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = signalfd(r1, &(0x7f0000000140)={[0x400]}, 0x8) ioctl$TCFLSH(r2, 0x540b, 0x1) (async, rerun: 32) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async, rerun: 32) r3 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r3, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) splice(r1, &(0x7f0000000000)=0x100, r3, &(0x7f0000000100)=0x9, 0xfffffffffffffff7, 0x1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r3, 0x10000000) (async) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) (async) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x41) [ 1422.417894][T21703] usb 1-1: USB disconnect, device number 70 [ 1422.451463][T32651] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 11:20:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 1422.490879][T32658] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1422.520581][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1422.529029][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 11:20:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200001000000006040000000000f93132", 0x39}], 0x1) 11:20:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}]}, 0x28}}, 0x0) [ 1422.555964][T32651] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1422.590374][T32662] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 11:20:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000001806040000000000f93132", 0x39}], 0x1) 11:20:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0xfffffecc) ioctl$TIOCSTI(r0, 0x540b, 0x0) 11:20:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async, rerun: 32) r1 = io_uring_setup(0x6d61, &(0x7f0000000180)) r2 = signalfd(r1, &(0x7f0000000140)={[0x400]}, 0x8) ioctl$TCFLSH(r2, 0x540b, 0x1) (async) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) r3 = io_uring_setup(0x6d61, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PROBE(r3, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x20) (async) splice(r1, &(0x7f0000000000)=0x100, r3, &(0x7f0000000100)=0x9, 0xfffffffffffffff7, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r3, 0x10000000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x30) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x41) [ 1422.677056][T32670] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1422.749724][T32673] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1422.776447][T20010] Bluetooth: hci8: sending frame failed (-49) [ 1422.779203][ T3646] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 1422.790464][ T28] INFO: task kworker/u5:5:20922 blocked for more than 143 seconds. [ 1422.790490][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 1422.790505][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1422.790515][ T28] task:kworker/u5:5 state:D stack:27848 pid:20922 ppid: 2 flags:0x00004000 [ 1422.790559][ T28] Workqueue: hci7 hci_power_on [ 1422.790672][ T28] Call Trace: [ 1422.790679][ T28] [ 1422.790694][ T28] __schedule+0xa09/0x4f10 [ 1422.790748][ T28] ? __mutex_lock+0xa6b/0x1350 [ 1422.790779][ T28] ? io_schedule_timeout+0x140/0x140 [ 1422.790820][ T28] schedule+0xd2/0x1f0 [ 1422.790850][ T28] schedule_preempt_disabled+0xf/0x20 [ 1422.790877][ T28] __mutex_lock+0xa70/0x1350 [ 1422.790909][ T28] ? hci_dev_do_open+0x25/0x70 [ 1422.790938][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 1422.790967][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1422.791014][ T28] hci_dev_do_open+0x25/0x70 [ 1422.791041][ T28] hci_power_on+0x12e/0x630 [ 1422.791069][ T28] ? hci_error_reset+0x130/0x130 [ 1422.791097][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1422.791135][ T28] process_one_work+0x991/0x1610 [ 1422.791176][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1422.791211][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1422.791237][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 1422.791280][ T28] worker_thread+0x665/0x1080 [ 1422.791321][ T28] ? process_one_work+0x1610/0x1610 [ 1422.791353][ T28] kthread+0x2e9/0x3a0 [ 1422.791378][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1422.791410][ T28] ret_from_fork+0x1f/0x30 [ 1422.791457][ T28] [ 1422.791480][ T28] INFO: task syz-executor.0:30783 blocked for more than 143 seconds. [ 1422.791497][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 1422.791511][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1422.791520][ T28] task:syz-executor.0 state:D stack:27496 pid:30783 ppid: 3637 flags:0x00004004 [ 1422.791559][ T28] Call Trace: [ 1422.791568][ T28] [ 1422.791582][ T28] __schedule+0xa09/0x4f10 [ 1422.791630][ T28] ? io_schedule_timeout+0x140/0x140 [ 1422.791658][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1422.791696][ T28] schedule+0xd2/0x1f0 [ 1422.791725][ T28] schedule_timeout+0x1db/0x2a0 [ 1422.791766][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 1422.791798][ T28] ? __wait_for_common+0x36f/0x530 [ 1422.791834][ T28] ? mark_held_locks+0x9f/0xe0 [ 1422.791856][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1422.791883][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1422.791918][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1422.791960][ T28] __wait_for_common+0x378/0x530 [ 1422.791988][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 1422.792025][ T28] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 1422.792058][ T28] ? lockdep_hardirqs_off+0x90/0xd0 [ 1422.792099][ T28] __flush_work+0x56c/0xb10 [ 1422.792135][ T28] ? queue_delayed_work_on+0x120/0x120 [ 1422.792164][ T28] ? kasan_save_stack+0x2e/0x40 [ 1422.792192][ T28] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 1422.792240][ T28] ? mark_held_locks+0x9f/0xe0 [ 1422.792265][ T28] ? __cancel_work_timer+0x408/0x570 [ 1422.792303][ T28] __cancel_work_timer+0x3f9/0x570 [ 1422.792334][ T28] ? cancel_delayed_work+0x20/0x20 [ 1422.792368][ T28] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1422.792404][ T28] ? trace_contention_end+0xea/0x150 [ 1422.792436][ T28] ? __mutex_lock+0x231/0x1350 [ 1422.792467][ T28] ? kasan_quarantine_put+0xf5/0x210 [ 1422.792499][ T28] ? hci_dev_do_close+0x25/0x70 [ 1422.792534][ T28] hci_dev_close_sync+0x88/0x1140 [ 1422.792617][ T28] ? hci_dev_open_sync+0x2130/0x2130 [ 1422.792644][ T28] ? kfree+0xe2/0x4d0 [ 1422.792687][ T28] hci_dev_do_close+0x2d/0x70 [ 1422.792715][ T28] hci_unregister_dev+0x1bf/0x540 [ 1422.792753][ T28] hci_uart_tty_close+0x23c/0x290 [ 1422.792811][ T28] ? hci_uart_close+0x70/0x70 [ 1422.792839][ T28] tty_ldisc_close+0x110/0x190 [ 1422.792897][ T28] tty_ldisc_kill+0x94/0x150 [ 1422.792922][ T28] tty_ldisc_hangup+0x30b/0x680 [ 1422.792952][ T28] __tty_hangup.part.0+0x40a/0x830 [ 1422.793010][ T28] tty_ioctl+0xccd/0x15e0 [ 1422.793045][ T28] ? tty_fasync+0x390/0x390 [ 1422.793085][ T28] ? __ct_user_exit+0xff/0x150 [ 1422.793119][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 1422.793150][ T28] ? __fget_files+0x26a/0x440 [ 1422.793191][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1422.793225][ T28] ? tty_fasync+0x390/0x390 [ 1422.793258][ T28] __x64_sys_ioctl+0x193/0x200 [ 1422.793296][ T28] do_syscall_64+0x35/0xb0 [ 1422.793323][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1422.793350][ T28] RIP: 0033:0x7fad1f489209 [ 1422.793371][ T28] RSP: 002b:00007fad205a6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.793397][ T28] RAX: ffffffffffffffda RBX: 00007fad1f59bf60 RCX: 00007fad1f489209 [ 1422.793414][ T28] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 1422.793429][ T28] RBP: 00007fad1f4e3161 R08: 0000000000000000 R09: 0000000000000000 [ 1422.793443][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.793458][ T28] R13: 00007ffd7751b84f R14: 00007fad205a6300 R15: 0000000000022000 [ 1422.793493][ T28] [ 1422.793525][ T28] [ 1422.793525][ T28] Showing all locks held in the system: [ 1422.793537][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1422.793551][ T28] #0: ffffffff8bd864f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 1422.793627][ T28] 1 lock held by rcu_tasks_trace/13: [ 1422.793642][ T28] #0: ffffffff8bd861f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 1422.793716][ T28] 1 lock held by khungtaskd/28: [ 1422.793729][ T28] #0: ffffffff8bd87040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1422.793834][ T28] 2 locks held by getty/3284: [ 1422.793848][ T28] #0: ffff888026736098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1422.793903][ T28] #1: ffffc90002d162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 1422.793986][ T28] 3 locks held by kworker/u5:5/20922: [ 1422.794001][ T28] #0: ffff88801f3ca138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 1422.794066][ T28] #1: ffffc90006157da8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 1422.794124][ T28] #2: ffff8880268dd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x25/0x70 [ 1422.794187][ T28] 6 locks held by kworker/0:2/21703: [ 1422.794200][ T28] #0: ffff888011b9dd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 1422.794259][ T28] #1: ffffc900159efda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 1422.794326][ T28] #2: ffff888147628190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1bc/0x45d0 [ 1422.794402][ T28] #3: ffff88814762b4f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1f99/0x45d0 [ 1422.794465][ T28] #4: ffff8881474dda68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1fbf/0x45d0 [ 1422.794536][ T28] #5: ffffffff8ccb5930 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x188/0x1cd0 [ 1422.794608][ T28] 3 locks held by syz-executor.0/30783: [ 1422.794622][ T28] #0: ffff8880764d91c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 1422.794670][ T28] #1: ffff8880764d9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x61/0xb0 [ 1422.794727][ T28] #2: ffff8880268dd048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x25/0x70 [ 1422.794807][ T28] 3 locks held by kworker/u4:36/31866: [ 1422.794821][ T28] 1 lock held by syz-executor.2/32672: [ 1422.794835][ T28] 1 lock held by syz-executor.2/32680: [ 1422.794847][ T28] #0: ffffffff8d5a31a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xc90 [ 1422.794905][ T28] 4 locks held by syz-executor.3/32674: [ 1422.794918][ T28] #0: ffff888077190098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x15c/0x2a0 [ 1422.794978][ T28] #1: ffff888078d72098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x20f/0x2a0 [ 1422.795044][ T28] #2: ffff88804b5da590 (&hu->proto_lock){++++}-{0:0}, at: hci_uart_tty_close+0x15d/0x290 [ 1422.795107][ T28] #3: ffffffff8bd91938 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x562/0x670 [ 1422.795175][ T28] 3 locks held by syz-executor.5/32679: [ 1422.795202][ T28] [ 1422.795209][ T28] ============================================= [ 1422.795209][ T28] [ 1422.795219][ T28] NMI backtrace for cpu 0 [ 1422.795229][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 1422.795253][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1422.795267][ T28] Call Trace: [ 1422.795274][ T28] [ 1422.795284][ T28] dump_stack_lvl+0xcd/0x134 [ 1422.795322][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 1422.795360][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 1422.795389][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 1422.795426][ T28] watchdog+0xc18/0xf50 [ 1422.795458][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1422.795489][ T28] kthread+0x2e9/0x3a0 [ 1422.795508][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1422.795535][ T28] ret_from_fork+0x1f/0x30 [ 1422.795577][ T28] [ 1422.795586][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1422.795614][ C1] NMI backtrace for cpu 1 [ 1422.795624][ C1] CPU: 1 PID: 32672 Comm: syz-executor.2 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 1422.795644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1422.795654][ C1] RIP: 0010:check_preemption_disabled+0x2c/0x170 [ 1422.795686][ C1] Code: 41 55 49 89 f5 41 54 55 48 89 fd 53 0f 1f 44 00 00 65 44 8b 25 ad dd 88 76 65 8b 1d 0e 33 89 76 81 e3 ff ff ff 7f 31 ff 89 de <0f> 1f 44 00 00 85 db 74 11 0f 1f 44 00 00 44 89 e0 5b 5d 41 5c 41 [ 1422.795703][ C1] RSP: 0018:ffffc90002f3ecb0 EFLAGS: 00000046 [ 1422.795717][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 1422.795728][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1422.795739][ C1] RBP: ffffffff8a2874e0 R08: 0000000000000000 R09: 0000000000000000 [ 1422.795751][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 1422.795762][ C1] R13: ffffffff89cc8620 R14: 0000000000000200 R15: 0000000000000002 [ 1422.795774][ C1] FS: 00007f08a4267700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 1422.795790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1422.795804][ C1] CR2: 00007f867b2d6860 CR3: 0000000079826000 CR4: 00000000003506e0 [ 1422.795816][ C1] Call Trace: [ 1422.795821][ C1] [ 1422.795829][ C1] ? memcg_account_kmem+0x3b/0x80 [ 1422.795858][ C1] lockdep_hardirqs_off+0x90/0xd0 [ 1422.795883][ C1] trace_hardirqs_off+0xe/0x110 [ 1422.795909][ C1] memcg_account_kmem+0x3b/0x80 [ 1422.795935][ C1] refill_obj_stock+0x40e/0x700 [ 1422.795955][ C1] ? inetdev_event+0xcb2/0x15d0 [ 1422.795978][ C1] kfree+0x356/0x4d0 [ 1422.796007][ C1] inetdev_event+0xcb2/0x15d0 [ 1422.796030][ C1] ? devinet_init_net+0x640/0x640 [ 1422.796052][ C1] ? skb_dequeue+0x125/0x180 [ 1422.796074][ C1] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 1422.796100][ C1] notifier_call_chain+0xb5/0x200 [ 1422.796126][ C1] call_netdevice_notifiers_info+0xb5/0x130 [ 1422.796151][ C1] dev_set_mtu_ext+0x39d/0x5b0 [ 1422.796173][ C1] ? dev_validate_mtu+0x190/0x190 [ 1422.796195][ C1] ? lock_chain_count+0x20/0x20 [ 1422.796216][ C1] do_setlink+0x607/0x3bb0 [ 1422.796244][ C1] ? ___ratelimit+0x2f1/0x4b0 [ 1422.796268][ C1] ? if_nlmsg_stats_size+0x680/0x680 [ 1422.796290][ C1] ? mark_held_locks+0x9f/0xe0 [ 1422.796306][ C1] ? do_raw_spin_lock+0x2a0/0x2a0 [ 1422.796326][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1422.796353][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1422.796380][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1422.796404][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1422.796430][ C1] ? ___ratelimit+0x222/0x4b0 [ 1422.796454][ C1] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 1422.796479][ C1] ? __nla_validate_parse+0x2df/0x2410 [ 1422.796508][ C1] ? nla_get_range_signed+0x520/0x520 [ 1422.796533][ C1] ? find_held_lock+0x2d/0x110 [ 1422.796563][ C1] ? __nla_parse+0x3d/0x50 [ 1422.796588][ C1] rtnl_setlink+0x23d/0x380 [ 1422.796608][ C1] ? do_setlink+0x3bb0/0x3bb0 [ 1422.796626][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1422.796671][ C1] ? rtnetlink_rcv_msg+0x3e5/0xc90 [ 1422.796692][ C1] ? mutex_lock_io_nested+0x1190/0x1190 [ 1422.796715][ C1] ? rtnetlink_rcv_msg+0x3af/0xc90 [ 1422.796740][ C1] ? do_setlink+0x3bb0/0x3bb0 [ 1422.796759][ C1] rtnetlink_rcv_msg+0x43a/0xc90 [ 1422.796781][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 1422.796800][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1422.796819][ C1] ? skb_clone+0x170/0x3c0 [ 1422.796842][ C1] ? ref_tracker_free+0x370/0x6b0 [ 1422.796864][ C1] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 1422.796888][ C1] netlink_rcv_skb+0x153/0x420 [ 1422.796912][ C1] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 1422.796932][ C1] ? netlink_ack+0xa80/0xa80 [ 1422.796953][ C1] ? netlink_deliver_tap+0x1a2/0xc40 [ 1422.796977][ C1] ? netlink_deliver_tap+0x1b1/0xc40 [ 1422.797002][ C1] netlink_unicast+0x543/0x7f0 [ 1422.797027][ C1] ? netlink_attachskb+0x880/0x880 [ 1422.797049][ C1] ? __phys_addr+0xc4/0x140 [ 1422.797075][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 1422.797100][ C1] ? __check_object_size+0x2de/0x700 [ 1422.797124][ C1] netlink_sendmsg+0x917/0xe10 [ 1422.797148][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 1422.797173][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1422.797194][ C1] ? netlink_unicast+0x7f0/0x7f0 [ 1422.797218][ C1] sock_sendmsg+0xcf/0x120 [ 1422.797242][ C1] sock_write_iter+0x284/0x3c0 [ 1422.797263][ C1] ? sock_sendmsg+0x120/0x120 [ 1422.797286][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1422.797307][ C1] do_iter_readv_writev+0x360/0x5c0 [ 1422.797327][ C1] ? ksys_lseek+0x1b0/0x1b0 [ 1422.797346][ C1] ? bpf_lsm_file_permission+0x5/0x10 [ 1422.797371][ C1] ? security_file_permission+0xab/0xd0 [ 1422.797396][ C1] do_iter_write+0x182/0x700 [ 1422.797415][ C1] ? import_iovec+0x10c/0x150 [ 1422.797440][ C1] vfs_writev+0x1aa/0x630 [ 1422.797457][ C1] ? vfs_iter_write+0xa0/0xa0 [ 1422.797474][ C1] ? __fget_files+0x248/0x440 [ 1422.797500][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 1422.797520][ C1] ? find_held_lock+0x2d/0x110 [ 1422.797547][ C1] ? __fget_files+0x26a/0x440 [ 1422.797576][ C1] ? __fget_light+0xe5/0x270 [ 1422.797603][ C1] do_writev+0x279/0x2f0 [ 1422.797620][ C1] ? vfs_writev+0x630/0x630 [ 1422.797637][ C1] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1422.797662][ C1] ? syscall_enter_from_user_mode+0x22/0xb0 [ 1422.797690][ C1] do_syscall_64+0x35/0xb0 [ 1422.797710][ C1] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1422.797729][ C1] RIP: 0033:0x7f08a3089209 [ 1422.797745][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1422.797762][ C1] RSP: 002b:00007f08a4267168 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1422.797779][ C1] RAX: ffffffffffffffda RBX: 00007f08a319bf60 RCX: 00007f08a3089209 [ 1422.797792][ C1] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000003 [ 1422.797803][ C1] RBP: 00007f08a30e3161 R08: 0000000000000000 R09: 0000000000000000 [ 1422.797815][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.797826][ C1] R13: 00007ffd42db998f R14: 00007f08a4267300 R15: 0000000000022000 [ 1422.797845][ C1] [ 1422.798609][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1422.798622][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 1422.798646][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1422.798660][ T28] Call Trace: [ 1422.798667][ T28] [ 1422.798675][ T28] dump_stack_lvl+0xcd/0x134 [ 1422.798712][ T28] panic+0x2d7/0x636 [ 1422.798765][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1422.798802][ T28] ? irq_work_claim+0x76/0x90 [ 1422.798827][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 1422.798855][ T28] ? irq_work_queue+0x29/0x80 [ 1422.798879][ T28] ? watchdog.cold+0x130/0x158 [ 1422.798917][ T28] watchdog.cold+0x141/0x158 [ 1422.798946][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1422.798979][ T28] kthread+0x2e9/0x3a0 [ 1422.798999][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1422.799026][ T28] ret_from_fork+0x1f/0x30 [ 1422.799067][ T28] [ 1422.799228][ T28] Kernel Offset: disabled [ 1424.387062][ T28] Rebooting in 86400 seconds..