e [ 410.888509] Bluetooth: Unknown HCI packet type 5e [ 410.888614] Bluetooth: Unknown HCI packet type 40 14:23:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:23:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 410.898275] Bluetooth: Unknown HCI packet type 40 [ 410.908286] Bluetooth: Unknown HCI packet type 40 [ 412.773183] Bluetooth: hci10 command 0x1003 tx timeout [ 412.778613] Bluetooth: hci9 command 0x1003 tx timeout [ 412.778656] Bluetooth: hci10 sending frame failed (-49) [ 412.785665] Bluetooth: hci6 command 0x1003 tx timeout [ 412.789362] Bluetooth: hci9 sending frame failed (-49) [ 412.795773] Bluetooth: hci0 command 0x1003 tx timeout [ 412.800083] Bluetooth: hci6 sending frame failed (-49) [ 412.806308] Bluetooth: hci0 sending frame failed (-49) [ 412.933219] Bluetooth: hci8 command 0x1003 tx timeout [ 412.938537] Bluetooth: hci8 sending frame failed (-49) [ 414.853074] Bluetooth: hci0 command 0x1001 tx timeout [ 414.853119] Bluetooth: hci6 command 0x1001 tx timeout [ 414.858386] Bluetooth: hci0 sending frame failed (-49) [ 414.864855] Bluetooth: hci6 sending frame failed (-49) [ 414.874224] Bluetooth: hci9 command 0x1001 tx timeout [ 414.879479] Bluetooth: hci10 command 0x1001 tx timeout [ 414.879534] Bluetooth: hci9 sending frame failed (-49) [ 414.885168] Bluetooth: hci10 sending frame failed (-49) [ 415.013110] Bluetooth: hci8 command 0x1001 tx timeout [ 415.018489] Bluetooth: hci8 sending frame failed (-49) [ 416.933010] Bluetooth: hci9 command 0x1009 tx timeout [ 416.933016] Bluetooth: hci10 command 0x1009 tx timeout [ 416.933102] Bluetooth: hci6 command 0x1009 tx timeout [ 416.938399] Bluetooth: hci0 command 0x1009 tx timeout [ 417.092977] Bluetooth: hci8 command 0x1009 tx timeout 14:24:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:24:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 420.928637] Bluetooth: Unknown HCI packet type 5e [ 420.939401] Bluetooth: Unknown HCI packet type 43 [ 420.945855] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 420.967377] Bluetooth: hci6: Frame reassembly failed (-84) [ 420.969758] Bluetooth: hci6: Frame reassembly failed (-84) [ 420.982431] Bluetooth: Unknown HCI packet type 5e [ 420.994872] Bluetooth: Unknown HCI packet type 50 [ 421.006663] Bluetooth: hci10: Frame reassembly failed (-84) [ 421.014156] Bluetooth: hci10: Frame reassembly failed (-84) [ 421.017079] Bluetooth: Unknown HCI packet type 5e [ 421.034181] Bluetooth: Unknown HCI packet type 40 14:24:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 421.521325] Bluetooth: Unknown HCI packet type 5e [ 421.526333] Bluetooth: Unknown HCI packet type 43 [ 421.539277] Bluetooth: Unknown HCI packet type 5e [ 421.546391] Bluetooth: Unknown HCI packet type 50 [ 421.557434] Bluetooth: Unknown HCI packet type 5e 14:24:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 421.570709] Bluetooth: Unknown HCI packet type 40 [ 422.932583] Bluetooth: hci0 command 0x1003 tx timeout [ 422.937926] Bluetooth: hci0 sending frame failed (-49) [ 423.012589] Bluetooth: hci10 command 0x1003 tx timeout [ 423.018128] Bluetooth: hci9 command 0x1003 tx timeout [ 423.018187] Bluetooth: hci10 sending frame failed (-49) [ 423.024776] Bluetooth: hci9 sending frame failed (-49) [ 423.034170] Bluetooth: hci6 command 0x1003 tx timeout [ 423.039431] Bluetooth: hci6 sending frame failed (-49) [ 423.572597] Bluetooth: hci8 command 0x1003 tx timeout [ 423.577974] Bluetooth: hci8 sending frame failed (-49) [ 425.012487] Bluetooth: hci0 command 0x1001 tx timeout [ 425.018409] Bluetooth: hci0 sending frame failed (-49) [ 425.092500] Bluetooth: hci9 command 0x1001 tx timeout [ 425.097882] Bluetooth: hci9 sending frame failed (-49) [ 425.103600] Bluetooth: hci6 command 0x1001 tx timeout [ 425.108860] Bluetooth: hci10 command 0x1001 tx timeout [ 425.108924] Bluetooth: hci6 sending frame failed (-49) [ 425.114315] Bluetooth: hci10 sending frame failed (-49) [ 425.662516] Bluetooth: hci8 command 0x1001 tx timeout [ 425.667836] Bluetooth: hci8 sending frame failed (-49) [ 427.092342] Bluetooth: hci0 command 0x1009 tx timeout [ 427.172360] Bluetooth: hci6 command 0x1009 tx timeout [ 427.172425] Bluetooth: hci10 command 0x1009 tx timeout [ 427.182975] Bluetooth: hci9 command 0x1009 tx timeout [ 427.732329] Bluetooth: hci8 command 0x1009 tx timeout 14:24:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 431.175321] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.176431] Bluetooth: hci6: Frame reassembly failed (-84) [ 431.181106] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.191146] Bluetooth: hci6: Frame reassembly failed (-84) [ 431.198762] Bluetooth: Unknown HCI packet type 5e [ 431.199100] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.204750] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 431.216517] Bluetooth: Unknown HCI packet type 43 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 431.236991] Bluetooth: Unknown HCI packet type 5e [ 431.247495] Bluetooth: Unknown HCI packet type 50 [ 431.260894] Bluetooth: Unknown HCI packet type 5e [ 431.271661] Bluetooth: Unknown HCI packet type 40 14:24:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 433.252061] Bluetooth: hci10 command 0x1003 tx timeout [ 433.257445] Bluetooth: hci6 command 0x1003 tx timeout [ 433.258401] Bluetooth: hci10 sending frame failed (-49) [ 433.264146] Bluetooth: hci6 sending frame failed (-49) [ 433.268116] Bluetooth: hci9 command 0x1003 tx timeout [ 433.273635] Bluetooth: hci0 command 0x1003 tx timeout [ 433.283838] Bluetooth: hci9 sending frame failed (-49) [ 433.289216] Bluetooth: hci0 sending frame failed (-49) [ 433.811890] Bluetooth: hci8 command 0x1003 tx timeout [ 433.817416] Bluetooth: hci8 sending frame failed (-49) [ 435.331984] Bluetooth: hci0 command 0x1001 tx timeout [ 435.332012] Bluetooth: hci6 command 0x1001 tx timeout [ 435.337280] Bluetooth: hci0 sending frame failed (-49) [ 435.342810] Bluetooth: hci6 sending frame failed (-49) [ 435.349182] Bluetooth: hci9 command 0x1001 tx timeout [ 435.358281] Bluetooth: hci10 command 0x1001 tx timeout [ 435.358328] Bluetooth: hci9 sending frame failed (-49) [ 435.364337] Bluetooth: hci10 sending frame failed (-49) [ 435.891837] Bluetooth: hci8 command 0x1001 tx timeout [ 435.891930] Bluetooth: hci8 sending frame failed (-49) [ 437.411796] Bluetooth: hci10 command 0x1009 tx timeout [ 437.417143] Bluetooth: hci0 command 0x1009 tx timeout [ 437.421795] Bluetooth: hci9 command 0x1009 tx timeout [ 437.427583] Bluetooth: hci6 command 0x1009 tx timeout [ 437.971742] Bluetooth: hci8 command 0x1009 tx timeout 14:24:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:24:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 441.407741] Bluetooth: Unknown HCI packet type 5e [ 441.413205] Bluetooth: Unknown HCI packet type 43 [ 441.418183] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 441.439979] Bluetooth: Unknown HCI packet type 5e [ 441.451016] Bluetooth: hci6: Frame reassembly failed (-84) 14:24:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 441.454903] Bluetooth: hci9: Frame reassembly failed (-84) [ 441.459082] Bluetooth: hci9: Frame reassembly failed (-84) [ 441.462723] Bluetooth: hci6: Frame reassembly failed (-84) [ 441.471299] Bluetooth: hci10 sending frame failed (-49) [ 441.480629] Bluetooth: Unknown HCI packet type 00 [ 441.485552] Bluetooth: Unknown HCI packet type 50 [ 441.485557] Bluetooth: Unknown HCI packet type 5e [ 441.485561] Bluetooth: Unknown HCI packet type 40 [ 441.541750] Bluetooth: hci11: Frame reassembly failed (-84) [ 441.547971] Bluetooth: hci11: Frame reassembly failed (-84) 14:24:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 442.008748] Bluetooth: Unknown HCI packet type 5e [ 442.016954] Bluetooth: Unknown HCI packet type 43 [ 442.024705] Bluetooth: Unknown HCI packet type 5e [ 442.029693] Bluetooth: Unknown HCI packet type 50 [ 442.036440] Bluetooth: Unknown HCI packet type 5e [ 442.042541] Bluetooth: Unknown HCI packet type 40 [ 443.411303] Bluetooth: hci0 command 0x1003 tx timeout [ 443.417408] Bluetooth: hci0 sending frame failed (-49) [ 443.491372] Bluetooth: hci10 command 0x1003 tx timeout [ 443.496768] Bluetooth: hci9 command 0x1003 tx timeout [ 443.496797] Bluetooth: hci10 sending frame failed (-49) [ 443.503745] Bluetooth: hci6 command 0x1003 tx timeout [ 443.507452] Bluetooth: hci9 sending frame failed (-49) [ 443.518116] Bluetooth: hci6 sending frame failed (-49) [ 443.571486] Bluetooth: hci11 command 0x1003 tx timeout [ 443.577058] Bluetooth: hci11 sending frame failed (-49) [ 444.051299] Bluetooth: hci8 command 0x1003 tx timeout [ 444.056676] Bluetooth: hci8 sending frame failed (-49) [ 445.501298] Bluetooth: hci0 command 0x1001 tx timeout [ 445.506606] Bluetooth: hci0 sending frame failed (-49) [ 445.571246] Bluetooth: hci6 command 0x1001 tx timeout [ 445.576499] Bluetooth: hci9 command 0x1001 tx timeout [ 445.576562] Bluetooth: hci6 sending frame failed (-49) [ 445.582099] Bluetooth: hci9 sending frame failed (-49) [ 445.592332] Bluetooth: hci10 command 0x1001 tx timeout [ 445.597665] Bluetooth: hci10 sending frame failed (-49) [ 445.651206] Bluetooth: hci11 command 0x1001 tx timeout [ 445.656588] Bluetooth: hci11 sending frame failed (-49) [ 446.131286] Bluetooth: hci8 command 0x1001 tx timeout [ 446.137324] Bluetooth: hci8 sending frame failed (-49) [ 447.571146] Bluetooth: hci0 command 0x1009 tx timeout [ 447.651159] Bluetooth: hci9 command 0x1009 tx timeout [ 447.651170] Bluetooth: hci10 command 0x1009 tx timeout [ 447.661779] Bluetooth: hci6 command 0x1009 tx timeout [ 447.731163] Bluetooth: hci11 command 0x1009 tx timeout [ 448.211126] Bluetooth: hci8 command 0x1009 tx timeout 14:24:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:24:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 451.637051] Bluetooth: Unknown HCI packet type 00 [ 451.660708] Bluetooth: Unknown HCI packet type 5e [ 451.667046] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 451.667280] Bluetooth: Unknown HCI packet type 5e [ 451.697345] Bluetooth: hci9: Frame reassembly failed (-84) [ 451.697683] Bluetooth: hci9: Frame reassembly failed (-84) 14:24:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 451.709309] Bluetooth: Unknown HCI packet type 43 [ 451.713018] Bluetooth: Unknown HCI packet type 5e [ 451.723928] Bluetooth: Unknown HCI packet type 5e [ 451.739476] Bluetooth: Unknown HCI packet type 43 14:24:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 451.755975] Bluetooth: Unknown HCI packet type 5e [ 451.764217] Bluetooth: Unknown HCI packet type 50 [ 451.773798] Bluetooth: Unknown HCI packet type 50 [ 451.784819] Bluetooth: Unknown HCI packet type 5e [ 451.787134] Bluetooth: Unknown HCI packet type 5e [ 451.796915] Bluetooth: Unknown HCI packet type 40 14:24:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 451.808427] Bluetooth: Unknown HCI packet type 40 14:24:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:34 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 452.255921] Bluetooth: Unknown HCI packet type 5e [ 452.265126] Bluetooth: Unknown HCI packet type 43 [ 452.270002] Bluetooth: Unknown HCI packet type 5e [ 452.276994] Bluetooth: Unknown HCI packet type 50 [ 452.283293] Bluetooth: Unknown HCI packet type 5e [ 452.288701] Bluetooth: Unknown HCI packet type 40 [ 453.650838] Bluetooth: hci0 command 0x1003 tx timeout [ 453.657647] Bluetooth: hci0 sending frame failed (-49) [ 453.730872] Bluetooth: hci10 command 0x1003 tx timeout [ 453.737112] Bluetooth: hci9 command 0x1003 tx timeout [ 453.737146] Bluetooth: hci10 sending frame failed (-49) [ 453.744115] Bluetooth: hci6 command 0x1003 tx timeout [ 453.748167] Bluetooth: hci9 sending frame failed (-49) [ 453.754537] Bluetooth: hci6 sending frame failed (-49) [ 454.290742] Bluetooth: hci8 command 0x1003 tx timeout [ 454.296103] Bluetooth: hci8 sending frame failed (-49) [ 455.730674] Bluetooth: hci0 command 0x1001 tx timeout [ 455.736079] Bluetooth: hci0 sending frame failed (-49) [ 455.810676] Bluetooth: hci6 command 0x1001 tx timeout [ 455.810689] Bluetooth: hci9 command 0x1001 tx timeout [ 455.816022] Bluetooth: hci6 sending frame failed (-49) [ 455.825817] Bluetooth: hci9 sending frame failed (-49) [ 455.832016] Bluetooth: hci10 command 0x1001 tx timeout [ 455.837363] Bluetooth: hci10 sending frame failed (-49) [ 456.370585] Bluetooth: hci8 command 0x1001 tx timeout [ 456.375904] Bluetooth: hci8 sending frame failed (-49) [ 457.810580] Bluetooth: hci0 command 0x1009 tx timeout [ 457.890581] Bluetooth: hci9 command 0x1009 tx timeout [ 457.890584] Bluetooth: hci10 command 0x1009 tx timeout [ 457.890631] Bluetooth: hci6 command 0x1009 tx timeout [ 458.450485] Bluetooth: hci8 command 0x1009 tx timeout 14:24:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:24:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 461.888834] Bluetooth: Unknown HCI packet type 5e [ 461.897608] Bluetooth: Unknown HCI packet type 43 [ 461.916394] Bluetooth: Unknown HCI packet type 5e 14:24:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 461.935082] Bluetooth: hci6: Frame reassembly failed (-84) [ 461.950285] Bluetooth: hci6: Frame reassembly failed (-84) [ 461.956973] Bluetooth: hci6: Frame reassembly failed (-84) [ 461.973770] Bluetooth: Unknown HCI packet type 50 14:24:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 461.987784] Bluetooth: Unknown HCI packet type 5e 14:24:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 462.011412] Bluetooth: Unknown HCI packet type 40 [ 462.037137] Bluetooth: hci9: Frame reassembly failed (-84) [ 462.045076] Bluetooth: hci9: Frame reassembly failed (-84) 14:24:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 462.492469] Bluetooth: Unknown HCI packet type 00 [ 463.890124] Bluetooth: hci0 command 0x1003 tx timeout [ 463.896653] Bluetooth: hci0 sending frame failed (-49) [ 463.970113] Bluetooth: hci6 command 0x1003 tx timeout [ 463.975454] Bluetooth: hci6 sending frame failed (-49) [ 464.050138] Bluetooth: hci9 command 0x1003 tx timeout [ 464.055557] Bluetooth: hci9 sending frame failed (-49) [ 464.530078] Bluetooth: hci8 command 0x1003 tx timeout [ 464.535373] Bluetooth: hci8 sending frame failed (-49) [ 465.970186] Bluetooth: hci0 command 0x1001 tx timeout [ 465.975547] Bluetooth: hci0 sending frame failed (-49) [ 466.050042] Bluetooth: hci6 command 0x1001 tx timeout [ 466.055403] Bluetooth: hci6 sending frame failed (-49) [ 466.130039] Bluetooth: hci9 command 0x1001 tx timeout [ 466.135502] Bluetooth: hci9 sending frame failed (-49) [ 466.620086] Bluetooth: hci8 command 0x1001 tx timeout [ 466.625404] Bluetooth: hci8 sending frame failed (-49) [ 468.049915] Bluetooth: hci0 command 0x1009 tx timeout [ 468.139938] Bluetooth: hci6 command 0x1009 tx timeout [ 468.219921] Bluetooth: hci9 command 0x1009 tx timeout [ 468.689914] Bluetooth: hci8 command 0x1009 tx timeout 14:24:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 472.155115] Bluetooth: Unknown HCI packet type 5e [ 472.164278] Bluetooth: Unknown HCI packet type 43 [ 472.185680] Bluetooth: Unknown HCI packet type 5e [ 472.190802] Bluetooth: Unknown HCI packet type 43 [ 472.195930] Bluetooth: Unknown HCI packet type 5e 14:24:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 472.202169] Bluetooth: Unknown HCI packet type 5e [ 472.223358] Bluetooth: Unknown HCI packet type 50 [ 472.227246] Bluetooth: Unknown HCI packet type 50 [ 472.244149] Bluetooth: Unknown HCI packet type 5e [ 472.245758] Bluetooth: Unknown HCI packet type 5e 14:24:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 472.254504] Bluetooth: Unknown HCI packet type 40 [ 472.269043] Bluetooth: Unknown HCI packet type 40 14:24:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:24:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:24:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 472.745618] Bluetooth: Unknown HCI packet type 5e [ 472.751105] Bluetooth: Unknown HCI packet type 43 [ 472.751565] Bluetooth: Unknown HCI packet type 00 [ 472.761961] Bluetooth: Unknown HCI packet type 5e [ 472.773509] Bluetooth: Unknown HCI packet type 50 [ 472.783448] Bluetooth: Unknown HCI packet type 5e [ 472.788584] Bluetooth: Unknown HCI packet type 40 [ 474.209525] Bluetooth: hci6 command 0x1003 tx timeout [ 474.214936] Bluetooth: hci0 command 0x1003 tx timeout [ 474.215013] Bluetooth: hci6 sending frame failed (-49) [ 474.221394] Bluetooth: hci0 sending frame failed (-49) [ 474.225749] Bluetooth: hci9 command 0x1003 tx timeout [ 474.236406] Bluetooth: hci9 sending frame failed (-49) [ 474.779532] Bluetooth: hci8 command 0x1003 tx timeout [ 474.784991] Bluetooth: hci8 sending frame failed (-49) [ 476.289498] Bluetooth: hci6 command 0x1001 tx timeout [ 476.289501] Bluetooth: hci9 command 0x1001 tx timeout [ 476.289527] Bluetooth: hci0 command 0x1001 tx timeout [ 476.294878] Bluetooth: hci9 sending frame failed (-49) [ 476.306910] Bluetooth: hci6 sending frame failed (-49) [ 476.315801] Bluetooth: hci0 sending frame failed (-49) [ 476.859394] Bluetooth: hci8 command 0x1001 tx timeout [ 476.864769] Bluetooth: hci8 sending frame failed (-49) [ 478.369330] Bluetooth: hci6 command 0x1009 tx timeout [ 478.369341] Bluetooth: hci0 command 0x1009 tx timeout [ 478.379818] Bluetooth: hci9 command 0x1009 tx timeout [ 478.929350] Bluetooth: hci8 command 0x1009 tx timeout 14:25:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:04 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 482.385927] Bluetooth: Unknown HCI packet type 5e [ 482.426287] Bluetooth: Unknown HCI packet type 5e [ 482.436081] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 482.451451] Bluetooth: Unknown HCI packet type 43 [ 482.462059] Bluetooth: Unknown HCI packet type 5e [ 482.479815] Bluetooth: Unknown HCI packet type 50 [ 482.491651] Bluetooth: Unknown HCI packet type 5e [ 482.496650] Bluetooth: Unknown HCI packet type 40 14:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:25:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 482.963139] Bluetooth: Unknown HCI packet type 5e [ 482.968392] Bluetooth: Unknown HCI packet type 43 [ 482.977519] Bluetooth: Unknown HCI packet type 00 [ 482.987065] Bluetooth: Unknown HCI packet type 5e [ 483.001329] Bluetooth: Unknown HCI packet type 50 [ 483.027953] Bluetooth: Unknown HCI packet type 5e [ 483.032927] Bluetooth: Unknown HCI packet type 40 [ 484.368943] Bluetooth: hci0 command 0x1003 tx timeout [ 484.369037] Bluetooth: hci0 sending frame failed (-49) [ 484.448971] Bluetooth: hci6 command 0x1003 tx timeout [ 484.454284] Bluetooth: hci6 sending frame failed (-49) [ 484.458927] Bluetooth: hci9 command 0x1003 tx timeout [ 484.465047] Bluetooth: hci9 sending frame failed (-49) [ 485.008930] Bluetooth: hci8 command 0x1003 tx timeout [ 485.014273] Bluetooth: hci8 sending frame failed (-49) [ 486.448939] Bluetooth: hci0 command 0x1001 tx timeout [ 486.454366] Bluetooth: hci0 sending frame failed (-49) [ 486.528894] Bluetooth: hci9 command 0x1001 tx timeout [ 486.534128] Bluetooth: hci6 command 0x1001 tx timeout [ 486.534230] Bluetooth: hci9 sending frame failed (-49) [ 486.543637] Bluetooth: hci6 sending frame failed (-49) [ 487.088860] Bluetooth: hci8 command 0x1001 tx timeout [ 487.094184] Bluetooth: hci8 sending frame failed (-49) [ 488.538763] Bluetooth: hci0 command 0x1009 tx timeout [ 488.608736] Bluetooth: hci9 command 0x1009 tx timeout [ 488.618770] Bluetooth: hci6 command 0x1009 tx timeout [ 489.168741] Bluetooth: hci8 command 0x1009 tx timeout 14:25:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 492.622751] Bluetooth: Unknown HCI packet type 5e [ 492.633909] Bluetooth: Unknown HCI packet type 43 [ 492.643047] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 492.658168] Bluetooth: Unknown HCI packet type 5e [ 492.670279] Bluetooth: Unknown HCI packet type 50 [ 492.705589] Bluetooth: Unknown HCI packet type 5e [ 492.722804] Bluetooth: Unknown HCI packet type 43 [ 492.727807] Bluetooth: Unknown HCI packet type 5e [ 492.737231] Bluetooth: Unknown HCI packet type 5e [ 492.744155] Bluetooth: Unknown HCI packet type 40 [ 492.750135] Bluetooth: Unknown HCI packet type 50 [ 492.755175] Bluetooth: Unknown HCI packet type 5e [ 492.761322] Bluetooth: Unknown HCI packet type 40 14:25:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 493.247679] Bluetooth: Unknown HCI packet type 5e [ 493.253109] Bluetooth: Unknown HCI packet type 43 [ 493.264151] Bluetooth: Unknown HCI packet type 5e [ 493.270330] Bluetooth: Unknown HCI packet type 50 [ 493.277585] Bluetooth: Unknown HCI packet type 5e [ 493.289502] Bluetooth: Unknown HCI packet type 40 [ 493.298890] Bluetooth: hci10: Frame reassembly failed (-84) [ 494.688359] Bluetooth: hci9 command 0x1003 tx timeout [ 494.693707] Bluetooth: hci9 sending frame failed (-49) [ 494.768346] Bluetooth: hci6 command 0x1003 tx timeout [ 494.768400] Bluetooth: hci0 command 0x1003 tx timeout [ 494.773785] Bluetooth: hci6 sending frame failed (-49) [ 494.785608] Bluetooth: hci0 sending frame failed (-49) [ 495.248354] Bluetooth: hci8 command 0x1003 tx timeout [ 495.253721] Bluetooth: hci8 sending frame failed (-49) [ 495.328355] Bluetooth: hci10 command 0x1003 tx timeout [ 495.333801] Bluetooth: hci10 sending frame failed (-49) [ 496.768290] Bluetooth: hci9 command 0x1001 tx timeout [ 496.773598] Bluetooth: hci9 sending frame failed (-49) [ 496.848324] Bluetooth: hci0 command 0x1001 tx timeout [ 496.853609] Bluetooth: hci6 command 0x1001 tx timeout [ 496.853660] Bluetooth: hci0 sending frame failed (-49) [ 496.860048] Bluetooth: hci6 sending frame failed (-49) [ 497.328242] Bluetooth: hci8 command 0x1001 tx timeout [ 497.333556] Bluetooth: hci8 sending frame failed (-49) [ 497.408281] Bluetooth: hci10 command 0x1001 tx timeout [ 497.413660] Bluetooth: hci10 sending frame failed (-49) [ 498.848225] Bluetooth: hci9 command 0x1009 tx timeout [ 498.928180] Bluetooth: hci0 command 0x1009 tx timeout [ 498.928217] Bluetooth: hci6 command 0x1009 tx timeout [ 499.408191] Bluetooth: hci8 command 0x1009 tx timeout [ 499.488102] Bluetooth: hci10 command 0x1009 tx timeout 14:25:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) fstatfs(r1, &(0x7f0000000100)=""/38) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 502.832641] Bluetooth: Unknown HCI packet type 5e [ 502.834356] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 502.851914] Bluetooth: Unknown HCI packet type 5e [ 502.852026] Bluetooth: Unknown HCI packet type 00 [ 502.859043] Bluetooth: Unknown HCI packet type 43 [ 502.862974] Bluetooth: Unknown HCI packet type 43 [ 502.871994] Bluetooth: hci11: Frame reassembly failed (-84) [ 502.873987] Bluetooth: hci11: Frame reassembly failed (-84) [ 502.880638] Bluetooth: Unknown HCI packet type 5e [ 502.896727] Bluetooth: Unknown HCI packet type 5e [ 502.898609] Bluetooth: Unknown HCI packet type 50 [ 502.911221] Bluetooth: Unknown HCI packet type 5e [ 502.912636] Bluetooth: Unknown HCI packet type 50 [ 502.922008] Bluetooth: Unknown HCI packet type 5e [ 502.923164] Bluetooth: Unknown HCI packet type 40 [ 502.953462] Bluetooth: Unknown HCI packet type 40 14:25:25 executing program 5 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 503.467320] Bluetooth: Unknown HCI packet type 5e [ 503.468040] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 503.475783] Bluetooth: Unknown HCI packet type 43 [ 503.496866] Bluetooth: Unknown HCI packet type 5e [ 503.516353] Bluetooth: Unknown HCI packet type 50 [ 503.531665] Bluetooth: Unknown HCI packet type 5e [ 503.536608] Bluetooth: Unknown HCI packet type 40 [ 504.847497] Bluetooth: hci6 command 0x1003 tx timeout [ 504.852853] Bluetooth: hci0 command 0x1003 tx timeout [ 504.852886] Bluetooth: hci6 sending frame failed (-49) [ 504.859712] Bluetooth: hci0 sending frame failed (-49) [ 504.927501] Bluetooth: hci9 command 0x1003 tx timeout [ 504.927505] Bluetooth: hci11 command 0x1003 tx timeout [ 504.938141] Bluetooth: hci11 sending frame failed (-49) [ 504.943597] Bluetooth: hci9 sending frame failed (-49) [ 505.497412] Bluetooth: hci8 command 0x1003 tx timeout [ 505.502815] Bluetooth: hci8 sending frame failed (-49) [ 505.567336] Bluetooth: hci10 command 0x1003 tx timeout [ 505.572805] Bluetooth: hci10 sending frame failed (-49) [ 506.927240] Bluetooth: hci0 command 0x1001 tx timeout [ 506.927273] Bluetooth: hci6 command 0x1001 tx timeout [ 506.932522] Bluetooth: hci0 sending frame failed (-49) [ 506.941992] Bluetooth: hci6 sending frame failed (-49) [ 507.017309] Bluetooth: hci9 command 0x1001 tx timeout [ 507.022593] Bluetooth: hci11 command 0x1001 tx timeout [ 507.022718] Bluetooth: hci9 sending frame failed (-49) [ 507.033467] Bluetooth: hci11 sending frame failed (-49) [ 507.567182] Bluetooth: hci8 command 0x1001 tx timeout [ 507.572529] Bluetooth: hci8 sending frame failed (-49) [ 507.657112] Bluetooth: hci10 command 0x1001 tx timeout [ 507.662591] Bluetooth: hci10 sending frame failed (-49) [ 509.007028] Bluetooth: hci6 command 0x1009 tx timeout [ 509.007032] Bluetooth: hci0 command 0x1009 tx timeout [ 509.086953] Bluetooth: hci11 command 0x1009 tx timeout [ 509.092303] Bluetooth: hci9 command 0x1009 tx timeout [ 509.656951] Bluetooth: hci8 command 0x1009 tx timeout [ 509.726854] Bluetooth: hci10 command 0x1009 tx timeout 14:25:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:25:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = msgget$private(0x0, 0x40) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/33) 14:25:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 513.077875] Bluetooth: Unknown HCI packet type 5e [ 513.082951] Bluetooth: Unknown HCI packet type 43 [ 513.098554] Bluetooth: Unknown HCI packet type 5e [ 513.103532] Bluetooth: Unknown HCI packet type 00 [ 513.110678] Bluetooth: Unknown HCI packet type 5e [ 513.113238] Bluetooth: Unknown HCI packet type 5e [ 513.115934] Bluetooth: Unknown HCI packet type 43 [ 513.122116] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 513.128057] Bluetooth: Unknown HCI packet type 50 [ 513.137585] Bluetooth: Unknown HCI packet type 5e [ 513.138421] Bluetooth: hci11: Frame reassembly failed (-84) [ 513.142518] Bluetooth: Unknown HCI packet type 5e [ 513.151755] Bluetooth: hci11: Frame reassembly failed (-84) [ 513.154720] Bluetooth: Unknown HCI packet type 43 [ 513.164042] Bluetooth: hci11: Frame reassembly failed (-84) [ 513.169394] Bluetooth: Unknown HCI packet type 40 [ 513.176567] Bluetooth: Unknown HCI packet type 5e [ 513.181515] Bluetooth: Unknown HCI packet type 50 [ 513.192825] Bluetooth: Unknown HCI packet type 50 [ 513.198952] Bluetooth: Unknown HCI packet type 5e [ 513.209461] Bluetooth: Unknown HCI packet type 5e [ 513.227498] Bluetooth: Unknown HCI packet type 40 [ 513.242764] Bluetooth: Unknown HCI packet type 40 14:25:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:25:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x600002, 0x0) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x33) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$phonet(r7, &(0x7f00000001c0)="0627be0ff079d526faa0078fb095df0ea761662e096ab4979aa66b25af73604c2b2c508d05c23617ad31518d2c5bbcf822e4b21223d7885d3ba77250a2f5be89898547d73d1d5abc25faf57be783c7fb01fc238fb41a9f9eae4e76a794d0e17fe536b388601c0380bc64bc56231d0d41e9d083d6e3d21666dde278e159788db30066acd758c7472c95ba350721c2dc7f25311b3ffed8dc89b899ad49714bf6480ee15fd1465b9cff7d4088cd00666aa1b07cb5941dc8860daf2f9a", 0xbb, 0x40041, &(0x7f0000000080)={0x23, 0x3, 0x50, 0x8}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) ioctl$KDDISABIO(r6, 0x4b37) [ 513.706690] Bluetooth: hci10: Frame reassembly failed (-84) [ 515.086182] Bluetooth: hci0 command 0x1003 tx timeout [ 515.091538] Bluetooth: hci0 sending frame failed (-49) [ 515.166179] Bluetooth: hci11 command 0x1003 tx timeout [ 515.166207] Bluetooth: hci9 command 0x1003 tx timeout [ 515.166223] Bluetooth: hci6 command 0x1003 tx timeout [ 515.166257] Bluetooth: hci11 sending frame failed (-49) [ 515.166269] Bluetooth: hci9 sending frame failed (-49) [ 515.166290] Bluetooth: hci6 sending frame failed (-49) [ 515.726100] Bluetooth: hci8 command 0x1003 tx timeout [ 515.731404] Bluetooth: hci10 command 0x1003 tx timeout [ 515.731448] Bluetooth: hci8 sending frame failed (-49) [ 515.738165] Bluetooth: hci10 sending frame failed (-49) [ 517.165933] Bluetooth: hci0 command 0x1001 tx timeout [ 517.171228] Bluetooth: hci0 sending frame failed (-49) [ 517.245904] Bluetooth: hci6 command 0x1001 tx timeout [ 517.245940] Bluetooth: hci9 command 0x1001 tx timeout [ 517.251160] Bluetooth: hci11 command 0x1001 tx timeout [ 517.256481] Bluetooth: hci6 sending frame failed (-49) [ 517.263606] Bluetooth: hci11 sending frame failed (-49) [ 517.271371] Bluetooth: hci9 sending frame failed (-49) [ 517.805888] Bluetooth: hci10 command 0x1001 tx timeout [ 517.805922] Bluetooth: hci8 command 0x1001 tx timeout [ 517.811272] Bluetooth: hci10 sending frame failed (-49) [ 517.821280] Bluetooth: hci8 sending frame failed (-49) [ 519.245721] Bluetooth: hci0 command 0x1009 tx timeout [ 519.325687] Bluetooth: hci11 command 0x1009 tx timeout [ 519.325717] Bluetooth: hci9 command 0x1009 tx timeout [ 519.336261] Bluetooth: hci6 command 0x1009 tx timeout [ 519.885614] Bluetooth: hci10 command 0x1009 tx timeout [ 519.885703] Bluetooth: hci8 command 0x1009 tx timeout 14:25:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:25:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:25:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setstatus(r2, 0x4, 0x6000) ioctl$KDADDIO(r1, 0x400455c8, 0x200004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 523.307058] Bluetooth: Unknown HCI packet type 5e [ 523.309254] Bluetooth: Unknown HCI packet type 00 [ 523.311930] Bluetooth: Unknown HCI packet type 43 [ 523.311935] Bluetooth: Unknown HCI packet type 5e [ 523.311939] Bluetooth: Unknown HCI packet type 50 [ 523.311949] Bluetooth: Unknown HCI packet type 5e [ 523.311958] Bluetooth: Unknown HCI packet type 40 [ 523.336523] Bluetooth: hci6: Frame reassembly failed (-84) [ 523.353737] Bluetooth: hci6: Frame reassembly failed (-84) [ 523.362650] Bluetooth: Unknown HCI packet type 5e [ 523.371168] Bluetooth: Unknown HCI packet type 43 [ 523.377428] Bluetooth: Unknown HCI packet type 00 [ 523.383540] Bluetooth: Unknown HCI packet type 5e [ 523.393533] Bluetooth: Unknown HCI packet type 50 [ 523.400404] Bluetooth: Unknown HCI packet type 5e [ 523.405894] Bluetooth: Unknown HCI packet type 40 14:25:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:25:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 523.946639] Bluetooth: hci8: Frame reassembly failed (-84) [ 523.993473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:25:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="00000300", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4, 0x3f}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$BLKFRASET(r5, 0x1264, &(0x7f00000001c0)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$CHAR_RAW_REPORTZONE(r5, 0xc0101282, &(0x7f0000000100)={0x5, 0x2, 0x0, [{0x100000000, 0x55c9, 0x1ff, 0x3, 0x7, 0x80, 0xcf}, {0x6, 0x0, 0x1, 0x1f, 0x20, 0xfa, 0x4}]}) [ 524.155211] Bluetooth: hci10 sending frame failed (-49) [ 524.166731] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:25:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x81, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0x20, "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"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) ioctl$KDADDIO(r2, 0x400455c8, 0x41) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:25:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = open(&(0x7f0000000100)='./file0\x00', 0xd08c3, 0x20) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)) [ 524.791120] Bluetooth: Unknown HCI packet type 5e [ 524.791133] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 524.796149] Bluetooth: Unknown HCI packet type 43 [ 524.809145] Bluetooth: Unknown HCI packet type 5e [ 524.814177] Bluetooth: Unknown HCI packet type 50 [ 524.822258] Bluetooth: Unknown HCI packet type 5e [ 524.830609] Bluetooth: Unknown HCI packet type 40 [ 525.334849] Bluetooth: hci0 command 0x1003 tx timeout [ 525.340848] Bluetooth: hci0 sending frame failed (-49) [ 525.404902] Bluetooth: hci9 command 0x1003 tx timeout [ 525.410241] Bluetooth: hci9 sending frame failed (-49) [ 525.414909] Bluetooth: hci6 command 0x1003 tx timeout [ 525.420863] Bluetooth: hci6 sending frame failed (-49) [ 525.964832] Bluetooth: hci8 command 0x1003 tx timeout [ 525.970179] Bluetooth: hci8 sending frame failed (-49) [ 526.205323] Bluetooth: hci10 command 0x1003 tx timeout [ 526.210767] Bluetooth: hci10 sending frame failed (-49) [ 526.844699] Bluetooth: hci11 command 0x1003 tx timeout [ 526.850113] Bluetooth: hci11 sending frame failed (-49) [ 527.404790] Bluetooth: hci0 command 0x1001 tx timeout [ 527.410071] Bluetooth: hci0 sending frame failed (-49) [ 527.484961] Bluetooth: hci6 command 0x1001 tx timeout [ 527.490216] Bluetooth: hci9 command 0x1001 tx timeout [ 527.490252] Bluetooth: hci6 sending frame failed (-49) [ 527.497283] Bluetooth: hci9 sending frame failed (-49) [ 528.044726] Bluetooth: hci8 command 0x1001 tx timeout [ 528.050023] Bluetooth: hci8 sending frame failed (-49) [ 528.284618] Bluetooth: hci10 command 0x1001 tx timeout [ 528.290005] Bluetooth: hci10 sending frame failed (-49) [ 528.924647] Bluetooth: hci11 command 0x1001 tx timeout [ 528.930769] Bluetooth: hci11 sending frame failed (-49) [ 529.484451] Bluetooth: hci0 command 0x1009 tx timeout [ 529.564472] Bluetooth: hci9 command 0x1009 tx timeout [ 529.574944] Bluetooth: hci6 command 0x1009 tx timeout [ 530.124368] Bluetooth: hci8 command 0x1009 tx timeout [ 530.364348] Bluetooth: hci10 command 0x1009 tx timeout [ 531.004345] Bluetooth: hci11 command 0x1009 tx timeout 14:25:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:25:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:25:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 533.552599] Bluetooth: Unknown HCI packet type 5e [ 533.558498] Bluetooth: Unknown HCI packet type 43 [ 533.571980] Bluetooth: Unknown HCI packet type 5e [ 533.577009] Bluetooth: Unknown HCI packet type 50 [ 533.589823] Bluetooth: Unknown HCI packet type 5e [ 533.595386] Bluetooth: Unknown HCI packet type 00 [ 533.595549] Bluetooth: Unknown HCI packet type 5e [ 533.607257] Bluetooth: Unknown HCI packet type 40 [ 533.615362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 533.630852] Bluetooth: Unknown HCI packet type 43 [ 533.636952] Bluetooth: Unknown HCI packet type 5e [ 533.642552] Bluetooth: Unknown HCI packet type 50 [ 533.653583] Bluetooth: Unknown HCI packet type 5e [ 533.674491] Bluetooth: Unknown HCI packet type 40 14:25:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 534.156895] Bluetooth: hci8: Frame reassembly failed (-84) 14:25:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 534.395559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:25:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f8, 0x1, 0x70bd29, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x20000080) ioctl$KDADDIO(r0, 0x400455c8, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040000000000ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000024000b0e0000000000000000000000003f7fc6c575ccccb6d00105be99a801939646067624c08ee361bb2882c3c80c8413560e481404cd4640d043c41c28033834d5bf9010a74d801da8af4f7ac35bc4cd0867386261d660a7ad206e562a362e38c3f4b8a7cea939335158b879130961066a825f7f1447e80758c7094cfffbb28f0000000000000000000000010000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000007000100667100000c0002000800070000000000"], 0x38}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x33) [ 534.800775] Bluetooth: Unknown HCI packet type 5e [ 534.806965] Bluetooth: Unknown HCI packet type 43 [ 534.812687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.822938] Bluetooth: Unknown HCI packet type 5e [ 534.837297] Bluetooth: Unknown HCI packet type 50 [ 534.842262] Bluetooth: Unknown HCI packet type 5e [ 534.847342] Bluetooth: Unknown HCI packet type 40 [ 534.853207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.865140] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:25:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 535.213289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:25:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) [ 535.435827] Bluetooth: Unknown HCI packet type 5e [ 535.436146] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 535.440845] Bluetooth: Unknown HCI packet type 43 [ 535.460943] Bluetooth: Unknown HCI packet type 5e [ 535.469659] Bluetooth: Unknown HCI packet type 50 [ 535.475812] Bluetooth: Unknown HCI packet type 5e [ 535.481984] Bluetooth: Unknown HCI packet type 40 [ 535.573733] Bluetooth: hci0 command 0x1003 tx timeout [ 535.579936] Bluetooth: hci0 sending frame failed (-49) [ 535.643652] Bluetooth: hci6 command 0x1003 tx timeout [ 535.649025] Bluetooth: hci6 sending frame failed (-49) 14:25:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 536.032849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 536.203559] Bluetooth: hci8 command 0x1003 tx timeout [ 536.208971] Bluetooth: hci8 sending frame failed (-49) 14:25:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 536.844161] Bluetooth: hci9 command 0x1003 tx timeout [ 536.849446] Bluetooth: hci9 sending frame failed (-49) [ 536.857715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 537.483404] Bluetooth: hci10 command 0x1003 tx timeout [ 537.488874] Bluetooth: hci10 sending frame failed (-49) 14:25:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 537.643557] Bluetooth: hci0 command 0x1001 tx timeout [ 537.649805] Bluetooth: hci0 sending frame failed (-49) [ 537.677112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 537.723550] Bluetooth: hci6 command 0x1001 tx timeout [ 537.729490] Bluetooth: hci6 sending frame failed (-49) [ 538.283355] Bluetooth: hci8 command 0x1001 tx timeout [ 538.288663] Bluetooth: hci8 sending frame failed (-49) 14:26:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 538.491556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.923295] Bluetooth: hci9 command 0x1001 tx timeout [ 538.928598] Bluetooth: hci9 sending frame failed (-49) [ 539.563287] Bluetooth: hci10 command 0x1001 tx timeout [ 539.568709] Bluetooth: hci10 sending frame failed (-49) [ 539.733313] Bluetooth: hci0 command 0x1009 tx timeout [ 539.803193] Bluetooth: hci6 command 0x1009 tx timeout [ 540.363135] Bluetooth: hci8 command 0x1009 tx timeout [ 541.003112] Bluetooth: hci9 command 0x1009 tx timeout [ 541.652973] Bluetooth: hci10 command 0x1009 tx timeout 14:26:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:26:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 543.793645] Bluetooth: Unknown HCI packet type 5e [ 543.793838] Bluetooth: Unknown HCI packet type 00 [ 543.798603] Bluetooth: Unknown HCI packet type 43 [ 543.823450] Bluetooth: Unknown HCI packet type 5e [ 543.828500] Bluetooth: hci6 sending frame failed (-49) [ 543.828719] Bluetooth: Unknown HCI packet type 50 [ 543.839012] Bluetooth: Unknown HCI packet type 5e [ 543.847418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.857664] Bluetooth: Unknown HCI packet type 40 14:26:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:26:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 544.646311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:26:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x7}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0xffff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000140)) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) 14:26:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2180, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000100)={{r1}, "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"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:26:07 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080)) 14:26:07 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x0, @private1, 0x7}, @in6={0xa, 0x4e21, 0x9, @private2, 0x2}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x4, @remote, 0x1}], 0x74) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:26:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 545.699110] Bluetooth: Unknown HCI packet type 5e [ 545.699388] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 545.705413] Bluetooth: Unknown HCI packet type 43 [ 545.721901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 545.745488] Bluetooth: Unknown HCI packet type 5e [ 545.751052] Bluetooth: Unknown HCI packet type 5e [ 545.761691] Bluetooth: Unknown HCI packet type 43 [ 545.768632] Bluetooth: Unknown HCI packet type 50 [ 545.772006] Bluetooth: Unknown HCI packet type 5e [ 545.775117] Bluetooth: Unknown HCI packet type 5e [ 545.784134] Bluetooth: Unknown HCI packet type 50 [ 545.784957] Bluetooth: Unknown HCI packet type 40 [ 545.790143] Bluetooth: Unknown HCI packet type 5e [ 545.799319] Bluetooth: Unknown HCI packet type 40 [ 545.804407] Bluetooth: hci0 command 0x1003 tx timeout [ 545.809810] Bluetooth: hci0 sending frame failed (-49) [ 545.882545] Bluetooth: hci6 command 0x1003 tx timeout [ 545.887906] Bluetooth: hci6 sending frame failed (-49) 14:26:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 546.442442] Bluetooth: hci8 command 0x1003 tx timeout [ 546.447825] Bluetooth: hci8 sending frame failed (-49) [ 547.722281] Bluetooth: hci9 command 0x1003 tx timeout [ 547.727582] Bluetooth: hci9 sending frame failed (-49) [ 547.802470] Bluetooth: hci10 command 0x1003 tx timeout [ 547.807893] Bluetooth: hci10 sending frame failed (-49) [ 547.882278] Bluetooth: hci0 command 0x1001 tx timeout [ 547.888199] Bluetooth: hci0 sending frame failed (-49) [ 547.962325] Bluetooth: hci6 command 0x1001 tx timeout [ 547.967657] Bluetooth: hci6 sending frame failed (-49) [ 548.522200] Bluetooth: hci8 command 0x1001 tx timeout [ 548.527521] Bluetooth: hci8 sending frame failed (-49) [ 549.802101] Bluetooth: hci9 command 0x1001 tx timeout [ 549.807436] Bluetooth: hci9 sending frame failed (-49) [ 549.882275] Bluetooth: hci10 command 0x1001 tx timeout [ 549.887671] Bluetooth: hci10 sending frame failed (-49) [ 549.962102] Bluetooth: hci0 command 0x1009 tx timeout [ 550.042036] Bluetooth: hci6 command 0x1009 tx timeout [ 550.611981] Bluetooth: hci8 command 0x1009 tx timeout [ 551.881856] Bluetooth: hci9 command 0x1009 tx timeout [ 551.962031] Bluetooth: hci10 command 0x1009 tx timeout 14:26:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:26:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) [ 554.049329] Bluetooth: Unknown HCI packet type 5e [ 554.060327] Bluetooth: Unknown HCI packet type 43 [ 554.071182] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 554.076089] Bluetooth: Unknown HCI packet type 5e [ 554.083274] Bluetooth: Unknown HCI packet type 50 [ 554.088843] Bluetooth: Unknown HCI packet type 5e [ 554.094892] Bluetooth: Unknown HCI packet type 40 14:26:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:26:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, 0x0) [ 554.639485] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.639527] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.665073] Bluetooth: Unknown HCI packet type 5e [ 554.671252] Bluetooth: Unknown HCI packet type 43 [ 554.683240] Bluetooth: Unknown HCI packet type 5e [ 554.689094] Bluetooth: Unknown HCI packet type 50 [ 554.697182] Bluetooth: Unknown HCI packet type 5e [ 554.702502] Bluetooth: Unknown HCI packet type 40 14:26:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:18 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2d) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x190, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x69}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2a8e74f1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8101}, 0x10) 14:26:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) timer_getoverrun(0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) [ 555.936206] Bluetooth: Unknown HCI packet type 5e [ 555.944971] Bluetooth: Unknown HCI packet type 43 [ 555.952879] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 555.958975] Bluetooth: Unknown HCI packet type 5e [ 555.966738] Bluetooth: Unknown HCI packet type 50 [ 555.971714] Bluetooth: Unknown HCI packet type 5e [ 555.976602] Bluetooth: Unknown HCI packet type 40 [ 556.121361] Bluetooth: hci6 command 0x1003 tx timeout [ 556.126767] Bluetooth: hci6 sending frame failed (-49) 14:26:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:18 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8, 0x1000, 0x9, 0x0, 0x16, "58543c5cb01ad000"}) write$cgroup_freezer_state(r0, &(0x7f0000001500)='FROZEN\x00', 0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x1f, 0x4, 0x0, @loopback, @dev={0xfe, 0x80, [], 0x10}, 0x700, 0x20, 0x9, 0x56d7}}) syz_mount_image$nfs4(&(0x7f00000003c0)='nfs4\x00', &(0x7f0000000400)='./file0\x00', 0x9, 0x1, &(0x7f0000001440)=[{&(0x7f0000000440)="12f947236ac29426fd57afa67068c33ed9855affff1dc00e341b9f72421cfefebdd237314ecc431a55b6d1cfae6b4ae28384a2cc75adb510e4e98018c1c270a2755807389d18146ce0f77622d2c59b393c6a08f8af6d039e80a35a41fd735a348d0de6908a1f4726122568794a76d88731f00d1a372bd711de5d2596b10b8555dc411f08959a9c5d54da0a37fb780147c5e98dd872fa1f3bf760f9b341f560ce26b2cae6fc6c033ac2796a7a0e30b6d72e7d105230ab44a55b38c71cd51be28d28f8603c210dbd301d5a7c177000800624e933f628375c3a6a1c0be66fb575f187049abdd7f47586496edeea56fa7f7af8b7e95594bc6b35d09695dcfc5c488df7ea10d15f5cdd1effce8965ea5e8ee028fff4be3ac97cf38501e076b202f5b8637700542216818697d97d901d0056950bab8b6270d8ed32d853e9880e59d3937a9ceacc6c08e4d709f2440c2568cde4ad43970a279edd93f83748a4aa852995d4dd60724a0c3abd1516cbe0ca0fc93e83f1a95bb4b39224ad6d900d2c852d9c899a6abfacc3510169d0b7883666ff0532f4b28246477a26f02f45e242c7f1d0f4d3c3280422b41963359487da91c044bdf421d0eafba7b39b4dee7be9caba1d5918aca0677d85626feb5b8fc101e79603f470ac32f12b8f5c34deab135473d4d5427f1309119c87f5ded39511c206fc5b9ca8e0c2fe37d329e92100e2d7a596079f99b1f446fcd4c128b3ada68bed609a55f9da03fc206e7a866cb18e9c471c6304572bbc528a090874011f6443408219899cb95c28086f0d1b2c4a73fa6dcc820d379142962e3941aa756e60f8518ebea42287aa35f9077c4409c7c40c79e0def46602cdbbc5daeba8ddb90d6dc3031b2edc608f0a1a6ed9b4890efdc80e8610bb23f828f8cee7da7f3c3f787667b0202c67e06d62d435ebe9e9794ba709755d3a2d4f9a5ab35b1d665118a8de012d3bfccc739507c035bdbe7691fb34c64e51a385abf03121b9d904c738f1c151ec0d6632e4cc3f8f63bf94820d9a4657c3d723fc0647cf4f7f6a666bda24149b39be631af20d294d93e8ee92148b71912daf2582a54dc538fa4c9464303199afd41317f2ca5d39eb580c884588c988191659fa911ae7c02c3dc9f79eddb10ea36c0697fa8062188cf526135a71d5da34c787b44774aed1ae51ddeb068345f37465846c63cc4eadccffcfd78672cba9864978ce7582e48854f9d606aaf32653eda1dfd2b3a0cc4aaf4adccb1f90bb0226277a1c83ff761090b1485744a70e535e1a329c1d94d1152ba63ac4074a984c0ae24c0af9d4e85139dd282ff60ee2188cb7b8f44454ee78eeac92660bfc9dd174d50a9b6e167fcfc5d64c889f41a1c5724a40faff395f8255cf276a11f4be1e5ddb877825dfa71e40f834771db9749a4b89b889a5434dc2f540aeaf48aea115e58f0d828b1e14c243b1c87d766ca64bb64f22d0f66ca0f479d4483b0f4efaebb608ecc0b85948e29b5b436817068ab11e1d0acaa7c30c134f8872a8a2b13125e379ae85aa0391ffa081d3f9a96b33dcd78f642f940973e5a5d83bffece85beb897b051d1e58124b828d2883842cfeb909209e71a9787e05f6cf7f42b738906d6f51a536fe6ff35654b7beddeb84d3fc843fb016d6e0287f7f9ecd75a1b8a17b1fe127692e5f2b004e6c50b0326842eadac9876e92a40ae259b52231f7bb1b5cf86aab1ff71210b353d955701f196961d49004e7fcfd219a3e9e8ad5969c0ab04c830563f328322d6a304e63a98a6b26cf7e08ee5893417c542be21df068607d0fa9c4e5d9409e011d12a700c7f08ca243208cd9f52126d5f700703f0e71a16c9a07f3a77ce79ec2ae52d80f73010f4cd8c46f1ea48499d7455bf0c576b24de175f64107d0ee925c93b9efde82c7c6cd5fa2ddc978b82ddf938970650e34ddc50986b5e7d4e2ceace0f26da02f1d810abf9c92f7e77b92fea38f156d0b4db517cf631b2f8c9139ab43bfc61e1f694734d975e9a0b661877f4b7acb184ec05e08c30cf3f78b84b2d6d05d89d3f8e7ab15e1a34d8b357c0cf7001e44d722fe11c9335297fdf0772c5edc2fbbcc251d0f09fdd83d5fc0c35dbffd2fa57500db1b8f884eac87e7720eb24b87f6cf7ca5ef68ca7e1f22f7c43d5dd4a5f456ad42d676081c8902c241e47a597c5bd92bd381ed34c89d093ac7b88caeaf78b2fc64c201784dbbfaf074f0ecab44880f80b03613b7da02f2e1dc6af492d5bdea0331206d285f3d94fd4ca2dacf79d20d7eea4c986b2d80e74a1eb0879c4169378d23ddab5d6d2469e88c7b70905c06e6d2b48093142c57ac5475d64880282d7dee2a093813ab5d4a512f5e2e59e7f72d7495ffd435da2dc2f299a48834b56769cf518f2bae88fb93a3486028011f737484829d3598283b8801fe6a58af0c5d76bb53d23490e6c16be348c88f8428a1c80320b71be9d1c441766f7c222d5c717304b68b7f5aa30f3bceb319b177bb0d91f9d4d7a0cf386583670ff28e5018fc97871e200f49f2e74d8122c58cca255527bef02cb03f908a1ca7cc243d307bae5294472f7a57e0e7941b4a7a0b66032097cb66c596917c35b8f8110f2f8b35191fab8b618297bc3df51a140ad425e03867756f57efec314e96283fc8f706b297c376df675c412f135927e820cd9a4342302719c620cbe9461a8a0f617371009b155873211a9b07d4d493f238859b5937a17efd77e1fc82ca02cfea07a38949ad6edfc17774cb76e1feb085f537422394ea31961eefcd8b52734cd127f3b1718481a96248a6bc4d0f106ad0aa4a4a1cac8d933d5e91d123dda9e776466b1e9a96ad16b938877e040050d2af1bbfe2f47a91dd4cea65f44343c69d5632642b42d45c5157dc9bacc330f1071ae6c2ecdaecf57e333302b3977d1dca8e19c5ab0efc7826cfb96003d78d7b93d32b006deb47d370a3502d52953fa757780a783b0c782172e7f64de53e041d2b06c45ab6810596c49bf32c00b7de35ba5872de791a37e6a94be5600b753411d70cb92273618bc296f8cc9c24df384d21e075ce7d12f53f95e91a3e6e87e3378f7bfb0cb7fa0f1cc58e87d8f49dfab5b1fee7ca5a58433bd39e6ba0413a17c84e72c4d71d5c572c582c5ae2a24b5d2b1d610c9179ac5a210d0e417b5cf2f53a00c842b850b758573629f65cd314fa638641182b7278999ab89c75723d2f6d2ed945a4a05316c70a43158d6e61acc7f3ea76384f754a5d49e26c7798eef0d7e70efd7e34839fb759dfef8d75c3e84b31ef727295cf4951a8495168c4e874026165921d9eed4dd70099ddeaa331c71803eb0ff6595cdf5f4c89fc23aad061d10e5b712a8134499d72f54a87c5864bc16b2c1d951573b3198db4e5ab3d1ee80460577fe53c04cf41f5d6d6fc24f09691dbdefb4ae99d21b4200ac572247c0c7454989becdcd29eaac1a65b80acbaa33fdc499eaa8642d119bba727111e94329314cabbd20cab93bfb8aa2b8e57d18fd03f071769cb89b41fce0cc0889c12b5a585143d2ea6d4bcdd823bd42e0d65a30c7f4a613bb3b9ebccb0ca58449164a7e98e56bec6b384aa1a17982f7e72f507313d19e0e92de90084a7cbba8a58e542aa7778dfae7b7309348ee0015b4524406424b936f130a5082060bb27954ac2d3f9b6019abcbdb17cd6e4e5a8e23ae7c61eead7acfe3c3984faeeb9d26569a83218eab206ced84dd6703c99746117ee14276e648dd655c409a6efcad2e53489b73cc98613e081f060a898c0e8e75ed49c05cfef7145904b004868c5903600fc7d1224ae09fbb7d5e5f525c45af2c5babbb3cccda21428e84bbf1da89ca966eabec06ae30df960084767de579b5312d573674d6d3c9a4c26e2796904908c99cd06a1a74cc039dc2c1577b5c6d85cad7b4b03c6658a0bacb9cafc726c56129c9549da9bfa456ef2aec908923f5130392e5e5d9a8c3d88210bc8e6edb604d0c0ac0dcf80afdeb80689412cdcd4259d2ca4436ec7d985702827ce2b429d227cb837197b64ecfbef41e7fe5f578ab184695fbd367ff71ac62f354a178e815b1a1f6955f5f72f7c4c5152008e3d044640c6156f260261eb564423ab2052a9100d4f08c6fc366be3c15af47c6285de5847a81cd4e92c3bf8a8afcb4108f2e929add0d3d7fe6b620d1033de2301e145b03368c71481fd34a562589635327f21e705c3278bc90e3df724487186bdb56730622fb1ab2aed8778236d1321d41cc302d872fbdad4bfcd52799e1b68d8503f01b47c305ee17fa397aad7fde135817b39fdd8b9f0a09c625266de4a648ba2cded02cd40d5252339a4ccb0c4c784afba5170c56cc27327565e4934b4cb819119445ca24f7c4dd69718a941baa90f389c5cc2afe249c88304082c44e404516616cb2fe15b4499c5c627afa82db4ae2aafcf43e810484b8c3ebdcd4ada4f62b0be00ce10279a930fd718aa3652d6a85af88e9f2509c0e79ee10f66c94d573a0053055632906deab56d5d13676215dd1ead74a20a7c158aebc6f8b55a2ca126ed9acc639597f1c1d618604949b7d811bab4ab19db9be0fe3404037eb02e0772cbf382fff4d84ff92e9c144de951187587874c64ebe7ed74b00167fa13cdbcb99504aa61ac0f01aac33013e3c49f64d09de07601b1fa428390899f4f7fbdf206f9db6efeb7946dbc6d3e767a4f2a0a81343e7653ed8c013f08313305d5f82ba5db4b0d644639d310e063f0ab6f162e348521a5dd29a8f1249997d1f5d656315ed611f90a3efbe5102e0d10b4e50fe076bdbd2868c52a35e0930b341a5d713546ee7ce00972476ee3d7cac7ded912c03d18b48ec07b1df61b42ed8f1f33777fb37c8095bb43697887c02452378d987999d722d0bd8e4b0bd2d7b15c9efb65c26d68cf32dd01c7b29582058d27eaa54330a749b5ecccea8ce8f15264b29b4a45161601f5712f4bc1e2601f5b47a15b4e591bdc01d207bad58565125e6e4265b39e53dfcff580c0d019b0a9a917c554d5aea2beb27b34830d6c0cd04146c1e8a145164d13dec9c57b40b835ecf7e6b4ef7127e0e03225435e7cfa6563bfebd5e7bfe964a1a60498b7efc78154a019f6cd4869de23805f200d92dd33dd8fc7d8ee7e7487d6210e888970c83041a8f2b78cb3da0f0fd1c32e9c81738074efff4a9b8244abbff6a89a50581a38d8e5de25f6e50040eca57534bb95393613fb93a49352575d103010f76acdb25b97d1d9dd86b84fd942459d8d31fb8cc850971c92e9dfafa352b219d2e4d198fe6004cbaf14ed1c37131bee4a133fd33fd2d7013a08f3efa817c513677e9bc009fc9a0571f2a00ea5a11a7bef3260c46f852595f8954fad2132336275a58bf3c325c6d15742d24bc782d971964abbe0a85e0443677bc2496e2147122645e3846c1a8afd9afa5cfac167ef7aa9c4af44bbb39c25ed26bb65aadfd40b743c8c180fb24d10044a6f4735c88c8df10d68f02f7b676dd5af624d133fd08f60cad1c3f116a12f2ba88c5eea88871c500c1afa6780c065e5be858e480ec66631eb09c0eafbc4190acbcfc1bbfeac82aad959894d3daddd0acad2300ea433de48449bf92ae18312c2d91973fc3b3ad9011c046484506d280b3c5dca49e38040829e60099d7d36a6fd09a79cd80b17dd4eb278ddcc19be7601f60369fc4085625c2deb099b1eabeac27821a87e6892e30a82c0895028301284256f20a460e484f377f38416a713bd0e926c717edfc07f6e477c3c4f61212c93c5aaa17da584a1242cccc16dd049a98798220bfe5bee329f0f", 0x1000, 0xfadd}], 0x344050, &(0x7f0000001480)={[{'ip6tnl0\x00'}, {'syztnl1\x00'}, {'[)I[+^^&}}&\'/&-'}, {'ip6tnl0\x00'}, {'\'#--!:^\'*:%:{!-\'.\x1e#[{({'}, {'][}'}], [{@seclabel='seclabel'}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="98000000540000022dbd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="3f000500", @ANYRES32=0x0, @ANYBLOB="00000400fc0100000000000000000000000000000800000020000100", @ANYRES32=0x0, @ANYBLOB="01040100ac1e00010000000000000000000000000800000020000100", @ANYRES32=0x0, @ANYBLOB="01010600fc0200000000000000000000000000018edd000020000100", @ANYRES32=r3, @ANYBLOB="000201002001000000000000000000000000000108000000"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4044084) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x960, 0x2, 0x80, 0x1, 0x3, "23d423ebfd377be33c5e5c4e39e367d94f3d72", 0x63b, 0x3c3}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 556.691325] Bluetooth: hci8 command 0x1003 tx timeout [ 556.696659] Bluetooth: hci0 command 0x1003 tx timeout [ 556.696702] Bluetooth: hci8 sending frame failed (-49) [ 556.703381] Bluetooth: hci0 sending frame failed (-49) [ 556.822834] print_req_error: I/O error, dev loop2, sector 0 14:26:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:26:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/226, 0xe2) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000200)={0x7fffffff, 0x0, [], {0x0, @reserved}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x400000, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x1c940) prctl$PR_GET_TIMERSLACK(0x1e) [ 557.620593] Bluetooth: Unknown HCI packet type 5e [ 557.620608] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 557.626289] Bluetooth: Unknown HCI packet type 43 [ 557.639544] Bluetooth: Unknown HCI packet type 5e [ 557.646598] Bearer rejected, not supported in standalone mode [ 557.648805] Bluetooth: Unknown HCI packet type 50 [ 557.659355] Bluetooth: Unknown HCI packet type 5e [ 557.664910] Bluetooth: Unknown HCI packet type 40 [ 557.961181] Bluetooth: hci9 command 0x1003 tx timeout [ 557.961851] Bluetooth: hci9 sending frame failed (-49) [ 558.201171] Bluetooth: hci6 command 0x1001 tx timeout [ 558.206607] Bluetooth: hci6 sending frame failed (-49) [ 558.761121] Bluetooth: hci8 command 0x1001 tx timeout [ 558.766541] Bluetooth: hci8 sending frame failed (-49) [ 558.771959] Bluetooth: hci0 command 0x1001 tx timeout [ 558.777214] Bluetooth: hci0 sending frame failed (-49) [ 559.640944] Bluetooth: hci10 command 0x1003 tx timeout [ 559.646370] Bluetooth: hci10 sending frame failed (-49) [ 560.050907] Bluetooth: hci9 command 0x1001 tx timeout [ 560.056219] Bluetooth: hci9 sending frame failed (-49) [ 560.280899] Bluetooth: hci6 command 0x1009 tx timeout [ 560.840900] Bluetooth: hci8 command 0x1009 tx timeout [ 560.851337] Bluetooth: hci0 command 0x1009 tx timeout [ 561.720714] Bluetooth: hci10 command 0x1001 tx timeout [ 561.726096] Bluetooth: hci10 sending frame failed (-49) [ 562.120729] Bluetooth: hci9 command 0x1009 tx timeout [ 563.800590] Bluetooth: hci10 command 0x1009 tx timeout 14:26:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:26:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, 0x0) 14:26:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 564.899172] Bluetooth: hci0: Frame reassembly failed (-84) [ 564.915456] Bluetooth: Unknown HCI packet type 5e [ 564.920705] Bluetooth: Unknown HCI packet type 43 [ 564.933318] Bluetooth: Unknown HCI packet type 5e [ 564.942014] Bluetooth: Unknown HCI packet type 50 [ 564.948932] Bluetooth: Unknown HCI packet type 5e [ 564.958234] Bluetooth: Unknown HCI packet type 40 14:26:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_mount_image$jffs2(&(0x7f00000013c0)='jffs2\x00', &(0x7f0000001440)='./file0\x00', 0x40, 0x1, &(0x7f0000001500)=[{&(0x7f0000001480)="fcdcd56fd128e3ce7877d78146c0ce4cfa77795393832a60d6b86ef122a2681372f1550d3f025e53e85d07dc550ecd5e92963d390a6a88a65d464885c2a81c3fb48d604183943b0848f25fb47c6ed53de9", 0x51, 0xff}], 0x844000, &(0x7f0000001540)=ANY=[@ANYBLOB="636f6d70723d7a6c69622c636f6d70723d7a6c69622c72705f73697a653d30303030303030ff0300000000000030303030382c636f6d70723d6e6f6e652c72705d73697a653d30303030303030303030303030303020303531312c636f6d70723d7a6c69622c636f6d70723d6c7a6f2c72705f73697a653d30303030303030303030303030303030303234362c72705f73697a653d303030303030303030303030303030303030b0392c6673636f6e745d78743d726f6f742c666f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB=',func=BPRM_CHECK,context=user_u,smackfsdef=)\',\x00']) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="ca05833ecea54217e05c6e93e3a5485ae962597aba70b141192532953e17b68bb698674fd4ebdfde0f146bbaf232f4075c33e6747925173cf104e5a8f157559643fcba3fa9440f10f8de728609dce656df383fdc19266125c0f4746d209039adadff6724b4013b59f44543508388a02f9a664aafb7fc5e3b413609df7125187414", 0x81, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x109, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000980)={r1, r2, r1}, 0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={'crc32\x00'}}) keyctl$instantiate_iov(0x14, r2, &(0x7f0000001340)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="9b828806775b54e1baafde92fd177c38026d0c85278839dd9b4739073f0ccbcff4c887f9581cbc273f4c4623d5e871db87a2219dbe5bbba51c42ee1f94fa8320ea601a5efbb6703ff97d02c1debe8a48786e449e40536823736399a9bec4e1", 0x5f}, {&(0x7f0000001180)="8c40c4f29e78744bfb58af05d44a32770e2189c428dd1aaabff46c16050394d38c89ed50d880d40a91be77289368a6ed969302f0735480ff8f4b66634e7d7f7375e33b6fa2a407f81762458743b74e219d6082da57a6d227f2d2552844c7f023dea8d5f945b284ef4082a27c242f5e1e962d9c0914d17c888ffb188e97f59a5a85a3c23ae21710639283aebed43c8c940a29e73f804f18295d9a1eccb34464a484d5c066a4c79c773268e6ef9c10682defdab93d48dda31ab62f4a86067c72af35fa4b9371f38f9c69d421d59a4ed8995e28fa84100173c2291f7fc7b292768188c425490cafb2cd", 0xe8}, {&(0x7f0000001280)="de4d502f421bf4d3ed3a6bf2e44c131b85d075e43e7c3439262270305b26af57380548f30b84df97d04ec04c221a99b09636b729a6f165c3b2a6f624788c49fc688db9bf0b26c975292bcabb6f1fb69edac99f85480855a866185f6daab16fa5e6157f8b6f6f5818aaa2fff228b95e4c5ccf6f180a1f7ee5d8f606d67051fdacaef209277bc0", 0x86}, {&(0x7f0000000080)="df7ea05d360c912254282a31dcfeecf5ad", 0x11}], 0x5, 0x0) [ 566.157914] Bluetooth: Unknown HCI packet type 5e [ 566.159500] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 566.163176] Bluetooth: Unknown HCI packet type 43 [ 566.184440] Bluetooth: Unknown HCI packet type 5e [ 566.198454] Bluetooth: Unknown HCI packet type 50 [ 566.204902] Bluetooth: Unknown HCI packet type 5e [ 566.209881] Bluetooth: Unknown HCI packet type 40 [ 566.280264] Bluetooth: hci6 command 0x1003 tx timeout [ 566.285604] Bluetooth: hci6 sending frame failed (-49) 14:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 566.920154] Bluetooth: hci8 command 0x1003 tx timeout [ 566.925470] Bluetooth: hci0 command 0x1003 tx timeout [ 566.925512] Bluetooth: hci8 sending frame failed (-49) [ 566.932574] Bluetooth: hci0 sending frame failed (-49) 14:26:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pwrite64(r0, &(0x7f0000000100)="a185cfe064cdae28376f5c3cc5e958b28d658b8488febf6807ff99b4acb9482291eb80789b54f13d81b4800f33b2512cff789971e19002697cb20a641857a1caf8888ea1c7d2", 0x46, 0x3ff) [ 568.070726] Bluetooth: Unknown HCI packet type 5e [ 568.075707] Bluetooth: Unknown HCI packet type 43 [ 568.081395] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 568.087318] Bluetooth: Unknown HCI packet type 5e [ 568.094474] Bluetooth: Unknown HCI packet type 50 [ 568.099405] Bluetooth: Unknown HCI packet type 5e [ 568.104369] Bluetooth: Unknown HCI packet type 40 [ 568.210120] Bluetooth: hci9 command 0x1003 tx timeout [ 568.216280] Bluetooth: hci9 sending frame failed (-49) [ 568.360021] Bluetooth: hci6 command 0x1001 tx timeout [ 568.365352] Bluetooth: hci6 sending frame failed (-49) [ 568.999955] Bluetooth: hci8 command 0x1001 tx timeout [ 568.999959] Bluetooth: hci0 command 0x1001 tx timeout [ 569.000136] Bluetooth: hci0 sending frame failed (-49) [ 569.005276] Bluetooth: hci8 sending frame failed (-49) [ 570.119853] Bluetooth: hci10 command 0x1003 tx timeout [ 570.125273] Bluetooth: hci10 sending frame failed (-49) [ 570.289837] Bluetooth: hci9 command 0x1001 tx timeout [ 570.295193] Bluetooth: hci9 sending frame failed (-49) [ 570.439795] Bluetooth: hci6 command 0x1009 tx timeout [ 571.079736] Bluetooth: hci8 command 0x1009 tx timeout [ 571.079764] Bluetooth: hci0 command 0x1009 tx timeout [ 572.199746] Bluetooth: hci10 command 0x1001 tx timeout [ 572.205160] Bluetooth: hci10 sending frame failed (-49) [ 572.359699] Bluetooth: hci9 command 0x1009 tx timeout [ 574.279426] Bluetooth: hci10 command 0x1009 tx timeout 14:26:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:26:36 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) [ 574.510120] Bluetooth: Unknown HCI packet type 5e [ 574.522350] Bluetooth: Unknown HCI packet type 43 [ 574.527274] Bluetooth: Unknown HCI packet type 5e [ 574.533905] Bluetooth: Unknown HCI packet type 50 [ 574.538809] Bluetooth: Unknown HCI packet type 5e [ 574.544809] Bluetooth: Unknown HCI packet type 40 14:26:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, 0x0) 14:26:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:37 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) [ 575.193894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) 14:26:38 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) 14:26:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 576.421116] Bluetooth: Unknown HCI packet type 5e [ 576.421168] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 576.427200] Bluetooth: Unknown HCI packet type 43 [ 576.438051] Bluetooth: Unknown HCI packet type 5e 14:26:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 576.462768] Bluetooth: Unknown HCI packet type 50 [ 576.474502] Bluetooth: Unknown HCI packet type 5e [ 576.495456] Bluetooth: Unknown HCI packet type 40 [ 576.501862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.519252] Bluetooth: hci6 command 0x1003 tx timeout [ 576.525172] Bluetooth: hci6 sending frame failed (-49) [ 577.159147] Bluetooth: hci0 command 0x1003 tx timeout [ 577.164530] Bluetooth: hci0 sending frame failed (-49) 14:26:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x14001, 0x19b) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) [ 578.448988] Bluetooth: hci8 command 0x1003 tx timeout [ 578.454429] Bluetooth: hci8 sending frame failed (-49) [ 578.599098] Bluetooth: hci6 command 0x1001 tx timeout [ 578.604436] Bluetooth: hci6 sending frame failed (-49) [ 579.238888] Bluetooth: hci0 command 0x1001 tx timeout [ 579.244208] Bluetooth: hci0 sending frame failed (-49) [ 580.518892] Bluetooth: hci8 command 0x1001 tx timeout [ 580.524317] Bluetooth: hci8 sending frame failed (-49) [ 580.678809] Bluetooth: hci6 command 0x1009 tx timeout [ 581.318741] Bluetooth: hci0 command 0x1009 tx timeout [ 582.598603] Bluetooth: hci8 command 0x1009 tx timeout 14:26:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 584.733002] Bluetooth: Unknown HCI packet type 5e [ 584.737883] Bluetooth: Unknown HCI packet type 43 [ 584.749005] Bluetooth: Unknown HCI packet type 5e [ 584.753886] Bluetooth: Unknown HCI packet type 50 [ 584.767672] Bluetooth: Unknown HCI packet type 5e [ 584.772915] Bluetooth: Unknown HCI packet type 40 14:26:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) 14:26:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 585.353800] Bluetooth: Unknown HCI packet type 5e [ 585.359722] Bluetooth: Unknown HCI packet type 43 [ 585.365037] Bluetooth: Unknown HCI packet type 00 [ 585.377981] Bluetooth: Unknown HCI packet type 5e [ 585.384212] Bluetooth: Unknown HCI packet type 50 [ 585.395663] Bluetooth: Unknown HCI packet type 5e [ 585.403115] Bluetooth: Unknown HCI packet type 40 [ 585.415458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:26:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1c) 14:26:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)={r1}) 14:26:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 14:26:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 586.656607] Bluetooth: Unknown HCI packet type 5e [ 586.656621] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 586.662483] Bluetooth: Unknown HCI packet type 43 [ 586.670560] Bluetooth: Unknown HCI packet type 5e [ 586.676577] Bluetooth: Unknown HCI packet type 1c [ 586.677130] Bluetooth: Unknown HCI packet type 43 [ 586.677135] Bluetooth: Unknown HCI packet type 5e [ 586.677139] Bluetooth: Unknown HCI packet type 50 [ 586.677143] Bluetooth: Unknown HCI packet type 5e [ 586.677148] Bluetooth: Unknown HCI packet type 40 14:26:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 586.703831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 586.719847] Bluetooth: Unknown HCI packet type 5e [ 586.732559] Bluetooth: Unknown HCI packet type 50 14:26:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) [ 586.758245] Bluetooth: hci6 command 0x1003 tx timeout [ 586.763565] Bluetooth: hci6 sending frame failed (-49) [ 586.764067] Bluetooth: Unknown HCI packet type 5e [ 586.777897] Bluetooth: Unknown HCI packet type 40 [ 587.408124] Bluetooth: hci0 command 0x1003 tx timeout [ 587.413484] Bluetooth: hci0 sending frame failed (-49) [ 588.677968] Bluetooth: hci8 command 0x1003 tx timeout [ 588.677974] Bluetooth: hci9 command 0x1003 tx timeout [ 588.678055] Bluetooth: hci9 sending frame failed (-49) [ 588.683334] Bluetooth: hci8 sending frame failed (-49) [ 588.837950] Bluetooth: hci6 command 0x1001 tx timeout [ 588.843297] Bluetooth: hci6 sending frame failed (-49) [ 589.487956] Bluetooth: hci0 command 0x1001 tx timeout [ 589.493286] Bluetooth: hci0 sending frame failed (-49) [ 590.757776] Bluetooth: hci9 command 0x1001 tx timeout [ 590.763089] Bluetooth: hci9 sending frame failed (-49) [ 590.769423] Bluetooth: hci8 command 0x1001 tx timeout [ 590.774779] Bluetooth: hci8 sending frame failed (-49) [ 590.917802] Bluetooth: hci6 command 0x1009 tx timeout [ 591.557668] Bluetooth: hci0 command 0x1009 tx timeout [ 592.837585] Bluetooth: hci8 command 0x1009 tx timeout [ 592.837589] Bluetooth: hci9 command 0x1009 tx timeout 14:26:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) [ 594.985519] Bluetooth: Unknown HCI packet type 5e [ 594.991168] Bluetooth: Unknown HCI packet type 43 [ 594.996150] Bluetooth: Unknown HCI packet type 5e [ 595.001214] Bluetooth: Unknown HCI packet type 50 [ 595.006047] Bluetooth: Unknown HCI packet type 5e [ 595.012207] Bluetooth: Unknown HCI packet type 40 14:26:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) 14:26:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 595.612770] Bluetooth: Unknown HCI packet type 5e [ 595.619547] Bluetooth: Unknown HCI packet type 00 [ 595.631752] Bluetooth: Unknown HCI packet type 43 [ 595.642831] Bluetooth: Unknown HCI packet type 5e [ 595.648237] Bluetooth: Unknown HCI packet type 50 [ 595.653457] Bluetooth: Unknown HCI packet type 5e [ 595.665362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 595.665374] Bluetooth: Unknown HCI packet type 40 14:26:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) 14:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:26:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r5, @in={{0x2, 0x4e24, @local}}}, 0x84) 14:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x800033) 14:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) [ 596.912958] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 596.913209] Bluetooth: Unknown HCI packet type 5e [ 596.931374] Bluetooth: Unknown HCI packet type 43 [ 596.951301] Bluetooth: Unknown HCI packet type 5e [ 596.965426] Bluetooth: Unknown HCI packet type 43 [ 596.973627] Bluetooth: Unknown HCI packet type 08 [ 596.983983] Bluetooth: Unknown HCI packet type 5e [ 596.990878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 597.001639] Bluetooth: Unknown HCI packet type 5e [ 597.002962] Bluetooth: hci6 command 0x1003 tx timeout 14:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) [ 597.012136] Bluetooth: Unknown HCI packet type 50 [ 597.016435] Bluetooth: Unknown HCI packet type 50 [ 597.028378] Bluetooth: hci6 sending frame failed (-49) [ 597.028933] Bluetooth: Unknown HCI packet type 5e [ 597.043529] Bluetooth: Unknown HCI packet type 5e [ 597.067114] Bluetooth: Unknown HCI packet type 40 14:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) [ 597.091439] Bluetooth: Unknown HCI packet type 40 [ 597.637100] Bluetooth: hci0 command 0x1003 tx timeout [ 597.642410] Bluetooth: hci0 sending frame failed (-49) [ 598.917391] Bluetooth: hci8 command 0x1003 tx timeout [ 598.922697] Bluetooth: hci8 sending frame failed (-49) [ 598.996944] Bluetooth: hci9 command 0x1003 tx timeout [ 599.002349] Bluetooth: hci9 sending frame failed (-49) [ 599.076963] Bluetooth: hci6 command 0x1001 tx timeout [ 599.082304] Bluetooth: hci6 sending frame failed (-49) [ 599.716916] Bluetooth: hci0 command 0x1001 tx timeout [ 599.723060] Bluetooth: hci0 sending frame failed (-49) [ 600.997034] Bluetooth: hci8 command 0x1001 tx timeout [ 601.002410] Bluetooth: hci8 sending frame failed (-49) [ 601.076829] Bluetooth: hci9 command 0x1001 tx timeout [ 601.082130] Bluetooth: hci9 sending frame failed (-49) [ 601.156774] Bluetooth: hci6 command 0x1009 tx timeout [ 601.796748] Bluetooth: hci0 command 0x1009 tx timeout [ 603.076825] Bluetooth: hci8 command 0x1009 tx timeout [ 603.156623] Bluetooth: hci9 command 0x1009 tx timeout 14:27:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:27:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) 14:27:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 605.833037] Bluetooth: Unknown HCI packet type 5e [ 605.838799] Bluetooth: Unknown HCI packet type 43 [ 605.852009] Bluetooth: hci6 sending frame failed (-49) [ 605.852358] Bluetooth: Unknown HCI packet type 00 [ 605.863584] Bluetooth: Unknown HCI packet type 5e [ 605.876769] Bluetooth: Unknown HCI packet type 50 [ 605.881785] Bluetooth: Unknown HCI packet type 5e [ 605.891492] Bluetooth: Unknown HCI packet type 40 [ 605.902418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0x2dc1, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0xc331) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2010, &(0x7f0000000240)=ANY=[@ANYBLOB='upperdir=./file0,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c7063723d30303030303030303030303032303030303030382c736d61636b66737472616e736d7574653d2c5eae2a3a2c736d61636b6673666c6f6f723d2d25404027255d292b5d2421252c646566636f6e746578743d73797361646d5f752c001b61218958c9b972ad7153fbf0e3d6ab78e45f8da7f6050a05a783e088874567feb0d846f70028e1c6c322fd1cef37a9a9485fabe70120460a49421251023d397640aad283d0"]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:27:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:27:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 14:27:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 607.146035] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 607.153423] Bluetooth: Unknown HCI packet type 5e [ 607.158668] Bluetooth: Unknown HCI packet type 43 [ 607.163739] Bluetooth: hci9 sending frame failed (-49) [ 607.176961] Bluetooth: Unknown HCI packet type 5e 14:27:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:27:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) [ 607.192365] Bluetooth: Unknown HCI packet type 50 [ 607.198223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 607.200434] Bluetooth: Unknown HCI packet type 5e [ 607.216690] Bluetooth: Unknown HCI packet type 40 [ 607.279940] Bluetooth: Unknown HCI packet type 5e [ 607.285962] Bluetooth: Unknown HCI packet type 43 [ 607.292099] Bluetooth: Unknown HCI packet type 5e [ 607.298062] Bluetooth: Unknown HCI packet type 50 [ 607.303026] Bluetooth: Unknown HCI packet type 5e [ 607.308815] Bluetooth: Unknown HCI packet type 40 14:27:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 607.876557] Bluetooth: hci6 command 0x1003 tx timeout [ 607.881847] Bluetooth: hci6 sending frame failed (-49) [ 607.886097] Bluetooth: hci0 command 0x1003 tx timeout [ 607.892490] Bluetooth: hci0 sending frame failed (-49) [ 607.983302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 14:27:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 608.808439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.156026] Bluetooth: hci8 command 0x1003 tx timeout [ 609.161541] Bluetooth: hci8 sending frame failed (-49) [ 609.236000] Bluetooth: hci9 command 0x1003 tx timeout [ 609.241460] Bluetooth: hci9 sending frame failed (-49) [ 609.316023] Bluetooth: hci10 command 0x1003 tx timeout [ 609.321427] Bluetooth: hci10 sending frame failed (-49) [ 609.955985] Bluetooth: hci0 command 0x1001 tx timeout [ 609.961261] Bluetooth: hci6 command 0x1001 tx timeout [ 609.961288] Bluetooth: hci0 sending frame failed (-49) [ 609.968034] Bluetooth: hci6 sending frame failed (-49) [ 611.235857] Bluetooth: hci8 command 0x1001 tx timeout [ 611.241273] Bluetooth: hci8 sending frame failed (-49) [ 611.315804] Bluetooth: hci9 command 0x1001 tx timeout [ 611.321096] Bluetooth: hci9 sending frame failed (-49) [ 611.395997] Bluetooth: hci10 command 0x1001 tx timeout [ 611.401563] Bluetooth: hci10 sending frame failed (-49) [ 612.035958] Bluetooth: hci6 command 0x1009 tx timeout [ 612.046298] Bluetooth: hci0 command 0x1009 tx timeout [ 613.315809] Bluetooth: hci8 command 0x1009 tx timeout [ 613.405709] Bluetooth: hci9 command 0x1009 tx timeout [ 613.485747] Bluetooth: hci10 command 0x1009 tx timeout 14:27:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 14:27:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) close(r0) [ 616.090094] Bluetooth: Unknown HCI packet type 5e [ 616.096004] Bluetooth: Unknown HCI packet type 43 [ 616.104195] Bluetooth: Unknown HCI packet type 5e [ 616.111005] Bluetooth: Unknown HCI packet type 50 [ 616.118085] Bluetooth: Unknown HCI packet type 5e [ 616.123162] Bluetooth: Unknown HCI packet type 40 [ 616.159141] Bluetooth: Unknown HCI packet type 5e [ 616.164019] Bluetooth: Unknown HCI packet type 43 [ 616.170416] Bluetooth: Unknown HCI packet type 5e [ 616.175937] Bluetooth: Unknown HCI packet type 50 [ 616.180784] Bluetooth: Unknown HCI packet type 5e [ 616.185691] Bluetooth: Unknown HCI packet type 40 14:27:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:27:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 14:27:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x8, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0xff, 0x0, r4}, {0x5, 0x3, 0x34a8000000, 0x5, 0x20, 0x3, 0x2, 0x5}, {0x5, 0x401, 0x0, 0xc8f6}, 0x80000000, 0x6e6bbe, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d3, 0xff}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x2, 0x7, 0x1, 0x7, 0x8}}, 0xe8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) read$proc_mixer(r7, &(0x7f0000000100)=""/125, 0x7d) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x34) [ 617.388406] Bluetooth: Unknown HCI packet type 5e [ 617.393767] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 617.398486] Bluetooth: Unknown HCI packet type 43 [ 617.407653] Bluetooth: Unknown HCI packet type 5e [ 617.412723] Bluetooth: Unknown HCI packet type 50 [ 617.423163] Bluetooth: Unknown HCI packet type 5e [ 617.429517] Bluetooth: Unknown HCI packet type 40 14:27:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 618.115203] Bluetooth: hci0 command 0x1003 tx timeout [ 618.120716] Bluetooth: hci0 sending frame failed (-49) [ 618.195170] Bluetooth: hci6 command 0x1003 tx timeout [ 618.200452] Bluetooth: hci6 sending frame failed (-49) [ 618.270174] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 618.278605] Bluetooth: Unknown HCI packet type 5e [ 618.283854] Bluetooth: Unknown HCI packet type 43 [ 618.291563] Bluetooth: Unknown HCI packet type 5e [ 618.300338] Bluetooth: Unknown HCI packet type 50 [ 618.305605] Bluetooth: Unknown HCI packet type 5e [ 618.310518] Bluetooth: Unknown HCI packet type 40 14:27:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 619.395011] Bluetooth: hci9 command 0x1003 tx timeout [ 619.395037] Bluetooth: hci8 command 0x1003 tx timeout [ 619.400375] Bluetooth: hci9 sending frame failed (-49) [ 619.410474] Bluetooth: hci8 sending frame failed (-49) 14:27:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 620.194961] Bluetooth: hci0 command 0x1001 tx timeout [ 620.200280] Bluetooth: hci0 sending frame failed (-49) [ 620.275006] Bluetooth: hci6 command 0x1001 tx timeout [ 620.275009] Bluetooth: hci10 command 0x1003 tx timeout [ 620.275077] Bluetooth: hci10 sending frame failed (-49) [ 620.280294] Bluetooth: hci6 sending frame failed (-49) 14:27:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$packet(0x11, 0x3, 0x300) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 621.475152] Bluetooth: hci9 command 0x1001 tx timeout [ 621.480441] Bluetooth: hci9 sending frame failed (-49) [ 621.486284] Bluetooth: hci8 command 0x1001 tx timeout [ 621.491524] Bluetooth: hci8 sending frame failed (-49) [ 622.285071] Bluetooth: hci0 command 0x1009 tx timeout [ 622.354799] Bluetooth: hci10 command 0x1001 tx timeout [ 622.354828] Bluetooth: hci6 command 0x1009 tx timeout [ 622.361414] Bluetooth: hci10 sending frame failed (-49) [ 623.554730] Bluetooth: hci8 command 0x1009 tx timeout [ 623.554767] Bluetooth: hci9 command 0x1009 tx timeout [ 624.434708] Bluetooth: hci10 command 0x1009 tx timeout 14:27:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket(0x10, 0x3, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) close(r0) 14:27:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40040, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) syz_open_pts(r0, 0x20001) 14:27:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 14:27:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002940)={'syztnl0\x00', &(0x7f00000028c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x1, 0x1ff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x3, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002980)={0xb8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 627.638169] Bluetooth: Unknown HCI packet type 5e [ 627.643205] Bluetooth: Unknown HCI packet type 43 [ 627.668655] Bluetooth: Unknown HCI packet type 5e [ 627.677210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 14:27:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'macvlan1\x00', {}, 0x800}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x0, r2, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r1, 0x0, 0xffffffffffffffff, 0x481}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r1) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180)=r1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={r1, 0x3528, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r1, 0x1, r3, 0x3}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000240)='./file0\x00'}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x1, r4, 0x9}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vsock\x00', 0x2100, 0x0) bind$can_raw(r5, &(0x7f00000011c0), 0x10) [ 627.686557] Bluetooth: Unknown HCI packet type 50 [ 627.698956] Bluetooth: Unknown HCI packet type 5e [ 627.703846] Bluetooth: Unknown HCI packet type 40 [ 627.748463] Bluetooth: Unknown HCI packet type 5e [ 627.756865] Bluetooth: Unknown HCI packet type 43 [ 627.757100] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 627.762505] Bluetooth: Unknown HCI packet type 5e [ 627.779260] Bluetooth: Unknown HCI packet type 50 [ 627.785063] Bluetooth: Unknown HCI packet type 5e [ 627.790022] Bluetooth: Unknown HCI packet type 40 [ 628.354233] Bluetooth: hci0 command 0x1003 tx timeout [ 628.360034] Bluetooth: hci0 sending frame failed (-49) 14:27:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4942, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f00000001c0)=0x101, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) open(&(0x7f0000000040)='./file0\x00', 0x1215a0, 0xc) 14:27:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:27:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) pipe(&(0x7f0000000180)) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 628.872871] Bluetooth: Unknown HCI packet type 5e [ 628.878325] Bluetooth: Unknown HCI packet type 43 [ 628.893191] Bluetooth: Unknown HCI packet type 5e [ 628.902301] Bluetooth: Unknown HCI packet type 5e [ 628.909771] Bluetooth: Unknown HCI packet type 50 [ 628.911116] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) 14:27:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 628.927695] Bluetooth: Unknown HCI packet type 43 [ 628.930448] Bluetooth: Unknown HCI packet type 5e [ 628.932988] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 628.946742] Bluetooth: Unknown HCI packet type 5e [ 628.957419] Bluetooth: Unknown HCI packet type 40 [ 628.959124] Bluetooth: Unknown HCI packet type 50 14:27:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 628.974489] Bluetooth: Unknown HCI packet type 5e [ 628.987702] Bluetooth: Unknown HCI packet type 40 [ 629.714233] Bluetooth: hci6 command 0x1003 tx timeout [ 629.719584] Bluetooth: hci6 sending frame failed (-49) [ 629.794180] Bluetooth: hci8 command 0x1003 tx timeout [ 629.799721] Bluetooth: hci8 sending frame failed (-49) [ 630.434163] Bluetooth: hci0 command 0x1001 tx timeout [ 630.439949] Bluetooth: hci0 sending frame failed (-49) [ 630.914072] Bluetooth: hci10 command 0x1003 tx timeout [ 630.919582] Bluetooth: hci10 sending frame failed (-49) [ 630.925288] Bluetooth: hci9 command 0x1003 tx timeout [ 630.930585] Bluetooth: hci9 sending frame failed (-49) [ 631.793972] Bluetooth: hci6 command 0x1001 tx timeout [ 631.799308] Bluetooth: hci6 sending frame failed (-49) [ 631.873953] Bluetooth: hci8 command 0x1001 tx timeout [ 631.879273] Bluetooth: hci8 sending frame failed (-49) [ 632.513953] Bluetooth: hci0 command 0x1009 tx timeout [ 632.993872] Bluetooth: hci10 command 0x1001 tx timeout [ 632.993929] Bluetooth: hci9 command 0x1001 tx timeout [ 633.000732] Bluetooth: hci10 sending frame failed (-49) [ 633.006111] Bluetooth: hci9 sending frame failed (-49) [ 633.873786] Bluetooth: hci6 command 0x1009 tx timeout [ 633.954010] Bluetooth: hci8 command 0x1009 tx timeout [ 635.073648] Bluetooth: hci9 command 0x1009 tx timeout [ 635.073700] Bluetooth: hci10 command 0x1009 tx timeout 14:27:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:27:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:38 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) [ 636.595094] Bluetooth: Unknown HCI packet type 5e [ 636.600244] Bluetooth: Unknown HCI packet type 43 [ 636.616370] Bluetooth: Unknown HCI packet type 5e [ 636.621236] Bluetooth: Unknown HCI packet type 50 [ 636.634740] Bluetooth: Unknown HCI packet type 5e [ 636.639882] Bluetooth: Unknown HCI packet type 40 14:27:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) 14:27:40 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 14:27:40 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) [ 637.847792] Bluetooth: Unknown HCI packet type 5e [ 637.853632] Bluetooth: Unknown HCI packet type 43 [ 637.871376] Bluetooth: Unknown HCI packet type 5e [ 637.891517] Bluetooth: Unknown HCI packet type 50 [ 637.898702] Bluetooth: Unknown HCI packet type 5e [ 637.911350] Bluetooth: Unknown HCI packet type 40 [ 638.673321] Bluetooth: hci0 command 0x1003 tx timeout [ 638.678634] Bluetooth: hci0 sending frame failed (-49) 14:27:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x1ff0000, 0x9, 0x4, 0x0, 0x7, {r1, r2/1000+10000}, {0x2, 0x1, 0x3b, 0x8, 0x5, 0x6, "e1046985"}, 0xa4ea, 0x2, @planes=&(0x7f0000000080)={0xd79, 0x40001, @userptr=0x9, 0x1}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$FIONCLEX(r3, 0x5450) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pause() ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:27:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:27:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000001001b0000000400cc0008009a0002000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x308, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x290, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xde, 0x3, "50ce015c14353736aecf22f45fbefa58d8d31714c60153790fe813346ec1254a03332427fc002b59e6ac424aa0da90c1c719392641d65cc164b42829cd0e1b77c8044ed386567e42719469516e0f71ebaad470f7654adc41977e940ec949a907e795a3691613301a7b79c51d1f029e94969e45a4a4912557140d82d844470047b00519bc534b3b0a21bb49bbf5eff94cb2298979405be07bca18e5d367974a52552c35773e6ad44645fc0f0c01f0e5baec1bd87e55ca2f70e841aa29b48e162b3eb669a2765fbac56b8b1d0a6d9dd144ce0ad36c706b9e6c1ed0"}, @NL80211_BAND_5GHZ={0x51, 0x1, "983038309920c7e199910a8b47e3348355249df2a4bf36877a3c420082261db868591793b501adbab21493a4e54d9c6b655e84e78d00e6df69c08a02b0899876b8ce7ccf98a3e58513bd6a3558"}, @NL80211_BAND_6GHZ={0xdd, 0x3, "164fa8e3673e13ae5bfd75da13eca7a165db4c284d5a1042b26f48f1f476238545f98ee136dd31a35d2600d526771d5a2efe5433f95059b29e9c8128b1665835c292945bc4bceca5bc9bedae4c038eae8a56c156caf9d0f796ef473cfb1acc8ddba73bff0ad05450cc266a1aa24eb06d2ce23be0d25f4a81d3bce9aa56945a2839c2ac74d4f480e7c8141f9890ca8b2b15bbf9bc414cf46d70c41af8f3e7a86f464b778f3411573e612035292ad4f04ba705626c192a88a8320e4ae32ebc8f55577eb0b60a4ad1bb14c3cf050d9d752349414e6c2a0a963fe0"}, @NL80211_BAND_6GHZ={0x41, 0x3, "54b6c4c04caffc481455851e75f3005ca168b14b0641dba262cfbc3102b7f139057150b21b6fa32f6b305f219028fe79c09f24ac0fe64d362f3e80d799"}, @NL80211_BAND_5GHZ={0x33, 0x1, "2876f3791370bf556bb4bff36f7119e5cee8e0ca157e86b83a195382f3576343fed3c811d34fb72512d63a602d517e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1d, 0x0, @random="e48b7f32c3bdee4170fe3745962cae75653db5f061b383ba7e"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x717c}]}, 0x308}, 0x1, 0x0, 0x0, 0x10}, 0x4042111) 14:27:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 639.118368] Bluetooth: Unknown HCI packet type 5e [ 639.127845] Bluetooth: Unknown HCI packet type 43 [ 639.133807] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 639.142911] Bluetooth: Unknown HCI packet type 5e [ 639.153760] Bluetooth: Unknown HCI packet type 43 [ 639.160238] Bluetooth: Unknown HCI packet type 5e [ 639.171518] Bluetooth: Unknown HCI packet type 5e [ 639.172525] Bluetooth: Unknown HCI packet type 5e [ 639.181821] Bluetooth: Unknown HCI packet type 50 [ 639.187739] Bluetooth: Unknown HCI packet type 43 [ 639.191018] Bluetooth: Unknown HCI packet type 5e [ 639.200936] Bluetooth: Unknown HCI packet type 50 [ 639.208894] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 639.211770] Bluetooth: Unknown HCI packet type 5e 14:27:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 639.217262] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 639.229853] Bluetooth: Unknown HCI packet type 40 [ 639.230863] Bluetooth: Unknown HCI packet type 50 [ 639.236267] Bluetooth: Unknown HCI packet type 5e [ 639.252016] Bluetooth: Unknown HCI packet type 40 [ 639.259997] Bluetooth: Unknown HCI packet type 5e [ 639.269832] Bluetooth: Unknown HCI packet type 40 [ 639.873251] Bluetooth: hci6 command 0x1003 tx timeout [ 639.878670] Bluetooth: hci6 sending frame failed (-49) [ 640.763161] Bluetooth: hci0 command 0x1001 tx timeout [ 640.768867] Bluetooth: hci0 sending frame failed (-49) [ 641.153104] Bluetooth: hci8 command 0x1003 tx timeout [ 641.158469] Bluetooth: hci8 sending frame failed (-49) [ 641.163938] Bluetooth: hci9 command 0x1003 tx timeout [ 641.169214] Bluetooth: hci9 sending frame failed (-49) [ 641.233062] Bluetooth: hci10 command 0x1003 tx timeout [ 641.238507] Bluetooth: hci10 sending frame failed (-49) [ 641.953128] Bluetooth: hci6 command 0x1001 tx timeout [ 641.958428] Bluetooth: hci6 sending frame failed (-49) [ 642.833019] Bluetooth: hci0 command 0x1009 tx timeout [ 643.232955] Bluetooth: hci8 command 0x1001 tx timeout [ 643.232959] Bluetooth: hci9 command 0x1001 tx timeout [ 643.233034] Bluetooth: hci9 sending frame failed (-49) [ 643.242899] Bluetooth: hci8 sending frame failed (-49) [ 643.313054] Bluetooth: hci10 command 0x1001 tx timeout [ 643.318481] Bluetooth: hci10 sending frame failed (-49) [ 644.032941] Bluetooth: hci6 command 0x1009 tx timeout [ 645.312798] Bluetooth: hci9 command 0x1009 tx timeout [ 645.312802] Bluetooth: hci8 command 0x1009 tx timeout [ 645.392761] Bluetooth: hci10 command 0x1009 tx timeout 14:27:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:27:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) close(r0) 14:27:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:27:51 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x600040, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x14}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:27:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = dup(r0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) [ 649.342772] Bluetooth: Unknown HCI packet type 5e [ 649.347759] Bluetooth: Unknown HCI packet type 43 [ 649.353655] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 649.360650] Bluetooth: Unknown HCI packet type 5e [ 649.369262] Bluetooth: Unknown HCI packet type 50 [ 649.386071] Bluetooth: Unknown HCI packet type 5e 14:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 649.407560] Bluetooth: Unknown HCI packet type 5e [ 649.408623] Bluetooth: Unknown HCI packet type 40 [ 649.427657] Bluetooth: Unknown HCI packet type 43 [ 649.433650] Bluetooth: Unknown HCI packet type 5e [ 649.438818] Bluetooth: Unknown HCI packet type 50 [ 649.446408] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 649.458877] Bluetooth: Unknown HCI packet type 5e [ 649.464890] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 649.478834] Bluetooth: Unknown HCI packet type 43 [ 649.491038] Bluetooth: Unknown HCI packet type 5e 14:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 649.507698] Bluetooth: Unknown HCI packet type 5e [ 649.515049] Bluetooth: Unknown HCI packet type 40 [ 649.527512] Bluetooth: Unknown HCI packet type 50 [ 649.535070] Bluetooth: Unknown HCI packet type 5e [ 649.540065] Bluetooth: Unknown HCI packet type 40 [ 650.112316] Bluetooth: hci0 command 0x1003 tx timeout [ 650.118506] Bluetooth: hci0 sending frame failed (-49) [ 651.392215] Bluetooth: hci6 command 0x1003 tx timeout [ 651.398047] Bluetooth: hci6 sending frame failed (-49) [ 651.472255] Bluetooth: hci9 command 0x1003 tx timeout [ 651.477561] Bluetooth: hci8 command 0x1003 tx timeout [ 651.477604] Bluetooth: hci9 sending frame failed (-49) [ 651.484414] Bluetooth: hci8 sending frame failed (-49) [ 652.192154] Bluetooth: hci0 command 0x1001 tx timeout [ 652.197472] Bluetooth: hci0 sending frame failed (-49) [ 653.472029] Bluetooth: hci6 command 0x1001 tx timeout [ 653.478289] Bluetooth: hci6 sending frame failed (-49) [ 653.552056] Bluetooth: hci9 command 0x1001 tx timeout [ 653.557386] Bluetooth: hci9 sending frame failed (-49) [ 653.562816] Bluetooth: hci8 command 0x1001 tx timeout [ 653.568093] Bluetooth: hci8 sending frame failed (-49) [ 654.271989] Bluetooth: hci0 command 0x1009 tx timeout [ 655.551926] Bluetooth: hci6 command 0x1009 tx timeout [ 655.631862] Bluetooth: hci9 command 0x1009 tx timeout [ 655.631865] Bluetooth: hci8 command 0x1009 tx timeout 14:28:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) close(r0) 14:28:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:28:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 658.338027] Bluetooth: Unknown HCI packet type 5e [ 658.343787] Bluetooth: Unknown HCI packet type 43 [ 658.368205] Bluetooth: Unknown HCI packet type 5e [ 658.373409] Bluetooth: Unknown HCI packet type 50 [ 658.378275] Bluetooth: Unknown HCI packet type 5e [ 658.383661] Bluetooth: Unknown HCI packet type 40 14:28:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:28:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:01 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) 14:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x4008001e) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x1f, 0xce, 0x1}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$VT_DISALLOCATE(r0, 0x5608) 14:28:01 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) 14:28:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) [ 659.638851] Bluetooth: Unknown HCI packet type 5e [ 659.650769] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 659.668098] Bluetooth: Unknown HCI packet type 43 14:28:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 659.687247] Bluetooth: Unknown HCI packet type 5e [ 659.724109] Bluetooth: Unknown HCI packet type 50 [ 659.730455] Bluetooth: Unknown HCI packet type 5e [ 659.741168] Bluetooth: Unknown HCI packet type 40 [ 659.757608] Bluetooth: Unknown HCI packet type 5e [ 659.778045] Bluetooth: Unknown HCI packet type 43 [ 659.786672] Bluetooth: Unknown HCI packet type 5e [ 659.798937] Bluetooth: Unknown HCI packet type 50 [ 659.807926] Bluetooth: Unknown HCI packet type 5e [ 659.815744] Bluetooth: Unknown HCI packet type 40 [ 659.840042] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 660.351515] Bluetooth: hci0 command 0x1003 tx timeout [ 660.357052] Bluetooth: hci0 sending frame failed (-49) [ 661.721421] Bluetooth: hci6 command 0x1003 tx timeout [ 661.721526] Bluetooth: hci6 sending frame failed (-49) [ 661.801397] Bluetooth: hci8 command 0x1003 tx timeout [ 661.806730] Bluetooth: hci8 sending frame failed (-49) [ 662.431253] Bluetooth: hci0 command 0x1001 tx timeout [ 662.436713] Bluetooth: hci0 sending frame failed (-49) [ 663.791210] Bluetooth: hci6 command 0x1001 tx timeout [ 663.796661] Bluetooth: hci6 sending frame failed (-49) [ 663.871174] Bluetooth: hci8 command 0x1001 tx timeout [ 663.876505] Bluetooth: hci8 sending frame failed (-49) [ 664.511107] Bluetooth: hci0 command 0x1009 tx timeout [ 665.871151] Bluetooth: hci6 command 0x1009 tx timeout [ 665.951137] Bluetooth: hci8 command 0x1009 tx timeout 14:28:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:10 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) 14:28:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 14:28:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ocfs2_control\x00', 0x30001, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000680)={0x9}, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000080)={0x5}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0xe, 0x6, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x4000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000500)={0x4, 0x5, 0x6}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) 14:28:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) [ 668.583688] Bluetooth: Unknown HCI packet type 5e [ 668.583851] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 668.590306] Bluetooth: Unknown HCI packet type 43 [ 668.622615] Bluetooth: Unknown HCI packet type 5e [ 668.627665] Bluetooth: Unknown HCI packet type 43 [ 668.633781] Bluetooth: Unknown HCI packet type 5e [ 668.648638] Bluetooth: Unknown HCI packet type 50 [ 668.664361] Bluetooth: Unknown HCI packet type 5e [ 668.669611] Bluetooth: Unknown HCI packet type 5e [ 668.672247] Bluetooth: Unknown HCI packet type 50 14:28:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) close(r0) [ 668.686380] Bluetooth: Unknown HCI packet type 5e [ 668.687324] Bluetooth: Unknown HCI packet type 40 [ 668.706784] Bluetooth: Unknown HCI packet type 40 [ 668.740128] Bluetooth: Unknown HCI packet type 5e [ 668.748243] Bluetooth: Unknown HCI packet type 43 [ 668.753829] Bluetooth: Unknown HCI packet type 5e [ 668.758788] Bluetooth: Unknown HCI packet type 50 [ 668.764402] Bluetooth: Unknown HCI packet type 5e [ 668.773296] Bluetooth: Unknown HCI packet type 40 14:28:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x9, 0x22081) ioctl$KDADDIO(r1, 0x400455c8, 0x2004) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:12 executing program 2: ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000200)={0xbb, 0x4}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_pts(r0, 0x4400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x2) ioctl$TCXONC(r4, 0x540a, 0x3) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x80) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000001c0)) [ 669.856490] Bluetooth: Unknown HCI packet type 5e [ 669.861213] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 669.861612] Bluetooth: Unknown HCI packet type 43 [ 669.887022] Bluetooth: Unknown HCI packet type 5e [ 669.897538] Bluetooth: Unknown HCI packet type 50 [ 669.917506] Bluetooth: Unknown HCI packet type 5e [ 669.919219] Bluetooth: Unknown HCI packet type 5e [ 669.923131] Bluetooth: Unknown HCI packet type 43 [ 669.931892] Bluetooth: Unknown HCI packet type 40 [ 669.947547] Bluetooth: Unknown HCI packet type 5e [ 669.959511] Bluetooth: Unknown HCI packet type 50 [ 669.965655] Bluetooth: Unknown HCI packet type 5e [ 669.975267] Bluetooth: Unknown HCI packet type 40 [ 670.600662] Bluetooth: hci0 command 0x1003 tx timeout [ 670.606862] Bluetooth: hci0 sending frame failed (-49) [ 670.670687] Bluetooth: hci9 command 0x1003 tx timeout [ 670.676074] Bluetooth: hci9 sending frame failed (-49) [ 670.750633] Bluetooth: hci10 command 0x1003 tx timeout [ 670.756284] Bluetooth: hci10 sending frame failed (-49) [ 671.870563] Bluetooth: hci6 command 0x1003 tx timeout [ 671.875850] Bluetooth: hci6 sending frame failed (-49) [ 671.950575] Bluetooth: hci8 command 0x1003 tx timeout [ 671.955896] Bluetooth: hci8 sending frame failed (-49) [ 672.670543] Bluetooth: hci0 command 0x1001 tx timeout [ 672.675840] Bluetooth: hci0 sending frame failed (-49) [ 672.750391] Bluetooth: hci9 command 0x1001 tx timeout [ 672.755683] Bluetooth: hci9 sending frame failed (-49) [ 672.830456] Bluetooth: hci10 command 0x1001 tx timeout [ 672.835842] Bluetooth: hci10 sending frame failed (-49) [ 673.950421] Bluetooth: hci6 command 0x1001 tx timeout [ 673.955718] Bluetooth: hci6 sending frame failed (-49) [ 674.030315] Bluetooth: hci8 command 0x1001 tx timeout [ 674.035605] Bluetooth: hci8 sending frame failed (-49) [ 674.750319] Bluetooth: hci0 command 0x1009 tx timeout [ 674.830347] Bluetooth: hci9 command 0x1009 tx timeout [ 674.910286] Bluetooth: hci10 command 0x1009 tx timeout [ 676.030279] Bluetooth: hci6 command 0x1009 tx timeout [ 676.110261] Bluetooth: hci8 command 0x1009 tx timeout 14:28:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:28:21 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x600040, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x14}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:28:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x4, 0x1, 0x7, 0x2, 0x914fcbf8c37a67ab, 0x9, 0x1cf, 0x38, 0x117, 0x101, 0x200, 0x20, 0x2, 0xf6, 0x3, 0xcc}, [{0x6474e552, 0x101, 0x2, 0xdb2, 0x5, 0x3, 0x7ff, 0x77d}], "ad67cfd3bd97d736f14d4caa58fbf801efbc2be2705c6528b03bd16f0a561e39a3340dbe2a75c1fb0212e9baff49ff88ed4b37ceea8e4892f915c76fbc759649de4779a7eaf2c96a03561ee03faa5f44e9389e03820e4820bd9f7a86a36b561e0cd59dd522f318dba1afcc17052edd392608ea35096d1f8d1bb7fb4b893c7aa027c2dd57e4a0bf9bc12291702b338ccc4c95e0d1a0eaf566a23b39f0be4e119e7026d34e377558deb217", [[], [], [], []]}, 0x502) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xff, 0x200, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x40, 0x80, 0x7, 0xff}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x40, 0x63, 0x20, @loopback, @dev={0xfe, 0x80, [], 0x3b}, 0x8000, 0x1, 0x5, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r9}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004100)=[{{&(0x7f0000000640)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000680)="6d62be464058dad72d1576114b479400a425ef081dd8ed57eb0fbad0e74b90c1b0674dbc7f5140621b8d02bbc5a76c", 0x2f}], 0x1, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xea75}}], 0xd8}}, {{&(0x7f0000000b80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="02897ba281a4da6ccba446430f2e18ab810b125cb38eab2c040937b816bf56a218259929d134c1c68356a397bf440156d4ebbbcca91cc3425b1fc6b610556a4a0b2c244340526c0dea811b5b460d89e95ce4ac55a9bd550533a5158c38e27490587680981d5f069c2fc35283c4208ce9b5ce6dd44f27fabac23ac0187137699f94d5fcdfcec35918440c16e83e3f7563866855aef4e25fc09b29eee0131d82d9d903e351c225bb009eafad5ab72919c7fad80455cf73c003148e94f46a97eb48af39baaa2157cdf1c22d7f5b2f598e5302829101e4d72648ac6c81cebc1c54dd0e5df03caf7e2f587819a9ee87eab398628a3bd1597bc08d771582f605", 0xfd}, {&(0x7f0000000cc0)="9df3396f4c9440ca7de8f08d80e67b106a211697597df063a845456e06ed85fd4b40a6d4", 0x24}, {&(0x7f0000000d00)="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", 0xff}, {&(0x7f0000000e00)="98bbe81bf9091983859906239812b83b65e02233644bd212a1c78c774e16e3e3ffc64936bf3d6d9699c89297a9866acfd429776c24966b2538e4d2c96dea0298da7905500636f6fdebe7a23f8e005c1c6c591e932a1a537401af5d2a6a302af0406ba8868d39cc65fc6d88436979ceaa4229b2633e3a94d626f2a45107a155487f484fab58d0ede8d0419ab3c2db953dfcb0969884849a00a00bb8", 0x9b}], 0x4, &(0x7f0000000fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3d4a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010101}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@generic={0x89, 0x3, "d4"}, @timestamp={0x44, 0xc, 0xe0, 0x0, 0x2, [0x6, 0x101]}, @generic={0x89, 0xa, "37dc8ef966f6cb3a"}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x0, [0x1, 0x8001, 0xe9]}, @timestamp={0x44, 0x10, 0x49, 0x0, 0x3, [0x1d, 0x8, 0x2]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0xe, [0x9]}, @rr={0x7, 0x23, 0x74, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast, @local, @remote, @loopback]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0xe8}}, {{&(0x7f00000010c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002340)=[{&(0x7f0000001100)="5faacd902202ebe8e747a1f9d51761220d5fa6ebc66a2b00c09b9de2ae4f31d1202e89d1a91d1554229954bb787e2dc1a12e7ff2529f8a313f6eeb2fc7be6774a580d95d472eb672a1a352db3c83d0745fbfed1b422ef81b0fee3cba414aebe44f61f061864a3d", 0x67}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="949dd14803cbaa0114c76470c2a29ea0d3be1f3904c2a42cc612263787fbbd2d988bd9907b8ed1acdbd884c796c40f06d6fcc062f436f124a34bde63dee06b", 0x3f}, {&(0x7f00000021c0)="3f9630e688a69499df593fba8bc3cc370fc2583783ea860cd471da00c794adee31c744f7a55d5f3c72612ec17a371ec53d9ac8054908b6403fd256fc478a60029ed756d4b37f0473f305", 0x4a}, {&(0x7f0000002240)="3d5d54291a3480937c571028571f3b7bc5411764de1493e3d50162d783578434c71a71b275e73aeaeae52c838f9039f63bbdc96c59c372499853da924761ed53ac1bb8a5ce6b2cb989aca8a02f1feb4a75294cecdd53dd9328d182b2f880373a228f1c4e443fd289eef4743cab9b1036720718e329d949c6b3ab2a02909b9f2e357699271ee2bf3a423a9dce200a86b640dd806a26b5390a60dcbb092251b879cae8e0669747cfa2ec98f7b3c8287c69fd0004bcc427ce15033c598ba167ccbd7f3e6e37d69f04a1f61535c69b", 0xcd}], 0x5, &(0x7f0000002400)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x87, [@remote, @remote]}, @end, @timestamp_prespec={0x44, 0x1c, 0xc, 0x3, 0xc, [{@multicast2, 0x637}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x1000}]}, @timestamp_addr={0x44, 0x3c, 0x8e, 0x1, 0x4, [{@broadcast, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x8000}, {@local, 0xffffffff}, {@multicast2, 0x8fd}, {@broadcast, 0x8}, {@broadcast, 0x1f}]}, @rr={0x7, 0xb, 0xb3, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp={0x44, 0xc, 0x39, 0x0, 0x7, [0x8000, 0x0]}, @generic={0x44, 0xe, "fefabc33f4a06d2668e6ae10"}, @generic={0x83, 0x6, "e23a18e7"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @loopback}}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002500)="10b63ba14a06b6bd7aa6893de5e3277d95ccc2a4238ace3102872c34", 0x1c}, {&(0x7f0000002540)="bcc4d8c11b26a284b96170930820a6aab8b1e7e7076f5756e965203288bdd76410656dbe48ae1996e25d6114adb4753cd44ae773c527a87fa7af7aac608f25cbed4bcb15f24bd50006fa74c0f170fa053e07b76d0b37583f23d4a0e1b888fbb7a73e41915362f43337ec11bb62a3ea49f2b5ca75d7c8b292fb585d7398b186d4dc97957844626c5218494e1a99d99c623d8f9eed7c0c61b392b69888805a78b1a0ccdc49584773b4", 0xa8}, {&(0x7f0000002600)="317851a6d7eb996fd953226f5ab963691eae05527988ce186bc462b50596657fa5eab197b7be80e8869605e6bdfec75c977d72bca0647beb885a9b91302d27dd0441275182eb442e98fadc8c41538b9ab010f326c1a7e7bc82fbae8366893b24d8e5ae3da888225c2091be123a7c6d29990f711ea6ae74760fb61c73", 0x7c}, {&(0x7f0000002680)="0687ff453c16d2483c0cc3eaa42fcca9f9a7570073ebcf922b66d0cd4784ce4de82f3f70c1101433d8200b9b2db1a9033e8561c52beb8b32d8359fbed5dffd777bf22ba24f218d35a0660455ab723b0cdf3a6ed240246e0c436e33d0638d9bccb92505b6b0a1d8ac913bf0e52cf465aa7843de8052", 0x75}, {&(0x7f0000002700)="958c3d06f0f6811d72daf9d7ff171cdb4a8abe870b6dc0702052de64ef32862df0a40e8e0ca0610ec09fdf42ca852fec809703151828cf597a257a327d74e0c5c20afe646b19c6f60ec0d471491c23ea62e962ba722a65fdb2dbfefe5a4522586b967ea9ec507a514e558d602f08fcbfcf8b102fc237edaded9b4d0d506e4ccfe6d8185a479eeb77da66e3a8bdb6695d844bed3b1f98df1818ffa30a9759268983de57c9a061a97232368d3a27f0819b54cf895a9b7986557a1ca200197dd5ecf4f446ad20e613199646a6076fe39d7219dfa5f615bf441eaa04af02075f87fbf4", 0xe1}, {&(0x7f0000002800)="ec8dcf9c208defe40e156e56800896db500b3c157819b52a819eeca4c184", 0x1e}, {&(0x7f0000002840)="33eed96b69b3d886916e374fa1c4964614cb22ff2b62f58ea6565d6c9eecb2ba4359d12c83f6c8ade1e750a2c86cc02107f9bf8259516617a61dc465c4fa706731711e7413ff1794bb037fb33f176018fdd05f7e8f1b4c23e9e8ff34bb31d66f2457e22f2b2da5d546df9231beb8ee04a6b3e46ffd5bdfdab8d7142b94eec634599c6d53d74ce5c40fef35567cdefe174565480f57d8a049223154e5dee67e6b4dbfbc1c5a26f58c829d54227ebae30af4ed43234229b3fccfd83d1e507e0dc025b4aa2e60cadfa8a1a0320c85b259e89c543cb2a6b7c4ae1e571481d0fb188ac5344ba5a949", 0xe6}, {&(0x7f0000002940)="a8c408b7d3b94db836c844788d62cfdda79abd50d5de5f1e592545b88a763b95d1c5c4cc1fb4778f362c5fcc2edfc411c3466dee609976438c46142bcdb1171cdcf6c470f39724f550390c9a5536ed1cee2bbfd698d04dbdd3b2e4870f0207ef52ae0055aa2764cddbe9615294527e149c980cf1450857991b423978671a643fc53389f2423d432f9477350e8f1cd85c73cf36404dc58e65b474834f3f256509a457ac2fa907ee04b21793cd09ca59a5d4b14055e04a18de3b7408e3c922bd6c0d943e489958a9d04b72971b58813aafdb08eba027a7348545", 0xd9}], 0x8}}, {{&(0x7f0000002ac0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002b00)="25dffaf7d4142ea3954f75", 0xb}, {&(0x7f0000002b40)="dc5f6f0b1ab16ade4d4a49b4e1443f632ca25f80741af62b69ffd1b3b5535079fc6a47aa7157e674d341e7b8a3f41182c5ba0b7a409b8aa8cc7305d49ec26283dd2513e57559bb61374ac32ed4119e17d0dfd98edf25f49170c6fc7e644c5c736e3356b1e9dc8ad24ccc9ab191a0f4931433881b905a53a7465315", 0x7b}, {&(0x7f0000002bc0)="ec4cec3ad0878b1c22bb1a6d9c6df6c1bb9d31d176a5fc819d00c0fa2bd63dfdc0ad1697a3016ecc882436cdd5b656cb82ce0a1ca69f11385f22262b92e49e855c2488f158b5f948e83dba042330ed0ca56b414f701f087c00b37a9dc5c12dc81a410dc7a38f2b4de769b539f4907d11940dba3cb6f4b49ae11c267a9260322a3d2bc803e923f7405d1c23867c369898ac6c61bb45ed76687127faa7713e4064e29385ab5c438b68083a4eac2985af852c8e984ce9546b960c90a2340cc7604595438f4b6d6562dcf0c75b732ac982bc1a7605ad212c703a8d0607e094af46aeba621f", 0xe3}, {&(0x7f0000002cc0)="dc985bbdd6e9545e4e42f4f730be0935110735af17045611ec2772ba58e0533d921f907f061282f5f02ba733bada9a6afdcfa969cf463b4e84139db162a2c50ecaf2d1d60d5b5062c459ebeb6dec30744f2ba03a09beddd7bd461e31cf60c6cd04df13498479bfe463b222f5307936600c92632b77326b3e942dd1d9f53391ad62381177e8882ce199893ce9784d14691d9102", 0x93}], 0x4, &(0x7f0000002dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x8, "feef6b1de434"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @private=0xa010100}}}], 0x80}}, {{&(0x7f0000002e40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000002e80)}, {&(0x7f0000002ec0)="4ea10c7e91a1ab3bd2e909cdaa5049a5ef4c1956d6dc1025ae2ed4084e756d4928050047dfb2b72906410caa1a17ac4eccf4c2421bd80e379e43f6e3daa174e655753ddf321283a05eb6ab1d3d6398a8da564c9ac0d086ddc71c78f0ed87e606a8bad006f4e14ed88fcc8792ba60f44e2255fd581b20c90bd1291f77356e9b31327035a1a22eaa51b2425c0eb3", 0x8d}, {&(0x7f0000002f80)="6c9c13ddaa07fe75f2f4526d0a41ff3c0a50bc0de58bd5c7670bd7ad27eb63c30cf18c7b945dfda908fb2d8479fb7eef3361746e81c3bb70719ed70ac958c73f6747ee5fe2c00d5a05048cd0ea04505aa1340947d0950f1990dcb7e0c2f01447ba05d0ce09ecf99c33390ca61f2c02a435875869e4184a5fb23da63ca5ebd5e179cf86c76edfcfb0f4897d7272a90ccd91d31c7f103e4c60a7cae8f6790153fd7ee9a446ec9133b94c8504882263caa92eb14666934c2a11dd3d51789c3381d9d94e0c9adc84753f7a00ec2523b8a3f6f854c623ddce422a49d3d28ed2a1b3002b84c617a92fb613f6af037e2a83ff152009fbfdf8762f50f9e1a8977b9b6d01bcb0698adb0fedb162965aa088a4db285303bdd9f27f96e6665dd885e2951d58500820fc59167ba33996cf29e731c6cc3da19383f3494f8429dd3cd12007c7a91fbbb64e43c53585e4bf48588ef8593d739f9ff213076d4ae1bac05b34c473a296f8f24366cf18ab606be6488080c47f216c151bf7ae254c400d73400e5a8f506ab6bd4987284e38773e52ef654b092987ff5f6fcd38928031427bba13a3170aeb771006bf1c0f017f5333cc5e3d1df95d261b429bc760f0f6c35ce2b8f3e764af8880e8614c34eb94496a511fdbc1cf7ae5cd9d3b88bf482883ce96756c5e934311ab9c00eef4f1591edc21033febdb052ccba6ca6159bc5503591d95d7d1cc09e24c17d506adce93f0c58339ef82c376f98f9c9c5eb04c670eb39803214db57ea09e7da9785d5d02de4dc50dc89cc613210e14dea7ee0b70c0298a89dc80e9213bf9afa4bc5420ae49557240bb39fa19545d597cee16e8c841cdfcfe4aa1c6da877d49f9127d603f3427ca9c34017df35206d7cf3c9780b737190e33e443d071aee7a978f4582d486d92ed3c8d4ac2b2df243e0c4399bfd74e491c472d8a7171765f412fda929885be1266be63fdb83ff4bfe09ccf35a0dd3734f5bc7285d8fe2df5252f9463932a03697c0fba971cec07f26400ababe6283b86103df5bc3a9f00ad3b7c0a38b4d2a6f64040823aef665f91bcda4c4e9bbb41145522573d69c5aa72b838fd1aa542598b7c806081007e5048df6400178a0be56862b6bac95b1283946c20129e2a4c5434d651a717450a44c47c4ceca3a730d56d2067c1c9c74bda39b84494bbe5ba743e540d89f2a0f31d39f225d40d4e0257e0d10eaebdf5aa83de38696a9f797e22e156a0d972f5c997606fc990f8e3bd18ba0960ba8c5186144f5fee4ae0d01686600140fab181710431dbf3c879820b843eb2f40336697e692e680442c97e7f1fa7d814a16afe10116872489d2574524519472a310593b1313826b0b57a960bc47fb47581f1a6451448ecd454e0a3a19d4377d69e0a02d2a950798d4fe323257a2beb5b461f443afe707a740e8b6af74d6009e3578d2567766650d8ea4eceefef0e729340509a90e1ec0d7f98ee11689e3b437068c53089ff38a92b98ebacd47637883d77894441df20cff5e05bc6ae1aeba942af3a5b57b6e1c46b40ddfcc60cf77160529ccff3168103199e5110e81491d42bdf56fb823f340ef9d2a2a13ec7da19c1907134ef3a1f7b9719b7078831bbe477ed8ff19568150ae827edfbc20bdec7d2fd81a07394282d07dc5650914011eadec0e4d3bd6bb3d69747e928cb60f77f6e2dfd50bedcc2ab561b2a91bf4d1ba522b66745858e5a6285c6fd64a87910b67b2baff9e6b7090762483531ce25d2b398b95162552cbec1e12d812910348a80052061bce2f7e85dbd260eba716f967318e5b890ba993f9f5407a711290ab41e6ce110cc19275703200e8b2c0523e4cae518184ec785061ba2e32c1814d21a4afd0884b1387b633954d77f14e75a86747df9b22844ee1b9dda2e952d6da55b2b2c7d9fa0bbe872bc11badb993edb6219c89dbb617966cfb9013443936a74911234acdfd44bcb1e980f115cad86a72991d48aec84b784a63f8e3544045bbc080c8c8f33993659e561f68ccf1ed1302b45889bc4cc7aac4d6cc1c2c211c4d0941e74d061d7f0f65ed9aaa595ec7fac31052d2c23a8d39c142b15f694a9b4a0a3bc7f95ab31dde6fe24f27daabb7d62837171087d350d3517f75242184cb82e2612ae493ac3678708b1895aaf8dad4fe77f833b8adf25105fec9f86a48dda1947ab1483e4c9a2220b883d7a7bf9564351df507274c2fe524d08b99ba497f085d75a4bd6bf5d631072da708286ceb5584af0e9080a575a89f5f18838faa58f1245e1bb9c3dec27b5688fac66988c7acdae3e83b9a2071721394aa75f88ca884c4ef55918384c4266734f52ef45ac31a5b8017afadd68d384744a31fabd3124bd2f66095ece2d64d7539c1fe9fcf21e46664bbcc6ea8b4f181e51a2d389952bc8a18b97256bb8e3fbb0670a12d3ab2556a4c0fecacce317250457ab4c46d4b35ac6f2959f6013e2f218ac44cdfd1ddb70851baa0e87419af2f0e64be0796cc65b2a556ef2a8f1ca36621ed4a992aa8cc91905d3921cf72f1b5da0f873827beda5ce55ad818c48bbe8bbb607ca1863daf5be6a617cc86a57fd84904e3adf247367f9cd0aff6c5a7a0759af50efcc72bcc3386f139d39148a21d15407f2ac970340d84f114ac5ed4f43e6b21797f36b1425855ec7732df7856654bd975377c2962fec1b1f9386bc2e6f255959328b8eed6c17330e726700d2498115327f075a7f4bf0b609ffab15e337bdc921b00fa58baa32ad60bb87131b7f752ecab4166997797292c85b67a573c2d42f0b7e6cc7718ee16a295386e41eb2b5b29b4ea53d1fb768d96cdd9e18ae35be146808facc7cddeb9a7d812417978932a6e288d159d9e37c11abdda7bd9a7f54e6731aff4a9df2a0b3f133be239e17a224e196ba577a21e88dd5346a0ced8df407458e5f02271faafc81d0295fe5d013d1ac9c74cd047eb23e000dada5505521770ef8f65c87f7d86ad688357a9091feacf2693b85a1e3d6e6b94d60a19b93d25baeb77f59e6eabf5c8b9c2aebfdae2f8639bc25cd855cd19ae1ac3cd01a90ef9138124dce05e80e3d8e9455840e7b77dff4fdca7c13c5c6630acdd0ca104423f198b94ebdb2c93cdabe1457069ed82845011b559eb8d18ced4a9da7aec8840f21956241913746b8f54c6b627fc7ad0c7c8e9449f414bf843b82619fc94a920207a1e1fbd7e3d8b8e3d34a46729c2380ef0e26391e8aac44f4f84baf88efeb255190df7aefa03f2e38d89569f7d5b8d0f6bafcb02a123e7e38d85deba21f4e7ead37b542e0ad1fe1e657a2188132f2e59f548b63135cee12409ce2e40c52fd7d579eaab94f3e8a9a5c4c874e4898403c6d588865bdb7b24c475d7f79ffb0f3b0d3558513c84fbbe8a979d54590bdf833cbce31326dfeb5406cdd17e4e6d3b8653651522000c244c73216aa1693cd9f213dcc1737c035ffb6193dfaefcf8b682bc7cec170863f4c34d90044e15bebe2992be3445051fd8a184d248401a649858b40dcf4876ac43e2f546078952c141d42a6750c24d7c02461d888d22791eeed0766af1a2337612bf392aeea617112cca83486a93b7a22d48ec1e37f602aa959eca1a01eccc4c9bc5aa4b07f5ecb086419ef06a648126912d2f7943f3bdcb9aae8dc7526c421b9f4a8a78b5f410a54d4001afcddf2619716f84ec4f6bac6b7f0074ea74f58dff048888fc2c0f97b9584a460df6f039233ba9c453af344e8c8ed27af8757d202af58653e7a1ca217165317926a0fdc8dea3848bedde3e2331db100795a2d345a8da9b2c13d0777c9b7e68a11d2c520257e7582c73fc45066e8ee163036c373beb70e6a8ca172747f618a151d300a4712691532ee2761e57deebe3d47e2639e373bbde6a4e94f6ffe55780bc5fc01c20cc795d911009c48afbd04af7ab9c2db2ac0cf61f06cde56360d65ccfc64799636fc288efe607fb472b636be41eed466ed445eae4dd53b85ff03d29feebcf5bc849556a9a442572d274f1786ae524738805922071e62f7be028ac6277770be1bd8e13d302b082b298c9c57dca2fcf7b4d5394ffacc980a6856ea37df1574e16ee38c353d81db7149e866bad6343f5a5fa3d262f374daa3eb1aa199e4e2ab3882e5412e903e9b66bec26695004f47acf08aaccb1fa060f564142602515504bd4091489fe94ea32113c9c7343e28bb8c155eaf18d1ce4e8d0ce9a7245b6eb89b802b710455c70b1b712473115e6aa344d396cd52bfabc36df1a37622890b7915d09ded7b2ac4bbce3543b7baaf5c171d0284508ec7efbb1630164ede427b91f083112976e89fea5caee29f392d9abdd400d68231028f4242dba0544f62a2863e2564785dacd3d1d7e1ce848e127ce3446080c3c5aa0a1dd883424492befbbb771ff9a5bbfa90f08988acf0912cd69194f57d04d5d0df166a9d3b59448b624b3772d7aac811dd4cf93411b0d7d87f3340a5389fe6daed003a3c514d80aadcdb886dc9b6a45987b31680a4c48a755909705a3bd9ead51c9edd70139667b0fc2c390e87a0a519e3961abc1b052d50f9a55d9d31dad02fac0f9d9da94d6b941e98bf1e49194b5e0cc29376d5d6cfd4e3c68b9e3083d643d0e3ae3388778aa4c87a7fd1bdce16109c8ea6a00f54779be439ae6f5d479f3d68cc3297ec2941cc8222384280f9d25507b40b7d1804650f783f05af3a1f93028a115edc106cb4565da404e769ecb51f2af128bfca5f91974405257661225f01962240d5374790530f7ea55027159cd6aba666874047f30d77be97a1dfc807ab676f47c09512bc8d904f28caf1a593d3305ecbdd547217867937b225b6355815e719d1f838e34fc69575f0c53b8e498b1c452e618c69d32ffd231408c6ebbec3bb7e72190a6beb01e61725483c790a15de47c76a0c6a7209acf4e10f48d69a72b2eefe70a752e543c5da13402a6617520b1d5985036423a0d379f763f1ab0cc039b0adad186ebab1801b4871df5e1415de36a170991d78daeb746b097e88edb67092f3bbc612a6cca0a2793fb8fd30ede18adffb5e216869870e3896f299cba1a395c1f4243d60d4c814bf30203f755a0da582834f22ca1ffaa1789bb5bcab61e397e3cb36ece89d115ad5c263dd4d24bc6458848cf1f7ec6b2c802aa1b5dd8c91c1d77cd61f896f9f6841a8ca55b1a695c41e295fce3f574b654ffe4d23a82216723a6b31a3d4ba0cb85d179e13e22ce6befaa07cc6f6cba9d9d67089013953a8f5c871a51f28cfeb74430dae81e64eb445061f099b97c2927a0ca24c1149e92b48e402c451f6d555e366b8b910e878beab2310217e2b657706804be010400552455aabd2830e007b5be6c119960593744f305272a2e413baf076844bc93331b3bca7b50700ce75062582f2aa24a2d14c8b4f0ec0f4639f72fe3fab19892cdcfd7e278849cab58602472d81af3df8d763370c96cbf411439a54b2f0b4f782463ebcd80bfbdac6929a7973356acbcc47f08937f220ad88ccd6bfc9330a021ab5f0effc44aecebd790fa36e0124730be5409d3ff0803b2f01aea4187cc85e573bb7f4a02e9513259dfc504cb9ea0342d2143e3204cac33b19bf312fbf3afd15794f279332e80c1a054a4f2afd8625d7e4fa0e7c09b8992ca08d821622d6b52d4dbefb059c31c6292812bb45fe48e0e47a48f6253875dcd86f0d08091dee1225cf9190a35bf37044c0da67ccbcda299b5d4a81a7e615a6b30c248f64adacd759c112e6683bbd5ea3cb2adf39b2fd55df12797a27b41f7a0a7a69e835cbc9449755bf4bfcf660", 0x1000}], 0x3, &(0x7f0000003fc0)}}, {{&(0x7f0000004000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000004040)="6a89fff9aa1f2dbcfd318710e4240485a6925fe2c5924ec90c617ddf2c722973b4b1070583f2be58813ddae344fe04c67a286e50ff82303af0fc3fd0eb5b6616384588473a609bef14af7a0292642de10ff7166dd538bb3eb865e13a77f05060321f3f74eb017695642569f70a", 0x6d}], 0x1}}], 0x7, 0x4040050) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) [ 678.853671] Bluetooth: Unknown HCI packet type 5e [ 678.855058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 678.858606] Bluetooth: Unknown HCI packet type 43 [ 678.873854] Bluetooth: Unknown HCI packet type 5e [ 678.892031] Bluetooth: Unknown HCI packet type 5e [ 678.896225] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 678.897080] Bluetooth: Unknown HCI packet type 43 [ 678.913476] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 678.940094] Bluetooth: Unknown HCI packet type 5e [ 678.944973] Bluetooth: Unknown HCI packet type 50 14:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:28:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 678.952167] Bluetooth: Unknown HCI packet type 50 [ 678.958605] Bluetooth: Unknown HCI packet type 5e [ 678.968330] Bluetooth: Unknown HCI packet type 5e [ 678.969489] Bluetooth: Unknown HCI packet type 40 [ 678.983565] Bluetooth: Unknown HCI packet type 40 14:28:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:22 executing program 2: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x401, 0x4, 0x6, 0x7e66, 0x100, 0xa3cd}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 680.140869] Bluetooth: Unknown HCI packet type 5e [ 680.145843] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 680.147028] Bluetooth: Unknown HCI packet type 43 [ 680.172279] Bluetooth: Unknown HCI packet type 5e [ 680.194903] Bluetooth: Unknown HCI packet type 50 [ 680.203716] Bluetooth: Unknown HCI packet type 5e [ 680.213057] Bluetooth: Unknown HCI packet type 40 [ 680.909768] Bluetooth: hci9 command 0x1003 tx timeout [ 680.915202] Bluetooth: hci9 sending frame failed (-49) [ 680.920631] Bluetooth: hci0 command 0x1003 tx timeout [ 680.925885] Bluetooth: hci0 sending frame failed (-49) [ 682.189723] Bluetooth: hci6 command 0x1003 tx timeout [ 682.195028] Bluetooth: hci6 sending frame failed (-49) [ 682.989849] Bluetooth: hci0 command 0x1001 tx timeout [ 682.995143] Bluetooth: hci0 sending frame failed (-49) [ 683.000721] Bluetooth: hci9 command 0x1001 tx timeout [ 683.005991] Bluetooth: hci9 sending frame failed (-49) [ 684.269555] Bluetooth: hci6 command 0x1001 tx timeout [ 684.275710] Bluetooth: hci6 sending frame failed (-49) [ 685.069447] Bluetooth: hci0 command 0x1009 tx timeout [ 685.069613] Bluetooth: hci9 command 0x1009 tx timeout [ 686.349359] Bluetooth: hci6 command 0x1009 tx timeout 14:28:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x9, 0x9, 0xaf}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 14:28:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = dup2(r0, r0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000500)="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") r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000001500)={0x3, 0x70, 0xea, 0x3, 0xa4, 0x3a, 0x0, 0x636, 0x82843, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0xad93b7097988c178, @perf_config_ext={0x2, 0x32}, 0x204, 0x7, 0x6, 0x4, 0x4}, r2, 0x6, 0xffffffffffffffff, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffff9, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0x18, 0x14, &(0x7f0000000100)="21f002faed826257dc4996e4286a20a730d03e0c8d8c312022e93cee9ab1d855bd137d445213f24d063d759e81679d122f92260d06190671d655203645378286c3463e0a5a5d7deb06154f5f5ed0a0efdbb1bd5501e35b1d748b0baf2ffbd11e7a52362d7d5402d7aefb6de6e5e6bbc4b532507280b86356c7e9986182d666105b82fbbf1e24953372f7e9bbd78af72d17612acec829f105f36866ec26aefb190b5d17ee7b665834251c9c3a8db6c8ea9e93c778e686985d583f25a94bc85e89303e84f621b94573ca16f3cd99b3aa56cd43dd55afa0e92a167980380d3dc8fe95b63d12c1daec59efe259092aa0cb9e3fbe49f306e5c10c8e5842b66f214cf33fcfc213b6b20aba78900d1bc4da1ca59663c217391f872d1b1862551557295aa446498d3321be192d3cef863dc4ae5e7b95f87753cf1caae632de0320978973c85ce0e4090cb53738007e32f18b35ca66a8c187018096f2c7de855c6867ed8e0101814fe6a53e4f8eb94ce516fbb8ac4816af81af253b177e610792764a93689c0ff46258e8f321b46bb4c340bb8863653a94743a45d8b4ad7d7153a30c55c072aeb6e919c41f52ab2a91e17265190d4ae69512457f9145a290a59c3437d5f5a69cc44f89caab9de2fed1848c105bad533c9f01d64e2c6ee77ec8fad21da568af4f80b738f49feef190a2ef880dbff83986b37ce2ac36526f2727e2506401668e546dc3f5994aefed9d505924445a0731f834a34e2ea25a1babb04d8fb0dc923afb892b0e448878e17c66d5eb09eac5e2c6182735df42e3f927c32050b79062c22dff9f49de2246ebeffde7d34b7900fa231ef1c02e7121a856740c95ac1e56bb69a3ae0a63d8733b5ec2adc7880e1e5f400d0fdc17c56039caa7e797ee5075c0c65a0294a1724155f40088f9135dc2fac21dfb7b5e5aca77d5a1f9fbc3424baaa445efd1b731decafddccf2343fb31723004b7cd75e294deb6d9c0dc4384935f811413674857404110768b82effb8b28f60e4408ec2172867b5f545af320b62f4efcbe256b829f66d0399f85ca4abdc9d91d49e129f99257587dc99e8426ca5551742ee33ae15c6e0c61b598194e9ff956cc544a8df6a22f12479b2182ce8a46b5ef565d94a26c710e784a003a06a9d5185039ccf86f9ef261b47312b3087f7c1fd8da02213932c55330edc11c56d0210b2006850beab09e2ea56d081f3eb8d0bd37d5a3cbe8eab2b67138e6b151b5ba7d80ddce9191f48b9db4d805f1e3b364a9ce41309b30f39d2851e5ac454dcb0bb83eaed2b14b597433f720208286251fdba72607319693caf5089385308da8f46c2c477068a9f9bc4f5a453610d2fd32f37fea5c0bc4704d2a9cf0bc94f0cdaa0e03c338a35fd5a248a2edd51557989a1d58672dfb0ed5dd3a3fa010e35786f1c4c23603fd202f1cd723dcacda8abd"}) 14:28:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:31 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) [ 689.066948] Bluetooth: Unknown HCI packet type 5e [ 689.072666] Bluetooth: Unknown HCI packet type 43 [ 689.082645] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 689.091384] Bluetooth: Unknown HCI packet type 5e [ 689.094786] Bluetooth: Unknown HCI packet type 5e [ 689.096358] Bluetooth: Unknown HCI packet type 43 [ 689.106867] Bluetooth: Unknown HCI packet type 50 [ 689.113012] Bluetooth: Unknown HCI packet type 5e [ 689.119696] Bluetooth: Unknown HCI packet type 40 [ 689.143468] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 689.145267] Bluetooth: Unknown HCI packet type 5e [ 689.167806] Bluetooth: Unknown HCI packet type 50 [ 689.177309] Bluetooth: Unknown HCI packet type 5e [ 689.190408] Bluetooth: Unknown HCI packet type 40 14:28:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:28:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:32 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) 14:28:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:32 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(0xffffffffffffffff) [ 690.331044] Bluetooth: Unknown HCI packet type 5e [ 690.336171] Bluetooth: Unknown HCI packet type 43 [ 690.339994] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 690.348835] Bluetooth: Unknown HCI packet type 5e [ 690.366085] Bluetooth: Unknown HCI packet type 50 [ 690.371504] Bluetooth: Unknown HCI packet type 5e [ 690.376576] Bluetooth: Unknown HCI packet type 40 [ 691.068909] Bluetooth: hci0 command 0x1003 tx timeout [ 691.074949] Bluetooth: hci0 sending frame failed (-49) [ 691.148917] Bluetooth: hci8 command 0x1003 tx timeout [ 691.154413] Bluetooth: hci8 sending frame failed (-49) [ 692.358866] Bluetooth: hci6 command 0x1003 tx timeout [ 692.364575] Bluetooth: hci6 sending frame failed (-49) [ 693.158763] Bluetooth: hci0 command 0x1001 tx timeout [ 693.164074] Bluetooth: hci0 sending frame failed (-49) [ 693.228940] Bluetooth: hci8 command 0x1001 tx timeout [ 693.234294] Bluetooth: hci8 sending frame failed (-49) [ 694.428726] Bluetooth: hci6 command 0x1001 tx timeout [ 694.434032] Bluetooth: hci6 sending frame failed (-49) [ 695.228706] Bluetooth: hci0 command 0x1009 tx timeout [ 695.308685] Bluetooth: hci8 command 0x1009 tx timeout [ 696.508636] Bluetooth: hci6 command 0x1009 tx timeout 14:28:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x17) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8040, 0x0) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x1) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, {0x0, 0x1f, 0x81}}, 0xa) 14:28:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000001001b0000000400cc0008009a0002000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x308, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x290, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xde, 0x3, "50ce015c14353736aecf22f45fbefa58d8d31714c60153790fe813346ec1254a03332427fc002b59e6ac424aa0da90c1c719392641d65cc164b42829cd0e1b77c8044ed386567e42719469516e0f71ebaad470f7654adc41977e940ec949a907e795a3691613301a7b79c51d1f029e94969e45a4a4912557140d82d844470047b00519bc534b3b0a21bb49bbf5eff94cb2298979405be07bca18e5d367974a52552c35773e6ad44645fc0f0c01f0e5baec1bd87e55ca2f70e841aa29b48e162b3eb669a2765fbac56b8b1d0a6d9dd144ce0ad36c706b9e6c1ed0"}, @NL80211_BAND_5GHZ={0x51, 0x1, "983038309920c7e199910a8b47e3348355249df2a4bf36877a3c420082261db868591793b501adbab21493a4e54d9c6b655e84e78d00e6df69c08a02b0899876b8ce7ccf98a3e58513bd6a3558"}, @NL80211_BAND_6GHZ={0xdd, 0x3, "164fa8e3673e13ae5bfd75da13eca7a165db4c284d5a1042b26f48f1f476238545f98ee136dd31a35d2600d526771d5a2efe5433f95059b29e9c8128b1665835c292945bc4bceca5bc9bedae4c038eae8a56c156caf9d0f796ef473cfb1acc8ddba73bff0ad05450cc266a1aa24eb06d2ce23be0d25f4a81d3bce9aa56945a2839c2ac74d4f480e7c8141f9890ca8b2b15bbf9bc414cf46d70c41af8f3e7a86f464b778f3411573e612035292ad4f04ba705626c192a88a8320e4ae32ebc8f55577eb0b60a4ad1bb14c3cf050d9d752349414e6c2a0a963fe0"}, @NL80211_BAND_6GHZ={0x41, 0x3, "54b6c4c04caffc481455851e75f3005ca168b14b0641dba262cfbc3102b7f139057150b21b6fa32f6b305f219028fe79c09f24ac0fe64d362f3e80d799"}, @NL80211_BAND_5GHZ={0x33, 0x1, "2876f3791370bf556bb4bff36f7119e5cee8e0ca157e86b83a195382f3576343fed3c811d34fb72512d63a602d517e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1d, 0x0, @random="e48b7f32c3bdee4170fe3745962cae75653db5f061b383ba7e"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x717c}]}, 0x308}, 0x1, 0x0, 0x0, 0x10}, 0x4042111) 14:28:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) [ 699.376988] Bluetooth: Unknown HCI packet type 5e [ 699.379916] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 699.382011] Bluetooth: Unknown HCI packet type 43 [ 699.416061] Bluetooth: Unknown HCI packet type 5e [ 699.429847] Bluetooth: Unknown HCI packet type 50 [ 699.437364] Bluetooth: Unknown HCI packet type 5e [ 699.442561] Bluetooth: Unknown HCI packet type 40 14:28:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) 14:28:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) 14:28:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) close(r4) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 701.388206] Bluetooth: hci0 command 0x1003 tx timeout [ 701.393575] Bluetooth: hci0 sending frame failed (-49) [ 703.468002] Bluetooth: hci0 command 0x1001 tx timeout [ 703.473375] Bluetooth: hci0 sending frame failed (-49) [ 705.547850] Bluetooth: hci0 command 0x1009 tx timeout 14:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1000000f) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x5, 0xffffff80, 0x67, 0x5, "ceac2af9a14cb8f397455fcc2924a99c4e7ce8"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:28:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@local, @empty}, &(0x7f0000000180)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 14:28:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:28:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000100)=""/188) [ 709.563267] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 709.570069] Bluetooth: Unknown HCI packet type 5e [ 709.575183] Bluetooth: hci6 sending frame failed (-49) [ 709.591385] Bluetooth: Unknown HCI packet type 43 14:28:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 709.631521] Bluetooth: Unknown HCI packet type 5e [ 709.664082] Bluetooth: Unknown HCI packet type 50 14:28:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 709.690145] Bluetooth: Unknown HCI packet type 5e 14:28:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:28:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) [ 709.712546] Bluetooth: Unknown HCI packet type 40 [ 709.715947] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 709.727565] Bluetooth: Unknown HCI packet type 5e [ 709.739936] Bluetooth: Unknown HCI packet type 43 [ 709.753997] Bluetooth: Unknown HCI packet type 5e [ 709.777617] Bluetooth: Unknown HCI packet type 50 [ 709.804497] Bluetooth: Unknown HCI packet type 5e [ 709.835543] Bluetooth: Unknown HCI packet type 40 [ 711.627356] Bluetooth: hci6 command 0x1003 tx timeout [ 711.627370] Bluetooth: hci0 command 0x1003 tx timeout [ 711.632741] Bluetooth: hci6 sending frame failed (-49) [ 711.638616] Bluetooth: hci0 sending frame failed (-49) [ 711.787337] Bluetooth: hci8 command 0x1003 tx timeout [ 711.792676] Bluetooth: hci8 sending frame failed (-49) [ 713.707226] Bluetooth: hci0 command 0x1001 tx timeout [ 713.707230] Bluetooth: hci6 command 0x1001 tx timeout [ 713.717730] Bluetooth: hci6 sending frame failed (-49) [ 713.723101] Bluetooth: hci0 sending frame failed (-49) [ 713.867280] Bluetooth: hci8 command 0x1001 tx timeout [ 713.867387] Bluetooth: hci8 sending frame failed (-49) [ 715.787113] Bluetooth: hci0 command 0x1009 tx timeout [ 715.787117] Bluetooth: hci6 command 0x1009 tx timeout [ 715.947195] Bluetooth: hci8 command 0x1009 tx timeout 14:29:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:01 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:29:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="fd0000001360d4b248a669d534a5f2fff6171bbdf8c0fe28fcea1773eb19f7003de4c7c39b5bb34cccf14f3f7731bce69709d286bbb1c7a0d12ff7f5912021e8ccd2cf6831a5e2e502d66df41e12d8a5961f4923fd56026b94e83819e4b4e0b782ab1f8bfa202e7f3e8c065d37727e275699154b8b6069b5cacb718448b79f6d20524b570f2073c8fd0a9dbaeb56c673c3cea642cbb6f7f9a2716b524fd2bb057fcfa2a4d2c3366fb1147262fbe4c584c298698ad8c1ac54ae9bf8ec7fb1c60608c6f0e43c9282917550adfca245d3fd58efbd386202084fc29c6014d72f6f7c3fefedb8228b1ec7cf6c301744c2c7cdfbd17191fc2da019a7e84edfba6274c696f1465157a6a7b58922fd3b9ab2e72bc13a98f2c1c0449d4f9a0e0a9209aed50c6f9239f1a8275160a24cadfc13afc7f50b668d7142f384839afa53167696a2b3481e1b999577b7a9bb7099be97bd0c6dc9b0757c74b27ed1530ee3bd47aa8474eb00628e8dfd35edd68d9607c99533bf77fbb701d8516ea664d5c7d8f2897db77a2a1238ddcd5e8586328c76c04ea49b2c11a492e2098d087102389656bc42f51f4474923318382c517181bbcdfd2cb562198c785fbf9662"]) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) 14:29:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:02 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:29:02 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000180)={0x10, 0x20, &(0x7f0000000080)="d7f398b8ebf41ccf86e9edc7b5e303a454895328b3021641d7334124340e1131486f054ab4cf77e56dfa2d2c0873d2885485ce0e3420e157c4f84f69f3a9025888c59c04745d30896bf542209e97506ffd49fa290a31dba975871a8ea63905689c6db2f76671b7ffe69a80f6e241a7650bdbef500a5e736f47268ffaffc7b1cbb302f7b1bfc39585a09d9aad6d1435bc2b54dafadc92e89b28b3b9925604c2f508110836c99f941af14dcf2a6905eb56fd2e272c23123893650cf99e45b539a84b67bdb385bfe05017b345c5f9da7fa54c0cc493fc073f97562b1c19919165640487fe587a20ef36fafd22c5a7c368242cecf0c034daedc68f5d", {0x80000001, 0x8, 0x0, 0x5, 0x0, 0x9, 0x7, 0x7}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:29:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:02 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:29:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 721.866670] Bluetooth: hci0 command 0x1003 tx timeout [ 721.871999] Bluetooth: hci0 sending frame failed (-49) [ 723.946469] Bluetooth: hci0 command 0x1001 tx timeout [ 723.952048] Bluetooth: hci0 sending frame failed (-49) [ 726.026315] Bluetooth: hci0 command 0x1009 tx timeout 14:29:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:12 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x14300) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x0, @sdr={0x47524247, 0x6}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:29:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x511803, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) 14:29:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:12 executing program 2: shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0x0, 0x81, 0x7, 0x43, 0x2, 0x0, 0x20, 0x1, 0xf8, 0x1, 0x20, 0xfffffffffffffff9}, {0x3ff, 0x8, 0x0, 0x2, 0x0, 0x4, 0x8, 0x7f, 0xf8, 0xde, 0x3, 0x8, 0x1}, {0x101, 0x9, 0x1, 0x8, 0x3, 0x0, 0x7, 0x95, 0x8, 0x3, 0x56, 0x7f, 0x10001}], 0x6}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) 14:29:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) 14:29:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 730.030735] Bluetooth: hci0: Frame reassembly failed (-84) [ 730.039241] Bluetooth: hci0: Frame reassembly failed (-84) 14:29:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 732.105864] Bluetooth: hci0 command 0x1003 tx timeout [ 732.111175] Bluetooth: hci0 sending frame failed (-49) [ 734.185779] Bluetooth: hci0 command 0x1001 tx timeout [ 734.192403] Bluetooth: hci0 sending frame failed (-49) [ 736.265586] Bluetooth: hci0 command 0x1009 tx timeout 14:29:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:22 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:29:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) 14:29:22 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x141880, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/248, &(0x7f00000001c0)=0xf8) fanotify_init(0x4, 0x400) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r3, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x481}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x3528, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff, 0x3}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r1, 0x1}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000400)="f59da6714c41cd0ba8d97a0f1f43a9d6e0da17f386475740af73652843af7735bb4d1f235fa72f5d44c7b67091dd929e82e2f2d2d4086d7bee7d00dde501cc9bbd33ee744fcc8d6c22a86131fee56be3334db8edc02509a6b3cfda089364050d5ad167a87995f1e0ace61aaab943bfbdea3e0639f23025af00b55428de899b56ef3d8952b16ad44a7889846fda16e3ee74ad2fddc378a62cf37858995b0e1348d1a34b998ee31515f1071b8990fff1c04c1ef5a86dad2d10a76413fbf2d1f4cbeaf5ff12e0133e34e3722f2255dc6a5edfa7fd0e562ee188137c6620f63acc5709d11c181fdb4c6c5a25", 0xea) read$usbmon(r2, &(0x7f0000000200)=""/176, 0xb0) 14:29:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x402, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0x7ebd15fe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:29:22 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:29:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 740.261651] Bluetooth: hci0: Frame reassembly failed (-84) [ 740.281447] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 740.287671] Bluetooth: Unknown HCI packet type 5e 14:29:22 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:29:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 740.327806] Bluetooth: Unknown HCI packet type 43 [ 740.341365] Bluetooth: hci8: Frame reassembly failed (-84) [ 740.349959] Bluetooth: Unknown HCI packet type 5e [ 740.363132] Bluetooth: Unknown HCI packet type 50 [ 740.372556] Bluetooth: Unknown HCI packet type 5e 14:29:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 740.388285] Bluetooth: Unknown HCI packet type 40 [ 742.265085] Bluetooth: hci0 command 0x1003 tx timeout [ 742.270779] Bluetooth: hci0 sending frame failed (-49) [ 742.345056] Bluetooth: hci8 command 0x1003 tx timeout [ 742.345070] Bluetooth: hci6 command 0x1003 tx timeout [ 742.350390] Bluetooth: hci8 sending frame failed (-49) [ 742.358097] Bluetooth: hci6 sending frame failed (-49) [ 744.344919] Bluetooth: hci0 command 0x1001 tx timeout [ 744.350219] Bluetooth: hci0 sending frame failed (-49) [ 744.424872] Bluetooth: hci8 command 0x1001 tx timeout [ 744.430189] Bluetooth: hci8 sending frame failed (-49) [ 744.435669] Bluetooth: hci6 command 0x1001 tx timeout [ 744.441023] Bluetooth: hci6 sending frame failed (-49) [ 746.424790] Bluetooth: hci0 command 0x1009 tx timeout [ 746.504696] Bluetooth: hci6 command 0x1009 tx timeout [ 746.515256] Bluetooth: hci8 command 0x1009 tx timeout 14:29:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x12) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x5a, 0x1, 0x4, 0x100000, 0x0, {0x77359400}, {0x3, 0x8, 0x40, 0x6, 0x2, 0x1f, "7449e228"}, 0x10001, 0x1, @userptr=0x2, 0x5c}) getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) 14:29:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x35da82, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x44800, 0x28) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)=r1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x11) 14:29:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) close(r0) [ 750.509298] Bluetooth: Unknown HCI packet type 5e [ 750.518153] Bluetooth: Unknown HCI packet type 43 [ 750.523449] Bluetooth: Unknown HCI packet type 12 14:29:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x1f) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000140)={0xff, 0x1, [0x1, 0x0, 0x768, 0x6, 0x9], 0x1ff}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffff, 0x8380) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000180)=0x20) 14:29:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 750.551688] Bluetooth: hci6: Frame reassembly failed (-84) [ 750.555672] Bluetooth: Unknown HCI packet type 5e [ 750.582915] Bluetooth: Unknown HCI packet type 50 14:29:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 750.625722] Bluetooth: Unknown HCI packet type 5e [ 750.643971] Bluetooth: Unknown HCI packet type 5e [ 750.649205] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 750.659039] Bluetooth: Unknown HCI packet type 43 [ 750.672566] Bluetooth: Unknown HCI packet type 40 [ 750.682727] Bluetooth: Unknown HCI packet type 5e [ 750.689830] Bluetooth: Unknown HCI packet type 50 [ 750.706946] Bluetooth: Unknown HCI packet type 5e [ 750.718097] Bluetooth: Unknown HCI packet type 40 [ 752.584293] Bluetooth: hci6 command 0x1003 tx timeout [ 752.584297] Bluetooth: hci0 command 0x1003 tx timeout [ 752.584371] Bluetooth: hci0 sending frame failed (-49) [ 752.589578] Bluetooth: hci6 sending frame failed (-49) [ 752.664280] Bluetooth: hci8 command 0x1003 tx timeout [ 752.669649] Bluetooth: hci8 sending frame failed (-49) [ 754.664213] Bluetooth: hci6 command 0x1001 tx timeout [ 754.664254] Bluetooth: hci0 command 0x1001 tx timeout [ 754.670030] Bluetooth: hci6 sending frame failed (-49) [ 754.680476] Bluetooth: hci0 sending frame failed (-49) [ 754.744205] Bluetooth: hci8 command 0x1001 tx timeout [ 754.749672] Bluetooth: hci8 sending frame failed (-49) [ 756.744047] Bluetooth: hci0 command 0x1009 tx timeout [ 756.749746] Bluetooth: hci6 command 0x1009 tx timeout [ 756.824021] Bluetooth: hci8 command 0x1009 tx timeout 14:29:42 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/bnep\x00') sendto$rose(r0, &(0x7f0000000100), 0x0, 0x40001, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x3ff, {0x7, 0x1, 0x6, 0xc23, 0x1000000000}}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xc) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:29:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:29:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x20000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x40, 0x7e26, 0x8, 0x101}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000100)={0x6, 0x0, 0x300d, 0x5, 0x7, {0x1, 0x5}}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x4000000b) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) 14:29:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) 14:29:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x3348, 0x20000) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000200)={0x5, 0x8}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="a4aa3c512e21a3d411a6982102676c2da191a9cfbaf448558ea850707619fb3f1c052ab28b4d4093668405788fb6d5e4cafef2b49861b90157af77c276df9b46d2a2773c167aed6825778570906408307ae900962ca6612d163e0ac05337d7d314eed7634f416ec565b7864014562f224751cffe7478170c551a9c92f7fbce0e1f3ae316ea28bdc00882efe38711e6a6de9311298bd68b5f8b233a049ebbe28641") ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 760.915550] Bluetooth: Unknown HCI packet type 5e [ 760.935031] Bluetooth: Unknown HCI packet type 43 [ 760.946378] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 760.949269] Bluetooth: Unknown HCI packet type 5e [ 760.980687] Bluetooth: Unknown HCI packet type 5e [ 760.990494] Bluetooth: Unknown HCI packet type 43 [ 761.004593] Bluetooth: Unknown HCI packet type 5e [ 761.005255] Bluetooth: Unknown HCI packet type 50 [ 761.013080] Bluetooth: Unknown HCI packet type 50 [ 761.020533] Bluetooth: Unknown HCI packet type 5e [ 761.036241] Bluetooth: Unknown HCI packet type 5e [ 761.041254] Bluetooth: Unknown HCI packet type 40 [ 761.041925] Bluetooth: Unknown HCI packet type 40 [ 762.823582] Bluetooth: hci0 command 0x1003 tx timeout [ 762.829002] Bluetooth: hci0 sending frame failed (-49) [ 762.983520] Bluetooth: hci6 command 0x1003 tx timeout [ 762.983622] Bluetooth: hci8 command 0x1003 tx timeout [ 762.988955] Bluetooth: hci6 sending frame failed (-49) [ 763.000004] Bluetooth: hci8 sending frame failed (-49) [ 764.903521] Bluetooth: hci0 command 0x1001 tx timeout [ 764.908847] Bluetooth: hci0 sending frame failed (-49) [ 765.063506] Bluetooth: hci8 command 0x1001 tx timeout [ 765.069085] Bluetooth: hci6 command 0x1001 tx timeout [ 765.069194] Bluetooth: hci8 sending frame failed (-49) [ 765.081364] Bluetooth: hci6 sending frame failed (-49) [ 766.993350] Bluetooth: hci0 command 0x1009 tx timeout [ 767.143497] Bluetooth: hci6 command 0x1009 tx timeout [ 767.149069] Bluetooth: hci8 command 0x1009 tx timeout 14:29:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:29:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 770.966819] Bluetooth: hci0: Frame reassembly failed (-84) 14:29:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x94) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) close(r0) 14:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:29:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/101) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xa) 14:29:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:29:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x100000001, 0x400) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xb, 0x0, 0x2, 0x2, 0x7, "6f39c72acdd9b243"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x200, 0x121000) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000001c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 771.599082] Bluetooth: Unknown HCI packet type 5e [ 771.604704] Bluetooth: Unknown HCI packet type 0a [ 771.611829] Bluetooth: Unknown HCI packet type 43 [ 771.627694] Bluetooth: hci6: Frame reassembly failed (-84) [ 771.633575] Bluetooth: hci9 sending frame failed (-49) [ 771.637664] Bluetooth: hci6: Frame reassembly failed (-84) [ 771.667691] Bluetooth: Unknown HCI packet type 5e [ 771.681016] Bluetooth: Unknown HCI packet type 5e [ 771.681376] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 771.686824] Bluetooth: Unknown HCI packet type 43 [ 771.701396] Bluetooth: Unknown HCI packet type 50 [ 771.708714] Bluetooth: Unknown HCI packet type 5e [ 771.720859] Bluetooth: Unknown HCI packet type 5e [ 771.727780] Bluetooth: Unknown HCI packet type 40 [ 771.739515] Bluetooth: Unknown HCI packet type 50 [ 771.746958] Bluetooth: Unknown HCI packet type 5e [ 771.751931] Bluetooth: Unknown HCI packet type 40 [ 772.982870] Bluetooth: hci0 command 0x1003 tx timeout [ 772.988384] Bluetooth: hci0 sending frame failed (-49) [ 773.622885] Bluetooth: hci8 command 0x1003 tx timeout [ 773.628275] Bluetooth: hci8 sending frame failed (-49) [ 773.702737] Bluetooth: hci10 command 0x1003 tx timeout [ 773.708138] Bluetooth: hci6 command 0x1003 tx timeout [ 773.708184] Bluetooth: hci10 sending frame failed (-49) [ 773.714901] Bluetooth: hci6 sending frame failed (-49) [ 773.719022] Bluetooth: hci9 command 0x1003 tx timeout [ 773.729700] Bluetooth: hci9 sending frame failed (-49) [ 775.072790] Bluetooth: hci0 command 0x1001 tx timeout [ 775.078157] Bluetooth: hci0 sending frame failed (-49) [ 775.702734] Bluetooth: hci8 command 0x1001 tx timeout [ 775.708086] Bluetooth: hci8 sending frame failed (-49) [ 775.782680] Bluetooth: hci10 command 0x1001 tx timeout [ 775.788105] Bluetooth: hci10 sending frame failed (-49) [ 775.793748] Bluetooth: hci9 command 0x1001 tx timeout [ 775.798982] Bluetooth: hci6 command 0x1001 tx timeout [ 775.799042] Bluetooth: hci9 sending frame failed (-49) [ 775.806160] Bluetooth: hci6 sending frame failed (-49) [ 777.142622] Bluetooth: hci0 command 0x1009 tx timeout [ 777.782615] Bluetooth: hci8 command 0x1009 tx timeout [ 777.862559] Bluetooth: hci9 command 0x1009 tx timeout [ 777.868139] Bluetooth: hci6 command 0x1009 tx timeout [ 777.874007] Bluetooth: hci10 command 0x1009 tx timeout 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:30:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)) close(r0) 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 781.220885] Bluetooth: Unknown HCI packet type 5e [ 781.226890] Bluetooth: Unknown HCI packet type 43 [ 781.231804] Bluetooth: Unknown HCI packet type 5e [ 781.256678] Bluetooth: Unknown HCI packet type 50 [ 781.265976] Bluetooth: Unknown HCI packet type 5e 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 781.271325] Bluetooth: Unknown HCI packet type 40 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:30:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:30:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:30:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:30:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:30:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:30:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300), 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x28844) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000024080b0e000000000000000000000800", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c0002000800070000000000"], 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf25050000003c0001800500020004000000060005004e23000008000300640101010600010002000000060005004e200000080003007f00000108000700", @ANYRES32=0x0, @ANYBLOB="08000300040000001c009758053101060005004e240000080006000500000008000700bb596a4a890e35d849b69c65fca813ddf970fe24c59fbab32fc6967ee508ed74192ac52bb531796c76a481d9000000803c0d7e65dfbf881fcec206d55f5a45f90c0e5bd225b7f2cfc164bb3154daa8c50edc75ecb3d3c556e30817b12c1214cc17b54e11c42062738446d5f51ba7a69f54d4b4e266e19385fff601614177453a06e4cfd233194162912a6e03d2e7dc4f0000000000000000", @ANYRES32=0x0, @ANYBLOB="3c000180060005004e24000008000700", @ANYRES32=r6, @ANYBLOB="08000300640101010600010002000000060005004e200000060001000000000008000700", @ANYRES32=r6, @ANYBLOB="080002000200000008000300040000002400018008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2300000800060000000000050002000900000008000300010000000800030004000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) recvfrom$l2tp(r1, &(0x7f0000000100)=""/193, 0xc1, 0x0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x1000, 0x40, 0x2, 0x18, "f56066563ba8c7093d671d63a8008e89514225"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:30:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @null}, [@rose, @remote, @netrom, @remote, @rose, @netrom, @remote, @rose]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000140), 0xc400, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d312cc84ef6307365636c6162656c2c7063723d30303030303030303030303030303030303033372c736d61636b6673666c6f6f723d2c24252d5d2c7375626a5f747970653d2f6465762f70746d78002c61756469742c6f626a5f757365723d2f6465762f70745178002c7063723d30303030303030303030303030303030303032362c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 781.894610] Bluetooth: hci6: Frame reassembly failed (-84) [ 781.901164] Bluetooth: hci6: Frame reassembly failed (-84) [ 781.909520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 781.959141] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 781.990347] Bluetooth: Unknown HCI packet type 5e [ 781.997757] Bluetooth: Unknown HCI packet type 43 [ 782.009187] Bluetooth: Unknown HCI packet type 5e [ 782.016660] Bluetooth: Unknown HCI packet type 50 [ 782.039791] Bluetooth: Unknown HCI packet type 5e [ 782.049550] Bluetooth: Unknown HCI packet type 40 [ 782.064009] Bluetooth: received HCILL_GO_TO_SLEEP_ACK (in state 2) [ 783.222032] Bluetooth: hci0 command 0x1003 tx timeout [ 783.227463] Bluetooth: hci0 sending frame failed (-49) [ 783.942025] Bluetooth: hci6 command 0x1003 tx timeout [ 783.947411] Bluetooth: hci6 sending frame failed (-49) [ 784.022147] Bluetooth: hci9 command 0x1003 tx timeout [ 784.027393] Bluetooth: hci8 command 0x1003 tx timeout [ 784.027475] Bluetooth: hci9 sending frame failed (-49) [ 784.034096] Bluetooth: hci8 sending frame failed (-49) [ 785.312042] Bluetooth: hci0 command 0x1001 tx timeout [ 785.317547] Bluetooth: hci0 sending frame failed (-49) [ 786.021977] Bluetooth: hci6 command 0x1001 tx timeout [ 786.027975] Bluetooth: hci6 sending frame failed (-49) [ 786.102034] Bluetooth: hci9 command 0x1001 tx timeout [ 786.107857] Bluetooth: hci9 sending frame failed (-49) [ 786.114323] Bluetooth: hci8 command 0x1001 tx timeout [ 786.120054] Bluetooth: hci8 sending frame failed (-49) [ 787.381779] Bluetooth: hci0 command 0x1009 tx timeout [ 788.101809] Bluetooth: hci6 command 0x1009 tx timeout [ 788.181825] Bluetooth: hci8 command 0x1009 tx timeout [ 788.181897] Bluetooth: hci9 command 0x1009 tx timeout 14:30:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:30:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) 14:30:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x800033) 14:30:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:13 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 791.444892] Bluetooth: Unknown HCI packet type 5e [ 791.445288] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 791.449835] Bluetooth: Unknown HCI packet type 43 [ 791.497125] Bluetooth: Unknown HCI packet type 5e [ 791.507684] Bluetooth: Unknown HCI packet type 50 [ 791.517559] Bluetooth: Unknown HCI packet type 5e [ 791.533274] Bluetooth: Unknown HCI packet type 40 [ 791.555195] Bluetooth: hci10: Frame reassembly failed (-84) [ 791.562845] Bluetooth: hci10: Frame reassembly failed (-84) [ 791.580904] FAULT_INJECTION: forcing a failure. [ 791.580904] name failslab, interval 1, probability 0, space 0, times 1 [ 791.602456] CPU: 1 PID: 15152 Comm: syz-executor.3 Not tainted 4.14.210-syzkaller #0 [ 791.610364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.619721] Call Trace: [ 791.622328] dump_stack+0x1b2/0x283 [ 791.625964] should_fail.cold+0x10a/0x154 [ 791.630118] should_failslab+0xd6/0x130 [ 791.634099] kmem_cache_alloc+0x40/0x3c0 [ 791.638165] __build_skb+0x2e/0x2d0 [ 791.641977] __netdev_alloc_skb+0x275/0x420 [ 791.646918] ldisc_receive+0xfc/0x630 [ 791.652293] ? ser_release+0x240/0x240 [ 791.656650] tty_ioctl+0xe5a/0x13c0 [ 791.660643] ? tty_fasync+0x2c0/0x2c0 [ 791.664721] ? proc_fail_nth_write+0x7b/0x180 [ 791.669237] ? proc_tgid_io_accounting+0x780/0x7a0 [ 791.674193] ? trace_hardirqs_on+0x10/0x10 [ 791.678721] ? fsnotify+0x974/0x11b0 [ 791.682620] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 791.687735] ? debug_check_no_obj_freed+0x2c0/0x674 [ 791.692770] ? SyS_write+0x1b7/0x210 [ 791.696497] ? tty_fasync+0x2c0/0x2c0 [ 791.700392] do_vfs_ioctl+0x75a/0xff0 [ 791.704291] ? ioctl_preallocate+0x1a0/0x1a0 [ 791.710092] ? lock_downgrade+0x740/0x740 [ 791.714252] ? __fget+0x225/0x360 [ 791.717812] ? do_vfs_ioctl+0xff0/0xff0 [ 791.721820] ? security_file_ioctl+0x83/0xb0 [ 791.726554] SyS_ioctl+0x7f/0xb0 [ 791.729927] ? do_vfs_ioctl+0xff0/0xff0 [ 791.733908] do_syscall_64+0x1d5/0x640 [ 791.738064] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 791.743735] RIP: 0033:0x45deb9 [ 791.747019] RSP: 002b:00007fd9f9b71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:30:14 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 791.754811] RAX: ffffffffffffffda RBX: 0000000000019cc0 RCX: 000000000045deb9 [ 791.762279] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 791.769552] RBP: 00007fd9f9b71ca0 R08: 0000000000000000 R09: 0000000000000000 [ 791.777085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.785368] R13: 00007ffeb5ac5d9f R14: 00007fd9f9b729c0 R15: 000000000119bf2c 14:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) 14:30:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0xc240, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x2) 14:30:14 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:30:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) modify_ldt$read_default(0x2, &(0x7f0000000200)=""/47, 0x2f) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xb8c, 0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyprintk\x00', 0x105201, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) pread64(r4, &(0x7f00000002c0)=""/99, 0x63, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x400006) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = dup3(r1, r3, 0x80000) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000380)={0xffff7fff, 0x4, 0x7, 0x7}) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x3, 0x0, @c='abcdefghijklmnopqrstuvwxyz0123456'}, 0x29, r5) r7 = syz_open_pts(0xffffffffffffffff, 0x339d42) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000340)={0x1, 0x3, 0x80, 0x8, 0x11, "13f5c6b0a62271d17bc6340737bc6df1d82a88"}) [ 792.104851] Bluetooth: hci8: Frame reassembly failed (-84) [ 792.105110] Bluetooth: hci8: Frame reassembly failed (-84) [ 792.110844] Bluetooth: hci8: Frame reassembly failed (-84) 14:30:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0xf87, 0x5, 0x5, 0xf1, 0xfffffffffffffff9, 0x7f}) [ 792.204666] Bluetooth: Unknown HCI packet type 5e [ 792.209689] Bluetooth: Unknown HCI packet type 43 [ 792.219702] Bluetooth: Unknown HCI packet type 5e [ 792.228500] encrypted_key: insufficient parameters specified [ 792.244865] Bluetooth: Unknown HCI packet type 50 [ 792.257833] Bluetooth: Unknown HCI packet type 5e [ 792.268623] Bluetooth: Unknown HCI packet type 40 [ 793.471410] Bluetooth: hci0 command 0x1003 tx timeout [ 793.476730] Bluetooth: hci0 sending frame failed (-49) [ 793.631321] Bluetooth: hci10 command 0x1003 tx timeout [ 793.637072] Bluetooth: hci10 sending frame failed (-49) [ 794.181323] Bluetooth: hci8 command 0x1003 tx timeout [ 794.186653] Bluetooth: hci6 command 0x1003 tx timeout [ 794.186712] Bluetooth: hci8 sending frame failed (-49) [ 794.193558] Bluetooth: hci6 sending frame failed (-49) [ 794.261352] Bluetooth: hci9 command 0x1003 tx timeout [ 794.266743] Bluetooth: hci9 sending frame failed (-49) [ 795.541257] Bluetooth: hci0 command 0x1001 tx timeout [ 795.546638] Bluetooth: hci0 sending frame failed (-49) [ 795.701197] Bluetooth: hci10 command 0x1001 tx timeout [ 795.706712] Bluetooth: hci10 sending frame failed (-49) [ 796.261127] Bluetooth: hci6 command 0x1001 tx timeout [ 796.266540] Bluetooth: hci6 sending frame failed (-49) [ 796.272507] Bluetooth: hci8 command 0x1001 tx timeout [ 796.277818] Bluetooth: hci8 sending frame failed (-49) [ 796.341244] Bluetooth: hci9 command 0x1001 tx timeout [ 796.346584] Bluetooth: hci9 sending frame failed (-49) [ 797.621090] Bluetooth: hci0 command 0x1009 tx timeout [ 797.781099] Bluetooth: hci10 command 0x1009 tx timeout [ 798.341116] Bluetooth: hci6 command 0x1009 tx timeout [ 798.341190] Bluetooth: hci8 command 0x1009 tx timeout [ 798.421108] Bluetooth: hci9 command 0x1009 tx timeout 14:30:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000080)={{@my=0x0, 0x2}, 0xfff, 0x1, 0x5, 0xed3, 0x9, 0xcbd, 0x7, 0x1ff}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:30:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x480, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x761103, 0x0) sendto$rxrpc(r1, &(0x7f00000001c0)="ac7822c1974d3c909d6bbb1620468388a87bd6edaaf112c06a70695554ce7b65e2df7adf27c2db47c2b7b3b29925790b4df83d2efb0d0a6e95bf9a32", 0x3c, 0x40d1, &(0x7f0000000200)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x20, 0x1f, 0x4, 0x9, 0x8}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000280)=0x80) connect$ax25(r3, &(0x7f0000000140)={{0x3, @default, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000340)={{0x2, 0x4e22, @empty}, {0x1, @link_local}, 0x0, {0x2, 0x7, @multicast2}, 'batadv0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ftruncate(r4, 0x3f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x18) setfsuid(0x0) 14:30:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 801.724896] Bluetooth: hci0: Frame reassembly failed (-84) [ 801.726311] Bluetooth: hci0: Frame reassembly failed (-84) [ 801.824801] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 801.831557] Bluetooth: Unknown HCI packet type 5e [ 801.836422] Bluetooth: Unknown HCI packet type 43 [ 801.854892] Bluetooth: Unknown HCI packet type 5e [ 801.859918] Bluetooth: Unknown HCI packet type 50 [ 801.865292] Bluetooth: Unknown HCI packet type 5e [ 801.870227] Bluetooth: Unknown HCI packet type 40 14:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:30:24 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2000004ffe6, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'batadv_slave_1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x18) r5 = accept$ax25(r3, &(0x7f0000000600)={{0x3, @bcast}, [@rose, @default, @bcast, @rose, @rose, @null, @null]}, &(0x7f00000001c0)=0x48) sendmsg$sock(r5, &(0x7f0000000500)={&(0x7f0000000200)=@ll={0x11, 0x16, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="624859dc295f280c66202d53c118c53f08152c3ad43775f08af774e52e001b936228edccd5fe226277e31f3cf9764f3a20806bcce878aa27338f82b8cc30560808b513edded8bda01e43b47ecc6966b9dd549053dc0815938c23c24e7904c2f3347e94911a91bf0f17faf5eac579560dc1d67ba8e866759128e9a5472ce8c3a4254544f9c6a70d314f2645d8f4e59d35619dad3b27f033f3025b01b8cf3c8544d7c4251a499b07b43505079c0f657d8ae2462cf1167cbb86fa2e40f1594daa0fa47f87d1ea81897abf6093e7dbd5015a06528cfc9c013ebb4b5a4303f3c09c10630d3eaa31d98c7b976dddb3", 0xec}, {&(0x7f0000000380)="00f64aceae3daf14213271077b6c0aadc797a59c1ea988d800", 0x19}], 0x2, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffe0}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}], 0xd8}, 0x20000851) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/btrfs-control\x00', 0x2280, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) ioctl$KDADDIO(r4, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$pptp(r8, &(0x7f0000000580)={0x18, 0x2, {0x1, @local}}, 0x1e) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000000080)={0x9, 'syz1\x00'}) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x33) [ 802.263520] FAULT_INJECTION: forcing a failure. [ 802.263520] name failslab, interval 1, probability 0, space 0, times 0 [ 802.303953] CPU: 0 PID: 15212 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 802.311879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.321245] Call Trace: [ 802.323839] dump_stack+0x1b2/0x283 [ 802.327501] should_fail.cold+0x10a/0x154 [ 802.331690] should_failslab+0xd6/0x130 [ 802.335673] kmem_cache_alloc_node+0x54/0x410 [ 802.340177] __alloc_skb+0x5c/0x510 [ 802.343841] hci_sock_dev_event+0x16a/0x5f0 [ 802.348258] ? hci_send_monitor_ctrl_event+0x500/0x500 [ 802.353555] hci_unregister_dev+0x232/0x8c0 [ 802.357889] hci_uart_tty_close+0x258/0x2c0 [ 802.362217] ? hci_uart_tty_write+0x10/0x10 [ 802.366632] tty_ldisc_close+0x8c/0xc0 [ 802.370678] tty_ldisc_release+0xe8/0x400 [ 802.374812] tty_release_struct+0x20/0xe0 [ 802.379051] tty_release+0xb3f/0x10d0 [ 802.382854] ? do_tty_hangup+0x30/0x30 [ 802.387660] __fput+0x25f/0x7a0 [ 802.392770] task_work_run+0x11f/0x190 [ 802.396651] exit_to_usermode_loop+0x1ad/0x200 [ 802.401303] do_syscall_64+0x4a3/0x640 [ 802.405463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 802.410646] RIP: 0033:0x45deb9 [ 802.413815] RSP: 002b:00007f425621dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 802.421589] RAX: 0000000000000000 RBX: 0000000000002100 RCX: 000000000045deb9 [ 802.428840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 802.436090] RBP: 00007f425621dca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.443470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 14:30:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) close(r0) 14:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x3, 0xde}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 802.450719] R13: 00007ffc11b73c1f R14: 00007f425621e9c0 R15: 000000000119bf2c [ 802.461937] Bluetooth: Unknown HCI packet type 5e [ 802.466889] Bluetooth: Unknown HCI packet type 43 [ 802.485551] Bluetooth: Unknown HCI packet type 5e [ 802.494540] Bluetooth: Unknown HCI packet type 50 14:30:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 802.523145] Bluetooth: Unknown HCI packet type 5e [ 802.533097] Bluetooth: Unknown HCI packet type 40 14:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x29, 0xf9, 0x9, 0x0, 0x4, @private1, @mcast2, 0x1, 0x40, 0x7ff, 0x3}}) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xf4, 0x0, &(0x7f0000000480)=[@free_buffer, @register_looper, @exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/170, 0xaa, 0x2, 0x2f}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x10}, @flat=@handle}, &(0x7f0000000380)={0x0, 0x18, 0x38}}}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0xa, 0x1, 0x5}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}, 0x40}], 0x41, 0x0, &(0x7f0000000580)="1d14b95e9e63e4b59d6f2b66353c0bd40c0867c77fc669ccc3aebe9967d713cabc52947f92e1bd49198aeea32f30d92aeed5895ba6e442f0fd1642ecb0941b82a3"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0xfebd}, 0x16, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:24 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) [ 802.647346] Bluetooth: hci6: Frame reassembly failed (-84) 14:30:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x319a02, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000001500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x1348}, 0x1, 0x0, 0x0, 0x4000082}, 0x5) 14:30:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x4000000b) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 803.780606] Bluetooth: hci0 command 0x1003 tx timeout [ 803.786083] Bluetooth: hci0 sending frame failed (-49) [ 803.860555] Bluetooth: hci10 command 0x1003 tx timeout [ 803.866421] Bluetooth: hci10 sending frame failed (-49) [ 804.500518] Bluetooth: hci8 command 0x1003 tx timeout [ 804.505901] Bluetooth: hci8 sending frame failed (-49) [ 804.660547] Bluetooth: hci6 command 0x1003 tx timeout [ 804.665879] Bluetooth: hci6 sending frame failed (-49) [ 805.460455] Bluetooth: hci9 command 0x1003 tx timeout [ 805.465789] Bluetooth: hci9 sending frame failed (-49) [ 805.860526] Bluetooth: hci0 command 0x1001 tx timeout [ 805.865866] Bluetooth: hci0 sending frame failed (-49) [ 805.940533] Bluetooth: hci10 command 0x1001 tx timeout [ 805.945968] Bluetooth: hci10 sending frame failed (-49) [ 806.580448] Bluetooth: hci8 command 0x1001 tx timeout [ 806.585935] Bluetooth: hci8 sending frame failed (-49) [ 806.741832] Bluetooth: hci6 command 0x1001 tx timeout [ 806.747128] Bluetooth: hci6 sending frame failed (-49) [ 807.540396] Bluetooth: hci9 command 0x1001 tx timeout [ 807.545897] Bluetooth: hci9 sending frame failed (-49) [ 807.940431] Bluetooth: hci0 command 0x1009 tx timeout [ 808.020431] Bluetooth: hci10 command 0x1009 tx timeout [ 808.670301] Bluetooth: hci8 command 0x1009 tx timeout [ 808.820403] Bluetooth: hci6 command 0x1009 tx timeout [ 809.620220] Bluetooth: hci9 command 0x1009 tx timeout 14:30:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x800f) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 811.912885] Bluetooth: hci0: Frame reassembly failed (-84) [ 811.914757] Bluetooth: hci0: Frame reassembly failed (-84) 14:30:34 executing program 3: getpeername$netlink(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xf16e8eb90770d0ef}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) 14:30:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) inotify_init() 14:30:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:30:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0xa, &(0x7f0000001800)=[{&(0x7f00000001c0)="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", 0x1000, 0x100}, {&(0x7f00000011c0)="4b16c82af946e55bcd52683e5d13a9f75d9d38d9b96cd6db1ed89e8df0868f65dac0569ab2d8e3a11cb75fd19a7bace5e7a0457aa023a244ee4c2979cba13c1cce93987f853cfb05b8b57868e9ddcd2d9bde75340a28396488f0d2d0aa52761427bcf7f6af4246b14630c7b5f7a69e45821e2e363f2432c6783f4e954ffed7b2fb6985f52fa36da40190c0e885040ce06506775c9e4a49263c710cfacedc8aa7aa4c6dc84acaf54371c907c705c7d80f94504d6f59669a4e3e3fcce7510ba4a2f065598449d514250d31e78ba78021efdbb6266234c9e7", 0xd7, 0x4}, {&(0x7f00000012c0)="d58adcfe69c944814c5ec4595d1519568249f4433adadf4cde5dc0a5ca085e2051453e365f0b649bf2f6760846c249aebed67e0ac422b2345e0702e59ab4f6427ca6888f83438c946872683ac35b438997a85d46cff8162b4098482e9d039a0b61c1898452cd5405ce311c0eff", 0x6d, 0x8}, {&(0x7f0000001340)="3dd618a532e6dce45493f20875dda54cc0f811d6ac213cb711306823ca8728a8c54130b0e8d7fec40988834dfb50f2a04f844da89879c822941841695b9f24aa05ffd14f5470fe2b70175f2dd04c37c52d9e1a980c381b150ad26774690d8b65b25c5e6b6ba6ce73c1b88c325d0897348437cc40bfc5f65c27aa91a1b5f0b9e4a493b525b7f7d39ad5189eeec8c799f65daad0d9ec2734c9e6361d3d0b973493c96eaf2209003d460f722da4097c4e1a1a6eaf0fffb1c0e2c148735aefacdc348ff5779ef23de01c1ef6a9bb1d8d6b8023feeefb98eb", 0xd6, 0x1}, {&(0x7f0000001440)="d928ef4d22c4cc7d3e89bfb3409e1543d5f4fcc03cd7b4ab6f0e4fbd6b3b0e22fcee024c20e9874f952ee9ed10539a52f5e5a200361dfd0000384422b2a69c00d27ade267964e7b2cafadb4502b6f888a5487e4277191451048e5d95a4042f32e3f1381a", 0x64, 0x5}, {&(0x7f00000014c0)="9b60ba7e862932bd298b3bcc540d2577935af42d5a6b2aadfa37c654fd9528eee5b524dd8890c9825c619ea41db2d69528b95f2b78e027c66ac45bff06370445f176a96953b0593fd9d33722cab98894835a1dabcf2ecd1053fbf519ff299941c4b513a7e5b6e4a15b1339a5657ac9440e143906b49dcc9b8a74d4495d3ef18dca135418fce01236b9d9cb8cc4ff6ec8a7c676cbabf94392e358c8d55f24a5524cd02c316941d792b892a3102b4198e7d4cc96205e37182fd69f89b6126b14d9571b8b8c5360324e0db1bcdb7dc59d74ab36be1170d1ffa9c4b26a7c0502e5d3f818f422428861fe21b20dcc591a05bd3788", 0xf2, 0xfffffffffffffffe}, {&(0x7f00000015c0)="a259ac9a322c612fb065f1bc6843056ef476210995c6345adb644d60006f9442306db231f1790a8662690a00b8eaa60b0e7275394c3a1f4dd8ef64b1398ec48c11867c1b77e01eac065b7b6b80764ab86cf478cf5a985d33e0", 0x59, 0xec1}, {&(0x7f0000001640)="c9e4f9abe387eef807f3fbaf6d9402511b3fa3142b297cb5701b96fdba7fa54b33ee8bfd9b47970f4cd251d357b4930f549a18375bb40908b6c4b6ca6eff8383979a43e046b43f9244efa03db431b5fd94ed8c88690e37c99dd4a10168b4ac116888a7590271a09dac52339d85ae8967d24ed521cb767a392f95c2448550ae195ee1bc6b55f2dc9edc5222a8b3ae0368cb9f", 0x92, 0x40}, {&(0x7f0000001700)="20e57f8a0be3dab9fed59dcf2395e2ab534f0d4ec8bbeaef979d3ed362dfbfb563eef6430b50f283d688f42e59320200a6b140306eeb75142bb122623b85dede640af2c13d6f15913dd5456094ac2f7b06dda0638a0b790d8422dc393e6da39a65f2a8597b3fc2f5f918b1672e3b3584ea7a767799b74178539f11e25a23b4ed3275c191977a0a24593908b20d7ff378f89c5f9c5822c916445cc6c07836123d152e56bbcb13998b8fe1c508ba61f5", 0xaf, 0x1ff}, {&(0x7f00000017c0)="9efef2836d6055439c32cd30df97d5b1419c11f3eead3f30b43a0e1927", 0x1d, 0x4}], 0x8ccc5, &(0x7f0000001900)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@hash='hash'}, {@measure='measure'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001940)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001a00)={{r0}, r1, 0x10, @inherit={0x70, &(0x7f0000001980)={0x1, 0x5, 0x6, 0x3, {0x1, 0x516e, 0x9, 0x8001, 0x7}, [0x6, 0x4, 0x9, 0xe, 0x4000000000000001]}}, @devid}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x80000000, 0x10000, 0xff], 0x3}) [ 812.535126] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 812.542033] Bluetooth: Unknown HCI packet type 5e [ 812.547086] Bluetooth: Unknown HCI packet type 43 [ 812.553886] Bluetooth: Unknown HCI packet type 5e [ 812.559678] Bluetooth: Unknown HCI packet type 43 [ 812.562369] Bluetooth: Unknown HCI packet type 5e [ 812.572031] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 812.575063] Bluetooth: Unknown HCI packet type 50 [ 812.578932] Bluetooth: Unknown HCI packet type 5e [ 812.597631] Bluetooth: Unknown HCI packet type 5e [ 812.602660] Bluetooth: Unknown HCI packet type 43 [ 812.613542] Bluetooth: Unknown HCI packet type 5e [ 812.619603] Bluetooth: Unknown HCI packet type 50 [ 812.620664] Bluetooth: Unknown HCI packet type 5e [ 812.629469] Bluetooth: Unknown HCI packet type 50 [ 812.635249] Bluetooth: Unknown HCI packet type 5e [ 812.636059] Bluetooth: Unknown HCI packet type 40 [ 812.641504] Bluetooth: Unknown HCI packet type 5e [ 812.651332] Bluetooth: Unknown HCI packet type 40 [ 812.662373] Bluetooth: Unknown HCI packet type 40 14:30:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x103800) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x424200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) set_robust_list(&(0x7f0000000140)={0x0, 0x80000000, &(0x7f0000000100)={&(0x7f0000000080)}}, 0x18) fcntl$setown(r0, 0x8, r1) 14:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) epoll_create1(0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0xf8, "83a6ae9be9e6eff6f9c26ab38f8cb796b402fc3de2a0a8218d2dbe03b779e0527b4c5700c2146bdc0852a227bc8fc62b58301b03aa0233b81d44435e9b9d1d2f84cc48a4dbcb83ed35f7da0caf3b159e1d4652daec370c170a508211fa8196f1d668bf795342af0bd64ff62f01e397852dc0a3ea0977c9c76c1962b9c40291eb7d5ef4cc61be58d0039303ceb619e311f98267050056fd64bfd6a9121810e34dcaf935ba46cd4a4cfe8cf015151dbc198a0f17840cc7cf8f46756bc1063ea46e5e81edad192434257ab0088cde6a1cf5562dc1e6d94bf2a033b0931c41e46ac7b0e2624d1c67893f2bee2dd2259c359dcba6fbf313000000"}, &(0x7f0000000080)=0x11c) 14:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0xffffffffffffffff}, 0xc) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4a000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000140)={0x3, 0x28b1, 0x8000, 0xfffffc00, 0x80000000, 0x49}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 813.874522] Bluetooth: hci6: Frame reassembly failed (-84) [ 813.941584] Bluetooth: hci0 command 0x1003 tx timeout [ 813.947143] Bluetooth: hci0 sending frame failed (-49) 14:30:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1, r3, 0xc0f7ebeda79a4a09, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x17, 0xb, 0xb}]}, 0x1c}}, 0x40) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f00000004c0)=0x4) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}]}, 0x44}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r5, 0x7b0, &(0x7f0000000540)={@hyper, 0xe55}) name_to_handle_at(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xfe, 0x8a, "8319239f675764b3fba34b2adfd87265414c7741fab9a4c1ed8f30de893e345031a95d6dcf3748557de30abb255a78222e303142344bf018822f68d52a4fc5122b50945d3ed9df530afde39364b7e20dec65b25ab797d3e248096b074323af400342dc6ad2ed95d535f1f92c02c794391dacc4922e1d6383328a6adce77357012250c402aa673078721022dbe5754aaf06bbb5d2132a98ced64d11ad8e8e07b40aeddf1aac9b6b3396003d32730b40c873141d1ea3f4054d3ae08dfe4decf1d6d350adf79a21da3de5fd0e63c0678e55084e7073d88fc376dcf8ec3537291d554abf374768060cef7103f904c14ee6dfd4762c8aee6f"}, &(0x7f0000000480), 0x1400) r6 = syz_open_pts(r0, 0x1440) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x18) [ 814.579935] Bluetooth: hci10 command 0x1003 tx timeout [ 814.586322] Bluetooth: hci10 sending frame failed (-49) [ 814.591954] Bluetooth: hci8 command 0x1003 tx timeout [ 814.598571] Bluetooth: hci8 sending frame failed (-49) [ 814.670039] Bluetooth: hci11 command 0x1003 tx timeout [ 814.676272] Bluetooth: hci11 sending frame failed (-49) [ 815.939831] Bluetooth: hci6 command 0x1003 tx timeout [ 815.945313] Bluetooth: hci6 sending frame failed (-49) [ 816.019809] Bluetooth: hci0 command 0x1001 tx timeout [ 816.025549] Bluetooth: hci0 sending frame failed (-49) [ 816.659761] Bluetooth: hci10 command 0x1001 tx timeout [ 816.659780] Bluetooth: hci8 command 0x1001 tx timeout [ 816.665642] Bluetooth: hci10 sending frame failed (-49) [ 816.676279] Bluetooth: hci8 sending frame failed (-49) [ 816.749795] Bluetooth: hci11 command 0x1001 tx timeout [ 816.755986] Bluetooth: hci11 sending frame failed (-49) [ 818.019844] Bluetooth: hci6 command 0x1001 tx timeout [ 818.025399] Bluetooth: hci6 sending frame failed (-49) [ 818.099725] Bluetooth: hci0 command 0x1009 tx timeout [ 818.739632] Bluetooth: hci10 command 0x1009 tx timeout [ 818.739661] Bluetooth: hci8 command 0x1009 tx timeout [ 818.829696] Bluetooth: hci11 command 0x1009 tx timeout [ 820.109565] Bluetooth: hci6 command 0x1009 tx timeout 14:30:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)={'veth0_to_hsr\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x111000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x22, 0x0, [0x5, 0x4e, 0x7, 0xffffffab, 0x7, 0x9, 0x9, 0xfffffe00, 0x2, 0x5bc8, 0x2, 0x9, 0x2, 0x8f9, 0x1ff, 0x2d7]}, {0x0, 0x0, [0x101, 0x2, 0x7, 0x9, 0x807f, 0x6, 0xad04, 0x5, 0x7, 0x0, 0x80000001, 0x7c, 0xbbf, 0xa91, 0x99d87be2, 0x7]}, {0x8, 0x0, [0x0, 0x1, 0xffffffff, 0x1, 0x1, 0x4, 0x5, 0xd2, 0xf62b, 0x20, 0x8, 0x7, 0x4, 0xffff, 0x3ff, 0x7]}, {0x28, 0x0, [0x1ff, 0x6, 0x1, 0x2, 0x0, 0x10001, 0x31, 0xfff, 0x40000002, 0x9, 0x8, 0xa9, 0x3, 0x6d49, 0x0, 0x2b]}, {0x18, 0x0, [0x40, 0x9, 0xfeb, 0x2, 0x3, 0x8, 0x2ba, 0x1, 0x2, 0x543, 0xc8c, 0x15a4, 0x7ff, 0x7ff, 0x7, 0x1]}, {0x39, 0x0, [0x6, 0x0, 0x87, 0x24, 0x200, 0x7, 0x7, 0x9, 0x11, 0x1ff, 0x1f, 0x9, 0x5, 0x0, 0x8, 0x9]}, {0x10, 0x0, [0x5, 0x7, 0x55, 0x80000001, 0x4, 0x100, 0x2, 0x692, 0x0, 0x708a, 0xffffffff, 0x80000001, 0x7a1, 0x8, 0x7, 0xe9ce]}, {0x18, 0x0, [0x7, 0x6458, 0x5, 0x7, 0x5, 0x0, 0x7, 0x20, 0x4e8, 0xca54, 0x400, 0x9, 0x800, 0xec, 0x2, 0x13]}], r3, 0x1, 0x1, 0x240}}, 0x20) 14:30:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000023c0)={0x0, {0x9, 0x3}}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000280)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000002440)=""/103) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r4, 0xee00, r5) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000002400)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 14:30:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x31) 14:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x5ee7c3febac9590d, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x9}, 0x4) 14:30:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 822.802078] Bluetooth: Unknown HCI packet type 5e [ 822.808067] Bluetooth: Unknown HCI packet type 43 [ 822.808257] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 822.817496] Bluetooth: Unknown HCI packet type 5e [ 822.828852] Bluetooth: Unknown HCI packet type 43 [ 822.834579] Bluetooth: Unknown HCI packet type 5e 14:30:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 822.854184] Bluetooth: Unknown HCI packet type 5e [ 822.866913] Bluetooth: Unknown HCI packet type 50 [ 822.873294] Bluetooth: Unknown HCI packet type 5e [ 822.878158] Bluetooth: Unknown HCI packet type 43 [ 822.896105] Bluetooth: Unknown HCI packet type 50 [ 822.909654] Bluetooth: Unknown HCI packet type 5e [ 822.915432] Bluetooth: Unknown HCI packet type 5e [ 822.925581] Bluetooth: Unknown HCI packet type 5e [ 822.930871] Bluetooth: Unknown HCI packet type 40 [ 822.935197] Bluetooth: Unknown HCI packet type 50 [ 822.947478] Bluetooth: Unknown HCI packet type 40 [ 822.968529] Bluetooth: Unknown HCI packet type 5e [ 822.979336] Bluetooth: Unknown HCI packet type 40 14:30:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x80000) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x9) 14:30:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:30:46 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') r4 = dup3(0xffffffffffffffff, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f0000000300)="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", 0x101, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="507a802280ea2005fbd4e08901e81a9969409a453f537345f640f8aa680268aaafea7caaa2edad3b4f5a38625970112c6c42ca40511a9b5c517c66ae143695b3a0c4518c0000f6f3cff5087ea249b195d3d70631cd17db7c96a0e4948ee6a6ac8a32576d695d66288f072eb4a04fb0cb733bc3fd342e54a477e63cfb", @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xc}, 0x6}}, 0xb41d, 0xfff8}, 0x90) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x100c) ioctl$KDADDIO(r6, 0x400455c8, 0x0) close(r6) 14:30:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:30:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 824.829176] Bluetooth: hci8 command 0x1003 tx timeout [ 824.834702] Bluetooth: hci0 command 0x1003 tx timeout [ 824.834769] Bluetooth: hci8 sending frame failed (-49) [ 824.840477] Bluetooth: hci0 sending frame failed (-49) [ 824.899526] Bluetooth: hci9 command 0x1003 tx timeout [ 824.905162] Bluetooth: hci9 sending frame failed (-49) [ 826.899090] Bluetooth: hci8 command 0x1001 tx timeout [ 826.899094] Bluetooth: hci0 command 0x1001 tx timeout [ 826.900187] Bluetooth: hci0 sending frame failed (-49) [ 826.904398] Bluetooth: hci8 sending frame failed (-49) [ 826.979228] Bluetooth: hci9 command 0x1001 tx timeout [ 826.984661] Bluetooth: hci9 sending frame failed (-49) [ 828.978849] Bluetooth: hci8 command 0x1009 tx timeout [ 828.978853] Bluetooth: hci0 command 0x1009 tx timeout [ 829.059004] Bluetooth: hci9 command 0x1009 tx timeout 14:30:55 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x1, 'wg2\x00', {}, 0xff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000080)={0x5d7, 0x8, 0x2, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000001c0)={{r3}, "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"}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x21000) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) r2 = signalfd4(r0, &(0x7f0000000100)={[0x6d]}, 0x8, 0xc00) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000001c0)={0x2, 0x6, 0x14, &(0x7f0000000180)="e9b06b2fd0acaeabf1e3d5073249e32fa9d7d2f1"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000140)) close(r0) 14:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 833.082901] Bluetooth: Unknown HCI packet type 5e [ 833.089182] Bluetooth: Unknown HCI packet type 43 [ 833.109013] Bluetooth: Unknown HCI packet type 5e [ 833.110366] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 833.120055] Bluetooth: Unknown HCI packet type 43 [ 833.121869] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 833.124906] Bluetooth: Unknown HCI packet type 5e [ 833.136216] Bluetooth: hci10: Frame reassembly failed (-84) [ 833.139686] Bluetooth: Unknown HCI packet type 5e [ 833.145048] Bluetooth: Unknown HCI packet type 5e [ 833.152261] Bluetooth: hci10: Frame reassembly failed (-84) [ 833.156618] Bluetooth: Unknown HCI packet type 50 [ 833.175764] Bluetooth: Unknown HCI packet type 43 [ 833.184284] Bluetooth: Unknown HCI packet type 5e [ 833.195670] Bluetooth: Unknown HCI packet type 50 [ 833.200775] Bluetooth: Unknown HCI packet type 40 [ 833.201949] Bluetooth: Unknown HCI packet type 5e [ 833.217067] Bluetooth: Unknown HCI packet type 5e [ 833.223213] Bluetooth: Unknown HCI packet type 50 [ 833.241883] Bluetooth: Unknown HCI packet type 40 [ 833.247006] Bluetooth: Unknown HCI packet type 5e [ 833.253340] Bluetooth: Unknown HCI packet type 40 14:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x109000, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x2, 0xffc0, 0x10000, 0x0, 0x5, 0x4, 0x80, 0x100, r4}, 0x20) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x301100, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x42, 0x0) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xfc01, 0x200, 0x0, 0x4, 0x3f, 0x3d72, 0x40}, &(0x7f00000001c0)=0x20) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140)) 14:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x363, 0x100) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0xff, 0xe, 0x4, 0xe000, 0x2, {}, {0x5, 0x10, 0xcd, 0x3f, 0x1, 0x7, "e3f206ed"}, 0x200, 0x4, @offset=0x5, 0x434, 0x0, r3}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="a32f1de15948a5430221ead25ba53ee45df63f95070e96706d4d927ec9be655aa17c4b92e8fb1bca0510670d57f0acd3da4086972f4a9bd4a0e52bb36496889e7ca3ed0715111a350ecb51236d7f31ef6ada40677fa559eace5f0fef4531e0ed5177c657be01a126524c004cd77bbb8d5d47d897764448cfdf65ed75add39bcdacfdf1e1be5a1de2945754ce26f8664c165d42ea19c6d947ad2d64b010e43bb711eeed008fdecc65520c9c6419a2b2c7329b83fbaabef21dc811d23b", 0xbc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @remote}}}, 0x84) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 833.874762] Bluetooth: hci11: Frame reassembly failed (-84) 14:30:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x515641, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x10) getgroups(0x3, &(0x7f0000000400)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) setfsgid(r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) select(0x40, &(0x7f0000000300)={0x5, 0x0, 0x6, 0x9e56, 0x800, 0x0, 0x5, 0xf58}, &(0x7f0000000340)={0x4, 0x200, 0x5, 0x8, 0x48000000000000, 0x6, 0x3ff, 0xffffffff80000001}, &(0x7f0000000380)={0x8f2, 0x4, 0x4, 0x8, 0x55f, 0xf0d, 0x900, 0x28f}, &(0x7f00000003c0)={0x0, 0xea60}) getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)=@deltfilter={0x2f8, 0x2d, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xa, 0x5}, {0xb, 0xfff2}, {0x0, 0xf}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x7, 0x1000}, {0x51bef308, 0x401, 0x8001}, 0x21, 0x29, 0x5}}]}}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x260, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}, @TCA_FW_ACT={0x220, 0x4, [@m_tunnel_key={0x118, 0xb, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0xba, 0x6, "abb0bedeff53cdcdb3c25688e1fa054dae0f1c3a17074b4b5c53cde7a4bec12a4c16f054d7f4ba188d7f9c33a2c5b0484b5e6a385e4ca06f08a788fbe2303cf0ca8542711632c37724a61c88bc8169e1307506a1838576cace4213c07f8d1d63e7c2d4568158d6f4acc0059d93c8452654149b338abb693c8d5de280606e71cdedfbdc5a4209bfb5a8d539daafc0f7933d9255415155b646599d99cb9a022dcb1176f53db2e804396d7bb79fd03f00c1df69f81d2eac"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x104, 0x10, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, '/dev/ptmx\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x8001, 0x4, 0xff, 0x5}}]}, {0xb0, 0x6, "ed356de9996ccb0508191cd9a0694ef476dd90ff3a2074b7b90c85a44c29c52b69b23791f5478008d5e9306a9e29ab350d97d19abbd283f7f16d330e4dea4209c6dba40542f71675a0ef1868c9d237c77727fd680596fd5c95fbfe67fd3ac536a914dd725da676681246d07f9cc4e1b2bccf6d0729033156d46da05b1ac97f726f38639af9f703c4e09c61f9c84f57974264f1d8554dd3da22df287c9890b0858cb7bb5297fef40fbb697e85"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}]}}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x6}}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x40}, 0x1) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='wlan1\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xff, 0xf0}, &(0x7f00000002c0)=0x90) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:30:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c850}, 0x40091) recvmsg$can_bcm(r2, &(0x7f00000008c0)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/183, 0xb7}], 0x8}, 0x143) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c0000005bebd4e0c10f0e987ef97bcfeadf9f232b17b123e1f14f85e4dbab36"], &(0x7f0000000980)=0x24) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000180)=0x80000000, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000000c0)={0x200, 0x1000}) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)='\\\x84@\x00') [ 835.138398] Bluetooth: hci8 command 0x1003 tx timeout [ 835.138443] Bluetooth: hci10 command 0x1003 tx timeout [ 835.143802] Bluetooth: hci8 sending frame failed (-49) [ 835.154701] Bluetooth: hci9 command 0x1003 tx timeout [ 835.154742] Bluetooth: hci10 sending frame failed (-49) [ 835.161535] Bluetooth: hci6 command 0x1003 tx timeout [ 835.165435] Bluetooth: hci9 sending frame failed (-49) [ 835.171938] Bluetooth: hci0 command 0x1003 tx timeout [ 835.176523] Bluetooth: hci6 sending frame failed (-49) [ 835.187165] Bluetooth: hci0 sending frame failed (-49) [ 835.938528] Bluetooth: hci11 command 0x1003 tx timeout [ 835.944074] Bluetooth: hci11 sending frame failed (-49) [ 837.218397] Bluetooth: hci0 command 0x1001 tx timeout [ 837.223794] Bluetooth: hci6 command 0x1001 tx timeout [ 837.223901] Bluetooth: hci0 sending frame failed (-49) [ 837.234241] Bluetooth: hci9 command 0x1001 tx timeout [ 837.234442] Bluetooth: hci6 sending frame failed (-49) [ 837.240706] Bluetooth: hci10 command 0x1001 tx timeout [ 837.244967] Bluetooth: hci9 sending frame failed (-49) [ 837.254615] Bluetooth: hci8 command 0x1001 tx timeout [ 837.255954] Bluetooth: hci10 sending frame failed (-49) [ 837.263824] Bluetooth: hci8 sending frame failed (-49) [ 838.018268] Bluetooth: hci11 command 0x1001 tx timeout [ 838.023871] Bluetooth: hci11 sending frame failed (-49) [ 839.298276] Bluetooth: hci10 command 0x1009 tx timeout [ 839.298280] Bluetooth: hci8 command 0x1009 tx timeout [ 839.298312] Bluetooth: hci9 command 0x1009 tx timeout [ 839.304282] Bluetooth: hci0 command 0x1009 tx timeout [ 839.320075] Bluetooth: hci6 command 0x1009 tx timeout [ 840.098188] Bluetooth: hci11 command 0x1009 tx timeout 14:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) [ 843.311325] Bluetooth: Unknown HCI packet type 5e [ 843.316220] Bluetooth: Unknown HCI packet type 43 [ 843.321461] Bluetooth: Unknown HCI packet type 5e [ 843.326315] Bluetooth: Unknown HCI packet type 50 [ 843.332162] Bluetooth: Unknown HCI packet type 5e [ 843.337016] Bluetooth: Unknown HCI packet type 40 14:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) close(r0) 14:31:06 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x20001, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x100000, 0xc, 0x9, 0x8, 0x1, 0x1, 0x2, 0x2, 0x80, 0x20, 0x1}, {0xf000, 0x10000, 0x4, 0x3, 0x7f, 0x1, 0xc6, 0x4, 0x3f, 0x8, 0x3, 0x5}, {0x6000, 0x2000, 0xd, 0x8, 0x8, 0x3f, 0x2, 0x7, 0x7, 0x80, 0x4, 0xe5}, {0x1, 0x4000, 0xf, 0x5, 0x6b, 0xff, 0x8, 0x7f, 0x8, 0xa4, 0x9, 0x3f}, {0x1000, 0x10000, 0x8, 0x7, 0x3, 0x31, 0x0, 0x8, 0x2, 0x24, 0x8, 0x2}, {0x6000, 0x5000, 0xe, 0xff, 0xff, 0x80, 0x5, 0x2, 0x3, 0x7f, 0x9, 0x2b}, {0x1, 0x10000, 0xe, 0x3f, 0x1, 0x8, 0x9, 0xff, 0x14, 0x73, 0x9, 0x3f}, {0x0, 0x5000, 0xd, 0x2, 0x4, 0x9, 0x0, 0xff, 0x51, 0xe0, 0x54, 0x80}, {0x1000, 0x1}, {0x1, 0x1000}, 0x24, 0x0, 0x4000, 0x2010, 0x8, 0x3101, 0x1, [0x4, 0x78, 0x9, 0x4b]}) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000240)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 14:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) shmget(0x1, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000000100)=""/227) 14:31:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 844.552203] Bluetooth: hci6: Frame reassembly failed (-84) [ 844.558636] Bluetooth: Unknown HCI packet type 5e [ 844.563481] Bluetooth: Unknown HCI packet type 43 [ 844.570269] Bluetooth: hci6: Frame reassembly failed (-84) [ 844.571939] Bluetooth: Unknown HCI packet type 5e [ 844.581434] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 844.582794] Bluetooth: hci6: Frame reassembly failed (-84) [ 844.594788] Bluetooth: Unknown HCI packet type 5e 14:31:06 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0x7, &(0x7f0000000640)=[{&(0x7f0000000240)="47d2f330b257e1969dc164a2a57771040f1243157a34189faffcdc278b4f05180e5f5a6e03bb9c91e7a92edf7c4c352abd9b5600246e891effd13d701a24296a", 0x40, 0x6}, {&(0x7f0000000280)="0c6046cd0ae964c9bf54f0d4135d811403a42b90875ae0d811dac7e8175c99ab325805fb76a25845e09f59820b5cd797e8f224da84ca82f1b62d5e4943", 0x3d, 0x100000000}, {&(0x7f00000002c0)="5132d6253f6eb861307c09a36a53456994f83f9143c21d74a4e64eb7d6d6be71e2bef955cde466f0a812b001e4acfe6e30681d523817b955185f0adb838c378f509b494f5f7e3e4c5becc5997ff6dcf611bd3c2a71aec06af3fc982a2f30264cbab35118ab31de54a28d56704ef3fd9cd07e589b4257e75698d54da311ced8c2b8b18a63a4d6127a3dcedf139395eaf4b4c273ceb9eaac54694a85e449dcbb063a7932e92685a1ad7956be9b0ff34c2d14a6fbe4861b4e400e76142873cd060b1f3d3fcf1dafa39d98cb885b78a2168b85f7508926e51492eaaf702ae77370ecf625e9", 0xe3, 0x81}, {&(0x7f00000003c0)="9b5d432921107e0c8cdef6e7b308842d5536e8b52cd8aaa343f4aad0e2814372745463d4fbb420", 0x27, 0x14c32c5c}, {&(0x7f0000000400)="acaa12fc047f56cfc8f412", 0xb, 0x8}, {&(0x7f0000000440)="fe13ba0712aa69a4e74b5a8be37200268c0726c6721457ef131eb4bfbfbf5733c2b9b735a6a68b3acc12e7c7d26660ae1330cecaab5f8e83b199e06e55e8bd6969c87dce4e8a0666d7a75ad3ef32f716570c81b35d3ff8b297c0b67ac04b0df1d43d981d18641a286934cc95ac13fa535d30f89022c6e8a35f9e9650604fb2a099a823818212abc69b541c18554eaf0a9f335e3e433909caea24f6ca06a4ac4ae55f8412c24e62fa7f2e6849c01b488efd890762cd3c5f48ab895f6c070fffbff20f34492d3a7b9196dc7214567ad98f5f4cce19638d026470d207566ac6500ddf971df5fc3c04390deee28a407f3dc79eba08", 0xf3, 0xffffffffffffffa0}, {&(0x7f0000000540)="63668c8223d7cb686e2c62a04431107823776438dfb314891e06413ccf3d7f66683c82174235850fb6bb97cd311edc3aa0a2a96599dff7a35f08bbb7d5b6511a17d0f5a752c2118cc8d3326a0050b644135a9f27631e4bb2b57baf7987a93f7feea1287e755fbacb17941011a29b3907f8da5d8c1d8df89b57b176142ece4b8c88090b11995b693fe331db9ff7c8c580869b6c53ebc0cfb360674d54f2c56a0c52ea7f88f8cea1952a8fa2a038c70899df6665fc70c329e8d5c9a0c95e41fbdfaa0ffc517057c04d7990c993306ea849c3153a3824f85acfcfe7f5e754788208a2a8ee365a315535", 0xe8, 0x8}], 0x108002, &(0x7f0000000700)={[{@dots='dots'}, {@dots='dots'}, {@fat=@check_relaxed='check=relaxed'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@fat=@debug='debug'}, {@fat=@check_normal='check=normal'}], [{@appraise='appraise'}, {@appraise='appraise'}, {@fsname={'fsname'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x21) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000007c0)={0x8000, 0x2, 0x4, 0x40, 0x80000001, {0x0, 0x2710}, {0x4, 0x0, 0xfd, 0x80, 0x81, 0x0, "d1cf2206"}, 0x7, 0x4, @userptr=0x1, 0x401, 0x0, r1}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000840)={{r2}, 0x100000001, 0x200, 0x400}) ioctl$TCXONC(r1, 0x540a, 0x2) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000140)=0x8001, 0x4) [ 844.599782] Bluetooth: Unknown HCI packet type 43 [ 844.609748] Bluetooth: Unknown HCI packet type 5e [ 844.614749] Bluetooth: Unknown HCI packet type 50 [ 844.629070] Bluetooth: Unknown HCI packet type 50 [ 844.634049] Bluetooth: Unknown HCI packet type 5e [ 844.643239] Bluetooth: Unknown HCI packet type 5e [ 844.648728] Bluetooth: Unknown HCI packet type 40 [ 844.663356] Bluetooth: Unknown HCI packet type 40 14:31:06 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)="8edc276256b28853a7d03aa3958edc8d03fd32d595f4ee0ed9fe6c2d49007a87361cef672981cef7fb63afe25ca67b6d7a96834a036ccdd1b7ad48219499748e3e7cb735d24f011fd0bbb7d0cf302989079a59ca6cdf0a7575e5084cc652116c56ea90c72e0eaa931e18416ce6b524debfcefe546020c248474cace543d04fcdf5e4768c5117685a065cfc0178b7e2b57ef3938cfb9be4136e6613586697e1723f62acf450e216f5c3534305c9773a870db75d293d85f62103b53f3866f6f44ffc5d9633385379f4ee022b70642b4b878ab9d3da4da29cfb9b089136f73bf593", 0xe0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) 14:31:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0xbe, 0x1, 0x4, 0x100000, 0x1, {}, {0x3, 0xc, 0x9, 0x8, 0xb4, 0x7f, "7f155961"}, 0x406, 0x2, @userptr=0x1, 0x4}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1f, 0x8, 0x1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x7, 0xffffffff, 0xfffffff7}}) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000280)={{r3}, 0x2, &(0x7f0000000240)=[0x74c, 0x2], 0x1, 0x4, [0x4, 0x10000, 0x80000000, 0x100]}) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) [ 845.342159] Bluetooth: hci11: Frame reassembly failed (-84) [ 845.377785] Bluetooth: hci0 command 0x1003 tx timeout [ 845.383222] Bluetooth: hci0 sending frame failed (-49) 14:31:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e06080a000f000010ff0100000060004003546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x420200, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000004a40)=[{&(0x7f0000000480)={0x27, 0x0, 0x1, 0x7, 0x7, 0x1, "59ecbeb49b23d6354a21f0a46ce49cd68dba467102616e53de01845f6b170d40458d1817fa3f0baf9816aa26c6044fbfead0e8fa3086b246a651f8dd3f918d", 0x9}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000500)="b25016fd18145849bfde7c87873891fcdead2f19b61b306673095ec11d0c8c0cf8d363f0bddade62767171f93ea89bace5054e492fbc8b7c1cc258989dbbf8a8066d54f8da44656e8a1f9f6245700167b6085af3bcf8c64622997219862a63ecee3bf9612638ea6e96ad92739986b02271b694b9531bdbe1ccf0db51afcaa03b9e2ee6d1ec61b0a9126b1710d50e5822f746069e3d25a53cc991ec8f3bd6e3c44040abd776c83d52feeabe60dbef582dae4aecc877e61e58b4954ed921b79a8f10d835c309b4c5e0f6c3b1b5ae61e71ec636c9b0bb828fc2e8c19ecdcded394e9c9c", 0xe2}], 0x1, &(0x7f0000000640)={0x1010, 0x1, 0xffffffff, "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"}, 0x1010, 0x40}, {&(0x7f0000001680)={0x27, 0x0, 0x1, 0x2, 0x5, 0x9, "d8826376956080657ab6f424cf6af73fd181fbe78e441608ad3be10468a6fab51d4ea71e9262e57fdb21a2f9b9acb222c8ec6a6a44b868753790bfa8b8506b", 0x3e}, 0x60, &(0x7f0000003980)=[{&(0x7f0000001700)="24d2fdbd66e4fbbfb9952b0da1b43c4f4c8ffb35b4b023befdad36232ce56f0685b1c6c4d38ed7b50ba25b04aa1c960b257ab18c57c284dda31620186098ae412666288b40d048f6f0d0b3825ef1af620e9b287559f14a4e5660d82cace7087f9caac0b64abd5fa7797673947734244f2b619867e3fc926550d999cd61fe2e4fdc21fc5c9a61c2761933dbed3e3d16146cea42bad0f54545d4a75fd7c269b2718bb14f2205683bc215d69b73a8cd93daf9140009ccf2acc28c8fe7afdfb7116fd45374f9094de4cadb8045a70823d71f6bd48f9d3d0b8ceb687cea0e7efa56e267a5610561b24462cc2c87c54484d3e850871af9b98e84eb2413dee1b3da670d45140259a924514c752ec1c28ba0aaa5e4e6f9cb1ff74df34e5e31de08abd61ba10d12ebd3fc39b1d49c91298d3b45fbb1ec92c0bfe3c82745a92637513b41d8d7f17f05b82549cf5fd7b21942f7642f5a06f9c391f460befb77039d2b0dfb76c69222aabd09dad45e612e9bd22b7ba223fd68b4bf9499094340d7cada3ed3c148679c06e88641f52d3f020e335d500b99c3079353edbcf0a218d513028bda0a6b7603aaecfac14b9741449b80aff65db7c223016a37d6b1d2a56d426fb619a0d50fafdc588eaf08e5b03fe0e71a5454edfd704bf0db37feed5383143249fb4b062e11d9877f102337dc927eca36deb54d0d322ed0147a913a883c5d60d4c04d46a8b0bb9b8b0d4d76317d744e69d4aaf49655e4f282a6b5c20a8e412705579fc9b350f10af07848dadca247e6b5e6b82009b30da0f14be0cf67ff76a8695de7f56b9844e388d032928a628fad89cc01818f42ea699d5a139401f4a9bf75cc880258c460a78cb41a532784a452675d4705c1c8d65ae1c7d78294855a8141310053eac23c439649a5ab9e4582e7704af93cf9f3f4c96c63e50b4e5863a6e19e7672c14e48639be3adc1569b3405b2eee9a694ec5c9b364918ab6f6df082892f920777786ebec9de4f274539e577930545026e7792d8eaf4ffe27e7da1de166a3076e9590bacb2515031c940c251485d683549e9e2cecdc5e4ca97b455e77da769679d2f37970bd79068d5fbe52bf4aeba6147b27dae484e9add5de05d2b5fd8a8fd69905e32d64d823608b19765ff25c37459518efc96dbe0c4c4ea21413c974d5d810e14c0e554170c562d44fa7b51ae6f0f6552d36873f446706c156a1496111583e9ec0fbbe9cf4156c37f4a6a1ab16efc23e357f47f027884058c4f2983fe5418ac9bd394929c7413bd1396c63de3ede6aa821f0cbd8f4fd2d697be284921ebbcffab19123cc2bcbd679b5b0b11f97c6c84df3dc459df24c5f3c6420029b47bc83eaa66750ba77ada0b401cfd2b53906f2c370258d32290fe1013244a554dac9e745f191adf223fe48cb0fe2e2103f47e7cacf969a3f46907dd434e2b52c9de38f3d5dc90185c260e323504deda5e2c8b9e9a6f6dbda935d6176b9c459484c910230a0c5d50334a1d3ec77780b4c6a56eb5803a69d43ad5ba1de3e0604a2cf28532d90d0cb913bd5742b5571ff2e55a8fafdf293a768ea049b48d18bbc897571fcb00dde0b6ea25c4e5ba7f3ebe8ba86a68db6fb671acdad098eb85a109e464bfed2ed4cf3d59de1bccec4236e1a30708264c8c1e7561037489667cf4ae334f852b8e0af03e5019b16183218a29cab02da668497425d0c4b16727102893135140cc2c6cf1dfad06a86a462e9f482f75449f998b2d4d8d3bff358c814efe7f3d53ac70ce4cfe7ec0d580f7846f4392479f923dcc7dffeb70984833929da593c443c7e048dd16654a043be2f63c15f95dcb958f0c25a8c4cc94ffb5be3471e1d6a4fa5d644dbde4ef6ebc8efea18a97f241a3fcf5015d32b1c7be1cdee1b02bafff7a62338cb90603167c6e2c3ec88075db6701a6d3f184ab71ac2a33ff8959838ac746ea00cadf639b2fe081c6752ade099d79482b7a93470621101a58e7bcf538c99ab1bc38a7b58b68fdebaa647d3db54ee9c5afb0021ec93c0d28da843e24151de632e13682b830b884e2cda21d42b4d7fef67de585c085c6cb97b79c3e4e9a1ab624324467278831b1912ad9021074242421ecf457320c35ba70b19d9d4822df722d1dcac1a0f913cb53bf31eb65e8d5cc7c8cdc4d50976c3e1fcd902e4e464bac500940bca9d733a33ea49622ff482304a4a2bc3a2a3ecb7de320f191c19b75fb0517cc229ed7d41cb3e987015102dcfcb6376f4de2ff81e1d954ef363567a0bd16d5239d173e78bc4bffe4a5a92cac73ccd680220ee05aca9a7e07a7b969b14491be2f1893dea6b1090d5db6e5222437b4a7aa00b57b07cb25164b3f3a0214aad7995fc4b185ce9890ce1e8d2babb8030486f70e62d26f485d36d75703708e5cf67fc36d59617e942d1bc0dfced3f44721a86fd6cb6dbed03faa65fa3d0db5b5dead680b4aa5404609564344a9b675896c95df1e38bf74b6539b0e3dc2fda3f8f45e46d273fef878f05154a4a56e6f6c91a27fcd352a5f90bf01f280709076dfbcbbdcf5feb21a8dc94998415cf5af942075da046d10ff43cbd2b8e763cc748ff6834fc3e39484fa1c2b4f67d56135002952a40822d364566ab169c455fe72aa49b4b5302363f606501de636d6c8a56d3a15c194355f720b59f193a9e8700df450e23bcb2749c35107af7864734ef9be693a83fcad939364e57aef345adf808884718c9a6e710a056dafae3d80defe0aab35cb118c6fa2ac7a41face8ca60eec8fbd8dfb25de419c8626b64d326a71352fe8036ede058cb193b7754369961adf47ec88d372fb4d4097b5d44403da87fde05941b0116bb65a9ef113397d72512746a53d94aaa0bc5f61b8184cf310e768a7a460649bb00c2153749079bac355a14dc72538feedae425d621e3435488e6d5da1409c7bc57db2456588e6db76abd3c764dd018d9fc2906ea4d4c85c87f0957ceadb82cf194ff4acbac89889b4d3621df3134501369fb8169c9dceac2acaee36260206c790a216d3e04b347d2174f5767bd26a6c6903b0aff01393f20b75b1960d1d6609f3c7a671f9403900e84afed5365d21d381af474e6d7c413637dc36bff4be6f99f052e45a5de6e4a4219c14dfced2e34f052ceeac5fe6a3fa3819dac210e09bdc80a9db1a8ece6fb6e4ae03f45f00964d84b795bff16d5a658ecece87f2ec3d4f79c77357e2f40f4618845f97401ef235df044729bc7e3fe4367555ad3db49f671ae91995380f1bbc826cdee76b11b9c51a44393c13545f4dae0a764abd9df0a5bcbeeeecc35c5c42eafd6d1ac5ac8b42bb0b870989aa319d51001769a68315c00156152b7de296c6ff7fe5f4c2bd4e80c7923f46005e6e06f82164059dc1496f61c65fb9091c0e5f230986a9131b00b8e11e6b606b22a8292cb5956a507f407b6baccf8267d77660679b6c35e6d001fa8eeee4d2c160159a35e874517a3e80f438d819f8b732d13fa9e226eb7524e1d290f6a3014094bcac498ed72aa0630843c11186df4008cf14072d6abdfedb08e59fd1b18b92f241beafa2183d775bad2ae0e99d0faf25c839e516523f138c5baf5a7f3422051f75ee442230946351ab62d88c7f89238b0ae5f32205133a38d97ea8b670404b8541862eb79bc6ebdaf0bf51ccd7f1b157bdf6678e5262d29110ecf3fd55a3c1076037c9e8dec75b75bef6f915aa781cc327a3ee7846bda63b2db57c60b7cd44c9d6a6ad682789542759ff8ce9e5b4d77a19315b996e2c2ad5bf361ea324c1d83d5256ee906628eaaf97c6359363d0e952fe1fd5ff7cfa47510cdf3dfc1b74573033fe51fd185611689f1b49839a9e9a59e9ca6e98066865c040b693f0eeb69686defb0998184ced7bec7174a7ca834d7511dd213f0552fc0bcf714672c176f3d3fbda8ab9c377db64e5fbac4643aaccccf22908ae784f9a982f2fd928370a8cf05cff151cd646fe82264c013ed99108e9c4968b5802ff6646a0b08ec738de70c78543ffcde516f3d615592783d1fe0eba3c263531abfac682277576e78cc95e0cbd4bc43615444f0fe08ab366543798d14d79bc297f1ee54eab9efb413e67f75ca85d194425837146a2489f96f5f0dc608658138b50929b0eed7343c625f80837c7c73cd2e32cca1b7b7cf40c90e71e34803c545caa2cd575f252d2bd9ced7b1aef4f1fec69237d5d120e3553289856edf6337d36f1db1460e967ad89ca9bfd0860e2ebd39ea429ae30a27df2aaf7d2a4e6020590422b68ee34cd90e00836a6f59f3d93b6aa56d23d873a1d15f5294e6a346276f6efaa48dc5f73e99018050be16728127dfff28d1b8d6708f320ee3c5d3005e13b074c6be055b643a43f1925c5950e256283a3626e8962c214a678e63fdb8d706a8ae3f1fcbbb42bd90f64f15078ecc84e6e235674ac085e13f73bee2645a262177629d1aabe3a09e88859570dc0919becbde26f90b0842a7aca62f202419b801f5760bc4ac44afe0fd640761ee7b50fae513b6d8ccd3f401bb7d750c62d2e568e35b5bdda086e794ab052ee7e6c4a25322306a1936cec687d36b9b0a2bedec765a90f5eab138e6eed206d622c94a39ca5c045026d5f7551923ea115163abc7b5affc979e8e54e46a1b4833525fbd4926cb92ddbffb46a61f3b1f189a414743d10b1f1a7df1cc537398a4c598268855f8e4d0012e8f7a9f6842fb25ff4acd6c019e564b3ced12158f7a9b7751b593a9efa88f5c85752ca5e0d288c8f37a3b74d2bb480ae31e0d0d4838b9a4ce21a664734e16648d6f868fa6f83db31e479819a419d09bb85a48530951e832c4a265bbf395e74acf7f7c079e27a91421ca44bea9eeb242910413e4b63583a297845406865354b37d1a4eccdd00ee5fbb2451de6bba918bd95014426cce416e30d12f2646cd384c59e64bcd4cd8248243cf82873a45108544c32682da7e42d155800d822ece91b5600f4b22563ddfdcde984a72fec385b53f0e1a23c778b47d8dcde768e5f87c9e4f565d95bd789d2b8b6614f303d988ea2ce528727fee12c0c79f33361a6332e4fbaed51185fd1e0394fb5e6bb51696160fc50a433c01f2cbbbfd698a95ebd0e12e3714f1403ee7c5b5b1d5ecae126f0e3fc25e2aa6644cf812e75366ef78186bd366cfde6c9add9048144905c36de2a42a74ae2f913748ebd990c8cfe9a342b2449edac7951845ae05c500797c786c95501ae3a65b8fca056d82acaad6d414d93b2730353f2dc3f790506b6abf3492747f286d0c5dc34ff36749f0e6b55deff8d699d5f581d08d33c29af740ada95a42f83d86ea55d26d956e5cd94143187c19804d05ce2f809d72f57f380f77a4da5651b4bf2c2fba4531cb59e94568127a5e7212f21bef44edb0d060b3405c31444a4ed63de230c2a775124018681544339220fbaba045db892cecb57ba980bb692da62485b3e39cc330dcdf3518b7b976ccebf71a13771623443f57b52f2a92737f7f732b8f0c88624a15630b0ca830e02ef986787d65b57cd7396a3b2471fe92965d9fba3377015065b6d06a41fa937f1123a51416628c5d483696fcca5e3fee7f9f66a45a32208fa763a96ef021fbc4e21a8cc0c488e458bd8f98f77f562eef07f73834787df8c2921936b4dea8c5991fe3f5b814049b865e3b0f6394f095e9a8531efcef576a0341e63846fae684f429b2644515020ef69f5fa31b832ff55b0d1da431bc03b32334f74985ce62dc584770a0718c3d1e1a00661d28450009ae53ae96555eea20a32e81ff970a0d848d9e209a938aca6544fb4494c", 0x1000}, {&(0x7f0000002700)="5c98865477e862e88bcdebcfa37aa781260c93ce156dbf1c379a1d9275223ec3d7ea5caf62ae18c2b83b11216c0ab17a730c2c5cd18e8f7a9b3edb03a661ed6212b1d0421f8e85b888644667c904597b4e38e3522b140308514f561154c2f5880a98ed62df8401855481935a01192b63f211ca6b457e48929f6455939861d0290f9f4b478b76738c5dc7ba4d30fe6f76e8ab26ec71691135b891aa6624c884c8b79c3948215494b5d875fff03cf4d3833483e372dd69207ad181916e6a1c363432a5434961a90a4dc0464120c4df26734de863", 0xd3}, {&(0x7f0000002800)="0d9d7bac38562a434f2f540c77fddacdf5f7d01715a56f3dd92e00274fd849be73f676475c9894034b367c785dbb774f96d37fab3481dd60a5b394f59d57b05ae06bc0ba24df4f9bf4f5278c27dec1d7696470534fbb26cba46669bf0c8bd020a2679dc6411c5671cec5be17f98f3bf59abaf1ed62dc8a28b5319c34c08bfd23ec3d4a572f9e22620f100d289b2cae6a4dcf3c5e1d4963", 0x97}, {&(0x7f00000028c0)="f5d9585f0416f664ba98770facf4c2529ae909fd233647ceb741bb854363e4de2bff37b2ce61d2cb5ad15d5dff781d59a04e852290a8d9273b14feb00a4371bcb9c9d78a89887c59895bde6ebce2d8d26a2e7a4eb7818c287447bb275e6d3bf283544d0f55aa374fd89840d198ba411463cd5ce68c66769ac69c40a4a415d0a9c0524cd27e1b16ae5db4c80b", 0x8c}, {&(0x7f0000002980)="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", 0x1000}], 0x5, &(0x7f0000003a00)={0x1010, 0x112, 0x10000, "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"}, 0x1010, 0x10}], 0x2, 0x880) socketpair(0x2a, 0x6, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400)='macvlan1\x00', 0x10) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000140)=0x8bb, 0x4) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x4, 0x4, 0x20, @private0={0xfc, 0x0, [], 0x1}, @loopback, 0x8087, 0x10, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd2722b5839973c84}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x20001a) 14:31:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000440)) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x8e, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="55249c93900f", 0x6}, {&(0x7f0000000180)="35c62d07f021bf5e2f26cef0e43f740be4ad49065f1dae0f59f75acda3004bb8e6bbe5fe4f5fd027c605db25a4bea5f25336b3e7e2f941b235a4a2f5ced7c9931b3cb0220b38af387c0778e86c2ba0eba55dcabb1a9d940b76d8f444c50355b4728f16c4c45e5869676ce2d4d190a50fbf3bee5f8ca5936e76d4c98f192e6fb4bbe104c7c8657ea230d52e61819b2af6c4bb71c30213a75f403295dab7f8e8b816a887eb56e68cc266e4193b0fa48acfaf0ad36d2a6c7a768558c2b69707e1582002ad0b1a2a656980ac62", 0xcb, 0x9}, {&(0x7f0000000280)="126e63d77b98c04c0abd604e2c69a818b0d7d37714b27331e0e629e1ba5ad40845e5a6ddca0e34a309", 0x29}, {&(0x7f00000002c0)="2a9c8747b8c51610f2da0ff42d8e0691c0bdc03bb4f28d7980f3a746192799855cc93f9aea35c99e023ce867fe7a794de26eebe282fcc9b398e7f5eb53c185bd0c29430a505945189ad9165dba2813ecbb881a578a8f4dfe9b3a63e9c7e7ff2e57db0d14ac803f324455acb09b485e4fa5af01da4aaf640e2b8d1877fc9e34d567e8b919084521d9a2300310145ab4faa658f7788ec0bf1c95ee942f3ae05744f4e08f2c223dab2360d503db2d3279f78da5a0d783893441e92cdce5b10f60247be554", 0xc3, 0x10001}], 0x390410, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6c733d6d61636963656c616e642c6e6f6465636f6d706f73652c73657373696f6e3d3078303030303030303030303030303030342c736d61636b66736465663d21247b7b29287d287b292c6f626a5f757365723d2f6465762f70746d78002c6673757569643d66303036313332302d363707352d3130611d2d640435322d33633536373432002c666f776e65723c", @ANYRESDEC=r2, @ANYBLOB=',fscontext=root,smackfstransmute=/dev/ptmx\x00,audit,measure,euid<', @ANYRESDEC=r4, @ANYBLOB="356e833e8f68e919aa119042af3e097278f7f7b9b044e912fee9ab81e465f1496e64af24b02ffc83226ed48452249f9fa583834c26272b7d5efb5e571018d8ffb81d17b7f2981d18af4ff16b69e89a59bf07d92e00a2ed3026"]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000580)) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) getsockopt(r5, 0x7, 0x8, &(0x7f0000000480)=""/158, &(0x7f0000000540)=0x9e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 846.577685] Bluetooth: hci10 command 0x1003 tx timeout [ 846.583150] Bluetooth: hci9 command 0x1003 tx timeout [ 846.583200] Bluetooth: hci10 sending frame failed (-49) [ 846.590007] Bluetooth: hci6 command 0x1003 tx timeout [ 846.593888] Bluetooth: hci9 sending frame failed (-49) [ 846.600255] Bluetooth: hci6 sending frame failed (-49) [ 846.661089] Bluetooth: hci8 command 0x1003 tx timeout [ 846.666507] Bluetooth: hci8 sending frame failed (-49) [ 847.387597] Bluetooth: hci11 command 0x1003 tx timeout [ 847.393125] Bluetooth: hci11 sending frame failed (-49) [ 847.457632] Bluetooth: hci0 command 0x1001 tx timeout [ 847.463112] Bluetooth: hci0 sending frame failed (-49) [ 848.657589] Bluetooth: hci6 command 0x1001 tx timeout [ 848.657620] Bluetooth: hci9 command 0x1001 tx timeout [ 848.664144] Bluetooth: hci6 sending frame failed (-49) [ 848.673438] Bluetooth: hci9 sending frame failed (-49) [ 848.673472] Bluetooth: hci10 command 0x1001 tx timeout [ 848.684201] Bluetooth: hci10 sending frame failed (-49) [ 848.737602] Bluetooth: hci8 command 0x1001 tx timeout [ 848.743027] Bluetooth: hci8 sending frame failed (-49) [ 849.457519] Bluetooth: hci11 command 0x1001 tx timeout [ 849.463107] Bluetooth: hci11 sending frame failed (-49) [ 849.547575] Bluetooth: hci0 command 0x1009 tx timeout [ 850.737463] Bluetooth: hci9 command 0x1009 tx timeout [ 850.748053] Bluetooth: hci10 command 0x1009 tx timeout [ 850.753394] Bluetooth: hci6 command 0x1009 tx timeout [ 850.817476] Bluetooth: hci8 command 0x1009 tx timeout [ 851.537390] Bluetooth: hci11 command 0x1009 tx timeout 14:31:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x303c82, 0x0) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 14:31:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000001c0)=0x7fff) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100)) 14:31:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x10001, 0x101002) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x100, 0x464, 0x400, 0x70bd25, 0x25dfdbfb, "f8937cf46011fdaf8f3b14a11ae31a23bec6509a9cacdcead114ad26bda1b85b3c5bd06c5bdb60dc4af6e657d25d5007718fc1631b8c55bba62258f6d5b37bb43ce3acdcc25d051f4e7431ea076030a1f44d8832cb5f8b72d614aae9a987fdc740ae45f42e3b2cb9397a2078dfac409bdce698c9c5ff84283ac95b16849367f55b3c56807aaf6487df9d8a898c1eb00b63cd7516acbe58d26b0eaba862083d570f1bcaf2544bc48120c7f538b164b553efee0f19391f4073ddf0f2e5ab43aa888b46611a0dd3b472765b7f11217a92a28403beddb9ff09ae04a843d9970a7cdf17a6e46230b06f321ea856ca036c130d", ["", "", "", ""]}, 0x100}, 0x1, 0x0, 0x0, 0x8841}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x8000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b0, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2236}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf938}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xecbc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 14:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x35) 14:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$KDADDIO(r0, 0x400455c8, 0x400000ffff) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) close(r2) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000380)) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vim2m\x00', 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r6, 0x204100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0xf8, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="22e3bcc48c40"}, @NL80211_ATTR_IE={0xb8, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x1}}, @supported_rates={0x1, 0x1, [{0x2}]}, @peer_mgmt={0x75, 0x6, {0x1, 0x5, @void, @val=0x35, @void}}, @random={0xe5, 0x87, "bdf34206f7d9ebdfcd1245466c8d94d290a5d5d43fc06a0e6662e69a44485ff0a961f536ebf5bb375caff4bf93658d05aaf092f817719d1211f296bac2fa7b0dce8157cf26983dbccaf7c6867cf829ed1ddda8f8da6e2fe0379a4afe88bdc73f2cc34c8eebafda44dc892bae266c43e95aef3678a842b85d2417ee3e22787b88aca365e69cdefa"}, @supported_rates={0x1, 0x5, [{0x1b}, {0x24}, {0x6}, {0x6c, 0x1}, {0x18, 0x1}]}, @peer_mgmt={0x75, 0x14, {0x0, 0x1000, @void, @void, @val="6794b040ad2bfad605e669e1e0e71358"}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd524}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x30) 14:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 855.478986] Bluetooth: Unknown HCI packet type 5e [ 855.480722] Bluetooth: hci0: Frame reassembly failed (-84) [ 855.491570] Bluetooth: hci0: Frame reassembly failed (-84) [ 855.498973] Bluetooth: Unknown HCI packet type 43 [ 855.504145] Bluetooth: Unknown HCI packet type 5e [ 855.504291] Bluetooth: Unknown HCI packet type 5e [ 855.510420] Bluetooth: Unknown HCI packet type 43 [ 855.524443] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:31:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0xa100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 855.554599] Bluetooth: Unknown HCI packet type 5e [ 855.558903] Bluetooth: Unknown HCI packet type 50 [ 855.570140] Bluetooth: Unknown HCI packet type 50 [ 855.587270] Bluetooth: Unknown HCI packet type 5e [ 855.600196] Bluetooth: Unknown HCI packet type 40 [ 855.602130] Bluetooth: Unknown HCI packet type 5e [ 855.623146] Bluetooth: hci9: Frame reassembly failed (-84) [ 855.630723] Bluetooth: Unknown HCI packet type 40 14:31:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r5, 0xb}, 0x10) splice(r7, 0x0, r6, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r4) r8 = syz_mount_image$ubifs(&(0x7f0000000140)='ubifs\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="58f232783c0d51acee205a42307dde5e333dcd3bcc9925c7f3e59fa125e80e21e5ce84", 0x23, 0xfffffffffffffffe}], 0x48, &(0x7f0000000280)={[{@compr_lzo='compr=lzo'}, {@compr_none='compr=none'}, {@no_bulk_read='no_bulk_read'}, {@compr_none='compr=none'}, {@compr_none='compr=none'}], [{@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@measure='measure'}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) openat(r8, &(0x7f0000000340)='./file0\x00', 0x4000, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0xfe0, 0x89, 0xffffffff, 0x1, 0x0, "f9dd3ee8cd4dcac9b5cadfef137b34aa572422"}) ioctl$KDSKBLED(r1, 0x4b65, 0xe4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000140)=""/201) 14:31:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) creat(&(0x7f0000000040)='./file0\x00', 0x8) 14:31:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) syz_open_dev$ptys(0xc, 0x3, 0x1) 14:31:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x3ffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x3) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x4, 0x99f}]}, 0xc, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000100)=0x1) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000180)=0x44, 0x4) [ 855.770863] UBIFS error (pid: 16292): cannot open "/dev/loop3", error -22 [ 857.536907] Bluetooth: hci8 command 0x1003 tx timeout [ 857.536992] Bluetooth: hci0 command 0x1003 tx timeout [ 857.545195] Bluetooth: hci8 sending frame failed (-49) [ 857.550898] Bluetooth: hci0 sending frame failed (-49) [ 857.554747] Bluetooth: hci6 command 0x1003 tx timeout [ 857.570551] Bluetooth: hci6 sending frame failed (-49) [ 857.697100] Bluetooth: hci9 command 0x1003 tx timeout [ 857.702427] Bluetooth: hci9 sending frame failed (-49) [ 858.416946] Bluetooth: hci10 command 0x1003 tx timeout [ 858.422372] Bluetooth: hci10 sending frame failed (-49) [ 859.616824] Bluetooth: hci8 command 0x1001 tx timeout [ 859.616993] Bluetooth: hci6 command 0x1001 tx timeout [ 859.622167] Bluetooth: hci8 sending frame failed (-49) [ 859.628677] Bluetooth: hci0 command 0x1001 tx timeout [ 859.632845] Bluetooth: hci6 sending frame failed (-49) [ 859.638919] Bluetooth: hci0 sending frame failed (-49) [ 859.776825] Bluetooth: hci9 command 0x1001 tx timeout [ 859.782544] Bluetooth: hci9 sending frame failed (-49) [ 860.496803] Bluetooth: hci10 command 0x1001 tx timeout [ 860.502279] Bluetooth: hci10 sending frame failed (-49) [ 861.696645] Bluetooth: hci6 command 0x1009 tx timeout [ 861.696789] Bluetooth: hci0 command 0x1009 tx timeout [ 861.701923] Bluetooth: hci8 command 0x1009 tx timeout [ 861.856824] Bluetooth: hci9 command 0x1009 tx timeout [ 862.576602] Bluetooth: hci10 command 0x1009 tx timeout 14:31:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000100)={0x2, 0xffffd9db}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400082, 0x0) 14:31:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x100000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) name_to_handle_at(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0xba, 0x9, "b5076fdeb650d1bd0959538a057dc647c02b6febfa98479b7552b55ed6c4ebaf9ec0acb4dcdb3675458fc61d1ed56153e3816c58ab948423bf595d19be9f448a8503554ffccaeb0c559dc8a5707a5e00ecae8449b0f7575639e83587f72b1c58a95fd0100958a3b1af4c27d2f67363b7ce56e1c3afe51f4a8fe7673ec499636bc8fbc50b31f18e36c550bf5d8a03adfb2a4a68fff58af673b035fc2f64803e1ce75b518f708984885e05e3cfdc5ff106a14f"}, &(0x7f00000002c0), 0x1000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="d9ba3435b05f148ff037c1138f5125c872a86d2662755920483bfcdfeaa38711285eb0b11a61bdee6891568f470813f7f20ce880ab7cc26f15a5e9b5ed75845112c6ea221c0e0da128b8c8ee2a45c5bdf6821aab0d7cbd2383433d6b4b5765fec3d566", 0x63, 0xffffffffffffffd1}, {&(0x7f00000001c0)="b8ca9aa59b681e8031e64ef63ab570fa1ca55486a20fcf6c70c2c961053f2d07aed548927fc7f006859fae318b79ef6a2da18bce4a56cfaad56548e1b63fda3d1ea068b2e76885d35695bc2adda30db41422fe3f9ea76b8ad74b29d3e7f5fe5559fc40f5f0cd8605df94f6c977389d1b174de210921d63229d00a433003097119a616f3be1b231a22b8153fe3c5854731ff4a5215d8aa61660fc2ff6c1c3a5e001ea39192f663ab0f405562200670ee3011930265c24a0f012f8a707f9b1a9d6c8d3ff78933d3397251355", 0xcb, 0x1}, {&(0x7f00000002c0)="dafcd32ea54b996064ef185b5533cf25a70a3a0e617a5da9312a05f823d8e35d8c61fe518f9dc56ad9593644c55822188ff86f575c1637a4877a34c28649b22ac6c30ce93d53115eb8e8510341222da2d1a53b4e9867ac7addf0c2b2c7fc8df8644f28204c784a283eb5b7719fecd16081529f9257e7f34692d04dd768548b204a02bb25e0cb73f967158a9a870eebb2770fe9a022bd16822bdef9a9098b8b8316af18eb29a72569e68b595719f8a9da4fbcef2e4cf7fa982a21894b89e460bfb9c402f403808e82c0c3161c9d9677604f290ec7c5be3271294ebef00d53a6292a6e003682724ae0", 0xe8, 0x49c}, {&(0x7f00000003c0)="6884b769fd9bf129db466e150c4b7415cec06df68c2deafbdd7bf674c250db3339d226b8335efe5bc74bdbe49a33ff613e70bec08eed9968eb188775feabd035cf24b404f7e5b31555162e68df3340eda82072bdd3260c19d0c4098f5da91d", 0x5f, 0x800}, {&(0x7f0000000440)="d206f1b7a77eb497905d6ba7754da395b9b1dc0cc24beee66ad32ec9356eac81f322bcf651cf2357b836ff198bd92e309acda3211e26c5e56adaa611b1c2f0a1cbfa95a3b34038191eb90d937fe0e3301d26b1b761d416957608f1af47", 0x5d, 0x3f}], 0x0, &(0x7f0000000540)={[{'$/(:!+J)'}, {'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'$.D#'}, {'/dev/ptmx\x00'}, {'{'}, {'*'}, {'],-Y'}, {'%!'}], [{@hash='hash'}, {@smackfsfloor={'smackfsfloor'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@appraise='appraise'}, {@euid_lt={'euid<', 0xee00}}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xc02a, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xb) 14:31:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 865.703004] Bluetooth: Unknown HCI packet type 5e [ 865.708750] Bluetooth: Unknown HCI packet type 5e [ 865.710934] Bluetooth: hci11: Frame reassembly failed (-84) [ 865.714056] Bluetooth: Unknown HCI packet type 43 [ 865.720666] Bluetooth: Unknown HCI packet type 0b [ 865.724444] Bluetooth: hci11: Frame reassembly failed (-84) [ 865.736815] Bluetooth: Unknown HCI packet type 43 [ 865.741630] Bluetooth: Unknown HCI packet type 00 [ 865.747836] Bluetooth: Unknown HCI packet type 5e [ 865.748206] Bluetooth: Unknown HCI packet type 5e [ 865.761208] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 865.774933] Bluetooth: Unknown HCI packet type 50 [ 865.779933] Bluetooth: Unknown HCI packet type 5e [ 865.794434] Bluetooth: Unknown HCI packet type 43 [ 865.797702] Bluetooth: Unknown HCI packet type 50 [ 865.810541] Bluetooth: Unknown HCI packet type 5e [ 865.815455] Bluetooth: Unknown HCI packet type 5e [ 865.820931] Bluetooth: Unknown HCI packet type 5e [ 865.831088] Bluetooth: Unknown HCI packet type 40 [ 865.834678] Bluetooth: Unknown HCI packet type 40 [ 865.843247] Bluetooth: Unknown HCI packet type 50 [ 865.863929] Bluetooth: Unknown HCI packet type 5e [ 865.903093] Bluetooth: Unknown HCI packet type 40 14:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x80841) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000100)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xf0000000) 14:31:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/223) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1b) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x200, 0x56df, {0x0}, {0xee01}, 0x0, 0x4}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0x8000, {r1}, {r2}, 0x0, 0xffffffffffffff1f}) process_vm_writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000340)=""/131, 0x83}], 0x6, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000800)) [ 866.934878] Bluetooth: hci9: Frame reassembly failed (-84) 14:31:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCCONS(r1, 0x541d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 867.776544] Bluetooth: hci8 command 0x1003 tx timeout [ 867.776716] Bluetooth: hci11 command 0x1003 tx timeout [ 867.781840] Bluetooth: hci8 sending frame failed (-49) [ 867.793174] Bluetooth: hci6 command 0x1003 tx timeout [ 867.793230] Bluetooth: hci11 sending frame failed (-49) [ 867.803907] Bluetooth: hci6 sending frame failed (-49) [ 867.810404] Bluetooth: hci0 command 0x1003 tx timeout [ 867.816000] Bluetooth: hci0 sending frame failed (-49) 14:31:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/autofs\x00', 0x182380, 0x0) connect$ax25(r2, &(0x7f0000001140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000000100)="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", 0x1000}) 14:31:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) 14:31:30 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x140e, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) [ 868.976191] Bluetooth: hci9 command 0x1003 tx timeout [ 868.981516] Bluetooth: hci9 sending frame failed (-49) [ 869.776192] Bluetooth: hci10 command 0x1003 tx timeout [ 869.781675] Bluetooth: hci10 sending frame failed (-49) [ 869.856146] Bluetooth: hci0 command 0x1001 tx timeout [ 869.861476] Bluetooth: hci6 command 0x1001 tx timeout [ 869.861528] Bluetooth: hci0 sending frame failed (-49) [ 869.867193] Bluetooth: hci6 sending frame failed (-49) [ 869.877504] Bluetooth: hci11 command 0x1001 tx timeout [ 869.882799] Bluetooth: hci8 command 0x1001 tx timeout [ 869.882868] Bluetooth: hci11 sending frame failed (-49) [ 869.889288] Bluetooth: hci8 sending frame failed (-49) [ 871.056037] Bluetooth: hci9 command 0x1001 tx timeout [ 871.061390] Bluetooth: hci9 sending frame failed (-49) [ 871.856139] Bluetooth: hci10 command 0x1001 tx timeout [ 871.861692] Bluetooth: hci10 sending frame failed (-49) [ 871.936105] Bluetooth: hci11 command 0x1009 tx timeout [ 871.936108] Bluetooth: hci8 command 0x1009 tx timeout [ 871.936134] Bluetooth: hci6 command 0x1009 tx timeout [ 871.941421] Bluetooth: hci0 command 0x1009 tx timeout [ 873.135922] Bluetooth: hci9 command 0x1009 tx timeout [ 873.935894] Bluetooth: hci10 command 0x1009 tx timeout 14:31:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) fdatasync(r0) 14:31:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:38 executing program 5: bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @mcast2, 0x101}}, 0x24) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 875.929886] Bluetooth: Unknown HCI packet type 5e [ 875.935234] Bluetooth: Unknown HCI packet type 43 [ 875.945019] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 875.951541] Bluetooth: Unknown HCI packet type 5e [ 875.953900] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 875.960240] Bluetooth: Unknown HCI packet type 43 [ 875.966089] Bluetooth: Unknown HCI packet type 5e [ 875.972020] Bluetooth: Unknown HCI packet type 43 [ 875.977898] Bluetooth: Unknown HCI packet type 00 [ 875.978591] Bluetooth: hci11: Frame reassembly failed (-84) [ 876.000848] Bluetooth: hci11: Frame reassembly failed (-84) [ 876.001039] Bluetooth: Unknown HCI packet type 5e [ 876.008982] Bluetooth: Unknown HCI packet type 5e [ 876.021439] Bluetooth: Unknown HCI packet type 50 [ 876.023738] Bluetooth: Unknown HCI packet type 5e [ 876.039034] Bluetooth: Unknown HCI packet type 5e [ 876.042836] Bluetooth: Unknown HCI packet type 50 [ 876.057010] Bluetooth: Unknown HCI packet type 40 [ 876.060894] Bluetooth: Unknown HCI packet type 50 [ 876.072231] Bluetooth: Unknown HCI packet type 5e [ 876.086384] Bluetooth: Unknown HCI packet type 5e [ 876.091613] Bluetooth: Unknown HCI packet type 40 [ 876.100159] Bluetooth: Unknown HCI packet type 40 14:31:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xc4, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_IE={0x19, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x8, 0x0, 0x36, 0x2}}, @channel_switch={0x25, 0x3, {0x0, 0x70, 0x1f}}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x408}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x614e}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3d800}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x46c}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xff}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b8d9945465b1"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x200}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8004}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) write$snapshot(0xffffffffffffffff, &(0x7f0000000140)="05cf6278ca908af454f6bcf0abf5447d59c079bf7b7b4e3efc624f79940b9fe7a5c9b3a9c41966a939ed28ff7b61dc452576d30cd41378820f1207d35dac8e7d9583629ee358596816297fa47ecb089569b4fc15d1075f4af48459f1a3f332f58c2ff886636a27aefbaf54be2c3825b72535ed7f0a53c763fa9077d12c36e3addccb177b6a33525b43c55724d0bbdd1165d71696e1", 0x95) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000440)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000400)=[0x4, 0x3], 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) 14:31:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000400000070ad95b031a35f06834f721f3dcaedc848ebb2e58400000000000000000044a60458813fcd79ba9215000000000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x6c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e20, 0x9c9a, @dev={0xfe, 0x80, [], 0x17}, 0x7}}, 0x6100, 0xcbfe}, 0x90) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 877.863849] Bluetooth: hci9: Frame reassembly failed (-84) [ 877.945565] Bluetooth: hci0 command 0x1003 tx timeout [ 877.951348] Bluetooth: hci0 sending frame failed (-49) [ 878.015532] Bluetooth: hci11 command 0x1003 tx timeout [ 878.021136] Bluetooth: hci8 command 0x1003 tx timeout [ 878.021232] Bluetooth: hci11 sending frame failed (-49) [ 878.028101] Bluetooth: hci8 sending frame failed (-49) [ 878.037355] Bluetooth: hci6 command 0x1003 tx timeout [ 878.042629] Bluetooth: hci6 sending frame failed (-49) 14:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 878.671684] Bluetooth: hci10: Frame reassembly failed (-84) 14:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'batadv_slave_0\x00', 0x1}) 14:31:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x20015) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x110) 14:31:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x408001, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000140)={0x73c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x48, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x42, 0x5, "671a0dd77f274c27ae28ce3c2773f04cd11845534162f3947b369dceacb8695b5c93a02d6e546020ce8e515a5b0aaa1a4128199832f503af7905dc470b65"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3a}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_VALUE={0xfe, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',*]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "60d527e9cd0a3d7f6c18c546502f608d5a268798248a72de8517ab7d1c131c29e2f68816a270d21b2f6ba438957d5a529531cd658d1e480494289d357e2e5df5008aefb9bc4e2c6b72a0351db5da1596ba32ae397824cdd1724e5116b3876b65e7f42cab33bb75770c268d3d779af08e9fae59420eb69a3c09b59406cf528f6ce6c178b34d57b41c7fd5114013ed19dd485c95677ec0cec48880b16382f8bc0222942387a3337c5e4f9a19570df2a0df88ca5c4bce15c08c4fac2d3c1cc51f6496260c87042d7769e5289fea01c58ad248d532e5c715020903fedc9c7732d6fc192ef46f734f1f1f47f4015a327469d58a27d19905d26e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "207907f7cda1565822955f0a44beb167efeb3e2ba78e2894700b5fe896842ee7aa212d98c95ff9"}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "5b5743f6b6d6f17d185fce0d6260e5885bfc7c1c9c46281a14bf3f42845d14aef95620ea8b8bf7a11b42279fe4daa2901210e8b9444c771493fc38dce3e2c5275ca6b1c727f17534856a16ce110cc92fa2eca3d2f9a6060e1a39a53ad5503116d3fcd079850086804d6bd1594fd56460b6c574b4447e44446f60d74469f4227ced26f9ad1ff3701b6d97521103a23e2d00724e2ebde4a89d1adfe3933b725286523cb5d97fed"}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "1ea6ad74c21c649416246e58315c3997d22d62aaf87c05bc10dc92271db79b6ad2b71496e541bfbce98b0aecf42fced03566eef2965c7675cb30c51f51291ec97126c45b8f631d0a76342c2392cddeb7e83cbd09cfb23b2f94ea45dd6e251f0a68912ad316f9ba6d9239504adce69dc66e3888ce566639fc89b50b6e6b4320cd9cabe5add283c8fe70a23774be2f5e5082da62b93382e203e8b0f1b0aa11578b7114af2ab47aefb55c508eabb2b3c70bcf9bfc82ecf0180f4599db23c3f54e3bf408ff6a8ef7ca"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/-[%!\x9c{\x92^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "79ca0d619684ff1ae3a01b33cfdf823d516a3587550737b4410f0e560ea22097c56a8ff8a465d2595092430f2286a85b736ed69124fcc0872d7444a9cc7e86b3038083adc4c366b52ca6efa45e3973b43c9b4ac59c539f6ab06b71e6e71b2d0331807950a921ae92ad3fba0a82f870a58c4dcda70b80c12a6bb424587e690db5"}, @ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "37d299"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "552ee3756edf5b74bb11e3d515207c2a7f37397f9f7ef5e63448a83faa0b3b6ae8272d090de1018e37cbc1f5bede1e2a2011b4a110235642ce120daedbb6d58c907ae981eb0a773fe3294f127ff98ca9dd4129f5ad263e67650d431876d572bb5d857cd9766695f4daa24026c40eea41760d4baf45d4d14cf6126b91eb106e85de6db4eefa38e74c1dc19015dd5034749962c0c366e38f9e09e1a4ba06d3135e31745891acaf3fd0a41164292950e24392e67e5bcac0f2cdf6ed1b67da0643f452e4c89fd4d6e38dd8dcf0027e077c43e9e869bfdd937b0a88a76d744099224ac2ee"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x73c}, 0x1, 0x0, 0x0, 0x40000}, 0x48014) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 879.935465] Bluetooth: hci9 command 0x1003 tx timeout [ 879.940919] Bluetooth: hci9 sending frame failed (-49) [ 880.015455] Bluetooth: hci0 command 0x1001 tx timeout [ 880.020831] Bluetooth: hci0 sending frame failed (-49) [ 880.095428] Bluetooth: hci6 command 0x1001 tx timeout [ 880.095432] Bluetooth: hci11 command 0x1001 tx timeout [ 880.096265] Bluetooth: hci11 sending frame failed (-49) [ 880.100702] Bluetooth: hci8 command 0x1001 tx timeout [ 880.107737] Bluetooth: hci6 sending frame failed (-49) [ 880.114939] Bluetooth: hci8 sending frame failed (-49) [ 880.735330] Bluetooth: hci10 command 0x1003 tx timeout [ 880.740712] Bluetooth: hci10 sending frame failed (-49) [ 882.015290] Bluetooth: hci9 command 0x1001 tx timeout [ 882.020612] Bluetooth: hci9 sending frame failed (-49) [ 882.105322] Bluetooth: hci0 command 0x1009 tx timeout [ 882.175349] Bluetooth: hci11 command 0x1009 tx timeout [ 882.180687] Bluetooth: hci6 command 0x1009 tx timeout [ 882.185221] Bluetooth: hci8 command 0x1009 tx timeout [ 882.825235] Bluetooth: hci10 command 0x1001 tx timeout [ 882.830658] Bluetooth: hci10 sending frame failed (-49) [ 884.095073] Bluetooth: hci9 command 0x1009 tx timeout [ 884.895088] Bluetooth: hci10 command 0x1009 tx timeout 14:31:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x200000000000ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0xfffffff7, "e9159639594f0d51ceedf8ee743a4786c6da4dbbb0473c79c4d3fa9e5e606f99", 0x5, 0x400, 0x19e2, 0x80000001, 0x8, 0x2, 0x0, 0x21}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x6f) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x8016) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ustat(0xbe9e, &(0x7f0000000040)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x80000000, 0x3, 0x4de7, 0x400, 0x4, 0x9, 0x8}) 14:31:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x1665, 0x0, 0x7, 0x57}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 886.173667] Bluetooth: Unknown HCI packet type 5e [ 886.179199] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 886.191126] Bluetooth: hci6: Frame reassembly failed (-84) [ 886.191434] Bluetooth: hci6: Frame reassembly failed (-84) [ 886.203787] Bluetooth: Unknown HCI packet type 43 [ 886.213101] Bluetooth: Unknown HCI packet type 5e [ 886.218953] Bluetooth: Unknown HCI packet type 00 [ 886.220734] Bluetooth: Unknown HCI packet type 5e [ 886.223907] Bluetooth: Unknown HCI packet type 43 [ 886.239231] Bluetooth: Unknown HCI packet type 5e [ 886.239645] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 886.244080] Bluetooth: Unknown HCI packet type 43 [ 886.251680] Bluetooth: Unknown HCI packet type 50 [ 886.260863] Bluetooth: Unknown HCI packet type 5e [ 886.268391] Bluetooth: Unknown HCI packet type 40 [ 886.274011] Bluetooth: Unknown HCI packet type 5e [ 886.279040] Bluetooth: Unknown HCI packet type 5e [ 886.283887] Bluetooth: Unknown HCI packet type 50 [ 886.284573] Bluetooth: Unknown HCI packet type 50 [ 886.300522] Bluetooth: Unknown HCI packet type 5e [ 886.305346] Bluetooth: Unknown HCI packet type 5e [ 886.306660] Bluetooth: Unknown HCI packet type 40 [ 886.310233] Bluetooth: Unknown HCI packet type 40 [ 888.174814] Bluetooth: hci0 command 0x1003 tx timeout [ 888.180273] Bluetooth: hci0 sending frame failed (-49) [ 888.254799] Bluetooth: hci11 command 0x1003 tx timeout [ 888.254802] Bluetooth: hci8 command 0x1003 tx timeout [ 888.254879] Bluetooth: hci8 sending frame failed (-49) [ 888.260221] Bluetooth: hci11 sending frame failed (-49) [ 888.276477] Bluetooth: hci6 command 0x1003 tx timeout [ 888.281832] Bluetooth: hci6 sending frame failed (-49) 14:31:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa82, 0x0) close(r0) 14:31:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x481000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x0, 0x1f}}, 0x20) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1) 14:31:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000100)=0x7dc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x19) 14:31:51 executing program 3: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044884) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x82100, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) bind$tipc(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000340)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7fff, 0x6}, {0x4b76, 0x200}], 0xee00}, 0x18, 0x3) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x101042, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/85) close(r0) [ 889.519817] sp0: Synchronizing with TNC [ 889.623455] sp0: Synchronizing with TNC 14:31:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffc) close(r0) [ 890.254763] Bluetooth: hci0 command 0x1001 tx timeout [ 890.261116] Bluetooth: hci0 sending frame failed (-49) [ 890.334812] Bluetooth: hci6 command 0x1001 tx timeout [ 890.340098] Bluetooth: hci8 command 0x1001 tx timeout [ 890.340134] Bluetooth: hci6 sending frame failed (-49) [ 890.350978] Bluetooth: hci11 command 0x1001 tx timeout [ 890.353371] Bluetooth: hci8 sending frame failed (-49) [ 890.360346] Bluetooth: hci11 sending frame failed (-49) [ 892.334592] Bluetooth: hci0 command 0x1009 tx timeout [ 892.414545] Bluetooth: hci11 command 0x1009 tx timeout [ 892.420122] Bluetooth: hci6 command 0x1009 tx timeout [ 892.424543] Bluetooth: hci8 command 0x1009 tx timeout 14:31:58 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:31:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:31:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x88800, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x1, 0x3, 0x1}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:31:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x7, 0x0, 0xceb, 0x0, 0xee73}) 14:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000340)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7fff, 0x6}, {0x4b76, 0x200}], 0xee00}, 0x18, 0x3) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x101042, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000200)=""/85) close(r0) [ 896.410123] Bluetooth: hci0: Frame reassembly failed (-84) [ 896.416083] Bluetooth: hci0: Frame reassembly failed (-84) [ 896.439903] Bluetooth: hci8 sending frame failed (-49) [ 896.446243] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 896.455776] Bluetooth: Unknown HCI packet type 5e [ 896.460731] Bluetooth: Unknown HCI packet type 43 [ 896.469609] Bluetooth: Unknown HCI packet type 5e [ 896.470767] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 896.474723] Bluetooth: Unknown HCI packet type 50 [ 896.494382] sp0: Synchronizing with TNC [ 896.503219] Bluetooth: Unknown HCI packet type 5e 14:31:58 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xe09473422b18d6ef, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES64=r2, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x20008841}, 0x24004080) pipe2(&(0x7f0000000380), 0x82c00) r3 = accept$alg(r0, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000200)="fd6639622a0fca74d93a4c61e9d63f859d6a0be3b61031ae9eac205ff989a26b6cf22b1aceac7f41d5b54ce79eba4c1e464c03e0187f213b85c9f8553b1e20d1") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x4000, 0x0) prctl$PR_SET_FPEXC(0xc, 0x40000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xed3f, 0x464001) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000140)) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$DRM_IOCTL_GET_CTX(r6, 0xc0086423, &(0x7f0000000280)) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000340)) [ 896.526880] Bluetooth: Unknown HCI packet type 40 14:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa82, 0x0) close(r0) 14:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x200000000000ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000001c0)={0xfffffff7, "e9159639594f0d51ceedf8ee743a4786c6da4dbbb0473c79c4d3fa9e5e606f99", 0x5, 0x400, 0x19e2, 0x80000001, 0x8, 0x2, 0x0, 0x21}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x6f) syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x8016) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ustat(0xbe9e, &(0x7f0000000040)) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x80000000, 0x3, 0x4de7, 0x400, 0x4, 0x9, 0x8}) 14:31:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'vlan0\x00', {}, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) close(r0) [ 897.211423] Bluetooth: hci9: Frame reassembly failed (-84) 14:31:59 executing program 3: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/25, 0x19, 0x2, &(0x7f0000000100)={0xa, 0x4e23, 0x7f, @local, 0x101}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$UHID_DESTROY(r0, &(0x7f00000002c0), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x3ed, 0x200, 0x70bd26, 0x25dfdbfe, "af366a565cd71145756400c4c473c0c7e0e5a602ad2d8df5c8263fecf867c8eea143182b8638994c8bf4aede1c27e36ff1556b3f9f339b0ff192d5421f9cedc1ab238171c4ee45d6cda03065af47994d0b4d7d8fee241673db513688d39f09767762622e106124473d410d9ea48a8f24c78cfe97b85b57aaabae3143d6718727e54007c2493018cf695305830c8b0d25", ["", "", "", "", "", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4840) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) 14:31:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'batadv_slave_0\x00', 0x1}) [ 898.414205] Bluetooth: hci0 command 0x1003 tx timeout [ 898.419758] Bluetooth: hci0 sending frame failed (-49) [ 898.494224] Bluetooth: hci8 command 0x1003 tx timeout [ 898.499556] Bluetooth: hci8 sending frame failed (-49) [ 898.505031] Bluetooth: hci6 command 0x1003 tx timeout [ 898.510280] Bluetooth: hci6 sending frame failed (-49) [ 899.214168] Bluetooth: hci9 command 0x1003 tx timeout [ 899.220121] Bluetooth: hci9 sending frame failed (-49) [ 900.494047] Bluetooth: hci0 command 0x1001 tx timeout [ 900.499341] Bluetooth: hci0 sending frame failed (-49) [ 900.574025] Bluetooth: hci6 command 0x1001 tx timeout [ 900.574069] Bluetooth: hci8 command 0x1001 tx timeout [ 900.579322] Bluetooth: hci6 sending frame failed (-49) [ 900.591603] Bluetooth: hci8 sending frame failed (-49) [ 901.294031] Bluetooth: hci9 command 0x1001 tx timeout [ 901.299331] Bluetooth: hci9 sending frame failed (-49) [ 902.574020] Bluetooth: hci0 command 0x1009 tx timeout [ 902.653955] Bluetooth: hci8 command 0x1009 tx timeout [ 902.659187] Bluetooth: hci6 command 0x1009 tx timeout [ 903.373861] Bluetooth: hci9 command 0x1009 tx timeout 14:32:08 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:32:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) 14:32:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6a000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = dup(r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4080c80}, 0x850) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 906.657090] Bluetooth: Unknown HCI packet type 5e [ 906.662123] Bluetooth: Unknown HCI packet type 43 [ 906.672140] Bluetooth: hci6: Frame reassembly failed (-84) [ 906.675866] Bluetooth: hci6: Frame reassembly failed (-84) [ 906.690635] Bluetooth: Unknown HCI packet type 5e [ 906.696281] Bluetooth: Unknown HCI packet type 5e [ 906.701768] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 906.708531] Bluetooth: Unknown HCI packet type 43 [ 906.714400] Bluetooth: Unknown HCI packet type 50 [ 906.720123] Bluetooth: Unknown HCI packet type 5e [ 906.725545] Bluetooth: Unknown HCI packet type 5e [ 906.730580] Bluetooth: Unknown HCI packet type 50 [ 906.736307] Bluetooth: Unknown HCI packet type 40 [ 906.741330] Bluetooth: Unknown HCI packet type 5e [ 906.750438] Bluetooth: Unknown HCI packet type 40 14:32:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$caif(r2, &(0x7f0000000080)=@dgm={0x25, 0x0, 0x2}, 0xfffffffffffffdc8) close(r0) [ 907.256577] Bluetooth: hci9: Frame reassembly failed (-84) 14:32:09 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @ipx={0x4, 0x8, 0x6, "c431b2ca33ee", 0x30}, @in={0x2, 0x4e21, @remote}, @nfc={0x27, 0x0, 0x2, 0x6}, 0xfc01, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000140)='vlan0\x00', 0x9, 0x7fff, 0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000100)={0x0, 0x7, 0xfffffffffffffff8}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x321040, 0x0) write$eventfd(r1, &(0x7f0000000240)=0x4, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269636765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c00000024000b0e0000fbb670a3cfab000000000000000000007f69ced72cf392f6a8f732c4d846ac35f73321ee0bf00af9d202264ac6ecc433ebf425c1b370b8a0820a59e28d67ca2421707c4d94af6ed47d7db2dac344f62051f35957d9fc9486223ff95dd036ca36d4ca450885b9a5b38dd57d4e282586e26bd6815adc22bd9b6f309777526ddcdbc04d0835539c1513d08ec2466f196f00ead49e", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100706c7567000000000c0002000100000009000000"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x2, @mcast1, @mcast2, 0x700, 0x8000, 0x3bc5080e, 0x401}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f4, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0xc) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380)="24f27be8254ca0c83b8a1b66eb61d7c756ab7c4c255c79931737ecbc79cc11fae410ba1c7335c132ee4c77ded3878619aed0806b9d0a0fe5a5e8960ac6f3d3b7c561e6b27d299c1e4ca9814544bbf77bb27bfa9ffe30bfeefd5d471dd1ec833be916ffa225948ebf398106d7aedd2017774961592217fd3d4157bd371ac5382c2d82247e292bff69cfd60d", &(0x7f0000000440)="361138d78b9b2b6c09213e28274099cb3fe9d62440de2c8f698697791d063f4126cf3ea7dc2b3125a9304b35e5a15f415181963d91111237bd06415a02005b60ae6edcc7588c7cc09bcf76492dda291318ddb5f333dae9e3d242faf804257b4e79217ee2d36ce763ed16d884f4f166e07a9ac869d7975e483105457922f5a4821668a77459a021c95718e98a4622ca30b45cc93336f37d6075df6ea20bd45cdbd4f6e3ba8514b4e053c5da3656de5a339c6eb0bd18ca66b488e97c1c00"/199}}, &(0x7f00009b1ffc)) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) accept4$packet(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x22, 0x0, @thr={&(0x7f00000001c0)="01a445693c43364904cff69b5eba06b516b9f112f5f68abf910bf85cc2372abad3ca7fb778b961406e9e4e4a0e8601a49070723001c3066b425e47076eea89fc777f2a05ead7f4c8b9b99e8eb171bff80261e5b4b6c6def7956146d9145abc7b6f2acbc6a2c328d4aab3cda1529a2cd628a02e101c31abcf31fa80f1fc556ae8e95a7e7b57f2ea5c0fdb01a407fd7066d01106bb98fa13ea440a028f5e01f996912f3ad17a2bd0e22703d9df517f6f3a32e643431f26d4b0751f742f723d05187d1b04bde59e014d96bce466cb08fa846a3baa15c08f72d7d8ad612c84ca89fa72b1387e84eb127d44ae1d9f619718b46c8b82ef", &(0x7f00000002c0)="e024cea2d423dc2e41d0fafc37af7aeb61f06405b9239bfb9e1a953304a3be490df7e1f00d12a81c60d72db72e544cb4c2d957442489455ca9e3fecae8864fc770b335d56082e5129dcffd79946e29ea46050d9e30dd922a682906f2b19d64f4fb07fadf6dcc584eea2a280a1600ebab8056d7c1c86f51ebce8ea7e8d107fc61e5300a613c7d19f3b953e83cfd86665f85f944135da6f088446438d4a0fa39f973bffdf1d929fceed7464bacce246f9172337610470980f69d18a897"}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x4101) ioctl$TIOCSCTTY(r5, 0x540e, 0x5) 14:32:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 907.472319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 907.493367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 907.511671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:32:09 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x353440, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x204c0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1018) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x2f}, 0x1) r3 = syz_open_pts(r1, 0x4800) ioctl$KDADDIO(r3, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:09 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/127, &(0x7f0000000080)=0x7f) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f00000001c0)) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) [ 908.663520] Bluetooth: hci0 command 0x1003 tx timeout [ 908.668923] Bluetooth: hci0 sending frame failed (-49) [ 908.733435] Bluetooth: hci6 command 0x1003 tx timeout [ 908.733530] Bluetooth: hci8 command 0x1003 tx timeout [ 908.738903] Bluetooth: hci6 sending frame failed (-49) [ 908.747930] Bluetooth: hci8 sending frame failed (-49) [ 909.293481] Bluetooth: hci9 command 0x1003 tx timeout [ 909.299136] Bluetooth: hci9 sending frame failed (-49) [ 910.743458] Bluetooth: hci0 command 0x1001 tx timeout [ 910.748790] Bluetooth: hci0 sending frame failed (-49) [ 910.813439] Bluetooth: hci6 command 0x1001 tx timeout [ 910.813478] Bluetooth: hci8 command 0x1001 tx timeout [ 910.818747] Bluetooth: hci6 sending frame failed (-49) [ 910.824280] Bluetooth: hci8 sending frame failed (-49) [ 911.373437] Bluetooth: hci9 command 0x1001 tx timeout [ 911.378803] Bluetooth: hci9 sending frame failed (-49) [ 912.813264] Bluetooth: hci0 command 0x1009 tx timeout [ 912.893264] Bluetooth: hci6 command 0x1009 tx timeout [ 912.893338] Bluetooth: hci8 command 0x1009 tx timeout [ 913.453157] Bluetooth: hci9 command 0x1009 tx timeout 14:32:19 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:32:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000500)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) 14:32:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008010) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 916.903783] Bluetooth: hci0: Frame reassembly failed (-84) [ 916.913501] Bluetooth: hci0: Frame reassembly failed (-84) [ 916.929332] Bluetooth: Unknown HCI packet type 5e [ 916.938072] Bluetooth: Unknown HCI packet type 43 [ 916.944735] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 916.960355] Bluetooth: Unknown HCI packet type 5e [ 916.970789] Bluetooth: Unknown HCI packet type 50 [ 916.977223] Bluetooth: Unknown HCI packet type 5e [ 916.983192] Bluetooth: Unknown HCI packet type 40 14:32:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x2) ioctl$KDADDIO(r1, 0x400455c8, 0x1) close(r0) 14:32:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x80100, 0x0) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) 14:32:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x9) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000000)={0x2, 0x5, [0x73f, 0x8, 0x3ff, 0x6, 0x3f]}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="4fec9af65f848965ca2962d86ceb6ea59668e893755cbf700f4c704c5d8c2089e96a3a6b63c969100734225124f7419a6b1bbfd9a1650df46c2046384c09c6685cd0284de8e89994009c1f61f0ea94e9d9") writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000600)="9ba4b51c250bb10000008054d37829d66366063866452085faca679cd8a0d688e0d2f373ebccf67f04bb58d1b4b7e052772e2df14f8e28c29c7f8e343aba527865843f8bc48ce7b42149b39479", 0x4d}, {&(0x7f00000005c0)="1dfa", 0x2}, {&(0x7f00000002c0)="f3f40650e7b9608c8f333525a0a340311a986d0e43f239460fa6f1f3860715dace77e94610d2da382ead0fd6f4fe9bde1651225d4689c6b9d0de4c3fad7fb20872dc409d3e40318a3bf77e137d081de3d8", 0x51}, {&(0x7f0000000540)="161672477b2573b4247a64d336d0889f70b4b7f1a6478019", 0x18}], 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_vlan\x00'}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000001900)={0x14, 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/dlm-monitor\x00', 0x149a00, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) sendmsg(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000340)="9894a641375327861430f47791ca3655f82931bd2a69177e64277e296397a598562037a8cc3d0e84ff973abe7389b022bcaa74b0082b9566c08c66883e6f20d463fec9cbc0226d7586805f441ccf6b4133a578c8c17b01839dde2a668e39edc79d8f0222a67472384bd7bb92a187558c468468adf31a0fc2f34e8b3c3781949c3f72db1a701d4cf337d96b861f4e7d229c5deb6f04243e6675e59626d03d0f45fb50e7736c1e76ead28757f71d94a21020f410f5eb834ccb491c798862f0eaad3cc94f7aa87072f2e91af5ea75eca0", 0xcf}, {&(0x7f0000000440)="44c512cb29687f221861881eac139e147d1f2da91d76b99e073229cd5973353ea2449a93f0b0b460c2e822463f8df21cfa570024e7415b1d6c400a1b808680e4c5946efa64f86d5cc054df2e075957355d1188ec611d5ceeae308ea2bc1d9772477b63204611fd5bbfa6d04dea88a32f2622ca37103166b45ab9910abb8495361a19ab4d8e1a70efe55b1a07fc7cab2bd6be93937e3049", 0x97}, {&(0x7f0000000500)="98e751a04518b2", 0x7}, {&(0x7f0000001540)="fdcb5fa683dd5c03298262de5cf333452ded0587a1e270d9fefd3f6b4366", 0x1e}, {&(0x7f0000001580)="c6c182b8772b50fa08204cd1226a1baba27afaeea1e46e9eb58319118197fae6e4422e6ac19c1a9c4986315e4dd57b3f1faa6fee37d2", 0x36}, {&(0x7f00000015c0)="5d7f910f85651cade12a1863cec073aaa005cf705051bd83fed0e789f134d8ccd12ae9e20113c05c9ad6a11d7f08de32b7c848c8f826bfeb89f7cc386cedb1f4258e5badd2e006904fc5ae9f", 0x4c}, {&(0x7f0000001640)="8e2a23029cb81c9cbbe35a5e23823a0dd21355841e8bf3cee05a06681ee207c8c5f047b4a8f9643c9f0d49ee82345aa9b1eef36ef282ae3aff177b40363bfcd95318", 0x42}], 0x7, &(0x7f0000001740)=[{0x108, 0x10f, 0x59, "a5dde80027aa12e357c803709f3e80a7c17dc07fb040a2fd629a64f7670d26e52dd78f651ec8abee796b0fdf5290ae61fb0937048927dabc4720c6d54796922ead9914929d6b9f4880a4607cdbd2353b44853bb8f60a3332bcfec00b49f1a7e2cdeede5267e43d326e35ac26b8660716bf389a012cd15954864cb038b14be20f078c74d3948eb7336995f6b8c70079d41cb99e550078fe92e3f2cdbeb22119ff26c7bd344b44f2090702802e28569bedbd7508041e44d2efab45af238c59d02c256ee81568e1851cdefcbbe6422f4dabe79175b2c7a869877f613892ec3c7bfd03928b4f3be915f0ffd03110c973e79ccee84b6e17"}], 0x108}, 0x800) r3 = signalfd(r1, &(0x7f0000000180)={[0x80]}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000001c0)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x0, @initdev}}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:32:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 917.599924] Bluetooth: hci8: Frame reassembly failed (-84) [ 918.972773] Bluetooth: hci6 command 0x1003 tx timeout [ 918.978006] Bluetooth: hci0 command 0x1003 tx timeout [ 918.978946] Bluetooth: hci6 sending frame failed (-49) [ 918.983533] Bluetooth: hci0 sending frame failed (-49) [ 919.622748] Bluetooth: hci8 command 0x1003 tx timeout [ 919.628094] Bluetooth: hci8 sending frame failed (-49) [ 920.422700] Bluetooth: hci9 command 0x1003 tx timeout [ 920.428070] Bluetooth: hci9 sending frame failed (-49) [ 921.052727] Bluetooth: hci6 command 0x1001 tx timeout [ 921.052757] Bluetooth: hci0 command 0x1001 tx timeout [ 921.058082] Bluetooth: hci6 sending frame failed (-49) [ 921.069879] Bluetooth: hci0 sending frame failed (-49) [ 921.692642] Bluetooth: hci8 command 0x1001 tx timeout [ 921.698091] Bluetooth: hci8 sending frame failed (-49) [ 922.492584] Bluetooth: hci9 command 0x1001 tx timeout [ 922.497915] Bluetooth: hci9 sending frame failed (-49) [ 923.132573] Bluetooth: hci0 command 0x1009 tx timeout [ 923.137849] Bluetooth: hci6 command 0x1009 tx timeout [ 923.772521] Bluetooth: hci8 command 0x1009 tx timeout [ 924.582487] Bluetooth: hci9 command 0x1009 tx timeout 14:32:29 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:32:29 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000000100)={0x59, 0x7d, 0x2, {0x0, 0x52, 0x8, 0xd1, {0x0, 0x1, 0x3}, 0x3000000, 0x9, 0x0, 0x5, 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00', 0x1, ']', 0xa, '/dev/ptmx\x00'}}, 0x59) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:32:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x128, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x988}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c0}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x600}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b37e65a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) eventfd(0x5) 14:32:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 927.118957] Bluetooth: Unknown HCI packet type 5e [ 927.124064] Bluetooth: Unknown HCI packet type 43 [ 927.136049] Bluetooth: hci6: Frame reassembly failed (-84) [ 927.136101] Bluetooth: hci6: Frame reassembly failed (-84) [ 927.148106] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 927.148249] Bluetooth: Unknown HCI packet type 5e 14:32:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 927.169804] Bluetooth: Unknown HCI packet type 50 [ 927.182943] Bluetooth: Unknown HCI packet type 5e [ 927.195160] Bluetooth: Unknown HCI packet type 40 14:32:29 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:32:29 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:32:29 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:32:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x1a, 0x1, 0xfe) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040420}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc8, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8a, 0xbe, "90f31cbc62b343e3624bfa4da830ccc82e2049b39f9371bb2d2b56980a621bff5d9df752608293683049e1814d3bf8c86f6da3e41a1bf4c7d6ef0a54cf767e5344ba221113eeee86a5cc53d3515744bcc15691f502ace0be6eaff53a4ca56b5b8ec337374720ddda86cd55b79d455963aed80c4d61e39bb8081843c4f95586f3e9950bee1cf0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x385}]}, 0xc8}}, 0x20040000) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x210, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 929.020891] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 929.027989] Bluetooth: Unknown HCI packet type 5e [ 929.034134] Bluetooth: Unknown HCI packet type 43 [ 929.041015] Bluetooth: Unknown HCI packet type 5e [ 929.048860] Bluetooth: Unknown HCI packet type 50 [ 929.057309] Bluetooth: Unknown HCI packet type 5e [ 929.068139] Bluetooth: Unknown HCI packet type 40 [ 929.132187] Bluetooth: hci0 command 0x1003 tx timeout [ 929.137687] Bluetooth: hci0 sending frame failed (-49) [ 929.222177] Bluetooth: hci6 command 0x1003 tx timeout [ 929.227538] Bluetooth: hci6 sending frame failed (-49) [ 931.052100] Bluetooth: hci8 command 0x1003 tx timeout [ 931.057572] Bluetooth: hci8 sending frame failed (-49) [ 931.212010] Bluetooth: hci0 command 0x1001 tx timeout [ 931.217423] Bluetooth: hci0 sending frame failed (-49) [ 931.291976] Bluetooth: hci6 command 0x1001 tx timeout [ 931.297446] Bluetooth: hci6 sending frame failed (-49) [ 933.131831] Bluetooth: hci8 command 0x1001 tx timeout [ 933.137157] Bluetooth: hci8 sending frame failed (-49) [ 933.291857] Bluetooth: hci0 command 0x1009 tx timeout [ 933.371820] Bluetooth: hci6 command 0x1009 tx timeout [ 935.211779] Bluetooth: hci8 command 0x1009 tx timeout 14:32:39 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:32:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) statx(r0, &(0x7f00000022c0)='./file0\x00', 0x400, 0x800, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ufs(&(0x7f0000002180)='ufs\x00', &(0x7f00000021c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002280)=[{&(0x7f0000002200)="0322afe1887a1f69b889e197a7c2dc406e9759e8f4f01eac7c833d98f9967d71ab0b297e07d979b7a68ef0f4745ba98a19f0e19bf113333422c4b4e58ab69bb64296d7ad64f32bf81a81ba4146", 0x4d, 0x6}], 0x3c200a, &(0x7f00000024c0)=ANY=[@ANYBLOB='/dev/ptmx\x00,hash,mask=^MAY_APPEND,euid<', @ANYRESDEC=r2, @ANYBLOB="2c6f626a5f726f6c653d2c636fad755655125f353b97afd94937f7b76e74657874", @ANYRESDEC=r3, @ANYBLOB=',smackfsdef=/dev/ubi_ctrl\x00,\x00']) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r4, &(0x7f0000002100)={0x60, 0xffffffffffffffda, r5, {{0x0, 0x2, 0x6, 0x5, 0x8, 0x3, 0x7, 0x101}}}, 0x60) close(r0) openat$mice(0xffffffffffffff9c, &(0x7f0000002400)='/dev/input/mice\x00', 0x40803) 14:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="e48fda3f158e44561f0ba2ba47caab20de6ae306d19173fc813426746c5d", @ANYRES16=r2, @ANYBLOB="20002bbd7000fedbdf25420000000c0099006a250000690000000a00060008021100000000000a000600584b6e757ad500000a000600b1bf72ee09b200000a000600d999f411e6f800000a0006005050505050500000"], 0x5c}}, 0x40004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80802, 0x60) 14:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 937.374423] Bluetooth: hci0: Frame reassembly failed (-84) [ 937.391719] Bluetooth: hci0: Frame reassembly failed (-84) 14:32:39 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001100)=""/4105) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000008c0), 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="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"], 0x160}}, 0x4000) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x62042, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000100)={0x8}, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)) 14:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x503001, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x5, 0xff, 0x1, 0x1000, 0xb, "532b39de0c377b62b7ce9954f7df2471b54325"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x1, 0x100, 0x200}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0xff, 0xffff3f23, 0xffffffc0, 0x6, 0x17, "ec5265fbcc76afdd8d6cd76ea9e8ab56c08955"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:32:39 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x103, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @private2, 0x3f, 0x1, 0x80, 0x500, 0xfff, 0x220001}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 937.483209] Bluetooth: Unknown HCI packet type 5e [ 937.485244] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 937.488185] Bluetooth: Unknown HCI packet type 43 [ 937.521360] Bluetooth: Unknown HCI packet type 5e [ 937.547406] Bluetooth: Unknown HCI packet type 50 [ 937.556260] Bluetooth: Unknown HCI packet type 5e [ 937.563856] Bluetooth: Unknown HCI packet type 40 14:32:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2c0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x800, 0x7f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 939.239590] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 939.246437] Bluetooth: Unknown HCI packet type 5e [ 939.254391] Bluetooth: Unknown HCI packet type 43 [ 939.259262] Bluetooth: Unknown HCI packet type 5e [ 939.269231] Bluetooth: Unknown HCI packet type 50 [ 939.277887] Bluetooth: Unknown HCI packet type 5e [ 939.283666] Bluetooth: Unknown HCI packet type 40 [ 939.451486] Bluetooth: hci0 command 0x1003 tx timeout [ 939.456979] Bluetooth: hci0 sending frame failed (-49) [ 939.531499] Bluetooth: hci9 command 0x1003 tx timeout [ 939.537112] Bluetooth: hci6 command 0x1003 tx timeout [ 939.537173] Bluetooth: hci9 sending frame failed (-49) [ 939.543661] Bluetooth: hci6 sending frame failed (-49) [ 941.291340] Bluetooth: hci8 command 0x1003 tx timeout [ 941.296679] Bluetooth: hci8 sending frame failed (-49) [ 941.531335] Bluetooth: hci0 command 0x1001 tx timeout [ 941.536873] Bluetooth: hci0 sending frame failed (-49) [ 941.611373] Bluetooth: hci6 command 0x1001 tx timeout [ 941.616691] Bluetooth: hci6 sending frame failed (-49) [ 941.622474] Bluetooth: hci9 command 0x1001 tx timeout [ 941.627736] Bluetooth: hci9 sending frame failed (-49) [ 943.371180] Bluetooth: hci8 command 0x1001 tx timeout [ 943.377038] Bluetooth: hci8 sending frame failed (-49) [ 943.611208] Bluetooth: hci0 command 0x1009 tx timeout [ 943.691220] Bluetooth: hci6 command 0x1009 tx timeout [ 943.701671] Bluetooth: hci9 command 0x1009 tx timeout [ 945.461041] Bluetooth: hci8 command 0x1009 tx timeout 14:32:49 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:32:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xffffffff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) sysfs$3(0x3) 14:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, [], 0x1}, 0x9, 0x0, 0x0, 0x9, 0x6, 0x8001}, 0x20) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x2b2240) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000140)=0x7) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) [ 947.604418] Bluetooth: hci0: Frame reassembly failed (-84) [ 947.604429] Bluetooth: hci0: Frame reassembly failed (-84) [ 947.627818] Bluetooth: Unknown HCI packet type 5e [ 947.632870] Bluetooth: Unknown HCI packet type 43 [ 947.637801] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 947.648154] Bluetooth: Unknown HCI packet type 5e 14:32:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 947.656346] Bluetooth: hci9: Frame reassembly failed (-84) [ 947.662247] Bluetooth: Unknown HCI packet type 50 [ 947.678750] Bluetooth: Unknown HCI packet type 5e [ 947.693340] Bluetooth: Unknown HCI packet type 40 14:32:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:32:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x1742031) [ 949.477704] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 949.483692] Bluetooth: Unknown HCI packet type 5e [ 949.488720] Bluetooth: Unknown HCI packet type 43 [ 949.499197] Bluetooth: Unknown HCI packet type 5e [ 949.504461] Bluetooth: Unknown HCI packet type 50 [ 949.509393] Bluetooth: Unknown HCI packet type 5e [ 949.514919] Bluetooth: Unknown HCI packet type 40 [ 949.610730] Bluetooth: hci0 command 0x1003 tx timeout [ 949.616207] Bluetooth: hci0 sending frame failed (-49) [ 949.690866] Bluetooth: hci9 command 0x1003 tx timeout [ 949.696264] Bluetooth: hci6 command 0x1003 tx timeout [ 949.696310] Bluetooth: hci9 sending frame failed (-49) [ 949.706467] Bluetooth: hci6 sending frame failed (-49) [ 951.540672] Bluetooth: hci8 command 0x1003 tx timeout [ 951.545987] Bluetooth: hci8 sending frame failed (-49) [ 951.690632] Bluetooth: hci0 command 0x1001 tx timeout [ 951.696010] Bluetooth: hci0 sending frame failed (-49) [ 951.770587] Bluetooth: hci9 command 0x1001 tx timeout [ 951.770762] Bluetooth: hci6 command 0x1001 tx timeout [ 951.781177] Bluetooth: hci9 sending frame failed (-49) [ 951.786563] Bluetooth: hci6 sending frame failed (-49) [ 953.610482] Bluetooth: hci8 command 0x1001 tx timeout [ 953.615798] Bluetooth: hci8 sending frame failed (-49) [ 953.780519] Bluetooth: hci0 command 0x1009 tx timeout [ 953.850477] Bluetooth: hci6 command 0x1009 tx timeout [ 953.860839] Bluetooth: hci9 command 0x1009 tx timeout [ 955.690394] Bluetooth: hci8 command 0x1009 tx timeout 14:33:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:33:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x5, 0x1, 0x9, 0x7, 0x16, "8b60f71bcb637f93"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000303050000000000000000000000000208000327d28b7b70d4b37400fffffffc0000006f"], 0x28}, 0x1, 0x0, 0x0, 0xb050e2f4ced9b705}, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:00 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x5}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x0) close(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10c04a00}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20048040) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:33:00 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x44}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x10000) ioctl$KDADDIO(r0, 0x400455c8, 0x100) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0)=0x3, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xe) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000240)={0x7, @output={0x1000, 0x0, {0x2, 0x3}, 0xffffff01, 0x1}}) [ 957.873953] Bluetooth: hci0: Frame reassembly failed (-84) [ 957.873968] Bluetooth: hci0: Frame reassembly failed (-84) [ 957.904314] Bluetooth: hci6: Frame reassembly failed (-84) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:33:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x202000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 959.940135] Bluetooth: hci6 command 0x1003 tx timeout [ 959.945543] Bluetooth: hci6 sending frame failed (-49) [ 959.951130] Bluetooth: hci0 command 0x1003 tx timeout [ 959.956388] Bluetooth: hci0 sending frame failed (-49) [ 960.730028] Bluetooth: hci9 command 0x1003 tx timeout [ 960.735335] Bluetooth: hci9 sending frame failed (-49) [ 962.009963] Bluetooth: hci0 command 0x1001 tx timeout [ 962.015208] Bluetooth: hci6 command 0x1001 tx timeout [ 962.015257] Bluetooth: hci0 sending frame failed (-49) [ 962.021629] Bluetooth: hci6 sending frame failed (-49) [ 962.809929] Bluetooth: hci9 command 0x1001 tx timeout [ 962.815323] Bluetooth: hci9 sending frame failed (-49) [ 964.089792] Bluetooth: hci0 command 0x1009 tx timeout [ 964.089795] Bluetooth: hci6 command 0x1009 tx timeout [ 964.899837] Bluetooth: hci9 command 0x1009 tx timeout 14:33:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x204400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) creat(&(0x7f0000000140)='./file0\x00', 0x11) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r5, 0x3}, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x50000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)) [ 968.074472] Bluetooth: Unknown HCI packet type 5e [ 968.074579] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 968.080907] Bluetooth: Unknown HCI packet type 43 [ 968.094474] Bluetooth: hci6: Frame reassembly failed (-84) [ 968.104996] Bluetooth: hci6: Frame reassembly failed (-84) [ 968.112885] Bluetooth: hci6: Frame reassembly failed (-84) [ 968.131727] Bluetooth: Unknown HCI packet type 5e [ 968.156412] Bluetooth: Unknown HCI packet type 50 [ 968.174200] Bluetooth: Unknown HCI packet type 5e [ 968.179127] Bluetooth: Unknown HCI packet type 40 14:33:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xd}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd1}, 0x20004080) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = dup3(r0, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, 0x40, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000580)={0x400, 0x7fffffff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="4765b1d569f766ef910f256fce3bfe06551efc470e45e2d5f8c9b8077025704e4546bbb5382fd67b00dc7d5de30537611197187fb57239bdf6c61b4322961fc0ef7de5bcc5b95747bf21f04aad6ccea678813d8bb77c4d1880f55289c23177166d6bd6f11806af485a12ec661b82e32462331c29fa5efc5f25c414bd41eb7ac72a5a5ba3f501b66b29ca", 0x8a, 0x7}, {&(0x7f0000000240)="15084a3544774bbe7277edd83751884e5994f9b993b915f3", 0x18, 0x3}, {&(0x7f0000000280)="33df5b6e782fd60886aef4fd3eaa6249acbaadbcadad17699846eb4f82ed3ee3cfa3672a298926a653ef578b40062c64abfeb0fda8140ee95dfb2a42ae9ffab09b621ad38f3c1be2e82bd382411d90357bd38ee94ca261e5c14a0d5f25b0cb8090a361b58dfbab0cfaf6bebbf3a7e87b15294a2f5e5269b2aea73baa6b616149b18d47ab0db0ea5e796b188f03dbb09f84e274202fe21c4da411599e5acab3792278b9acfc978128b42ca258cef4f1b3a72d32f8ee7cbc4e6f1344dfbeaf7721ef5738e599fdba6914f1749525b4bf829e1dbad61c5b9402ded66a5e479619c2f53100e2a863cdb4b401b284a1569d", 0xef, 0xc47}, {&(0x7f0000000380)="4416866de65294c509e2c8141cda1a8817308e0d0988ccc9da16afc3da8a82e165d2e1bad25eb85e20f4f54103f85db27153625dc0f32f6f16da42e6328ae714", 0x40, 0x8}], 0x0, &(0x7f0000000640)={[{@decompose='decompose'}, {@gid={'gid', 0x3d, r2}}, {@part={'part', 0x3d, 0x6}}, {@uid={'uid', 0x3d, r3}}], [{@permit_directio='permit_directio'}, {@fowner_gt={'fowner>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#^^\''}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r5}}]}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x28e800, 0x0) dup2(r1, r6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:11 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e21, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0xe0, 0x4, 0x0, 0xee01}, {0x101, 0x3, 0x8000, 0x80000000, 0x8, 0x0, 0x81, 0x7f}, {0x3, 0x20, 0x400, 0x7}, 0x100, 0x6e6bbd, 0x2, 0x0, 0x2, 0x1}, {{@in6=@private0, 0x4d2, 0x33}, 0xa, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x4, 0x3, 0x81, 0x6, 0x6, 0x1}}, 0xe8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x8029, 0x3}) ioctl$KDADDIO(r1, 0x400455c8, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x3, @local, 0x7ff}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000002c0)="75e4b3128a09d59c74fa46d7a141996626bef61f9f93a5e7", 0x18}], 0x1, 0x0, 0x0, 0x24008001}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, &(0x7f0000000100)={"5768b4d9b81fd21606e2f2f71e5c02d3a45ce4ff5a49d50a12749a6d918f", 0x81, 0x7ff800, 0x200, [0x8001, 0x6, 0x6, 0x8, 0x5, 0xe6ae, 0x20, 0x31a, 0x3b76, 0x4, 0x6, 0x3, 0x3f, 0x4, 0x1ff, 0x5, 0x0, 0x5]}) close(r1) [ 969.373859] Bluetooth: Unknown HCI packet type 5e [ 969.378743] Bluetooth: Unknown HCI packet type 43 [ 969.386045] hfsplus: unable to parse mount options [ 969.387032] Bluetooth: Unknown HCI packet type 5e [ 969.397958] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 969.417767] Bluetooth: Unknown HCI packet type 43 [ 969.420463] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 969.427380] Bluetooth: Unknown HCI packet type 5e [ 969.442804] print_req_error: I/O error, dev loop3, sector 0 [ 969.444055] Bluetooth: Unknown HCI packet type 5e [ 969.459200] Bluetooth: hci10: Frame reassembly failed (-84) 14:33:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x18) [ 969.475534] Bluetooth: Unknown HCI packet type 50 [ 969.486672] Bluetooth: Unknown HCI packet type 5e [ 969.493161] Bluetooth: Unknown HCI packet type 50 [ 969.504920] Bluetooth: Unknown HCI packet type 40 14:33:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) [ 969.523419] Bluetooth: Unknown HCI packet type 5e [ 969.528657] Bluetooth: Unknown HCI packet type 40 14:33:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) [ 970.099389] Bluetooth: hci0 command 0x1003 tx timeout [ 970.104693] Bluetooth: hci0 sending frame failed (-49) [ 970.169413] Bluetooth: hci6 command 0x1003 tx timeout [ 970.174779] Bluetooth: hci6 sending frame failed (-49) 14:33:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) clone(0x200, &(0x7f0000000500)="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", &(0x7f00000002c0), &(0x7f0000000080), &(0x7f0000000380)="a4036a77e4fd69d2e217b09d619f2991e8fff8b8e9eac2b0af70ac4c165a120f6d459d0d1cd1a4af8ba53d374a15c9b342a7b60365110b983834aecee813532df32d0bc73ccc7c78549032a7ecc18615a9ead1d8c04bb52b19c40a3c5772dd8a9d9f13d58d2367251001b47ae7b4ff850be1d551b5a9f76a43af9fb0b0e05b") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r2 = dup(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='dctcp-reno\x00', 0xb) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000340)) [ 971.459343] Bluetooth: hci9 command 0x1003 tx timeout [ 971.464649] Bluetooth: hci8 command 0x1003 tx timeout [ 971.464707] Bluetooth: hci9 sending frame failed (-49) [ 971.471648] Bluetooth: hci8 sending frame failed (-49) [ 971.529314] Bluetooth: hci10 command 0x1003 tx timeout [ 971.534758] Bluetooth: hci10 sending frame failed (-49) [ 972.179267] Bluetooth: hci0 command 0x1001 tx timeout [ 972.184607] Bluetooth: hci0 sending frame failed (-49) [ 972.249319] Bluetooth: hci6 command 0x1001 tx timeout [ 972.254632] Bluetooth: hci6 sending frame failed (-49) [ 973.529171] Bluetooth: hci8 command 0x1001 tx timeout [ 973.530826] Bluetooth: hci9 command 0x1001 tx timeout [ 973.539714] Bluetooth: hci8 sending frame failed (-49) [ 973.555262] Bluetooth: hci9 sending frame failed (-49) [ 973.609141] Bluetooth: hci10 command 0x1001 tx timeout [ 973.614515] Bluetooth: hci10 sending frame failed (-49) [ 974.249139] Bluetooth: hci0 command 0x1009 tx timeout [ 974.329117] Bluetooth: hci6 command 0x1009 tx timeout [ 975.609057] Bluetooth: hci9 command 0x1009 tx timeout [ 975.614399] Bluetooth: hci8 command 0x1009 tx timeout [ 975.699045] Bluetooth: hci10 command 0x1009 tx timeout 14:33:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1c4f65781ae47dd6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x8000, 0x0, 0x4ff8, 0x8}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x64c080, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20800, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x140, 0x1) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x3, 0x4, 0xffff, 0x3f, 0x7fc}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 978.319809] Bluetooth: hci0: Frame reassembly failed (-84) [ 978.320275] Bluetooth: hci0: Frame reassembly failed (-84) 14:33:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) 14:33:21 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) unshare(0x40000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 14:33:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xa) 14:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) 14:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 979.617992] Bluetooth: Unknown HCI packet type 5e [ 979.618276] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 979.623006] Bluetooth: Unknown HCI packet type 43 [ 979.691936] Bluetooth: Unknown HCI packet type 5e 14:33:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x2, 0x4) 14:33:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write$P9_RLCREATE(r4, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x1, 0x0, 0x2}, 0xdad}}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000080)=0x10) [ 979.716608] Bluetooth: Unknown HCI packet type 50 [ 979.756120] IPVS: ftp: loaded support on port[0] = 21 [ 979.763800] Bluetooth: Unknown HCI packet type 5e [ 979.787691] Bluetooth: Unknown HCI packet type 40 [ 980.329475] Bluetooth: hci0 command 0x1003 tx timeout [ 980.334775] Bluetooth: hci0 sending frame failed (-49) [ 980.861096] IPVS: ftp: loaded support on port[0] = 21 [ 981.688671] Bluetooth: hci6 command 0x1003 tx timeout [ 981.693969] Bluetooth: hci6 sending frame failed (-49) [ 982.408730] Bluetooth: hci0 command 0x1001 tx timeout [ 982.414026] Bluetooth: hci0 sending frame failed (-49) [ 983.778634] Bluetooth: hci6 command 0x1001 tx timeout [ 983.784033] Bluetooth: hci6 sending frame failed (-49) [ 984.488503] Bluetooth: hci0 command 0x1009 tx timeout [ 985.848463] Bluetooth: hci6 command 0x1009 tx timeout 14:33:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:33:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) io_setup(0x200, &(0x7f0000000100)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) io_submit(r1, 0x1, &(0x7f0000001500)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)="d1", 0x1}]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000001300)={0x4, 0x9, 0xe3}) r5 = openat(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', 0x200000, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) io_submit(r1, 0x3, &(0x7f00000012c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0xffe1, r3, &(0x7f0000000100)="1b66b561df611d881ec738daedbedf7b1fb6aa3d7b18d05430101d8115a21dfa36b95a08764130a170f60979344aafe216f2eec91b184981676f875c998c24abc6dd41006cd25b453f096c77714d3486e65e210a3e88d14f132ad636ef5b06e49ec1284da90683f4ba4b73d55639406cf7b0156efb09710331b067e859462301cd9ed20ba5fa1ad5c35bedf7209f07982c724e91b068d9eba4f30d5140e8c5c356711fde82", 0xa5, 0x5}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x3f, r4, &(0x7f00000001c0)="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", 0x1000, 0xffff, 0x0, 0x1, r5}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x6, 0x7, r6, &(0x7f0000001240)="e930fc3064b7", 0x6, 0xd47}]) 14:33:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff7, 0x3}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 988.554796] Bluetooth: hci0: Frame reassembly failed (-84) [ 988.563509] Bluetooth: hci8: Frame reassembly failed (-84) [ 988.570517] Bluetooth: hci8: Frame reassembly failed (-84) [ 989.326309] Bluetooth: hci9 sending frame failed (-49) 14:33:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xb86) 14:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:33:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000091c0)={r1, 0x10, &(0x7f0000009180)={&(0x7f00000090c0)=""/134, 0x86, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000009200)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffc00}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000009040)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000009080)={0x1, 0xc, 0x0, 0x4}, 0x10, r3}, 0x78) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4a}, @generic={0x7, 0x1, 0x2, 0x3, 0x4}, @map={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x8504, 0xc8, &(0x7f0000000140)=""/200, 0x40f00, 0x2, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x9, 0x1ff}, 0x10, r3, r4}, 0x78) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 989.808264] Bluetooth: hci6 sending frame failed (-49) [ 989.808691] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(r0) 14:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 14:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) [ 990.568058] Bluetooth: hci8 command 0x1003 tx timeout [ 990.573371] Bluetooth: hci0 command 0x1003 tx timeout [ 990.573400] Bluetooth: hci8 sending frame failed (-49) [ 990.578741] Bluetooth: hci0 sending frame failed (-49) [ 991.368014] Bluetooth: hci9 command 0x1003 tx timeout [ 991.373358] Bluetooth: hci9 sending frame failed (-49) [ 991.857975] Bluetooth: hci6 command 0x1003 tx timeout [ 991.863343] Bluetooth: hci6 sending frame failed (-49) [ 992.647918] Bluetooth: hci0 command 0x1001 tx timeout [ 992.647929] Bluetooth: hci8 command 0x1001 tx timeout [ 992.653211] Bluetooth: hci0 sending frame failed (-49) [ 992.663260] Bluetooth: hci8 sending frame failed (-49) [ 993.447902] Bluetooth: hci9 command 0x1001 tx timeout [ 993.453221] Bluetooth: hci9 sending frame failed (-49) [ 993.927965] Bluetooth: hci6 command 0x1001 tx timeout [ 993.933297] Bluetooth: hci6 sending frame failed (-49) [ 994.727798] Bluetooth: hci0 command 0x1009 tx timeout [ 994.727802] Bluetooth: hci8 command 0x1009 tx timeout [ 995.537838] Bluetooth: hci9 command 0x1009 tx timeout [ 996.007726] Bluetooth: hci6 command 0x1009 tx timeout 14:33:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) [ 998.791585] Bluetooth: hci0: Frame reassembly failed (-84) [ 998.797313] Bluetooth: hci0: Frame reassembly failed (-84) 14:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 14:33:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000100)={0x2d6, {{0xa, 0x4e23, 0x4, @ipv4={[], [], @loopback}, 0x8a09}}, 0x1, 0x5, [{{0xa, 0x4e23, 0x7aa, @local, 0x7ff}}, {{0xa, 0x4e21, 0x7, @ipv4={[], [], @private=0xa010102}, 0x7}}, {{0xa, 0x4e22, 0x1, @local, 0x21}}, {{0xa, 0x4e22, 0x101, @mcast2, 0x1f}}, {{0xa, 0x4e20, 0x3ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}]}, 0x310) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 999.501225] Bluetooth: Unknown HCI packet type 5e [ 999.501953] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 999.506180] Bluetooth: Unknown HCI packet type 43 [ 999.523783] Bluetooth: hci9: Frame reassembly failed (-84) [ 999.535237] Bluetooth: Unknown HCI packet type 5e [ 999.554263] Bluetooth: Unknown HCI packet type 50 [ 999.564448] Bluetooth: Unknown HCI packet type 5e [ 999.590607] Bluetooth: Unknown HCI packet type 40 14:33:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800004) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:42 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) 14:33:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x30801, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000001c0)=0xc) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x8) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x2d, 'cpu'}]}, 0x1f) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x2100, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xb6}, &(0x7f00000002c0)=0x8) listen(r1, 0x81) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x5, 0xffffffffffff8000, 0x5, 0x0, 0x7}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:33:42 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) 14:33:42 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x5ba0, @mcast2, 0x4}, @in6={0xa, 0x4e23, 0xf549, @empty, 0xd4}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000440)=0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000480)=0x22) r7 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r8) splice(r3, 0x0, r7, 0x0, 0x4ffe6, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60e700fa", @ANYRESHEX, @ANYBLOB="10002bbd7000fbdbdf250400000008000800e00000020800040001000000080004000000000008000c000200000008000800e00000011400050000000000000000000000ffffe000000106000b002700000008000400ffffffff0800070064010101"], 0x68}, 0x1, 0x0, 0x0, 0x10010}, 0x20008001) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0xfffffff9, 0xfff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:33:42 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) 14:33:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(r0) [ 1000.168580] Bluetooth: Unknown HCI packet type 5e [ 1000.168806] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1000.176825] Bluetooth: Unknown HCI packet type 43 [ 1000.184617] Bluetooth: Unknown HCI packet type 5e [ 1000.195076] Bluetooth: Unknown HCI packet type 50 [ 1000.200378] Bluetooth: Unknown HCI packet type 5e [ 1000.205361] Bluetooth: Unknown HCI packet type 40 [ 1000.807427] Bluetooth: hci0 command 0x1003 tx timeout [ 1000.812756] Bluetooth: hci0 sending frame failed (-49) [ 1001.527385] Bluetooth: hci9 command 0x1003 tx timeout [ 1001.533419] Bluetooth: hci9 sending frame failed (-49) [ 1001.539637] Bluetooth: hci8 command 0x1003 tx timeout [ 1001.544910] Bluetooth: hci8 sending frame failed (-49) [ 1002.257278] Bluetooth: hci6 command 0x1003 tx timeout [ 1002.262606] Bluetooth: hci6 sending frame failed (-49) [ 1002.327392] Bluetooth: hci10 command 0x1003 tx timeout [ 1002.332849] Bluetooth: hci10 sending frame failed (-49) [ 1002.887305] Bluetooth: hci0 command 0x1001 tx timeout [ 1002.892582] Bluetooth: hci0 sending frame failed (-49) [ 1003.607289] Bluetooth: hci8 command 0x1001 tx timeout [ 1003.607292] Bluetooth: hci9 command 0x1001 tx timeout [ 1003.607379] Bluetooth: hci9 sending frame failed (-49) [ 1003.612570] Bluetooth: hci8 sending frame failed (-49) [ 1004.327239] Bluetooth: hci6 command 0x1001 tx timeout [ 1004.332559] Bluetooth: hci6 sending frame failed (-49) [ 1004.407264] Bluetooth: hci10 command 0x1001 tx timeout [ 1004.412654] Bluetooth: hci10 sending frame failed (-49) [ 1004.967169] Bluetooth: hci0 command 0x1009 tx timeout [ 1005.687079] Bluetooth: hci8 command 0x1009 tx timeout [ 1005.687090] Bluetooth: hci9 command 0x1009 tx timeout [ 1006.407042] Bluetooth: hci6 command 0x1009 tx timeout [ 1006.487016] Bluetooth: hci10 command 0x1009 tx timeout 14:33:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:33:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(r0) [ 1009.001653] Bluetooth: hci0: Frame reassembly failed (-84) [ 1009.012624] Bluetooth: hci0: Frame reassembly failed (-84) 14:33:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x32042, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 14:33:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r0, 0x7fff, 0x3f, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101040, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/102) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180)=0xcb5, 0x4) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="ca05833ecea54217e05c6e93e3a5485ae962597aba70b141192532953e17b68bb698674fd4ebdfde0f146bbaf232f4075c33e6747925173cf104e5a8f157559643fcba3fa9440f10f8de728609dce656df383fdc19266125c0f4746d209039adadff6724b4013b59f44543508388a02f9a664aafb7fc5e3b413609df7125187414", 0x81, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x109, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000980)={r3, r4, r3}, 0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={'crc32\x00'}}) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/38, 0x26) 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(r0) 14:33:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x10000, 0x0) syz_open_pts(r1, 0x85e097e7ad54d4c9) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf3ff, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10c00440}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x10, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8830}, 0x40000c0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:33:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) sendto$inet6(r1, &(0x7f0000001780)="92d9e2fc0ea4641a5c561cb08df8627624aa3d05346dede09c1f7ab72967056374331cd2388723990123124fee4efae84f84dd7901ce7b48713e64332437c16570b3084cb3bf80a6f7d2e27ac278aca16356cd876b5a71e4ce0b931115c8c910113fcc6535736a0fddfd1bc6f59abb2c78788aa863dc086b884a81752901d5fb95f67e0a118c596cf91fc2c3", 0x8c, 0x800, &(0x7f00000015c0)={0xa, 0x4e22, 0x5, @local, 0x1}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pipe(&(0x7f0000003d80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000003cc0)=ANY=[@ANYBLOB="523dec6a4ff948f1d85e937c577d154b5ee9a1cc45ef99d3584f4bfe8d9571c0621925385103c347e3a9f02ccd811abb0286f6807f0754a068fc163fcddfadfb3b7cf2ff1d549eadc998ed35f64d2e7aaf7928a396244c7cf672e80224b7fe7fdc1e227da8eafc84a69e340e18ecdcd7e9199a711c716194042648d78c", @ANYRES32=r0, @ANYRESDEC=r4, @ANYRES32=r4], 0xfffffecc) r6 = syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000001500)='./file0\x00', 0x3, 0x4, &(0x7f0000002bc0)=[{&(0x7f0000001940)="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", 0x1000, 0x81f}, {&(0x7f0000002940)="5e783c376d5ca9461f014661ec8944f5bd73a6232c21ce420de9de7d24de0f6bb420465e19d8a6a1af2050f1cea67649b8a37b694fb47eea7f4aab3de74ec373dcfec26beb1dc1171f8513c32fc9f70363b7cc02ade81f11aebdbfe2b7c7258f980724947854efec8e51e17f59e642181c8998cac4c46c414b4f1b9f792d9ea97f3e584a9942759026d08aaa5150823ab4862edbe2b71ffea0807ef9295904dbbee8bf5aa0eb22a2a64dd306c351d7f41808948869baea450e5d7470cea6e4942854e990f98fddb9828a42419f536e3ac8641dabdb75078d23ec7505", 0xdc, 0x2}, {&(0x7f0000002a40)="b26c73cd96a51956f602924cc9da0b5e788aff587324a783230811fa2e5d6ea481c10c31d47b1eb2577f4537ca362c3dd7eca38c5c2eac8d387f5b1ce7f4968eb07c79b0833731d372", 0x49, 0xffffffffffffffc1}, {&(0x7f0000002ac0)="3c821e8c0f85e5b792be808888798ff7f4d16a7ad628663995b6d24de1feda691ffd3e8a316ea5e2962c2360da44877ff72ac403fe55b7d41b16d4b4bc0d43c94b3ca248d8b944be86cd97b71aab6b88d85d470c45d637c2fdb3b36222984f7b18e84f106c01bed7226a031e3715d9698ea4ee8093da5f2f691a13982b99ecc1d72c70be93830de02b674093ceb8eb3ccafc4249279ea6451a950004b2bb17054befd86fd4e7cec80fc1b4ce0d74ae82ad5b299ccd267a2b96b7a9a17553ab3c06ad67752eae455f86a53410837a0c081f1c3b", 0xd3, 0x20}], 0x1043070, &(0x7f0000003c80)={[{@dots='dots'}, {@nodots='nodots'}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'dots'}}, {@audit='audit'}]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002c80)={{r6}, 0x0, 0x2, @unused=[0x0, 0x8, 0x3f, 0x5], @devid}) sendmmsg$unix(r3, &(0x7f00000016c0)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="d69b4ea0df42c947bd600e055d9836c93e146367328185a6eaf7dfa649b24970f5f35f3f4cfda2fd7a362133433a3c3494d683045ad30b3d48891ef6970907f29eee4fbf4d4d271cc33744b4f82b9738213378e484a6fa1d36511dd0121a68d8b2856eb1a2ba3102777a101e086204", 0x6f}], 0x1, 0x0, 0x0, 0x1}, {&(0x7f00000018c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000300)="ac2e902721f3f4673ec72f5edafc7c73ba96255274f4ad6f5f46f92dad8c9dc8db941523adbd51a510b466f4d86ee107a4263563d34fdf4f5381a5ca9a8596291c9d7aaf06ddb07f26f5904524b9de939492240554086aa26c138488ece3622c249dc2dd5124be63aedf773ac611d114fc451c6783b9552514140b10342285bf6b196f9d5df2de7c441db1a09b7e9b4a03021d8618b63975f71f8df688e21a9836bb441101d96e8a059210136dd1561068ab291cad6a9e2e6fe319e4a3c55453e8e2635b96b045c2dba8", 0xca}, {&(0x7f0000000400)="86772376b718c7657b396694a261b3f3a308ea7d5d50076ea58c6322c719a1f13027d254419953ab43199c398ef5fd4aa7f3c20d59b6f98478bfeeec04087f127b9b80ca820067db3af7e74ddaef99396b65c9b854e4d6b77e96ebc024bef62ff866cdf6ba8479716113ea7cce85895aa6a97c4a1873f7", 0x77}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="a2d10ca4393dc6e24dcf368729ce112ad5f38cd7b54971752856bedb840e521d7557219de294185024f3392672853d3e5351298d2b44de8eef416f3f2b96208eca6859d2", 0x44}], 0x4, 0x0, 0x0, 0x4000}, {&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000018c0)}, {&(0x7f0000001600)='b', 0x1}, {&(0x7f0000001640)="347d2fd4217c0bc2720900b921a0e9b882612e485f57fa75", 0x18}], 0x7, 0x0, 0x0, 0x4080}], 0x3, 0x8019) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001840)='/dev/adsp1\x00', 0x40800, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000080)) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001880)=0x1) 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(r0) [ 1010.960573] Bluetooth: Unknown HCI packet type 5e [ 1010.966405] Bluetooth: Unknown HCI packet type 43 [ 1010.974937] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1010.981271] Bluetooth: hci9: Frame reassembly failed (-84) [ 1010.992537] Bluetooth: Unknown HCI packet type 5e [ 1010.993133] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1011.001075] Bluetooth: Unknown HCI packet type 43 [ 1011.013374] Bluetooth: Unknown HCI packet type 5e [ 1011.020228] Bluetooth: Unknown HCI packet type 50 [ 1011.046158] Bluetooth: Unknown HCI packet type 5e [ 1011.046732] Bluetooth: hci0 command 0x1003 tx timeout [ 1011.054021] Bluetooth: Unknown HCI packet type 5e [ 1011.060884] Bluetooth: hci0 sending frame failed (-49) [ 1011.074092] Bluetooth: Unknown HCI packet type 50 [ 1011.083738] Bluetooth: Unknown HCI packet type 40 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(r0) 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) close(r0) [ 1011.104116] Bluetooth: Unknown HCI packet type 5e [ 1011.123952] Bluetooth: Unknown HCI packet type 40 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(r0) 14:33:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(r0) [ 1012.976660] Bluetooth: hci6 command 0x1003 tx timeout [ 1012.976793] Bluetooth: hci6 sending frame failed (-49) [ 1013.046602] Bluetooth: hci8 command 0x1003 tx timeout [ 1013.051863] Bluetooth: hci9 command 0x1003 tx timeout [ 1013.051927] Bluetooth: hci8 sending frame failed (-49) [ 1013.058822] Bluetooth: hci9 sending frame failed (-49) [ 1013.126576] Bluetooth: hci0 command 0x1001 tx timeout [ 1013.131959] Bluetooth: hci0 sending frame failed (-49) [ 1015.046360] Bluetooth: hci6 command 0x1001 tx timeout [ 1015.051795] Bluetooth: hci6 sending frame failed (-49) [ 1015.126359] Bluetooth: hci8 command 0x1001 tx timeout [ 1015.131662] Bluetooth: hci8 sending frame failed (-49) [ 1015.138348] Bluetooth: hci9 command 0x1001 tx timeout [ 1015.143597] Bluetooth: hci9 sending frame failed (-49) [ 1015.206320] Bluetooth: hci0 command 0x1009 tx timeout [ 1017.126151] Bluetooth: hci6 command 0x1009 tx timeout [ 1017.206101] Bluetooth: hci9 command 0x1009 tx timeout [ 1017.206104] Bluetooth: hci8 command 0x1009 tx timeout 14:34:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:34:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) close(r0) [ 1019.269573] Bluetooth: hci0: Frame reassembly failed (-84) [ 1019.275987] Bluetooth: hci0: Frame reassembly failed (-84) 14:34:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSKBLED(r3, 0x4b65, 0x100000000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000400)=[0x4, 0x400, 0x6, 0x9, 0x8, 0x1f, 0x3, 0x5], 0x8, 0x3, 0x0, 0x7ff, 0x27c0, 0x80, 0xfffffff7, {0x7, 0x8, 0xd54d, 0xff, 0x1, 0x3, 0xd59, 0x3, 0x0, 0x1, 0x3, 0xfffd, 0x1, 0x5, "02614989f51a1b85b0a259122d5ff6c6f60aadcdcc4d6a849f5ed34124e6fd27"}}) 14:34:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) close(r0) 14:34:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2880c0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x125300, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/255) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="020004ac", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={r5, 0x7fff, 0xe3cc}, 0x8) 14:34:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7) 14:34:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x100000000000401) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:34:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) close(r0) 14:34:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0xc0db3d286f012620, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x10940, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000180)={{0x1, 0x0, 0x80, {0x1, 0x10d004, 0x1}}, "b40c7bdb831bb97a78836c3ded19c1337f342ce7f7e094b48cad38f38e4750d2c6baa0b40571dfaa74cdd8b3cb0e749bb01087979fa49451bcc7ef17ae58929b65f61216e806876d407df417db05a22108f62c1fe2a4a5dfbcb16f0110eaab6a36af0cdacbe0908fdd0b09dc677e96ec83fdcaa8077dde423bc0b6f4dee7af3998e435264d79195d8a4ae4e81dc12a8beddc1ae55747e744a500ced2f242c8d8a496aea81e672e6140520540ca632f7ac3e7e19d446ed3cb3e6293c485e0f5844b05afdc5c33ac8157d112972157f21ca66e960280c03701a4f7d96750a6326052d74696e3a9efe2957c4228fa7723d654fdd0b8514f669f3a05b7333aa4fdbfd39ef6a070677a3b46ed086f9dc9be2b2db23a9c30b74031f9d08e2a2d3df7ccf59777be577465c7b73f69919fca2aa4a042f4e59e4aaa3c82a0212b5e4155614fe63df15212b7d2e5e0be2af997c32a6792060408fec9eb3c04956b5d9c1f1c9771ea1ab80db864d4043b6f2b05d9103aa7cefd16cb99716ab1cf25c2200c74386b648942d7f0cb5c973377d40b83e97e54a6c29ac9ba0ddd762a730e8398e89a6126612becfc974234ec65adf3844cf10a9adc89c662656d3b8331293a3877de31115a10e1edcb0d3af4e879bf8bcda89baf3d773edf1b2c51c54586eb95f911792b30b749eae2f819d12c8c13cc966f19206571c3c8638a13e440f0c264b7cb1dc1c23c22258e1c75e80bf3d5523d26579a94ff91a7726c999fe8d0cdf2c011af6bb3e882d6da2ed73fd867471d021682e94a599fe24c7ced1cdf38389ed0c3ad4445a859d811945c0c59c7e4c11a363cf3bd72d1e12d8da8fd346d307b7736e26e8920c178416fa84283851fcf9e51c458e2fa4cc245120df8c9b67cd89fcbdb5cd46ff6760e3f43649b3436bbbc85c002032dd628ac934caee2d067a6e8df906b8ec92236fb8ad28d0679b0a5a0dfc7800805d1cbb849b235fd50595ebbfbfde465bc195540707718ebb0c026bc75a8d918d8ee23298cc32ed3d029f823b1ddc2fcb6919c6965103ae207b17682d62c5e82779e8d8fe3c6ebc36e55ec712c1ec23fcca02408b58f54aea3203c279fadba053010ed63f1b03a6dece95a9d43d634f7c8ab13fe447f31c13fc3ea982fa7b1ec7420847ad1073f907f99a76fda5d18ccf3488278c8bf1516565b0ff3ce946595940ef812164b8f46fec4a494b92cdd6425ed0c281b96189bfd2b5ba92a707f9f4160f37212fed26fc17cebc536c982b05760137a857c9e9793e12078e2bfc1fa1e1a33f8ae616ec3dc8a970ba3c2b25416e4a90e8d5276a87994910d7be695738c920e73ff203eeba299cd3c12c9e13916be359fbc8422610329699962cafbfb30568ac0f1409dda0bbc355f27d9311bf0c8ba80c0c03b03de5412767857a05cc6719e7adf8f8448669f9911e4fc8d8a6f7336d0c4cf2c99b7f3a1dd7bc7fa4b052f05924439c17de9dc971b58b108cbe71edbfb9de699b32c77b60238f213ab36a8c63f5009c4b8acd5bcfb125ad768355e027c94a233cca44c2f1789fbc2898fbcac0d8cadff05d8ba13db118f56a1b8ba9c1588fe57831c5002cbec54c1dcf5cd5f79c2ba7ee968efeb6c5895246721173a214a51d73ab7df7f02471f14dc4f3aac9067a15bd7d031b1e32626046953f72bc755bbba35a89ea4cd4897802426f71237b78b86e4d8f40bc8f0e96fb53505d47d1c41a4c30a72371f006aacdb85d90348acb44dd8dddbc93474be9e6af2a764c90356dbd110c779ba1f29dc5ff218754ecd6fa20c6a843cf207e3e5697efd6c294d6d95fef90b4079d86405935b3a2c8083f9cd7cf216af9ddb602cb6645b6f76095c24713e0f980dc432c9e0ba0b4768beccb969dd259b67e0faefca3dd3112b508beccb6a2358922771dd4f07c2eee5428066a22190bd5c354b3a8f2ab4c4619ce05ba32615e2b289cc9487b1a61e8ec5c36c436c77ee46a1204b8a8708cca3f8f37bbeac52881a1409819887a5920c2989e256d35f4e595f5feb0825d2b2754f7db7b132df257f778bbc99774c094212e501b8fa4c325dfa25fba611331f2dcdcf26840f349e36386f88b0162878e67cefb16540f6386de8831a033c995488c44b4ce1b9fd54abf435b9bd85259f132a7119b85ca8d31d7dd27ef3439b2703a044171ba0fb92b8d89d5772fc8c706b498c593897c7485242b99e1c5191dae904a55ad0a65caf1267d65c5d0cef1b61b6a636302e736fbfe6f64db9a9748c0728fad097bdef9b13be8157b63bdc4df1bbd5d4526b04343c8fb5fb4cc33d93b2b56f1a1d96c36d39232f9640be3046099b5d5e447fbd313b6391977ca58da1bc745e7799bb22792738b5cc82334e481dadbdac2893684e9a75eb72b7f68a2127af5d5586a20376d85522e97bc4d1df3e224f83906c45bb360ece2d7453146192416a681e08fd181fb1bc02f17371ace1e74cb88f74faa0f6cb5dd7a9c8504ac23853296844c0f87f8dfc606a3de829bb2a1f221c126ae17ad2f99e0cb4b0ecf5cee5a7c25600761bb4fdf6a5ea55d2de8e2628f010acc383a147528c78d00a8daded4f63abcfe749bdef9523f554d9879e527d38ac6f9123d006414e0471b91eb7927847f8a72d8fe9c3553fd21ec35976ca063a1cfae1a3f7a4ebd6b3a7059b5f50d3ce5eac7d0ca195485686efbe16ab82ec0d344560489950e6fb9b2ea64f65bfcf9c5417cbf66d2d725187ecf660892dc854be56895a22287f0a55447998a89989164bebfb760b533b7a7ae56f64a716ff77166060ab238fb1132f89337c1f7df2a9a64ff84402a355df1a72a32755adaed495f643b940fd4789f93f15a4d5630a64e2fc15b4004df55e4f5b5d734b1aa9fcc7931a58de7804853df05d7839e1d155fc37ea58058e931658bef2ffdbd09da20f895e7141afa308d80a839faeb5aa3724aee2fcf329f868b5f0b6867c5f539059e33ccfcdd8f3d1bc49dd9dd2ea333735001b865989c3c674a484e490d14ad4f0cbc4aa6167b699dbf921639d8ee6a736afb2b9404e17e76324134e27b8896a95a7ffbfc63fb199e760d8c2bb06539269e357c71ff6aef3ebb78f5df69cf0fd0fc4d6b1ecbbe71bc613f41f5a59c586435a6a48db79debbe6a336356d7cecf41a7f288b2c079fffb80d9725d4c234953a839983dbbacf70437592ced97dc27167d88a5cd5991ffb6dbc2e1786cc4669f70f1e7c6f0c807ad8425cc261828b9dcd31978ba07305ece871820cd0a1a04c003e6c6f7bc8f3c8571c2f7fc7bc723d9bb76ef9263303e72bba50346a44eea6a027a8102e43a1177984ec6bec66441f32c5a5ae59cad3c1b900b2eed9a5c898505262cacc2d4330bae50507bdf40746a2167aed7ff8967877619a52c93894a1d466e779a8580ca1efadd8b089c57ef653fa32540193db8fb76db1c13b771b34397cf0bdaf5b62a6eec1e87615393eff02fb0728ce6044b264a4d647f06ee4e9a43d54bf7442fbb93a896d6ae96193e18024fd61ecc6509263eb3f9586404a4aa1978cc920745d26ee762443a7c0cf68db9bcc33d4c1b56b9eeac5f88ea81a178832cef88a47eba7e8631cb7444e2005c0806940a4ef16d5bf52da055cea99d689c9a7a2dedced7fd158d62a22d018b6ad60e98ffe2cdb22528a984efdba65198c93fb709c7c121e59cee1a5e11819839de4e1e80d75cd9a578e28c2cef6cb261b4879a6fc4f29231c1673fd0883a2902c6aab4142d1b28021185e3ee98e4a037e8c6f807c130fee366a60752267dba32a33d828294c61e4ab724d866534fca3a536f6257ef9fc90806ef42d208f077518764cbd95a22d1ff0cc5eba61497174ff1d8260b29127b957e88967183a43d4b569e8b6272adbd6b35cec0af9d009ca9033de3eb004aeb3b67639664d0fabe0f1a1575208d10e4587c739e049fb53394b3263eb2982b4a0222d47bb947fa529dc5fe3bab37163b1bbdc82771009d4635f2ac845b983aafc79f587488148dfb456b154d3aa7edba58c697daaec5666533a46e4c549ce9d1f98e45972ccc02bccf117f0d109bc7780da87e6687228811093bb6050f58defa5ddb4518a445a939957b2d31a19013c12949e23449fa8d0a2ce98da2609369a0a9d509726fb5bcce5bbec8596b37ffa3aa9869ecaba110d7bcad343066bca63da6998de39ecaa532f684ae550f052bab590325cced3e82758c87a4019ebd9d3e705f5d31baf688f148b790b025948099e1af23a53a0addc183b9ce3900e33cbca848b0c76d077c65dc4c387e0d28b946621683875de6944e55de25e07ad6b78fd066f3e4e1988fa5535525a314c6e341845f974372a78684a67301e58fcae2b9d3b28476cd8a4eb55885d8cb50c0a150ee8b88a0d89cc92814be27a754808a5c91bb0ac256abcbe41ee067ab886ff393b095edce81be6d8b4ffbf0f7a19f56460e4f73e2ab6922d4190fcfb05400c63aef7b8b9ad74de301d62ff55b2f606800e6a6ac94515b75f7d03b827d853e559ec94369e95e060755978b65c2212c69e53098b2c7fe3d395aa60acbc507b3865ba69915aac2fb8d16f77e2f1e1a01975d7cb04306552757853c373bc83ea9e5af4ff6334bdaaf96c0ea0fafa8715683740087a685dba7b50074b13c50cdc6f18773dd11172abcd1a6c93bbe906dace1b14d416965804e6df5c5ba9a0f4a9db8b68c9652a9f978bfdf973b7b30cc273278c00ce608d726e4d1db44fe64582d885def92833403ce16f7c88679c3cbababecc85211fd81c35ac8422a3348347574d2d915490f520bdf50a7351f2a43a3a9f5c68511a7167c010b413e27ac3ec7ca61f3c676e4f348bf68c6c5941b589ea09dca47e003bf5549287ceb7d3ff31d1ac0d77e815b69c7b0b99c4e77d71a7f005f1d0eea86b560c2d6670698766df8a4779daeff39ea865e32865c0fcb2de6bde426fba1b9f06c35129224bfc0ae3dc2b0976ee49cf0e221846eb9e99c6b984a8f744978a2f1976de27fa2690ae070fa3e0c6a745226ec7f71bda8e1a30d6404a81101b0bfe1cfffc83b7780cd9589583ac4631e469412c3ea7d69bc28bcd7cc3905e9c81d908279f88737eb90c55cc11427e3b21003a4e8688ba97e0f5794ea3096a069f03b8033e333f10476ec74e20df35bd96fd42601a096780aae2eec054549dd0a3aa7e1a132a5dce823e136f53e555dd8944ead00b77e5313b7772171ae24883d447f420e17feaf80e4dbf9ff9f1952f8c8a0787d5de69492c1c08d69bc7be230d7f725bbcf9a03f9f0370e02b0e50add6c3512fc02d2680e4a05b43ea2b70191aaa31d5a7732461c63cbf421ad5fa2867907d37e0b42978fdf31064ea95743f345e876ea01cfe1377edac12713d2de32d6a908ecf57de5749a375a562ad6bf32729f5037257c797de96693bfbb3136bc83bb7ee6e7365a85aacf2cd6c4fb0779736deba7f021b931fad2a2770c3f492592cd3753540836e06ce758c0c1abde699dc7c8b55d19c7fa3bd6592c6e0db7b794ad0d370d2ee2816223ce362f5f6cb169be322bd75b3077454bd79281dbac7703b367b1487e110db45b13bfb54b4b56bfcb237edbfc6cc77be4ff7f5140a7bc41029639c69e78634c9087d6b7e13b408a9bfb40cf8819dcc747355032d1c4e192e3d6765304b92e4da3e103c94606a1e3d8461e4d30fa043d01d02622692df684f35276213cd66164f27c91fbf54fb645ce510bfaf6bfc772ec5bd71617e89f5d1d9920765037c841eddb104412bd64e8476bdf440c165be28", "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"}) 14:34:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4c0840, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r2, 0x0, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0x7fff, 0xfff, 0x0], &(0x7f0000000280)=[0x7, 0x9, 0x8d, 0x5ee, 0x5, 0xfffc], &(0x7f00000002c0)=[0x7, 0x1, 0x2, 0x7, 0xce5, 0x39, 0x800]}) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0xd12}, &(0x7f0000000200)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1021.204858] Bluetooth: hci6 sending frame failed (-49) 14:34:03 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x22], 0x1, 0x400, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0xa, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x50000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2d, 0xfffffff8, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4815) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 14:34:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) close(r0) [ 1021.290748] Bluetooth: hci0 command 0x1003 tx timeout [ 1021.299133] Bluetooth: hci0 sending frame failed (-49) [ 1021.990233] Bluetooth: hci8: Frame reassembly failed (-84) [ 1023.295354] Bluetooth: hci6 command 0x1003 tx timeout [ 1023.300653] Bluetooth: hci6 sending frame failed (-49) [ 1023.375359] Bluetooth: hci0 command 0x1001 tx timeout [ 1023.380632] Bluetooth: hci0 sending frame failed (-49) [ 1024.015264] Bluetooth: hci8 command 0x1003 tx timeout [ 1024.020563] Bluetooth: hci8 sending frame failed (-49) [ 1025.365138] Bluetooth: hci6 command 0x1001 tx timeout [ 1025.370443] Bluetooth: hci6 sending frame failed (-49) [ 1025.445119] Bluetooth: hci0 command 0x1009 tx timeout [ 1026.085089] Bluetooth: hci8 command 0x1001 tx timeout [ 1026.090403] Bluetooth: hci8 sending frame failed (-49) [ 1027.454933] Bluetooth: hci6 command 0x1009 tx timeout [ 1028.164825] Bluetooth: hci8 command 0x1009 tx timeout 14:34:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) 14:34:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x422441, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:34:14 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@generic={0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000100)=0x355) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r5 = socket$unix(0x1, 0x1, 0x0) dup3(r4, r5, 0x0) 14:34:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002300)={'ip6_vti0\x00', &(0x7f0000002280)={'ip6_vti0\x00', r1, 0x2f, 0x20, 0x2, 0x6, 0x20, @mcast1, @mcast1, 0x10, 0x1, 0x3, 0x5}}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={{0x0, 0x0, 0x80}}) 14:34:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:34:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) 14:34:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) getgroups(0xa, &(0x7f00000001c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee01]) setresgid(0xffffffffffffffff, r1, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @private1, 0x1000003}], 0x1c) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r5, 0x1f}, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x2711, @hyper}, 0x10) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x218000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) poll(&(0x7f0000000100)=[{}, {r0, 0x42ec}, {r6, 0x8}, {r0, 0x4}, {r6, 0x20}], 0x5, 0x9) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)={0x89, 0x1f, [], [@pad1, @generic={0xf9, 0xf8, "a256067c68acf9a43ebe49700a9524b129168b4ff3ed283ff550dc45c2b25ba80ec4128825732dc06e545c3c4c0feb8b4729f46fbda3506a785bd16022d707dd59d537befcd6688e051f61490adf4fa93622c5ab86b43efa79a492c880a1077399155ab67bf55e52fdc4ee2b4ba619358916708712f76578183dfdd58121b47cb2c8912d8ca876ea95298d48b504cd8ddd79637f3372bf041c82ae6fe4e674c97afef3f149af99df87a4ce36169c9c350233808dcff2b57d087ed1fb8346355c9eae6fa5e7d04f1f86ddec7a53a33c4ab9627ba00c6bd6a032ae597319154e743ef4b5390f64252f697ed6c6def6e7d87c8609d2ff353ced"}]}, 0x108) 14:34:14 executing program 2: fallocate(0xffffffffffffffff, 0x12, 0x3, 0x80000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40240, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000001c0)=""/4096) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="9e49c697c56ace70d650b48610181035", 0x10) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:34:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) close(0xffffffffffffffff) [ 1032.063908] Bluetooth: hci0: Frame reassembly failed (-84) [ 1032.071643] Bluetooth: Unknown HCI packet type 5e [ 1032.072012] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1032.081695] Bluetooth: Unknown HCI packet type 43 [ 1032.087834] Bluetooth: hci0: Frame reassembly failed (-84) 14:34:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x8000000004) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x4, 0x30, 0x0, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x8) [ 1032.131605] Bluetooth: Unknown HCI packet type 5e [ 1032.170659] Bluetooth: Unknown HCI packet type 50 14:34:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSKBLED(r3, 0x4b65, 0x100000000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000400)=[0x4, 0x400, 0x6, 0x9, 0x8, 0x1f, 0x3, 0x5], 0x8, 0x3, 0x0, 0x7ff, 0x27c0, 0x80, 0xfffffff7, {0x7, 0x8, 0xd54d, 0xff, 0x1, 0x3, 0xd59, 0x3, 0x0, 0x1, 0x3, 0xfffd, 0x1, 0x5, "02614989f51a1b85b0a259122d5ff6c6f60aadcdcc4d6a849f5ed34124e6fd27"}}) 14:34:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x200000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080)) [ 1032.194099] Bluetooth: Unknown HCI packet type 5e [ 1032.212703] Bluetooth: Unknown HCI packet type 40 14:34:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDSKBLED(r0, 0x4b65, 0x3b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) ioctl$VT_RELDISP(r0, 0x5605) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, r2, {{0x1000, 0x4a74, 0x1, 0xffffffffffffffff}}}, 0x28) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1032.259971] Bluetooth: hci9: Frame reassembly failed (-84) 14:34:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x5d68, 0x4, 0x4, 0x0, 0x0, "359ee0680a85f067"}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000140)=""/6) uselib(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000001c0)={0x87, 0x2, 0x0, 0x20, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x18) [ 1032.398372] Bluetooth: hci10 sending frame failed (-49) [ 1032.399049] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1034.084051] Bluetooth: hci6 command 0x1003 tx timeout [ 1034.089434] Bluetooth: hci0 command 0x1003 tx timeout [ 1034.089484] Bluetooth: hci6 sending frame failed (-49) [ 1034.094975] Bluetooth: hci0 sending frame failed (-49) [ 1034.164043] Bluetooth: hci8 command 0x1003 tx timeout [ 1034.169431] Bluetooth: hci8 sending frame failed (-49) [ 1034.334205] Bluetooth: hci9 command 0x1003 tx timeout [ 1034.339490] Bluetooth: hci9 sending frame failed (-49) [ 1034.403996] Bluetooth: hci10 command 0x1003 tx timeout [ 1034.409401] Bluetooth: hci10 sending frame failed (-49) [ 1036.163860] Bluetooth: hci6 command 0x1001 tx timeout [ 1036.170065] Bluetooth: hci6 sending frame failed (-49) [ 1036.175530] Bluetooth: hci0 command 0x1001 tx timeout [ 1036.180785] Bluetooth: hci0 sending frame failed (-49) [ 1036.243857] Bluetooth: hci8 command 0x1001 tx timeout [ 1036.249178] Bluetooth: hci8 sending frame failed (-49) [ 1036.404018] Bluetooth: hci9 command 0x1001 tx timeout [ 1036.409321] Bluetooth: hci9 sending frame failed (-49) [ 1036.483889] Bluetooth: hci10 command 0x1001 tx timeout [ 1036.489291] Bluetooth: hci10 sending frame failed (-49) [ 1038.243594] Bluetooth: hci0 command 0x1009 tx timeout [ 1038.243613] Bluetooth: hci6 command 0x1009 tx timeout [ 1038.323573] Bluetooth: hci8 command 0x1009 tx timeout [ 1038.483599] Bluetooth: hci9 command 0x1009 tx timeout [ 1038.563599] Bluetooth: hci10 command 0x1009 tx timeout 14:34:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000100)={0x3, @default, r3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:34:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0xfffffffffffffffc, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = accept$phonet_pipe(r0, &(0x7f0000000180), &(0x7f0000000080)=0x10) sendfile(r2, r3, &(0x7f0000000140)=0x3, 0x9) 14:34:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x222000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:34:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:34:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) lseek(r2, 0x4, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:34:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x7, 0x5, 0x10000, 0x8, 0x9, "31b0948373b1c347dc23261fdcb955a81b3d99", 0x9, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) linkat(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x1000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000140)=0x9) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0xda, 0x7, 0x5, 0x1b, 0x0, 0x47, 0x8000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3}, 0x2000, 0x100, 0x0, 0x2, 0x0, 0x9, 0x101}, 0x0, 0x0, r3, 0xb) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000001380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000000300)={0x102c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x102c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:34:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1042.320789] Bluetooth: hci0: Frame reassembly failed (-84) [ 1042.327539] Bluetooth: hci0: Frame reassembly failed (-84) 14:34:24 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/bsg\x00', 0x301000, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xdc, 0x0, 0xc20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004050}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x24100, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x81, 0x2, 0xc1, 0x9, 0x0, 0x6, 0x10000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x8009, 0x9, 0x125e, 0x6, 0x9, 0x8, 0x7}, 0xffffffffffffffff, 0xa, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) [ 1042.400260] Bluetooth: hci6: Frame reassembly failed (-84) 14:34:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSKBLED(r3, 0x4b65, 0x100000000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000400)=[0x4, 0x400, 0x6, 0x9, 0x8, 0x1f, 0x3, 0x5], 0x8, 0x3, 0x0, 0x7ff, 0x27c0, 0x80, 0xfffffff7, {0x7, 0x8, 0xd54d, 0xff, 0x1, 0x3, 0xd59, 0x3, 0x0, 0x1, 0x3, 0xfffd, 0x1, 0x5, "02614989f51a1b85b0a259122d5ff6c6f60aadcdcc4d6a849f5ed34124e6fd27"}}) 14:34:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x40c080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x5, 0x597, 0xffff}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x3, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x9, 0x4000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000600)={0x7ff, 0x33}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000200), 0x4) r3 = accept(r2, &(0x7f0000000280)=@in={0x2, 0x0, @remote}, &(0x7f0000000300)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$inet6_buf(r2, 0x29, 0xca, &(0x7f0000000540)="aa1850d6e21e25bfac413df34aef01328cf08599b1b29be2eb99b576720b3475830c24b4e6e63faff13bb89328cb1f5948e77c0efe7af599d2ebcc6f95074fdd5b", 0x41) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x402, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xc7, 0x0, 0x4, 0x70bd2c, 0x25dfd9fb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x32}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x4c}}, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000380)={0x4, 0x5b7f1c15, 0x353}) getsockname$l2tp(r2, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000480)=0xf5, 0x4) 14:34:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x36) 14:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="6569ea5bbe8a09e0a02891b58f3a0f2f8e008932a306006f999a8e292eb2237958bdd2fe6f0f9c79ea86862ea8f886cbcf420f134858e1595555c4684817f9d11a2afd2cd4243a78794e11b9b0b8409ccdd51af8e843c9619f61f225d02f11d9238864f126239af7102d27649c7e701c792ea69296ef6432e71e194caeab4145f16e4343780f1b69dd6c85f3e16bb14b16bfed28b34409f542adc2d1f5239da5e668dd0babd370a9f6afbd87d24a7dcf87923a52ed19c2bab5a339c10ea14938d64c247c4b9c56965cbac010a785016d61e0b0a92dc8ab4b3d87", 0xda, 0x4}, {&(0x7f0000000240)="a7d888ebec404fe63e32c84e0e68643c3047588ceb74eeb0bae0d104e8", 0x1d, 0xffffffffc4856630}, {&(0x7f0000000280)="405f03541395b9a1a8566e0b491915e83927a077f0f944814d735fbdca24b5423b947d94ab73d13d9dbcc6bae646f6c831509776", 0x34, 0x1}, {&(0x7f00000002c0)="b4176c401be97e7cac8872a6d574d930ba012a3aef6f6a277b0fef6b2313fefb5e9d1bbeed88d4e15721da95440f4716c523c2207822eca7ec804f181279946ed15553272e747a50054b4853957a50630f957ec69aa58c28aadfe4a813911658dfcfc395c37eea193df411aa6682a606c53a4a99b4f57c690189da0cd0138bdd795ee8c8adafd8aeda26f9b2c9d4979a77767f8d1e54fa639472fe9bc5bf6006684b98109cf73f6a79dcff4c786f075825b1f5cd11b4191801de5c253ff445baa4c8b8b126eee8c1889e6c", 0xcb, 0x200}, {&(0x7f00000003c0)="545f2e130d63512189057898afb79b4fcb2a59b7a05ae98ffd4dd1ccd6d6800cf9897bcbb23648d88bc677c6dcaff8cece9603338d7b3c4c3df1bf3c5f5a55f2364405978986eddb90303364399ba252cba4fea536aa9df0f456b705fcce36b64d16b78704d0799867437f56b23e0d49a6a6cae42db750912826c2ed4f2aaaa9ec96bc914ad6657251c14f759e880fcdd75356456846acbac30c7a5a22416f2587e94e1a2b1717990e57a9caa1bc4a77c01991fad91e0209b262aa7b41ac4506e1f95e83f0201767", 0xc8, 0x6}], 0x21000, &(0x7f0000000540)={[{'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'.-'}, {'#'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@context={'context', 0x3d, 'root'}}, {@fowner_lt={'fowner<'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000600)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1042.935282] Bluetooth: Unknown HCI packet type 5e [ 1042.940303] Bluetooth: Unknown HCI packet type 43 [ 1042.956307] Bluetooth: Unknown HCI packet type 36 [ 1042.976991] sp0: Synchronizing with TNC 14:34:25 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) r2 = syz_open_dev$mouse(&(0x7f0000002340)='/dev/input/mouse#\x00', 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x4101, 0x4, [], &(0x7f0000000080)=0x80}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0xfffffffe) r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000180)) r4 = signalfd(r1, &(0x7f00000001c0)={[0x100]}, 0x8) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000002380)) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002400)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x44, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, '%{+-&\\)-]\xa1^.*\x93$\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '+\'\'^\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000002280)={0x0, @bt={0xffffff77, 0x7, 0x1, 0x1, 0x200, 0x9, 0x4, 0x6, 0x6, 0x450000, 0x80000000, 0x5, 0x3, 0x18840, 0x14, 0x17, {0x66a, 0xffffff7f}, 0x9, 0xa2}}) [ 1042.981129] Bluetooth: Unknown HCI packet type 5e [ 1043.007095] Bluetooth: hci9: Frame reassembly failed (-84) [ 1043.013692] Bluetooth: hci9: Frame reassembly failed (-84) [ 1043.019993] Bluetooth: Unknown HCI packet type 50 [ 1043.026796] Bluetooth: Unknown HCI packet type 5e [ 1043.050315] Bluetooth: Unknown HCI packet type 40 [ 1043.077042] sp0: Synchronizing with TNC 14:34:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) 14:34:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x8, 0x0, 0x401, 0xd75, '\x00', 0x3ff}, 0x4, 0x20000002, 0x1ff, r1, 0x5, 0xfffff001, 'syz1\x00', &(0x7f0000000080)=['/dev/ptmx\x00', '/dev/ptmx\x00', '-\x00', '/dev/ptmx\x00', '/dev/ptmx\x00'], 0x2a, [], [0xda40, 0x6, 0x400, 0x7]}) [ 1043.238108] Bluetooth: Unknown HCI packet type 5e [ 1043.245720] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1043.273356] Bluetooth: Unknown HCI packet type 43 [ 1043.297080] Bluetooth: Unknown HCI packet type 5e [ 1043.309399] Bluetooth: Unknown HCI packet type 50 [ 1043.326040] Bluetooth: Unknown HCI packet type 5e [ 1043.332758] Bluetooth: Unknown HCI packet type 40 [ 1044.322810] Bluetooth: hci0 command 0x1003 tx timeout [ 1044.328177] Bluetooth: hci0 sending frame failed (-49) [ 1044.402839] Bluetooth: hci6 command 0x1003 tx timeout [ 1044.408234] Bluetooth: hci6 sending frame failed (-49) [ 1044.962757] Bluetooth: hci8 command 0x1003 tx timeout [ 1044.968128] Bluetooth: hci8 sending frame failed (-49) [ 1045.042740] Bluetooth: hci9 command 0x1003 tx timeout [ 1045.048112] Bluetooth: hci9 sending frame failed (-49) [ 1045.282708] Bluetooth: hci11 command 0x1003 tx timeout [ 1045.288109] Bluetooth: hci10 command 0x1003 tx timeout [ 1045.288161] Bluetooth: hci11 sending frame failed (-49) [ 1045.299837] Bluetooth: hci10 sending frame failed (-49) [ 1046.402602] Bluetooth: hci0 command 0x1001 tx timeout [ 1046.408055] Bluetooth: hci0 sending frame failed (-49) [ 1046.482670] Bluetooth: hci6 command 0x1001 tx timeout [ 1046.487979] Bluetooth: hci6 sending frame failed (-49) [ 1047.042605] Bluetooth: hci8 command 0x1001 tx timeout [ 1047.047900] Bluetooth: hci8 sending frame failed (-49) [ 1047.122536] Bluetooth: hci9 command 0x1001 tx timeout [ 1047.127872] Bluetooth: hci9 sending frame failed (-49) [ 1047.362830] Bluetooth: hci10 command 0x1001 tx timeout [ 1047.368152] Bluetooth: hci11 command 0x1001 tx timeout [ 1047.368233] Bluetooth: hci10 sending frame failed (-49) [ 1047.378905] Bluetooth: hci11 sending frame failed (-49) [ 1048.482582] Bluetooth: hci0 command 0x1009 tx timeout [ 1048.562386] Bluetooth: hci6 command 0x1009 tx timeout [ 1049.122337] Bluetooth: hci8 command 0x1009 tx timeout [ 1049.202358] Bluetooth: hci9 command 0x1009 tx timeout [ 1049.442289] Bluetooth: hci11 command 0x1009 tx timeout [ 1049.442292] Bluetooth: hci10 command 0x1009 tx timeout 14:34:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1052.535571] Bluetooth: hci0: Frame reassembly failed (-84) [ 1052.541315] Bluetooth: hci0: Frame reassembly failed (-84) 14:34:36 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)={0x2, 0x0, @auto=[0x30]}, 0x9, 0xfffffffffffffff9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x100000001, 0x2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="108556ae55f0c7638dcadc2ed866d1274330fa3a05b77791940e72825e174199a36ad4094e76c37bf5cfe5eac123d68ff463c454fedd2ccbbdbf071658ca90afcf8ef7ac39261ee46168571e2598c38369be8f5e51312cc8d14d693e8215cc620eb9310bc8e9878c4c86b65f4b86a5ca330771997a898650c5e25459803a8eb83a88ad863ba42c822e5788fb765325753a7f", 0x92, 0x3ff}, {&(0x7f0000000380)="31b8fe7bfbe665ce3799b21c7be2708044e65fc53a407a73921262d7920f546c3ce0d622704df9da7744e05ba4a128b87f9fe624e657edea8cff171d027b", 0x3e, 0x80}], 0x824080, &(0x7f0000000400)={[{@quota='quota'}], [{@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user', 0x3d, '&*$#'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000100)={@desc={0x1, 0x0, @desc3='\xe8\xda\xb9\x924\xbb1.'}}) close(r0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x35, &(0x7f00000001c0)="70fa5ac71df2892b270ab59a62c5e80920ccca9bed324ee679922259b73a1c5fdca1ccc3d5632faaa1f4c3d01a6fa6a79c81dd9a82"}) 14:34:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000080)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x84601, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FREEZING\x00', 0x9) 14:34:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSKBLED(r3, 0x4b65, 0x100000000) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000640)={&(0x7f0000000400)=[0x4, 0x400, 0x6, 0x9, 0x8, 0x1f, 0x3, 0x5], 0x8, 0x3, 0x0, 0x7ff, 0x27c0, 0x80, 0xfffffff7, {0x7, 0x8, 0xd54d, 0xff, 0x1, 0x3, 0xd59, 0x3, 0x0, 0x1, 0x3, 0xfffd, 0x1, 0x5, "02614989f51a1b85b0a259122d5ff6c6f60aadcdcc4d6a849f5ed34124e6fd27"}}) 14:34:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000240)=""/119) syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2f3}], 0x0, &(0x7f0000010300)=ANY=[]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x33) getrandom(&(0x7f0000000100)=""/238, 0xee, 0x1) 14:34:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1053.830762] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1053.837778] Bluetooth: hci8: Frame reassembly failed (-84) [ 1053.844481] Bluetooth: Unknown HCI packet type 5e [ 1053.849437] Bluetooth: Unknown HCI packet type 43 [ 1053.859870] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1053.869020] Bluetooth: Unknown HCI packet type 5e 14:34:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xd23f6138d286e992, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1053.889215] SQUASHFS error: squashfs_read_data failed to read block 0xe5 [ 1053.899266] Bluetooth: Unknown HCI packet type 50 14:34:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r0) 14:34:36 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1053.937524] Bluetooth: Unknown HCI packet type 5e [ 1053.943378] SQUASHFS error: Unable to read metadata cache entry [e5] [ 1053.959456] Bluetooth: Unknown HCI packet type 40 [ 1053.978996] SQUASHFS error: Unable to read inode 0x4c0026 14:34:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x800000008ab, 0x2100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000100)={{@hyper, 0x3}, 0x0, 0x1, 0x1}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1054.043302] Bluetooth: hci9: Frame reassembly failed (-84) 14:34:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:34:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040420}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc8, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8a, 0xbe, "90f31cbc62b343e3624bfa4da830ccc82e2049b39f9371bb2d2b56980a621bff5d9df752608293683049e1814d3bf8c86f6da3e41a1bf4c7d6ef0a54cf767e5344ba221113eeee86a5cc53d3515744bcc15691f502ace0be6eaff53a4ca56b5b8ec337374720ddda86cd55b79d455963aed80c4d61e39bb8081843c4f95586f3e9950bee1cf0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x385}]}, 0xc8}}, 0x20040000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000440)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x454, 0xf, 0x5, 0x301, 0x50bd27, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@generic="dddd5a6c9a192ea41332a15d583a1a0ca96df4be54e544e49b576b0ebf6f740952eaecc480dad138e001538cb24ef3393899ef4abc8112e92c", @typed={0x8, 0x73, 0x0, 0x0, @uid}, @generic="fa7801ed18d9029a569b0edb662b0ab2fe51635392c6b25822b6c45ec9aa4129439763", @generic="0409523017259b7e1077446245d300376f32d9ef1c4600782effb5d953dd941102ca80ff5470e5208dcb033256c8a7da1a5677634c3b1925c862327b029391d8e8a36334aec77043bc7e8bc12c7d9e47d7b61dc1c5550a3ec2d049dcd782199227d26d2edb44b58ad05d39ad36a172fb7e249b1a1816488910ed31cf322ae25ad421bf068e9916d71fd52e0c133ec189a4564001b47893e36c57f511ed9f2931ef8c6595bdc9b6e3157b7cd8bfaf5582339f6bb1c94a5eca4609", @typed={0x8, 0x69, 0x0, 0x0, @pid=r4}, @nested={0x8f, 0x46, 0x0, 0x1, [@generic="2c7ac6fa283c31c4ffa57908612ee5d779cb6fc92133ffd6ad7d2989309424e0061be6fcf3e7abddb67b988c1b44425902958315029501da9b8345dc8da1e5d995cdb4e2159bf8db021a6ea9ff03941ae08286056f94fe6a8ac9ca70d344dc1179d1018d2958a03ca08354d040d835f0c0c6894a43c61ffc588fdfaa3c0d96", @typed={0xa, 0x5c, 0x0, 0x0, @str='wlan0\x00'}]}, @generic="8ab2c9bb051caf2dec0036a265e674d50f0c236f5f7038c8632cc6492156d6470b29099f04e64ed0ee852344a3466fa8c812bb1059f6947cef5b82720d8754e583666f36cdf656f94a0055d2fb3a0482207bbd0afcc846c0d426e433aafc8c18d9347c5522ede22c1b03d174a9a8c0e91a372a985d9820fe76521b2e8920a6eb108d0fec94980d0be3d50c8cd3f2c96b7cb5738684b16c78234c1018f9a6ab4eff54fb61421fa037fcbe498146f28ee7e830cfc91e95e8a2fbcd44f2d4b2510ec62484a90e886b42cc5eec1d1fac00"/228, @generic="77763b8fb371c0e1e8e4f48ba850f6357a8c9da249aa0d201d0ff668f06f007681a4483b9bc503a58b244fcfafcb9973ea75a2f3b6db3b900b95029169bc916c0e4da88e059c56eaf6fdeff937a596b802cf6794b39be5df314edc7e2f53123b3bdbfb552f3f964388b84de05e535aed07ea778dcf964eacdc87e2e65473aab65ae4cd09af83ba33930100400dcde1061cc40eaefb8dac9cfa06db59d0530456df7f047a978f7fe8d952a2ee12ed34675efeb437287abda5e54a30f57d2dd73f881f9d28c9fee30968f0cacb5b418e26e1c3d73b016ad2d8f056827adcc35973b5639186b8cc00d68f", @generic="829dd83667dbfb026d34fa2f747d6f73f7739bfc756b8ec2014761914e7825fe0e1f416b705789e5290856d2bd1fb04f1f9ead0fe0a01f35f065e0f7f37380eaaad2d6911386bc065ae47d1c9a2c406759542540b549703730fe2308f72917bf709bc5cae6e1ccb4f377af5ac7a00a64f8defc332ab4f0228578bcebe49e34f317b3017b50b3eb20e463aa6fcaf4c6d493d7f8487fac5a399acad1856963d6a69228feba58d5ea69555373f7d7086564c668e81a9518e2bf895bc1"]}, 0x454}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20810002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x1d}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "80598a76d9"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008084}, 0x20008804) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000003c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000400)=0x2c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1054.561655] Bluetooth: hci0 command 0x1003 tx timeout [ 1054.567022] Bluetooth: hci0 sending frame failed (-49) [ 1055.841499] Bluetooth: hci8 command 0x1003 tx timeout [ 1055.841515] Bluetooth: hci6 command 0x1003 tx timeout [ 1055.850999] Bluetooth: hci8 sending frame failed (-49) [ 1055.852274] Bluetooth: hci6 sending frame failed (-49) [ 1056.081497] Bluetooth: hci9 command 0x1003 tx timeout [ 1056.086791] Bluetooth: hci9 sending frame failed (-49) [ 1056.641421] Bluetooth: hci0 command 0x1001 tx timeout [ 1056.646748] Bluetooth: hci0 sending frame failed (-49) [ 1057.921335] Bluetooth: hci8 command 0x1001 tx timeout [ 1057.921348] Bluetooth: hci6 command 0x1001 tx timeout [ 1057.926639] Bluetooth: hci8 sending frame failed (-49) [ 1057.937102] Bluetooth: hci6 sending frame failed (-49) [ 1058.161263] Bluetooth: hci9 command 0x1001 tx timeout [ 1058.166569] Bluetooth: hci9 sending frame failed (-49) [ 1058.721206] Bluetooth: hci0 command 0x1009 tx timeout [ 1060.001075] Bluetooth: hci6 command 0x1009 tx timeout [ 1060.001089] Bluetooth: hci8 command 0x1009 tx timeout [ 1060.241028] Bluetooth: hci9 command 0x1009 tx timeout 14:34:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:34:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x0, 0xfffffffffffffffa, 0xad5, 0x81, 0x2, 0x10000, 0x4, 0x6}}}, 0x60) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x76, 0xcddc, 0x2}) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000001c0)) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x100) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) bind$x25(r5, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) 14:34:44 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002b40)='/dev/bsg\x00', 0x301000, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xdc, 0x0, 0xc20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004050}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x24100, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x81, 0x2, 0xc1, 0x9, 0x0, 0x6, 0x10000, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x8009, 0x9, 0x125e, 0x6, 0x9, 0x8, 0x7}, 0xffffffffffffffff, 0xa, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) [ 1062.777402] Bluetooth: Unknown HCI packet type 5e [ 1062.782816] Bluetooth: Unknown HCI packet type 43 [ 1062.788561] Bluetooth: hci0: Frame reassembly failed (-84) [ 1062.804524] Bluetooth: hci0: Frame reassembly failed (-84) [ 1062.810508] Bluetooth: hci0: Frame reassembly failed (-84) [ 1062.828305] Bluetooth: Unknown HCI packet type 5e [ 1062.836792] Bluetooth: Unknown HCI packet type 50 [ 1062.847655] Bluetooth: Unknown HCI packet type 5e [ 1062.855843] Bluetooth: Unknown HCI packet type 40 14:34:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)) ioctl$KDSKBLED(r3, 0x4b65, 0x100000000) 14:34:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@generic={0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000100)=0x355) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r5 = socket$unix(0x1, 0x1, 0x0) dup3(r4, r5, 0x0) 14:34:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x4d, &(0x7f0000000100)=""/238, &(0x7f0000000200)=0xee) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xa}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1064.059630] Bluetooth: Unknown HCI packet type 5e [ 1064.073557] Bluetooth: hci8: Frame reassembly failed (-84) [ 1064.075714] Bluetooth: hci11: Frame reassembly failed (-84) [ 1064.079487] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1064.087951] Bluetooth: Unknown HCI packet type 43 [ 1064.099726] Bluetooth: Unknown HCI packet type 5e [ 1064.106878] Bluetooth: Unknown HCI packet type 50 [ 1064.136227] Bluetooth: Unknown HCI packet type 5e [ 1064.145949] Bluetooth: Unknown HCI packet type 40 14:34:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$KDADDIO(r1, 0x400455c8, 0x4) close(r0) [ 1064.800518] Bluetooth: hci0 command 0x1003 tx timeout [ 1064.806117] Bluetooth: hci10 command 0x1003 tx timeout [ 1064.806184] Bluetooth: hci0 sending frame failed (-49) [ 1064.813182] Bluetooth: hci10 sending frame failed (-49) 14:34:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3e}}}}, [""]}, 0x20}}, 0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="000126bd7000fedbdf25020000002c000180140002006261746164765f736c6176655f3000001400020076657468315f766c616e000000000000480001522a3ed6a81e6d33c4c4801400020073797a5f74756e00000000000000000014000200626f6e645f736c6176655f31000000000800030000000000140002006261746164765f736c6176655f310000480001800800", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4040011}, 0x4000140) close(r0) [ 1065.502206] Bluetooth: hci9: Frame reassembly failed (-84) [ 1066.080356] Bluetooth: hci11 command 0x1003 tx timeout [ 1066.086085] Bluetooth: hci11 sending frame failed (-49) [ 1066.092430] Bluetooth: hci8 command 0x1003 tx timeout [ 1066.097838] Bluetooth: hci6 command 0x1003 tx timeout [ 1066.097915] Bluetooth: hci8 sending frame failed (-49) [ 1066.105455] Bluetooth: hci6 sending frame failed (-49) [ 1066.296430] Bluetooth: hci12: Frame reassembly failed (-84) [ 1066.880254] Bluetooth: hci10 command 0x1001 tx timeout [ 1066.886214] Bluetooth: hci10 sending frame failed (-49) [ 1066.890343] Bluetooth: hci0 command 0x1001 tx timeout [ 1066.897112] Bluetooth: hci0 sending frame failed (-49) [ 1067.520251] Bluetooth: hci9 command 0x1003 tx timeout [ 1067.525756] Bluetooth: hci9 sending frame failed (-49) [ 1068.160172] Bluetooth: hci6 command 0x1001 tx timeout [ 1068.165429] Bluetooth: hci11 command 0x1001 tx timeout [ 1068.165483] Bluetooth: hci6 sending frame failed (-49) [ 1068.172523] Bluetooth: hci11 sending frame failed (-49) [ 1068.176271] Bluetooth: hci8 command 0x1001 tx timeout [ 1068.189214] Bluetooth: hci8 sending frame failed (-49) [ 1068.320145] Bluetooth: hci12 command 0x1003 tx timeout [ 1068.326703] Bluetooth: hci12 sending frame failed (-49) [ 1068.960218] Bluetooth: hci0 command 0x1009 tx timeout [ 1068.965480] Bluetooth: hci10 command 0x1009 tx timeout [ 1069.599989] Bluetooth: hci9 command 0x1001 tx timeout [ 1069.605277] Bluetooth: hci9 sending frame failed (-49) [ 1070.239900] Bluetooth: hci8 command 0x1009 tx timeout [ 1070.245128] Bluetooth: hci6 command 0x1009 tx timeout [ 1070.250410] Bluetooth: hci11 command 0x1009 tx timeout [ 1070.399882] Bluetooth: hci12 command 0x1001 tx timeout [ 1070.405276] Bluetooth: hci12 sending frame failed (-49) [ 1071.679778] Bluetooth: hci9 command 0x1009 tx timeout [ 1072.489723] Bluetooth: hci12 command 0x1009 tx timeout 14:34:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'vcan0\x00'}) 14:34:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1073.013101] Bluetooth: Unknown HCI packet type 5e [ 1073.017992] Bluetooth: Unknown HCI packet type 43 [ 1073.023201] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1073.034692] Bluetooth: Unknown HCI packet type 5e [ 1073.039914] Bluetooth: hci10: Frame reassembly failed (-84) [ 1073.042402] Bluetooth: hci10: Frame reassembly failed (-84) [ 1073.052030] Bluetooth: Unknown HCI packet type 50 [ 1073.066835] Bluetooth: Unknown HCI packet type 5e [ 1073.077335] Bluetooth: Unknown HCI packet type 40 14:34:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) r3 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)) 14:34:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x400040, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:34:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@generic={0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000100)=0x355) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r5 = socket$unix(0x1, 0x1, 0x0) dup3(r4, r5, 0x0) [ 1074.298856] Bluetooth: Unknown HCI packet type 5e [ 1074.299123] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1074.309881] Bluetooth: Unknown HCI packet type 43 [ 1074.311153] Bluetooth: hci8: Frame reassembly failed (-84) [ 1074.325801] Bluetooth: hci11: Frame reassembly failed (-84) [ 1074.331890] Bluetooth: Unknown HCI packet type 5e [ 1074.338461] Bluetooth: Unknown HCI packet type 50 [ 1074.345826] Bluetooth: Unknown HCI packet type 5e [ 1074.351465] Bluetooth: Unknown HCI packet type 40 [ 1075.039330] Bluetooth: hci0 command 0x1003 tx timeout [ 1075.044738] Bluetooth: hci0 sending frame failed (-49) [ 1075.119461] Bluetooth: hci10 command 0x1003 tx timeout [ 1075.125050] Bluetooth: hci10 sending frame failed (-49) [ 1076.319216] Bluetooth: hci6 command 0x1003 tx timeout [ 1076.325615] Bluetooth: hci6 sending frame failed (-49) [ 1076.332160] Bluetooth: hci8 command 0x1003 tx timeout [ 1076.337743] Bluetooth: hci8 sending frame failed (-49) [ 1076.409233] Bluetooth: hci11 command 0x1003 tx timeout [ 1076.414681] Bluetooth: hci11 sending frame failed (-49) 14:34:59 executing program 1: mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f68a1064f409aca7cbc1c546f9edddeccf8b003d57c9b064274d508c3dccd884c401980dd4a68603a"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='pvfs2\x00', 0x810001, &(0x7f0000000140)='@\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 1076.842388] Bluetooth: hci9: Frame reassembly failed (-84) [ 1077.129088] Bluetooth: hci0 command 0x1001 tx timeout [ 1077.134924] Bluetooth: hci0 sending frame failed (-49) [ 1077.199113] Bluetooth: hci10 command 0x1001 tx timeout [ 1077.204612] Bluetooth: hci10 sending frame failed (-49) [ 1078.398928] Bluetooth: hci8 command 0x1001 tx timeout [ 1078.398999] Bluetooth: hci6 command 0x1001 tx timeout [ 1078.406800] Bluetooth: hci8 sending frame failed (-49) [ 1078.410916] Bluetooth: hci6 sending frame failed (-49) [ 1078.478953] Bluetooth: hci11 command 0x1001 tx timeout [ 1078.484333] Bluetooth: hci11 sending frame failed (-49) [ 1078.878997] Bluetooth: hci9 command 0x1003 tx timeout [ 1078.884327] Bluetooth: hci9 sending frame failed (-49) [ 1079.198916] Bluetooth: hci0 command 0x1009 tx timeout [ 1079.278972] Bluetooth: hci10 command 0x1009 tx timeout [ 1080.478723] Bluetooth: hci6 command 0x1009 tx timeout [ 1080.478756] Bluetooth: hci8 command 0x1009 tx timeout [ 1080.558735] Bluetooth: hci11 command 0x1009 tx timeout [ 1080.958705] Bluetooth: hci9 command 0x1001 tx timeout [ 1080.964078] Bluetooth: hci9 sending frame failed (-49) [ 1083.038594] Bluetooth: hci9 command 0x1009 tx timeout 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_pts(r0, 0x101000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1083.301953] Bluetooth: Unknown HCI packet type 5e [ 1083.307038] Bluetooth: Unknown HCI packet type 43 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@generic={0x8}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000100)=0x355) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r5 = socket$unix(0x1, 0x1, 0x0) dup3(r4, r5, 0x0) [ 1084.555822] Bluetooth: hci6: Frame reassembly failed (-84) [ 1084.564616] Bluetooth: hci8: Frame reassembly failed (-84) [ 1085.368275] Bluetooth: hci0 command 0x1003 tx timeout [ 1085.373661] Bluetooth: hci0 sending frame failed (-49) [ 1086.558025] Bluetooth: hci6 command 0x1003 tx timeout [ 1086.563354] Bluetooth: hci6 sending frame failed (-49) [ 1086.648102] Bluetooth: hci8 command 0x1003 tx timeout [ 1086.653430] Bluetooth: hci8 sending frame failed (-49) 14:35:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x1f, 0x13, 0x7, 0x1, "3577c7fba486eb5db5e66ce1a6765d375d86b8be51ecc966c7100921d63dc9ec"}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) 14:35:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = signalfd(r0, &(0x7f0000000080)={[0x80]}, 0x8) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000240)=0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x10001, 0x6, 0x7, 0x12f3a0, 0x80000000, 0x2, 0x3, 0x4, 0xfff, 0x5, 0xfff000000, 0x3, 0x4, 0x2, 0x3a]}, &(0x7f0000000380)=0x100) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x20040) sendto$inet(r6, &(0x7f0000000140)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @multicast2}, 0x10) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000001c0)=""/45) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xa, 0x7, 0x208, 0x6, 0x0, 0x3, 0x3, 0x7, r7}, 0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1087.075153] Bluetooth: Unknown HCI packet type 5e [ 1087.080608] Bluetooth: Unknown HCI packet type 43 [ 1087.099767] Bluetooth: Unknown HCI packet type 5e [ 1087.100405] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1087.121782] Bluetooth: Unknown HCI packet type 50 [ 1087.128704] Bluetooth: Unknown HCI packet type 5e [ 1087.133622] Bluetooth: Unknown HCI packet type 40 [ 1087.448033] Bluetooth: hci0 command 0x1001 tx timeout [ 1087.457494] Bluetooth: hci0 sending frame failed (-49) [ 1087.874801] Bluetooth: hci11 sending frame failed (-49) [ 1088.647886] Bluetooth: hci6 command 0x1001 tx timeout [ 1088.653374] Bluetooth: hci6 sending frame failed (-49) [ 1088.718228] Bluetooth: hci8 command 0x1001 tx timeout [ 1088.723598] Bluetooth: hci8 sending frame failed (-49) [ 1089.117942] Bluetooth: hci9 command 0x1003 tx timeout [ 1089.123351] Bluetooth: hci9 sending frame failed (-49) [ 1089.128809] Bluetooth: hci10 command 0x1003 tx timeout [ 1089.134162] Bluetooth: hci10 sending frame failed (-49) [ 1089.517747] Bluetooth: hci0 command 0x1009 tx timeout [ 1089.917900] Bluetooth: hci11 command 0x1003 tx timeout [ 1089.923359] Bluetooth: hci11 sending frame failed (-49) [ 1090.717949] Bluetooth: hci6 command 0x1009 tx timeout [ 1090.797664] Bluetooth: hci8 command 0x1009 tx timeout [ 1091.197598] Bluetooth: hci9 command 0x1001 tx timeout [ 1091.197875] Bluetooth: hci10 command 0x1001 tx timeout [ 1091.206870] Bluetooth: hci9 sending frame failed (-49) [ 1091.210073] Bluetooth: hci10 sending frame failed (-49) [ 1091.997595] Bluetooth: hci11 command 0x1001 tx timeout [ 1092.003324] Bluetooth: hci11 sending frame failed (-49) [ 1093.277414] Bluetooth: hci9 command 0x1009 tx timeout [ 1093.288039] Bluetooth: hci10 command 0x1009 tx timeout 14:35:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0xff, @local, 0x7}, {0xa, 0x4e21, 0x1, @private2, 0xd3}, 0xe000, [0x4, 0x101, 0x7, 0x1ff, 0xfffffff7, 0xfffffff8, 0x81, 0xff]}, 0x5c) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1093.495701] Bluetooth: Unknown HCI packet type 5e [ 1093.496250] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1093.505233] Bluetooth: Unknown HCI packet type 43 [ 1093.533328] Bluetooth: Unknown HCI packet type 5e 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1093.547741] Bluetooth: Unknown HCI packet type 50 [ 1093.554511] Bluetooth: Unknown HCI packet type 5e [ 1093.559884] Bluetooth: Unknown HCI packet type 40 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1094.077327] Bluetooth: hci11 command 0x1009 tx timeout 14:35:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) [ 1094.814506] Bluetooth: hci6: Frame reassembly failed (-84) [ 1095.517064] Bluetooth: hci0 command 0x1003 tx timeout [ 1095.522414] Bluetooth: hci0 sending frame failed (-49) [ 1096.876955] Bluetooth: hci8 command 0x1003 tx timeout [ 1096.882284] Bluetooth: hci6 command 0x1003 tx timeout [ 1096.882331] Bluetooth: hci8 sending frame failed (-49) [ 1096.888968] Bluetooth: hci6 sending frame failed (-49) [ 1097.596957] Bluetooth: hci0 command 0x1001 tx timeout [ 1097.602291] Bluetooth: hci0 sending frame failed (-49) 14:35:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) close(r1) 14:35:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 1097.952978] Bluetooth: hci9: Frame reassembly failed (-84) [ 1097.959671] Bluetooth: hci9: Frame reassembly failed (-84) [ 1097.984258] Bluetooth: hci10: Frame reassembly failed (-84) [ 1098.956665] Bluetooth: hci6 command 0x1001 tx timeout [ 1098.962117] Bluetooth: hci6 sending frame failed (-49) [ 1098.967803] Bluetooth: hci8 command 0x1001 tx timeout [ 1098.973096] Bluetooth: hci8 sending frame failed (-49) [ 1099.676658] Bluetooth: hci0 command 0x1009 tx timeout [ 1099.996567] Bluetooth: hci10 command 0x1003 tx timeout [ 1100.001969] Bluetooth: hci10 sending frame failed (-49) [ 1100.007751] Bluetooth: hci9 command 0x1003 tx timeout [ 1100.013157] Bluetooth: hci9 sending frame failed (-49) [ 1101.036480] Bluetooth: hci8 command 0x1009 tx timeout [ 1101.036564] Bluetooth: hci6 command 0x1009 tx timeout [ 1102.076389] Bluetooth: hci10 command 0x1001 tx timeout [ 1102.076403] Bluetooth: hci9 command 0x1001 tx timeout [ 1102.081781] Bluetooth: hci10 sending frame failed (-49) [ 1102.088479] Bluetooth: hci9 sending frame failed (-49) 14:35:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x12) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r3, 0x0, 0x7, 0x8) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r4, 0x6e000) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = accept4$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x80000) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r5, r6, &(0x7f0000000200), 0x2) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x18083, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r7, 0xc028564e, &(0x7f0000000280)={0x1, 0x1, [0x0, 0xffffffff, 0x3, 0x10000, 0xff, 0x0, 0x8, 0x9]}) 14:35:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x28000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) timer_create(0x7, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240)="6e20b7d2d056a41d93a60fbf2c90233124563f10e216562e8833dc1015cb59cca7ad4b90fff68320c1d9175812321f9c56f4a007032258e5395c053a9b5e36e3a18479e83845431882868a6e036c1b2e653e6ebc2395cab4d37f035c3bdfad703735aa5bb4c62431ed5750bf489ab21c7e12794b9cc8d6b2d6b34069f3df67e9e8d91eed4df21afc47dbe22d5da5dcb672cb943fe5f516a51e6a6780f031bae8eaeb330d5b8089150b1c72ada6d2182ca36691b7f89bfdb1882d0580969a1c4656d97e523352dc78e69e1c6ca16e9436e25ef0957ece358649852bcc59e2181525c48adbbccdb803", &(0x7f0000000340)="ff932303756d9a5c786f19265173c5b0"}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x141820) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000040)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) r3 = getpid() ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x1d373) tkill(r3, 0x5) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x140, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400000, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0xc200, 0x0) 14:35:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1103.732839] Bluetooth: Unknown HCI packet type 5e [ 1103.733153] Bluetooth: Unknown HCI packet type 12 [ 1103.738732] Bluetooth: Unknown HCI packet type 43 [ 1103.772880] Bluetooth: Unknown HCI packet type 5e [ 1103.790707] Bluetooth: Unknown HCI packet type 50 [ 1103.796012] Bluetooth: Unknown HCI packet type 5e [ 1103.797304] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1103.802533] Bluetooth: Unknown HCI packet type 40 [ 1103.811893] Bluetooth: Unknown HCI packet type 5e [ 1103.821549] Bluetooth: Unknown HCI packet type 43 [ 1103.829347] Bluetooth: Unknown HCI packet type 5e [ 1103.839946] Bluetooth: Unknown HCI packet type 50 [ 1103.844810] Bluetooth: Unknown HCI packet type 5e [ 1103.849822] Bluetooth: Unknown HCI packet type 40 [ 1104.156165] Bluetooth: hci10 command 0x1009 tx timeout [ 1104.156169] Bluetooth: hci9 command 0x1009 tx timeout 14:35:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_pts(r0, 0x101000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:35:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1105.013867] Bluetooth: Unknown HCI packet type 5e [ 1105.755983] Bluetooth: hci0 command 0x1003 tx timeout [ 1105.761318] Bluetooth: hci0 sending frame failed (-49) [ 1105.836039] Bluetooth: hci11 command 0x1003 tx timeout [ 1105.836128] Bluetooth: hci11 sending frame failed (-49) [ 1107.035844] Bluetooth: hci8 command 0x1003 tx timeout [ 1107.041192] Bluetooth: hci8 sending frame failed (-49) [ 1107.046694] Bluetooth: hci6 command 0x1003 tx timeout [ 1107.052045] Bluetooth: hci6 sending frame failed (-49) [ 1107.835760] Bluetooth: hci0 command 0x1001 tx timeout [ 1107.841122] Bluetooth: hci0 sending frame failed (-49) [ 1107.915855] Bluetooth: hci11 command 0x1001 tx timeout [ 1107.921267] Bluetooth: hci11 sending frame failed (-49) 14:35:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) inotify_init1(0x80000) r4 = socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r4, 0x0, 0x5, 0x0) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x0, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000400}, 0x24) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8, 0x1, 0x8, 0x2770, 0x0, "625b963179147fd9"}) write$apparmor_current(r2, &(0x7f0000000200)=@profile={'stack ', '/dev/ptmx\x00'}, 0x10) close(r0) 14:35:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) [ 1108.205184] Bluetooth: hci9: Frame reassembly failed (-84) [ 1108.212275] Bluetooth: hci10: Frame reassembly failed (-84) [ 1109.115609] Bluetooth: hci8 command 0x1001 tx timeout [ 1109.115621] Bluetooth: hci6 command 0x1001 tx timeout [ 1109.120917] Bluetooth: hci8 sending frame failed (-49) [ 1109.130120] Bluetooth: hci6 sending frame failed (-49) [ 1109.915584] Bluetooth: hci0 command 0x1009 tx timeout [ 1109.995571] Bluetooth: hci11 command 0x1009 tx timeout [ 1110.235489] Bluetooth: hci10 command 0x1003 tx timeout [ 1110.241147] Bluetooth: hci10 sending frame failed (-49) [ 1110.247591] Bluetooth: hci9 command 0x1003 tx timeout [ 1110.253030] Bluetooth: hci9 sending frame failed (-49) [ 1111.195396] Bluetooth: hci6 command 0x1009 tx timeout [ 1111.195400] Bluetooth: hci8 command 0x1009 tx timeout [ 1112.315336] Bluetooth: hci9 command 0x1001 tx timeout [ 1112.315340] Bluetooth: hci10 command 0x1001 tx timeout [ 1112.315452] Bluetooth: hci10 sending frame failed (-49) [ 1112.320624] Bluetooth: hci9 sending frame failed (-49) 14:35:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:35:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x8aa7, 0x48200) ioctl$RTC_UIE_ON(r3, 0x7003) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) r4 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xa49a, 0x34bc82) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000140)) [ 1113.963865] Bluetooth: Unknown HCI packet type 5e [ 1113.969190] Bluetooth: Unknown HCI packet type 43 [ 1113.972850] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1113.986617] Bluetooth: Unknown HCI packet type 5e [ 1113.991858] Bluetooth: Unknown HCI packet type 5e [ 1113.997804] Bluetooth: Unknown HCI packet type 43 [ 1114.002920] Bluetooth: Unknown HCI packet type 50 [ 1114.003137] Bluetooth: Unknown HCI packet type 5e [ 1114.013420] Bluetooth: Unknown HCI packet type 50 [ 1114.021610] Bluetooth: Unknown HCI packet type 5e [ 1114.025893] Bluetooth: Unknown HCI packet type 5e [ 1114.027007] Bluetooth: Unknown HCI packet type 40 [ 1114.043191] Bluetooth: Unknown HCI packet type 40 [ 1114.395056] Bluetooth: hci10 command 0x1009 tx timeout [ 1114.405071] Bluetooth: hci9 command 0x1009 tx timeout 14:35:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDDISABIO(r0, 0x4b37) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_pts(r0, 0x101000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1115.247670] Bluetooth: hci8: Frame reassembly failed (-84) [ 1115.253702] Bluetooth: hci6 sending frame failed (-49) [ 1115.994873] Bluetooth: hci11 command 0x1003 tx timeout [ 1116.000796] Bluetooth: hci11 sending frame failed (-49) [ 1116.006488] Bluetooth: hci0 command 0x1003 tx timeout [ 1116.011933] Bluetooth: hci0 sending frame failed (-49) [ 1117.274781] Bluetooth: hci6 command 0x1003 tx timeout [ 1117.280927] Bluetooth: hci8 command 0x1003 tx timeout [ 1117.280957] Bluetooth: hci6 sending frame failed (-49) [ 1117.288135] Bluetooth: hci8 sending frame failed (-49) [ 1118.074708] Bluetooth: hci0 command 0x1001 tx timeout [ 1118.080619] Bluetooth: hci11 command 0x1001 tx timeout [ 1118.080670] Bluetooth: hci0 sending frame failed (-49) [ 1118.088394] Bluetooth: hci11 sending frame failed (-49) 14:35:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) 14:35:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = dup2(r0, r0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000540)={0xd6, 0x10001, 0x2, 0x7, 0x100000000, 0x401}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000100)={{0x4, @name="e30c3f52fee2f5f3f3edb4996dd07e67d64ef95fbf4e1a7d16975553865910bb"}, "a7dba25a55bb2af25c57a66687de9e33ebe6c22ba40b974f1785cffced1b431d", 0x1}) close(r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x254, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x37}}}}, [@NL80211_ATTR_IE={0x21d, 0x2a, [@perr={0x84, 0xf, {0x7f, 0x1, [@not_ext={{}, @broadcast, 0x200, "", 0x4}]}}, @tim={0x5, 0x4b, {0x1, 0xb6, 0x6, "05b97df8c7eebf860330f24c241978bbb0649b88d495ef911d8caa60ee79979c66de0c45f05a3cff9a346162aae2b9e71bfc09c7cc86740da5e23cec7a84198dc6d6b8f2211e8fac"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x9402, @broadcast, 0x18}, @ext={{}, @device_b, 0x4, @device_b, 0x10}, @not_ext={{}, @device_b, 0xffffffff, "", 0x29}, @ext={{}, @broadcast, 0x80, @device_a, 0x8}]}}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x3, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x5, 0x6}}, @preq={0x82, 0x67, @not_ext={{0x0, 0x1}, 0x1, 0x3f, 0x400, @device_a, 0x7, "", 0x1f, 0x9, 0x7, [{{}, @broadcast, 0x80000001}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x1}, @device_a, 0x8000}, {{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0x11}, {{0x0, 0x0, 0x1}, @device_a, 0x2c9}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}]}}, @perr={0x84, 0xe2, {0x20, 0xe, [@not_ext={{}, @device_a, 0x8000, "", 0x35}, @not_ext={{}, @device_b, 0x200, "", 0x26}, @ext={{}, @device_b, 0x9, @device_b, 0x1a}, @not_ext={{}, @broadcast, 0x5, "", 0x3b}, @ext={{}, @broadcast, 0x2, @device_b, 0x10}, @ext={{}, @broadcast, 0x2, @device_a, 0x41}, @ext={{}, @device_b, 0x6, @device_b, 0x9}, @not_ext={{}, @device_b, 0x7fff, "", 0x1b}, @not_ext={{}, @device_a, 0x80, "", 0x17}, @not_ext={{}, @device_b, 0x6, "", 0xc}, @ext={{}, @device_b, 0x41, @broadcast, 0x3e}, @ext={{}, @device_a, 0x940, @broadcast, 0x1a}, @ext={{}, @broadcast, 0x0, @device_b, 0x22}, @not_ext={{}, @device_b, 0x0, "", 0x21}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="90f270027b8e"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x80}, 0x5) getsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0x4) [ 1118.428911] Bluetooth: hci9: Frame reassembly failed (-84) [ 1119.354591] Bluetooth: hci8 command 0x1001 tx timeout [ 1119.354637] Bluetooth: hci6 command 0x1001 tx timeout [ 1119.359988] Bluetooth: hci8 sending frame failed (-49) [ 1119.369358] Bluetooth: hci6 sending frame failed (-49) [ 1120.154445] Bluetooth: hci0 command 0x1009 tx timeout [ 1120.154473] Bluetooth: hci11 command 0x1009 tx timeout [ 1120.474440] Bluetooth: hci10 command 0x1003 tx timeout [ 1120.480317] Bluetooth: hci9 command 0x1003 tx timeout [ 1120.480362] Bluetooth: hci10 sending frame failed (-49) [ 1120.489421] Bluetooth: hci9 sending frame failed (-49) [ 1121.274331] Bluetooth: hci12 command 0x1003 tx timeout [ 1121.279860] Bluetooth: hci12 sending frame failed (-49) [ 1121.434402] Bluetooth: hci8 command 0x1009 tx timeout [ 1121.444281] Bluetooth: hci6 command 0x1009 tx timeout [ 1122.554271] Bluetooth: hci10 command 0x1001 tx timeout [ 1122.554287] Bluetooth: hci9 command 0x1001 tx timeout [ 1122.560606] Bluetooth: hci10 sending frame failed (-49) [ 1122.568820] Bluetooth: hci9 sending frame failed (-49) [ 1123.354165] Bluetooth: hci12 command 0x1001 tx timeout [ 1123.359594] Bluetooth: hci12 sending frame failed (-49) 14:35:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8001, 0x100000001, 0x8, 0x10001, 0x80, 0x4d46787a, 0x200, 0x4}, &(0x7f0000000100)={0x5, 0x5, 0x80000001, 0xb87, 0x8265, 0x101, 0x5, 0x4}, &(0x7f0000000140)={0xbfa, 0x7, 0xb5, 0x0, 0x6, 0x1f, 0x2, 0xffffffff9be2cb14}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xe31]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:35:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x10, 0x70bd25, 0x25dfdbfc, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x9, 0x9, 0xfffffffd, 0x1, 0x0, 0x7}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040001) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000001c0)={0x20, 0x3, 0x7, 0x4, 0x5}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1124.198605] Bluetooth: Unknown HCI packet type 5e [ 1124.198743] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1124.203533] Bluetooth: Unknown HCI packet type 43 [ 1124.224646] Bluetooth: Unknown HCI packet type 5e [ 1124.224855] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1124.229539] Bluetooth: Unknown HCI packet type 43 [ 1124.240533] Bluetooth: Unknown HCI packet type 5e [ 1124.248884] Bluetooth: Unknown HCI packet type 50 [ 1124.254643] Bluetooth: Unknown HCI packet type 5e [ 1124.259765] Bluetooth: Unknown HCI packet type 40 [ 1124.266018] Bluetooth: Unknown HCI packet type 5e [ 1124.272802] Bluetooth: Unknown HCI packet type 50 [ 1124.283474] Bluetooth: Unknown HCI packet type 5e [ 1124.292107] Bluetooth: Unknown HCI packet type 40 [ 1124.633982] Bluetooth: hci10 command 0x1009 tx timeout [ 1124.633985] Bluetooth: hci9 command 0x1009 tx timeout 14:35:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_pts(r0, 0x101000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:35:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1125.434005] Bluetooth: hci12 command 0x1009 tx timeout [ 1125.482606] Bluetooth: Unknown HCI packet type 5e [ 1125.491775] Bluetooth: Unknown HCI packet type 43 [ 1126.233774] Bluetooth: hci0 command 0x1003 tx timeout [ 1126.239158] Bluetooth: hci0 sending frame failed (-49) [ 1126.245611] Bluetooth: hci11 command 0x1003 tx timeout [ 1126.251092] Bluetooth: hci11 sending frame failed (-49) [ 1127.513677] Bluetooth: hci8 command 0x1003 tx timeout [ 1127.513680] Bluetooth: hci6 command 0x1003 tx timeout [ 1127.513765] Bluetooth: hci6 sending frame failed (-49) [ 1127.519042] Bluetooth: hci8 sending frame failed (-49) [ 1128.313613] Bluetooth: hci11 command 0x1001 tx timeout [ 1128.318961] Bluetooth: hci0 command 0x1001 tx timeout [ 1128.318989] Bluetooth: hci11 sending frame failed (-49) [ 1128.324660] Bluetooth: hci0 sending frame failed (-49) 14:35:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, 0x0) [ 1128.669704] Bluetooth: hci9: Frame reassembly failed (-84) 14:35:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000005c0)={0x5000, 0x1, 0x0, 0x3f, 0xe}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000540)=0xc) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000001c0)={0x0, 0x0, 0x32}) setuid(r4) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000580)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$qnx4(&(0x7f0000000000)='qnx4\x00', &(0x7f0000000080)='./file0\x00', 0x200, 0x0, &(0x7f00000002c0), 0x1008800, &(0x7f0000000280)={[{'\x00\x00\x00\x00\x80\x00\x00\x01\x00\x00'}, {'/dev/ptmx\x00'}, {'%$$$!**&,]'}], [{@subj_user={'subj_user', 0x3d, '#-'}}, {@obj_role={'obj_role', 0x3d, '\xf3\x00\x00\x00\x00\x00\x00\x00x\x00'}}, {@euid_lt={'euid<', r4}}, {@euid_gt={'euid>', r5}}, {@euid_lt={'euid<', r6}}, {@permit_directio='permit_directio'}]}) [ 1129.309133] Bluetooth: hci10 sending frame failed (-49) [ 1129.403316] qnx4: unable to read the superblock [ 1129.593465] Bluetooth: hci8 command 0x1001 tx timeout [ 1129.593468] Bluetooth: hci6 command 0x1001 tx timeout [ 1129.593604] Bluetooth: hci6 sending frame failed (-49) [ 1129.600392] Bluetooth: hci8 sending frame failed (-49) [ 1130.393382] Bluetooth: hci11 command 0x1009 tx timeout [ 1130.403848] Bluetooth: hci0 command 0x1009 tx timeout [ 1130.713314] Bluetooth: hci9 command 0x1003 tx timeout [ 1130.718623] Bluetooth: hci9 sending frame failed (-49) [ 1131.353352] Bluetooth: hci10 command 0x1003 tx timeout [ 1131.358734] Bluetooth: hci10 sending frame failed (-49) [ 1131.673316] Bluetooth: hci8 command 0x1009 tx timeout [ 1131.683261] Bluetooth: hci6 command 0x1009 tx timeout [ 1132.803156] Bluetooth: hci9 command 0x1001 tx timeout [ 1132.808435] Bluetooth: hci9 sending frame failed (-49) [ 1133.433157] Bluetooth: hci10 command 0x1001 tx timeout [ 1133.438593] Bluetooth: hci10 sending frame failed (-49) 14:35:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x3, 0x2, 0x1000, 0x8000, 0x2, "b05419ca5c3e1c42"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) read$char_raw(r3, &(0x7f0000000200)={""/40023}, 0x9e00) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:35:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2b) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:35:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6a6783, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:35:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1134.494355] Bluetooth: Unknown HCI packet type 5e [ 1134.494790] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1134.501233] Bluetooth: Unknown HCI packet type 43 [ 1134.534291] Bluetooth: Unknown HCI packet type 5e [ 1134.541774] Bluetooth: Unknown HCI packet type 50 [ 1134.548166] Bluetooth: Unknown HCI packet type 5e [ 1134.554647] Bluetooth: Unknown HCI packet type 40 [ 1134.872973] Bluetooth: hci9 command 0x1009 tx timeout [ 1135.512868] Bluetooth: hci10 command 0x1009 tx timeout 14:35:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:35:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000bb04f6f639a75fa6ec4522d60de29b0ea451c076f38ff4ca0e80c9ae969990f2b624eb126e1ee86e0c054044714223004c20eaf00c2ffe36379cd7108cf70df92360f7576a75898b1e865fe27cf9dd55b7d904e304c34d766ff4e7d45e48828df99cf5359e113a58086cc0e462ecc1c719f2c17c37764aac6d84b7e5c4e77f8d77f5fa0b946a8cefadd985687737a257d2f6af9a6eeb73ac3146b4025664b3890a1e93163cf40e7bbae7a0029e37f3c81a23641cfd661bf7063749247426c0aef8a26f656156b0fd3fa1620de197d34f0bc3b765f0f20ddd9b8b04d0a9ab1f83", @ANYRES16=r1, @ANYBLOB="00042bbd7000fcdbdf250a000000050038000100000008003a00ff01000008002b0003000000050038000000000008000600", @ANYRES32=r2, @ANYBLOB="08000b00030000000a0009000000000000000000050037000000000008003b00ffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x84, 0xd3, 0x800, 0x56, @ipv4={[], [], @local}, @private0={0xfc, 0x0, [], 0x1}, 0x0, 0x7800, 0x9, 0xb6d6}}) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1135.727344] Bluetooth: Unknown HCI packet type 5e [ 1135.733492] Bluetooth: Unknown HCI packet type 43 14:35:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:35:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000000)={0x2, 0x1, 0xa51, 0x8c5, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x7f, 0x10000000101}, &(0x7f0000000080)={0x3, 0x2, 0x81, 0x4, 0xffffffff, 0x80, 0x8, 0x101}, &(0x7f0000000240)={0x2000000000000008, 0x3d7c, 0x2, 0x1, 0x3, 0x6, 0xb653, 0x5}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1136.552829] Bluetooth: hci0 command 0x1003 tx timeout [ 1136.558901] Bluetooth: hci0 sending frame failed (-49) [ 1136.632778] Bluetooth: hci11 command 0x1003 tx timeout [ 1136.638229] Bluetooth: hci11 sending frame failed (-49) [ 1137.752614] Bluetooth: hci6 command 0x1003 tx timeout [ 1137.758828] Bluetooth: hci6 sending frame failed (-49) [ 1138.632544] Bluetooth: hci0 command 0x1001 tx timeout [ 1138.632638] Bluetooth: hci0 sending frame failed (-49) [ 1138.712538] Bluetooth: hci11 command 0x1001 tx timeout [ 1138.717895] Bluetooth: hci11 sending frame failed (-49) 14:36:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, 0x0) [ 1138.918071] Bluetooth: hci8: Frame reassembly failed (-84) 14:36:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x80000) [ 1139.548241] Bluetooth: hci9: Frame reassembly failed (-84) [ 1139.832423] Bluetooth: hci6 command 0x1001 tx timeout [ 1139.837820] Bluetooth: hci6 sending frame failed (-49) [ 1140.712359] Bluetooth: hci0 command 0x1009 tx timeout [ 1140.792318] Bluetooth: hci11 command 0x1009 tx timeout [ 1140.952277] Bluetooth: hci8 command 0x1003 tx timeout [ 1140.957611] Bluetooth: hci8 sending frame failed (-49) [ 1141.592185] Bluetooth: hci9 command 0x1003 tx timeout [ 1141.597495] Bluetooth: hci9 sending frame failed (-49) [ 1141.922237] Bluetooth: hci6 command 0x1009 tx timeout [ 1142.392147] Bluetooth: hci10 command 0x1003 tx timeout [ 1142.397533] Bluetooth: hci10 sending frame failed (-49) [ 1143.032133] Bluetooth: hci8 command 0x1001 tx timeout [ 1143.037453] Bluetooth: hci8 sending frame failed (-49) [ 1143.672054] Bluetooth: hci9 command 0x1001 tx timeout [ 1143.677427] Bluetooth: hci9 sending frame failed (-49) [ 1144.471951] Bluetooth: hci10 command 0x1001 tx timeout [ 1144.477326] Bluetooth: hci10 sending frame failed (-49) 14:36:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3b) 14:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:06 executing program 5: set_tid_address(&(0x7f00000005c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="600cbe4511ff43b59e5cfdc76d07d0de3650efb719b97acc3fd686d1c5e5a9f726372a64c69477f4d301aaf18c435aae78358015f86fcbfca2fb1b18717128756f6f6ed549272cbb415213dd53642bdd982aaabf76", 0x55, 0xa6b7}, {&(0x7f00000001c0)="c72a643745ee5d3934ec0e427a05e645efb5d006436152973a3d42fedc7ec8ed1c179a8bb10587604221a7f0b3fbd95c09c43a5f779228f535da7018425a0c7f02722f08cf2c35af5065e5e35bf0dddebb1c8c2d0405ede9e0086cd7bc38ea42f25125f8fc9ae7f623e0eede16ffe1f88e896bd93cdb6e68e1b89fc5330c315add5d77be75068baf9d7f6873deb66811807018eb50a04cb4ae336d8168d81b5df7a7d52c71b88cfb2647db509f454b0e23b53378432b025d7f8152bf1216c3ce0729b2ecb948727b58cbc39d9c72b8", 0xcf, 0x10000}, {&(0x7f00000002c0)="0f975bacd2b699470c7233864434774790a1adc40568ceab7e5923287a8a7069837896085eed8c69358cd2d5da039e24de4f70cd79fb8df67dba5c4fec1f27543f9406519f1ea3cb2b04b4ad46d96eee7d968b092512a843ca8c0276abd1635575b387fc4b9ec99d6a05177a278e1b1e3e4b8764ecdf0b8deacf7da9f553e61a652bd775dd0958e3b0cd777e214a46449d", 0x91, 0x1f}, {&(0x7f0000000380)="6b1aeca1ca71626e1a0e924db01f648f693a205af178ffe5333db8f1651a", 0x1e, 0x8f15}], 0x800040, &(0x7f0000000440)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c726f6f74636f6e746578753d757365725f752c6debf57b3dbc2feab3455845432c686f6e74657f000000000000007063400ff2b32dc681eb"]) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000004c0)={0xa, 0x0, [{0x80000019, 0x8, 0xd8, 0x0, 0x8}, {0xd, 0x4, 0x7fffffff, 0xffffff01, 0x101}, {0x8000001f, 0x6, 0xfffff800, 0x6, 0x180}, {0x80000007, 0x4, 0x7, 0x3, 0x78}, {0x3, 0x3ff, 0x3, 0x800, 0x8001}, {0x80000019, 0x5, 0x1, 0x8, 0x9}, {0x1, 0x1, 0xc0a, 0x5, 0x80000001}, {0x40000001, 0x7fffffff, 0x2, 0x200, 0x1500000}, {0x80000000, 0x0, 0x7, 0x8001, 0x102}, {0x1, 0x800, 0x0, 0x58, 0xf152}]}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x1401, 0x400, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4008010) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000700)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1144.695239] Bluetooth: Unknown HCI packet type 5e [ 1144.696660] Bluetooth: Unknown HCI packet type 3b [ 1144.700351] Bluetooth: Unknown HCI packet type 43 [ 1144.705665] Bluetooth: Unknown HCI packet type 5e [ 1144.717893] Bluetooth: Unknown HCI packet type 5e [ 1144.721243] Bluetooth: Unknown HCI packet type 43 [ 1144.730703] Bluetooth: Unknown HCI packet type 50 [ 1144.734472] Bluetooth: Unknown HCI packet type 5e [ 1144.740903] Bluetooth: Unknown HCI packet type 5e [ 1144.746113] Bluetooth: Unknown HCI packet type 40 [ 1144.751116] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1144.760562] Bluetooth: Unknown HCI packet type 50 [ 1144.769964] Bluetooth: Unknown HCI packet type 5e [ 1144.777256] Bluetooth: Unknown HCI packet type 40 [ 1145.111875] Bluetooth: hci8 command 0x1009 tx timeout [ 1145.751784] Bluetooth: hci9 command 0x1009 tx timeout 14:36:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:08 executing program 4: close(0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:08 executing program 4: close(0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:08 executing program 4: close(0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1146.561732] Bluetooth: hci10 command 0x1009 tx timeout [ 1146.711736] Bluetooth: hci11 command 0x1003 tx timeout [ 1146.717095] Bluetooth: hci0 command 0x1003 tx timeout [ 1146.717131] Bluetooth: hci11 sending frame failed (-49) [ 1146.722680] Bluetooth: hci0 sending frame failed (-49) [ 1148.791537] Bluetooth: hci11 command 0x1001 tx timeout [ 1148.791541] Bluetooth: hci0 command 0x1001 tx timeout [ 1148.791627] Bluetooth: hci0 sending frame failed (-49) [ 1148.798285] Bluetooth: hci11 sending frame failed (-49) 14:36:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, 0x0) 14:36:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) socket$inet(0x2, 0x2, 0x7ffe) socket$unix(0x1, 0xc, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r4) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000100)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) close(r1) [ 1150.419455] Bluetooth: hci8: Frame reassembly failed (-84) [ 1150.871287] Bluetooth: hci11 command 0x1009 tx timeout [ 1150.871335] Bluetooth: hci0 command 0x1009 tx timeout [ 1151.191249] Bluetooth: hci6 command 0x1003 tx timeout [ 1151.196586] Bluetooth: hci6 sending frame failed (-49) [ 1152.471094] Bluetooth: hci8 command 0x1003 tx timeout [ 1152.476513] Bluetooth: hci8 sending frame failed (-49) [ 1153.271063] Bluetooth: hci6 command 0x1001 tx timeout [ 1153.276350] Bluetooth: hci6 sending frame failed (-49) [ 1154.550921] Bluetooth: hci8 command 0x1001 tx timeout [ 1154.556228] Bluetooth: hci8 sending frame failed (-49) 14:36:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x28c083, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000100)="492ee0179ae3ca93be3fdcebf1232aaf4528c31d17a3a99b43ce226f5208cc80ed86097ef499313d7378649c9bc382a522b5c2ab952848c10a6f97cb728a6e4413374589ff81add413ad558db602091578f893ec90e48aaaccace730308c0d7d336c23b941288b8923687c12f5360b9caa465a25949a70bf2fd22ed47b") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000140)={0x0, "abdf07823c11d17b934c23564ad07a5c08429b1d48f9827240fa6373b16df87d4ba235bc703573a60c5244b3e726f0e4888a38c4459256c813b630830ca87310", 0x37}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0xfffffffffffffffc, 0x0) sysfs$3(0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0xe) 14:36:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1154.912473] Bluetooth: Unknown HCI packet type 5e [ 1154.917534] Bluetooth: Unknown HCI packet type 43 [ 1154.927080] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1154.938946] Bluetooth: Unknown HCI packet type 5e [ 1154.948131] Bluetooth: Unknown HCI packet type 5e [ 1154.950251] Bluetooth: Unknown HCI packet type 50 14:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1154.956718] Bluetooth: Unknown HCI packet type 0e [ 1154.968611] Bluetooth: Unknown HCI packet type 5e [ 1154.972356] Bluetooth: Unknown HCI packet type 43 [ 1154.977196] Bluetooth: Unknown HCI packet type 40 [ 1154.982877] Bluetooth: Unknown HCI packet type 5e [ 1154.993804] Bluetooth: Unknown HCI packet type 50 14:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) [ 1155.008267] Bluetooth: Unknown HCI packet type 5e [ 1155.029574] Bluetooth: Unknown HCI packet type 40 14:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1155.350787] Bluetooth: hci6 command 0x1009 tx timeout [ 1156.640686] Bluetooth: hci8 command 0x1009 tx timeout [ 1156.960687] Bluetooth: hci9 command 0x1003 tx timeout [ 1156.966062] Bluetooth: hci9 sending frame failed (-49) [ 1156.972170] Bluetooth: hci0 command 0x1003 tx timeout [ 1156.977458] Bluetooth: hci0 sending frame failed (-49) [ 1159.030464] Bluetooth: hci9 command 0x1001 tx timeout [ 1159.030467] Bluetooth: hci0 command 0x1001 tx timeout [ 1159.030555] Bluetooth: hci0 sending frame failed (-49) [ 1159.036212] Bluetooth: hci9 sending frame failed (-49) 14:36:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)) [ 1159.385925] Bluetooth: hci6: Frame reassembly failed (-84) [ 1159.394652] Bluetooth: hci6: Frame reassembly failed (-84) [ 1159.396767] Bluetooth: hci6: Frame reassembly failed (-84) 14:36:22 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'gre0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) close(r2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$isdn(r3, &(0x7f0000000100)={0x22, 0x3, 0x40, 0x3, 0x20}, 0x6) [ 1160.660529] Bluetooth: hci8: Frame reassembly failed (-84) [ 1161.110275] Bluetooth: hci0 command 0x1009 tx timeout [ 1161.110279] Bluetooth: hci9 command 0x1009 tx timeout [ 1161.440288] Bluetooth: hci6 command 0x1003 tx timeout [ 1161.445873] Bluetooth: hci6 sending frame failed (-49) [ 1162.710080] Bluetooth: hci8 command 0x1003 tx timeout [ 1162.715411] Bluetooth: hci8 sending frame failed (-49) [ 1163.520016] Bluetooth: hci10 command 0x1003 tx timeout [ 1163.525431] Bluetooth: hci10 sending frame failed (-49) [ 1163.530866] Bluetooth: hci6 command 0x1001 tx timeout [ 1163.536215] Bluetooth: hci6 sending frame failed (-49) [ 1164.789972] Bluetooth: hci8 command 0x1001 tx timeout [ 1164.795636] Bluetooth: hci8 sending frame failed (-49) 14:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000080)=""/56) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(0xffffffffffffffff) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) 14:36:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:36:27 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x1a) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/139) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r1}, 0xc) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r2, 0x20000) get_mempolicy(&(0x7f0000000080), &(0x7f00000001c0), 0x4, &(0x7f0000ffe000/0x1000)=nil, 0x5) [ 1165.171916] Bluetooth: Unknown HCI packet type 5e [ 1165.177598] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1165.184755] Bluetooth: Unknown HCI packet type 43 [ 1165.193421] Bluetooth: Unknown HCI packet type 5e [ 1165.205491] Bluetooth: Unknown HCI packet type 50 14:36:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) [ 1165.219605] Bluetooth: Unknown HCI packet type 5e 14:36:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x8, 0xc, 0x5, 0x77195e67, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @loopback}}, 0xad8a, 0x9}, &(0x7f0000000200)=0x90) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) [ 1165.250362] Bluetooth: Unknown HCI packet type 40 14:36:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:36:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1165.324172] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1165.330915] Bluetooth: Unknown HCI packet type 5e [ 1165.335877] Bluetooth: Unknown HCI packet type 43 [ 1165.362957] Bluetooth: Unknown HCI packet type 5e [ 1165.377554] Bluetooth: Unknown HCI packet type 50 [ 1165.382926] Bluetooth: Unknown HCI packet type 5e [ 1165.387867] Bluetooth: Unknown HCI packet type 40 [ 1165.589828] Bluetooth: hci6 command 0x1009 tx timeout [ 1165.600422] Bluetooth: hci10 command 0x1001 tx timeout [ 1165.605814] Bluetooth: hci10 sending frame failed (-49) [ 1166.869690] Bluetooth: hci8 command 0x1009 tx timeout [ 1167.189643] Bluetooth: hci0 command 0x1003 tx timeout [ 1167.194956] Bluetooth: hci0 sending frame failed (-49) [ 1167.349618] Bluetooth: hci9 command 0x1003 tx timeout [ 1167.349688] Bluetooth: hci9 sending frame failed (-49) [ 1167.669710] Bluetooth: hci10 command 0x1009 tx timeout [ 1169.269501] Bluetooth: hci0 command 0x1001 tx timeout [ 1169.274796] Bluetooth: hci0 sending frame failed (-49) [ 1169.439462] Bluetooth: hci9 command 0x1001 tx timeout [ 1169.444740] Bluetooth: hci9 sending frame failed (-49) 14:36:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) [ 1171.349300] Bluetooth: hci0 command 0x1009 tx timeout 14:36:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x2, 0x1, &(0x7f0000000100)=""/118, &(0x7f0000000180)=""/9, &(0x7f00000001c0)=""/70, 0x6000}) close(r0) [ 1171.509344] Bluetooth: hci9 command 0x1009 tx timeout [ 1171.536159] Bluetooth: hci6: Frame reassembly failed (-84) [ 1173.589040] Bluetooth: hci6 command 0x1003 tx timeout [ 1173.594371] Bluetooth: hci6 sending frame failed (-49) 14:36:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x941eacbe10aa5ded) ioctl$UI_DEV_CREATE(r1, 0x5501) 14:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, 0x0, 0x0) 14:36:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x19) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x4000, 0x0) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x40002bb) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, 0x0, 0x0) [ 1175.426750] Bluetooth: Unknown HCI packet type 5e [ 1175.442106] Bluetooth: Unknown HCI packet type 43 [ 1175.458495] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1175.460601] Bluetooth: Unknown HCI packet type 5e [ 1175.470792] Bluetooth: Unknown HCI packet type 19 14:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1175.481090] Bluetooth: Unknown HCI packet type 5e [ 1175.481131] Bluetooth: Unknown HCI packet type 5e [ 1175.492495] Bluetooth: Unknown HCI packet type 50 [ 1175.502343] Bluetooth: Unknown HCI packet type 43 [ 1175.514521] Bluetooth: Unknown HCI packet type 5e [ 1175.520984] Bluetooth: Unknown HCI packet type 5e 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, 0x0, 0x0) 14:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100), 0x8) [ 1175.539139] Bluetooth: Unknown HCI packet type 50 [ 1175.548685] Bluetooth: Unknown HCI packet type 40 [ 1175.564370] Bluetooth: Unknown HCI packet type 5e [ 1175.579212] Bluetooth: Unknown HCI packet type 40 [ 1175.668816] Bluetooth: hci6 command 0x1001 tx timeout [ 1175.674238] Bluetooth: hci6 sending frame failed (-49) [ 1177.428658] Bluetooth: hci0 command 0x1003 tx timeout [ 1177.434006] Bluetooth: hci0 sending frame failed (-49) [ 1177.508622] Bluetooth: hci9 command 0x1003 tx timeout [ 1177.508693] Bluetooth: hci8 command 0x1003 tx timeout [ 1177.513953] Bluetooth: hci9 sending frame failed (-49) [ 1177.524361] Bluetooth: hci8 sending frame failed (-49) [ 1177.748658] Bluetooth: hci6 command 0x1009 tx timeout [ 1179.508518] Bluetooth: hci0 command 0x1001 tx timeout [ 1179.514540] Bluetooth: hci0 sending frame failed (-49) [ 1179.588482] Bluetooth: hci9 command 0x1001 tx timeout [ 1179.593927] Bluetooth: hci9 sending frame failed (-49) [ 1179.599412] Bluetooth: hci8 command 0x1001 tx timeout [ 1179.604674] Bluetooth: hci8 sending frame failed (-49) [ 1181.588304] Bluetooth: hci0 command 0x1009 tx timeout [ 1181.668284] Bluetooth: hci8 command 0x1009 tx timeout [ 1181.668301] Bluetooth: hci9 command 0x1009 tx timeout 14:36:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1181.809828] Bluetooth: Unknown HCI packet type 5e [ 1181.814784] Bluetooth: Unknown HCI packet type 43 [ 1181.827187] Bluetooth: Unknown HCI packet type 5e [ 1181.867213] Bluetooth: Unknown HCI packet type 50 [ 1181.872292] Bluetooth: Unknown HCI packet type 5e [ 1181.877248] Bluetooth: Unknown HCI packet type 40 [ 1181.919501] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1183.828079] Bluetooth: hci6 command 0x1003 tx timeout [ 1183.833410] Bluetooth: hci6 sending frame failed (-49) 14:36:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDADDIO(r0, 0x4b34, 0x100) 14:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:36:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000440)={0xff, 0x800, 0xff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000004c0)={0x3c, 0xf, 0x15, 0xa, 0x0, 0xa9a2, 0x5, 0x11, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x2f4, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="abaea9d83e4804e69bf985ec27eedbd6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61cd4133acbda355"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7ed7d2de836194e393233babd9a9e1c57bc248c3ba18f81fbc6c199b84cf2e78"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7e15c30edfc218af"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0c04d9ba14bc2f55a629d553c9a2eb6e"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f790d47169b64b38"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3b4d8d831e40312d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a185069d4fc299e2c57f08a7f033d3f8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5d01c5891994c4bb515eab834e688b5ed522a78cfc3c3e01d410f0fabe8595ee"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "392d018a684c9c65"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e32b13e82e9100c6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4deeaa9b737cde1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ee408f7eb3bfda699c63bbb09d4556aa2bd8ea70235a070e4accd65c8d7f84a5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="191fa3000c87a9e1944e6c5cdce9d9b11f86b193d3be9316da50c981a60549e4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5fda26f77ae7cf4c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d5ef9f15d4ef49aab524bfd6003a78df"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7885ce2dea0ac127186615c513fc0d1e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e5229a68f478c2c4bd5a7ac5490c39ecb87bd8943e3bc6f2"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="904a9f4fb064eff03833e532e4d03d1e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f00cdbdbfa0d086bbf962d2ce3fa5acee01b2a029772e9663680baa85ff2a4b"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0dbee128e4588dab7180f55ff0e966c0e394a0866280d8a69d8be2c97fdc73c4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52bad296714278e2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="42314bb2b7e373467c90bd2fea5ecc72"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="88a878f4bdb91bb593a8f629471ad357766a0fcd0e5b81ed"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="307625c9aa8c9c241ebdbb2737b5709685cf6c39731a9ecd11c94dc9197862f2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8edf76adb9363bcfeb8cb8806b0cd9da"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32396ed02898e79c"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d5d919b2d097085b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "06115014b3332691"}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000d0) close(r0) 14:36:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x0, 0x5, 0x80000001, 0x800, 0xa5, "28e1724f79e2be320791892abac8e537a19e82", 0xd7a, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:36:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1185.684892] Bluetooth: Unknown HCI packet type 5e [ 1185.690464] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1185.690521] Bluetooth: Unknown HCI packet type 43 [ 1185.723507] Bluetooth: hci9: Frame reassembly failed (-84) [ 1185.726731] Bluetooth: Unknown HCI packet type 5e 14:36:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1185.729584] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1185.743893] Bluetooth: Unknown HCI packet type 50 [ 1185.771446] Bluetooth: Unknown HCI packet type 5e [ 1185.776554] Bluetooth: Unknown HCI packet type 40 14:36:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1185.795633] Bluetooth: Unknown HCI packet type 5e 14:36:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1185.907974] Bluetooth: hci6 command 0x1001 tx timeout [ 1185.919619] Bluetooth: hci6 sending frame failed (-49) [ 1186.468869] Bluetooth: hci11: Frame reassembly failed (-84) [ 1187.747653] Bluetooth: hci8 command 0x1003 tx timeout [ 1187.752941] Bluetooth: hci0 command 0x1003 tx timeout [ 1187.752999] Bluetooth: hci8 sending frame failed (-49) [ 1187.759795] Bluetooth: hci0 sending frame failed (-49) [ 1187.763587] Bluetooth: hci9 command 0x1003 tx timeout [ 1187.774153] Bluetooth: hci9 sending frame failed (-49) [ 1187.827639] Bluetooth: hci10 command 0x1003 tx timeout [ 1187.833105] Bluetooth: hci10 sending frame failed (-49) [ 1187.987655] Bluetooth: hci6 command 0x1009 tx timeout [ 1188.547546] Bluetooth: hci11 command 0x1003 tx timeout [ 1188.556223] Bluetooth: hci11 sending frame failed (-49) [ 1189.827490] Bluetooth: hci9 command 0x1001 tx timeout [ 1189.827501] Bluetooth: hci8 command 0x1001 tx timeout [ 1189.832813] Bluetooth: hci9 sending frame failed (-49) [ 1189.843940] Bluetooth: hci8 sending frame failed (-49) [ 1189.844890] Bluetooth: hci0 command 0x1001 tx timeout [ 1189.854604] Bluetooth: hci0 sending frame failed (-49) [ 1189.907474] Bluetooth: hci10 command 0x1001 tx timeout [ 1189.912857] Bluetooth: hci10 sending frame failed (-49) [ 1190.627389] Bluetooth: hci11 command 0x1001 tx timeout [ 1190.632777] Bluetooth: hci11 sending frame failed (-49) [ 1191.907271] Bluetooth: hci9 command 0x1009 tx timeout [ 1191.907275] Bluetooth: hci0 command 0x1009 tx timeout [ 1191.907321] Bluetooth: hci8 command 0x1009 tx timeout 14:36:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1191.997365] Bluetooth: hci10 command 0x1009 tx timeout [ 1192.707187] Bluetooth: hci11 command 0x1009 tx timeout 14:36:58 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) write$input_event(r0, &(0x7f00000004c0)={{0x77359400}, 0x14, 0x4, 0xf97d}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f0000000340)=""/84, 0x54}], 0x3, &(0x7f00000003c0)=""/176, 0xb0}, 0x12002) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:36:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1195.880176] Bluetooth: Unknown HCI packet type 5e [ 1195.880653] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1195.885116] Bluetooth: Unknown HCI packet type 43 [ 1195.898972] Bluetooth: Unknown HCI packet type 5e [ 1195.903918] Bluetooth: Unknown HCI packet type 50 [ 1195.910805] Bluetooth: Unknown HCI packet type 5e [ 1195.915974] Bluetooth: Unknown HCI packet type 40 14:36:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) close(r0) uname(&(0x7f0000000000)=""/64) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x8aa7, 0x48200) ioctl$RTC_UIE_ON(r3, 0x7003) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) r4 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0xa49a, 0x34bc82) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000140)) 14:36:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x101, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:36:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:36:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:36:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1197.159104] Bluetooth: Unknown HCI packet type 5e [ 1197.169412] Bluetooth: Unknown HCI packet type 5e [ 1197.174433] Bluetooth: Unknown HCI packet type 43 [ 1197.179708] Bluetooth: Unknown HCI packet type 5e [ 1197.180974] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1197.185855] Bluetooth: Unknown HCI packet type 43 [ 1197.198311] Bluetooth: Unknown HCI packet type 5e [ 1197.218742] Bluetooth: hci10: Frame reassembly failed (-84) [ 1197.230521] Bluetooth: Unknown HCI packet type 50 14:36:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1197.259607] Bluetooth: Unknown HCI packet type 5e [ 1197.272607] Bluetooth: Unknown HCI packet type 40 [ 1197.295655] Bluetooth: hci11: Frame reassembly failed (-84) [ 1197.906683] Bluetooth: hci0 command 0x1003 tx timeout [ 1197.912749] Bluetooth: hci0 sending frame failed (-49) [ 1199.186569] Bluetooth: hci8 command 0x1003 tx timeout [ 1199.186572] Bluetooth: hci9 command 0x1003 tx timeout [ 1199.186596] Bluetooth: hci6 command 0x1003 tx timeout [ 1199.191871] Bluetooth: hci9 sending frame failed (-49) [ 1199.197060] Bluetooth: hci8 sending frame failed (-49) [ 1199.212865] Bluetooth: hci6 sending frame failed (-49) [ 1199.276670] Bluetooth: hci10 command 0x1003 tx timeout [ 1199.282169] Bluetooth: hci10 sending frame failed (-49) [ 1199.346533] Bluetooth: hci11 command 0x1003 tx timeout [ 1199.351969] Bluetooth: hci11 sending frame failed (-49) [ 1199.986506] Bluetooth: hci0 command 0x1001 tx timeout [ 1199.991861] Bluetooth: hci0 sending frame failed (-49) [ 1201.266331] Bluetooth: hci6 command 0x1001 tx timeout [ 1201.266352] Bluetooth: hci8 command 0x1001 tx timeout [ 1201.271661] Bluetooth: hci9 command 0x1001 tx timeout [ 1201.276912] Bluetooth: hci6 sending frame failed (-49) [ 1201.287499] Bluetooth: hci8 sending frame failed (-49) [ 1201.288521] Bluetooth: hci9 sending frame failed (-49) [ 1201.346446] Bluetooth: hci10 command 0x1001 tx timeout [ 1201.351832] Bluetooth: hci10 sending frame failed (-49) [ 1201.426303] Bluetooth: hci11 command 0x1001 tx timeout [ 1201.431671] Bluetooth: hci11 sending frame failed (-49) [ 1202.066455] Bluetooth: hci0 command 0x1009 tx timeout [ 1203.346189] Bluetooth: hci8 command 0x1009 tx timeout [ 1203.346265] Bluetooth: hci9 command 0x1009 tx timeout [ 1203.351459] Bluetooth: hci6 command 0x1009 tx timeout [ 1203.426285] Bluetooth: hci10 command 0x1009 tx timeout [ 1203.506198] Bluetooth: hci11 command 0x1009 tx timeout 14:37:08 executing program 2: ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbcbc, 0x10000}}, 0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r4 = getegid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)={0xb8, 0x0, 0x0, [{{0x5, 0x3, 0x8, 0x5, 0x8000, 0x3f, {0x2, 0x4, 0xc2d, 0x9, 0x1000, 0xe0f, 0x8, 0x5, 0x7, 0x2000, 0x4, r3, r4, 0x1, 0x10000}}, {0x0, 0x8, 0xa, 0x1, '/dev/ptmx\x00'}}]}, 0xb8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1206.123071] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1206.129021] Bluetooth: Unknown HCI packet type 5e [ 1206.133886] Bluetooth: Unknown HCI packet type 43 [ 1206.140580] Bluetooth: Unknown HCI packet type 5e [ 1206.148694] Bluetooth: Unknown HCI packet type 50 [ 1206.158190] Bluetooth: Unknown HCI packet type 5e [ 1206.163139] Bluetooth: Unknown HCI packet type 40 14:37:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r0) 14:37:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x311142, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$setlease(r0, 0x400, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/137}) r1 = syz_open_pts(r0, 0x30080) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000280)=@usbdevfs_disconnect={0x8}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000300)={0x10000, "52e38af25cfb75da9c711177644d2c1fe5219fda0bbee7b3b6efaf8160571902", 0x3, 0x1, 0x4, 0x200000, 0x4050000, 0x2}) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x3) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'batadv_slave_1\x00', 0x2}, 0x18) 14:37:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) [ 1207.429517] Bluetooth: Unknown HCI packet type 5e [ 1207.431040] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1207.434521] Bluetooth: Unknown HCI packet type 43 [ 1207.457072] Bluetooth: hci8: Frame reassembly failed (-84) [ 1207.465108] Bluetooth: hci9: Frame reassembly failed (-84) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:09 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/145) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1207.478302] Bluetooth: Unknown HCI packet type 5e [ 1207.491048] Bluetooth: Unknown HCI packet type 50 [ 1207.504088] Bluetooth: Unknown HCI packet type 5e [ 1207.521338] Bluetooth: Unknown HCI packet type 40 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1207.552650] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1207.558629] Bluetooth: Unknown HCI packet type 5e [ 1207.564904] Bluetooth: Unknown HCI packet type 43 [ 1207.576086] Bluetooth: Unknown HCI packet type 5e [ 1207.585420] Bluetooth: Unknown HCI packet type 50 [ 1207.597643] Bluetooth: Unknown HCI packet type 5e [ 1207.609656] Bluetooth: Unknown HCI packet type 40 [ 1208.155691] Bluetooth: hci0 command 0x1003 tx timeout [ 1208.161910] Bluetooth: hci0 sending frame failed (-49) [ 1209.505533] Bluetooth: hci8 command 0x1003 tx timeout [ 1209.505537] Bluetooth: hci9 command 0x1003 tx timeout [ 1209.505616] Bluetooth: hci9 sending frame failed (-49) [ 1209.510849] Bluetooth: hci6 command 0x1003 tx timeout [ 1209.516070] Bluetooth: hci8 sending frame failed (-49) [ 1209.521729] Bluetooth: hci6 sending frame failed (-49) [ 1209.585537] Bluetooth: hci10 command 0x1003 tx timeout [ 1209.592079] Bluetooth: hci10 sending frame failed (-49) [ 1209.665520] Bluetooth: hci11 command 0x1003 tx timeout [ 1209.670988] Bluetooth: hci11 sending frame failed (-49) [ 1210.225480] Bluetooth: hci0 command 0x1001 tx timeout [ 1210.230832] Bluetooth: hci0 sending frame failed (-49) [ 1211.585355] Bluetooth: hci8 command 0x1001 tx timeout [ 1211.585373] Bluetooth: hci6 command 0x1001 tx timeout [ 1211.590611] Bluetooth: hci9 command 0x1001 tx timeout [ 1211.595867] Bluetooth: hci8 sending frame failed (-49) [ 1211.606446] Bluetooth: hci6 sending frame failed (-49) [ 1211.608420] Bluetooth: hci9 sending frame failed (-49) [ 1211.665376] Bluetooth: hci10 command 0x1001 tx timeout [ 1211.670794] Bluetooth: hci10 sending frame failed (-49) [ 1211.745417] Bluetooth: hci11 command 0x1001 tx timeout [ 1211.751510] Bluetooth: hci11 sending frame failed (-49) [ 1212.305285] Bluetooth: hci0 command 0x1009 tx timeout [ 1213.665201] Bluetooth: hci6 command 0x1009 tx timeout [ 1213.665206] Bluetooth: hci9 command 0x1009 tx timeout [ 1213.675790] Bluetooth: hci8 command 0x1009 tx timeout [ 1213.745211] Bluetooth: hci10 command 0x1009 tx timeout [ 1213.825240] Bluetooth: hci11 command 0x1009 tx timeout 14:37:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x225002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0xa100) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:37:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000003c0)=0x2, 0x6) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000100)={[0x80, 0x100000001, 0x3, 0x4, 0xffffffff, 0x2, 0x80, 0x8, 0xffffffffffff8000, 0xfffffffffffffffb, 0x1, 0x8001, 0x7, 0xd7f, 0x8, 0x5], 0x2000, 0x2a0000}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000080)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/84}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) r6 = openat$cgroup_ro(r4, &(0x7f0000000500)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b00fcffffff06001100000100000e0001006e650300657673696d0000000f0002006e657464657673696d30000008000b000200000006001100000000000e0001006e657464657673696d0000f0ed21dad56a26f0b73863000f0002006e657464657673696d30000008000b00feffffff0600110000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x810) [ 1217.211925] Bluetooth: Unknown HCI packet type 5e [ 1217.221664] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1217.228476] Bluetooth: Unknown HCI packet type 43 [ 1217.233336] Bluetooth: Unknown HCI packet type 5e [ 1217.241086] Bluetooth: Unknown HCI packet type 50 [ 1217.246103] Bluetooth: Unknown HCI packet type 5e [ 1217.250935] Bluetooth: Unknown HCI packet type 40 14:37:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:37:19 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0xa}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) 14:37:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x1b) 14:37:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x101, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1217.661611] Bluetooth: Unknown HCI packet type 5e [ 1217.662553] Bluetooth: hci8: Frame reassembly failed (-84) [ 1217.667847] Bluetooth: Unknown HCI packet type 43 [ 1217.683438] Bluetooth: Unknown HCI packet type 5e [ 1217.689441] Bluetooth: Unknown HCI packet type 50 [ 1217.695812] Bluetooth: Unknown HCI packet type 5e [ 1217.697863] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1217.702904] Bluetooth: Unknown HCI packet type 43 [ 1217.712819] Bluetooth: Unknown HCI packet type 5e [ 1217.719479] Bluetooth: Unknown HCI packet type 5e [ 1217.724435] Bluetooth: Unknown HCI packet type 50 [ 1217.731117] Bluetooth: Unknown HCI packet type 40 [ 1217.736889] Bluetooth: Unknown HCI packet type 5e [ 1217.741899] Bluetooth: Unknown HCI packet type 40 14:37:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1218.274472] Bluetooth: Unknown HCI packet type 5e [ 1218.286464] Bluetooth: Unknown HCI packet type 43 [ 1219.264630] Bluetooth: hci0 command 0x1003 tx timeout [ 1219.270060] Bluetooth: hci0 sending frame failed (-49) [ 1219.664628] Bluetooth: hci8 command 0x1003 tx timeout [ 1219.669963] Bluetooth: hci6 command 0x1003 tx timeout [ 1219.670020] Bluetooth: hci8 sending frame failed (-49) [ 1219.680314] Bluetooth: hci6 sending frame failed (-49) [ 1219.744593] Bluetooth: hci10 command 0x1003 tx timeout [ 1219.750116] Bluetooth: hci10 sending frame failed (-49) [ 1219.754514] Bluetooth: hci9 command 0x1003 tx timeout [ 1219.760776] Bluetooth: hci9 sending frame failed (-49) [ 1220.304568] Bluetooth: hci11 command 0x1003 tx timeout [ 1220.310116] Bluetooth: hci11 sending frame failed (-49) [ 1221.344451] Bluetooth: hci0 command 0x1001 tx timeout [ 1221.349885] Bluetooth: hci0 sending frame failed (-49) [ 1221.744350] Bluetooth: hci8 command 0x1001 tx timeout [ 1221.744365] Bluetooth: hci6 command 0x1001 tx timeout [ 1221.754938] Bluetooth: hci8 sending frame failed (-49) [ 1221.760314] Bluetooth: hci6 sending frame failed (-49) [ 1221.824448] Bluetooth: hci9 command 0x1001 tx timeout [ 1221.829685] Bluetooth: hci10 command 0x1001 tx timeout [ 1221.829748] Bluetooth: hci9 sending frame failed (-49) [ 1221.836324] Bluetooth: hci10 sending frame failed (-49) [ 1222.384327] Bluetooth: hci11 command 0x1001 tx timeout [ 1222.389998] Bluetooth: hci11 sending frame failed (-49) [ 1223.424241] Bluetooth: hci0 command 0x1009 tx timeout [ 1223.824326] Bluetooth: hci8 command 0x1009 tx timeout [ 1223.834727] Bluetooth: hci6 command 0x1009 tx timeout [ 1223.904275] Bluetooth: hci10 command 0x1009 tx timeout [ 1223.914762] Bluetooth: hci9 command 0x1009 tx timeout [ 1224.464169] Bluetooth: hci11 command 0x1009 tx timeout 14:37:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x33) 14:37:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:37:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/108) 14:37:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:37:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x8) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000500)={0x5, 0x6, 0x7, 0x3ff, 0x1f}) close(r0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)={0x38, 0x3, &(0x7f0000000100)="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"}) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) [ 1227.934810] Bluetooth: Unknown HCI packet type 5e [ 1227.934948] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1227.949449] Bluetooth: Unknown HCI packet type 43 14:37:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x3, 0x6}, 0x8) close(r4) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0x40, 0x6, 0x400, 0x6248}) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) read$sequencer(r2, &(0x7f0000001200)=""/4119, 0x1017) [ 1227.974972] Bluetooth: hci8: Frame reassembly failed (-84) [ 1227.975033] Bluetooth: hci8: Frame reassembly failed (-84) [ 1227.989544] Bluetooth: Unknown HCI packet type 5e [ 1228.006821] Bluetooth: Unknown HCI packet type 50 [ 1228.018177] Bluetooth: Unknown HCI packet type 5e [ 1228.038591] Bluetooth: Unknown HCI packet type 40 [ 1228.097528] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1228.104174] Bluetooth: Unknown HCI packet type 5e [ 1228.110527] Bluetooth: Unknown HCI packet type 43 [ 1228.117536] Bluetooth: Unknown HCI packet type 5e [ 1228.122390] Bluetooth: Unknown HCI packet type 50 [ 1228.133386] Bluetooth: Unknown HCI packet type 5e [ 1228.139037] Bluetooth: Unknown HCI packet type 40 14:37:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1228.509508] Bluetooth: Unknown HCI packet type 5e [ 1229.983603] Bluetooth: hci0 command 0x1003 tx timeout [ 1229.983704] Bluetooth: hci8 command 0x1003 tx timeout [ 1229.994612] Bluetooth: hci8 sending frame failed (-49) [ 1229.995317] Bluetooth: hci0 sending frame failed (-49) [ 1230.000112] Bluetooth: hci6 command 0x1003 tx timeout [ 1230.013437] Bluetooth: hci6 sending frame failed (-49) [ 1230.063628] Bluetooth: hci9 command 0x1003 tx timeout [ 1230.068979] Bluetooth: hci9 sending frame failed (-49) [ 1230.143718] Bluetooth: hci10 command 0x1003 tx timeout [ 1230.149185] Bluetooth: hci10 sending frame failed (-49) [ 1230.543656] Bluetooth: hci11 command 0x1003 tx timeout [ 1230.549166] Bluetooth: hci11 sending frame failed (-49) [ 1232.063421] Bluetooth: hci6 command 0x1001 tx timeout [ 1232.063528] Bluetooth: hci8 command 0x1001 tx timeout [ 1232.074355] Bluetooth: hci8 sending frame failed (-49) [ 1232.075104] Bluetooth: hci0 command 0x1001 tx timeout [ 1232.079680] Bluetooth: hci6 sending frame failed (-49) [ 1232.090701] Bluetooth: hci0 sending frame failed (-49) [ 1232.143482] Bluetooth: hci9 command 0x1001 tx timeout [ 1232.148781] Bluetooth: hci9 sending frame failed (-49) [ 1232.233472] Bluetooth: hci10 command 0x1001 tx timeout [ 1232.238868] Bluetooth: hci10 sending frame failed (-49) [ 1232.623512] Bluetooth: hci11 command 0x1001 tx timeout [ 1232.628946] Bluetooth: hci11 sending frame failed (-49) [ 1234.153393] Bluetooth: hci0 command 0x1009 tx timeout [ 1234.158786] Bluetooth: hci6 command 0x1009 tx timeout [ 1234.164071] Bluetooth: hci8 command 0x1009 tx timeout [ 1234.223233] Bluetooth: hci9 command 0x1009 tx timeout [ 1234.303247] Bluetooth: hci10 command 0x1009 tx timeout [ 1234.703211] Bluetooth: hci11 command 0x1009 tx timeout 14:37:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) fadvise64(r0, 0x7fff, 0x3f, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101040, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/102) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000180)=0xcb5, 0x4) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="ca05833ecea54217e05c6e93e3a5485ae962597aba70b141192532953e17b68bb698674fd4ebdfde0f146bbaf232f4075c33e6747925173cf104e5a8f157559643fcba3fa9440f10f8de728609dce656df383fdc19266125c0f4746d209039adadff6724b4013b59f44543508388a02f9a664aafb7fc5e3b413609df7125187414", 0x81, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)="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", 0x109, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000980)={r3, r4, r3}, 0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={'crc32\x00'}}) keyctl$read(0xb, r3, &(0x7f00000001c0)=""/38, 0x26) 14:37:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000240)=0x6) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000209c7840000000000000000000208000640000000010900010073797a310000000008000540000000060c0004800800014000000007080006400000000008000540000000020800064000000001080006400000000008000640000000010000"], 0x64}}, 0x40c0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000280)={0x8, 0x8, 0x2, 0x80000000, 0xc, "94412b21df9906bb571fbbcb1522db6f571f42"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000002c0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x12000, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000003c0)="4d05ae0994e7a9b4eb3350152a3e6343327750f0313da079f51f2318a2169cdcea23ba8a212295429b959c8fb01d998e9576f821a8bd848b09abf031c8926090827b66738001e3ab5a8161008bb96411772d4aa601d54be8fdf28aa9bc30a1e22b9b17100bc29936dbfc4b9fea00d01e10b22ef039a50c9736f147c6db3792019f2f6624eb179a7f8fb57eb02a3c93dc87365b49f0a7cce7e871192c90144bee001307035ab39a397973bb3fa178c6b8e5f65e3a556cf929") setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0xfff, @mcast2, 0x7fffffff}, {0xa, 0x4e20, 0xffffff3f, @local, 0xbac}, 0x7, [0x9, 0x0, 0x7fff, 0x9, 0x8000, 0x81, 0x4, 0x6]}, 0x5c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) connect$nfc_llcp(r5, &(0x7f0000000300)={0x27, 0x0, 0x2, 0x7, 0x81, 0x7d, "5398ecc61a3f577d072b2ad749033adae4fd2dad72b274462797d8c31a19b375725af0393344109bdea71802dd18a28981ba2e1517f4d93ab82a4d2394397a", 0x25}, 0x60) 14:37:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:37:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002180)='/dev/vcsa#\x00', 0x9, 0x400) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000002800)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x881}, 0x8001) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000002940)=ANY=[@ANYBLOB="6c0c00060000000000000000000000000000000000000001fc010000000000000000000000000000fc0100000000000000ffffffffffffffff0000000013fc010000000000000000000000000001fe800000000000100000000000bb0000b252c7d54f215e0246efabd9d37423d87d6bdbbc5abc10c8f3d21f60804bd830b613ea8d99842e61accbef705d1504438e77f347a1e17c4f7a2e66534704322155efd3b70e8a644151dd27b662d773674b33b701d37ea8f712f5dca2b6b751bd7f17acabbf3ba3f00d4b24d45e5924f3ad6c72be29"], 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r3 = semget(0x0, 0x4, 0x744) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000002380)=""/71) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000002400)=0xe67) r4 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r4, &(0x7f00000021c0)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/252, 0xfc}], 0xa, &(0x7f00000007c0)=""/35, 0x23}, 0x9}, {{&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)=""/4, 0x4}], 0x1, &(0x7f0000000900)=""/168, 0xa8}, 0x1}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/139, 0x8b}, {&(0x7f0000000b00)=""/106, 0x6a}], 0x2, &(0x7f0000000bc0)=""/117, 0x75}, 0x2}, {{&(0x7f0000000c40)=@isdn, 0x80, &(0x7f0000002080)=[{&(0x7f0000000cc0)=""/196, 0xc4}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/16, 0x10}, {&(0x7f0000000e80)=""/131, 0x83}, {&(0x7f0000000f40)=""/191, 0xbf}, {&(0x7f0000001000)=""/127, 0x7f}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x7, &(0x7f0000002100)=""/114, 0x72}, 0x5}, {{0x0, 0x0, &(0x7f0000002180)}, 0x1}], 0x5, 0x40, &(0x7f0000002300)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 1238.158678] Bluetooth: Unknown HCI packet type 5e [ 1238.163942] Bluetooth: Unknown HCI packet type 43 [ 1238.179429] Bluetooth: Unknown HCI packet type 5e [ 1238.187304] Bluetooth: Unknown HCI packet type 50 [ 1238.198026] Bluetooth: Unknown HCI packet type 5e [ 1238.203598] Bluetooth: Unknown HCI packet type 40 [ 1238.260802] Bluetooth: Unknown HCI packet type 5e [ 1238.262022] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1238.267574] Bluetooth: Unknown HCI packet type 43 [ 1238.280654] Bluetooth: hci8: Frame reassembly failed (-84) [ 1238.306268] Bluetooth: Unknown HCI packet type 5e [ 1238.312623] Bluetooth: Unknown HCI packet type 50 [ 1238.326200] Bluetooth: Unknown HCI packet type 5e [ 1238.334711] Bluetooth: Unknown HCI packet type 40 14:37:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) 14:37:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:40 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) unshare(0x40000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1238.784857] Bluetooth: Unknown HCI packet type 5e [ 1238.854606] IPVS: ftp: loaded support on port[0] = 21 14:37:41 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) unshare(0x40000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}}, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0xa80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1239.839651] IPVS: ftp: loaded support on port[0] = 21 [ 1240.224468] Bluetooth: hci0 command 0x1003 tx timeout [ 1240.229771] Bluetooth: hci0 sending frame failed (-49) [ 1240.303674] Bluetooth: hci8 command 0x1003 tx timeout [ 1240.311616] Bluetooth: hci8 sending frame failed (-49) [ 1240.318255] Bluetooth: hci6 command 0x1003 tx timeout [ 1240.326472] Bluetooth: hci6 sending frame failed (-49) 14:37:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x18) 14:37:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:37:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) connect$caif(r2, &(0x7f0000000080)=@dgm={0x25, 0x0, 0x2}, 0xfffffffffffffdc8) close(r0) [ 1240.779891] Bluetooth: hci10: Frame reassembly failed (-84) [ 1240.781863] Bluetooth: hci10: Frame reassembly failed (-84) [ 1240.823605] Bluetooth: hci11: Frame reassembly failed (-84) [ 1240.862729] Bluetooth: hci9 command 0x1003 tx timeout [ 1240.868840] Bluetooth: hci9 sending frame failed (-49) [ 1242.302561] Bluetooth: hci0 command 0x1001 tx timeout [ 1242.307846] Bluetooth: hci0 sending frame failed (-49) [ 1242.382494] Bluetooth: hci6 command 0x1001 tx timeout [ 1242.387778] Bluetooth: hci6 sending frame failed (-49) [ 1242.394269] Bluetooth: hci8 command 0x1001 tx timeout [ 1242.399524] Bluetooth: hci8 sending frame failed (-49) [ 1242.782525] Bluetooth: hci10 command 0x1003 tx timeout [ 1242.788668] Bluetooth: hci10 sending frame failed (-49) [ 1242.862506] Bluetooth: hci11 command 0x1003 tx timeout [ 1242.867888] Bluetooth: hci11 sending frame failed (-49) [ 1242.942427] Bluetooth: hci9 command 0x1001 tx timeout [ 1242.947736] Bluetooth: hci9 sending frame failed (-49) [ 1244.382474] Bluetooth: hci0 command 0x1009 tx timeout [ 1244.462322] Bluetooth: hci8 command 0x1009 tx timeout [ 1244.467560] Bluetooth: hci6 command 0x1009 tx timeout [ 1244.862341] Bluetooth: hci10 command 0x1001 tx timeout [ 1244.867727] Bluetooth: hci10 sending frame failed (-49) [ 1244.942367] Bluetooth: hci11 command 0x1001 tx timeout [ 1244.942484] Bluetooth: hci11 sending frame failed (-49) [ 1245.022428] Bluetooth: hci9 command 0x1009 tx timeout [ 1246.942197] Bluetooth: hci10 command 0x1009 tx timeout [ 1247.032134] Bluetooth: hci11 command 0x1009 tx timeout 14:37:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420820}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040044}, 0x880) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2a140, 0x0) close(r0) 14:37:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) 14:37:50 executing program 5: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x1a8, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "e4a6baa2528d47d6cd1bfa8b68ac125d377f97abba2af5a4c72913cd4d5f9df142ecfe3cfb5d55a6d4032439921355807d2c57efd0c701073cfc492e848846ea5db15e38a22f6160ca287c44f2bdd33467e97ffaffc10d59cf78a55d16c3c582e28cb9fd7c50e354ada3dd8392957aaf4b516ebc1c734d612df97af121382575990a6b8b3d337e6d4eaa7a1054166bd392ff638d5241d06d91563f84fe76434b76009fb7ecf7fa43f1fbbf9894c06d1e4149ad418cf1244323f5cad291302a27b7a5c9010dcccb316bdbe943ce4c"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "d5c627b71a6349cb396b56cb5954f8ed19bad3ae743acf4d131ea4d18b2a258d481ad297aef5e36adb10a1cea568e18f95eae646cb56a36eaabbb0acbd60817e8b31789aca352e5c20aff2dcb837ae3a99be930a81b1de2414f1bbfa2d7f92971ceb1f8535b020ddb52e4b5d3a4ca4cab1920fa2df4774bc0c0ed4c0c2b870098890f53c1dbad713c7c1adfb73f0d1d138072490f9e7bbe9fab3f98fc13fc56fa0bb94ec89726a1d1af20d57e47d35644d45d2f2da"}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r5}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000016c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000001700)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x9c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8a}]}, 0x9c}, 0x1, 0x0, 0x0, 0x886}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/5) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000000)=0x33) [ 1248.366974] Bluetooth: Unknown HCI packet type 5e [ 1248.376309] Bluetooth: Unknown HCI packet type 43 [ 1248.383773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1248.392422] Bluetooth: Unknown HCI packet type 5e [ 1248.392427] Bluetooth: Unknown HCI packet type 50 [ 1248.392430] Bluetooth: Unknown HCI packet type 5e [ 1248.392434] Bluetooth: Unknown HCI packet type 40 [ 1248.434355] Bluetooth: Unknown HCI packet type 5e [ 1248.434589] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1248.439496] Bluetooth: Unknown HCI packet type 43 [ 1248.450914] Bluetooth: Unknown HCI packet type 5e [ 1248.458248] Bluetooth: Unknown HCI packet type 50 [ 1248.489925] Bluetooth: Unknown HCI packet type 5e [ 1248.502218] Bluetooth: Unknown HCI packet type 40 14:37:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1249.032266] Bluetooth: Unknown HCI packet type 5e [ 1249.037335] Bluetooth: Unknown HCI packet type 43 [ 1249.153728] Bluetooth: hci12: Frame reassembly failed (-84) [ 1250.381804] Bluetooth: hci0 command 0x1003 tx timeout [ 1250.387256] Bluetooth: hci0 sending frame failed (-49) [ 1250.461766] Bluetooth: hci8 command 0x1003 tx timeout [ 1250.461789] Bluetooth: hci6 command 0x1003 tx timeout [ 1250.467073] Bluetooth: hci8 sending frame failed (-49) [ 1250.477783] Bluetooth: hci6 sending frame failed (-49) 14:37:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:37:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) [ 1250.926197] Bluetooth: Unknown HCI packet type 5e [ 1250.939870] Bluetooth: Unknown HCI packet type 43 [ 1250.955925] Bluetooth: Unknown HCI packet type 5e [ 1250.960977] Bluetooth: Unknown HCI packet type 43 [ 1250.968732] Bluetooth: Unknown HCI packet type 5e [ 1250.976483] Bluetooth: Unknown HCI packet type 50 [ 1250.981375] Bluetooth: Unknown HCI packet type 5e [ 1250.987679] Bluetooth: Unknown HCI packet type 40 [ 1251.101731] Bluetooth: hci9 command 0x1003 tx timeout [ 1251.107235] Bluetooth: hci9 sending frame failed (-49) [ 1251.181740] Bluetooth: hci12 command 0x1003 tx timeout [ 1251.187292] Bluetooth: hci12 sending frame failed (-49) [ 1252.461658] Bluetooth: hci0 command 0x1001 tx timeout [ 1252.467182] Bluetooth: hci0 sending frame failed (-49) [ 1252.541624] Bluetooth: hci6 command 0x1001 tx timeout [ 1252.541628] Bluetooth: hci8 command 0x1001 tx timeout [ 1252.541709] Bluetooth: hci8 sending frame failed (-49) [ 1252.546992] Bluetooth: hci6 sending frame failed (-49) [ 1252.941514] Bluetooth: hci10 command 0x1003 tx timeout [ 1252.947261] Bluetooth: hci10 sending frame failed (-49) [ 1253.021529] Bluetooth: hci11 command 0x1003 tx timeout [ 1253.026953] Bluetooth: hci11 sending frame failed (-49) [ 1253.181517] Bluetooth: hci9 command 0x1001 tx timeout [ 1253.187318] Bluetooth: hci9 sending frame failed (-49) [ 1253.261498] Bluetooth: hci12 command 0x1001 tx timeout [ 1253.266904] Bluetooth: hci12 sending frame failed (-49) [ 1254.541439] Bluetooth: hci0 command 0x1009 tx timeout [ 1254.621426] Bluetooth: hci6 command 0x1009 tx timeout [ 1254.631968] Bluetooth: hci8 command 0x1009 tx timeout [ 1255.021367] Bluetooth: hci10 command 0x1001 tx timeout [ 1255.026992] Bluetooth: hci10 sending frame failed (-49) [ 1255.101384] Bluetooth: hci11 command 0x1001 tx timeout [ 1255.107218] Bluetooth: hci11 sending frame failed (-49) [ 1255.261373] Bluetooth: hci9 command 0x1009 tx timeout [ 1255.341358] Bluetooth: hci12 command 0x1009 tx timeout [ 1257.101170] Bluetooth: hci10 command 0x1009 tx timeout [ 1257.181161] Bluetooth: hci11 command 0x1009 tx timeout 14:38:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:38:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000100)=""/169, 0xa9) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) ioctl$CHAR_RAW_IOMIN(r1, 0x1278, &(0x7f00000001c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) [ 1258.598553] Bluetooth: Unknown HCI packet type 5e [ 1258.607942] Bluetooth: Unknown HCI packet type 5e [ 1258.613896] Bluetooth: Unknown HCI packet type 43 [ 1258.618814] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1258.626697] Bluetooth: Unknown HCI packet type 5e [ 1258.633371] Bluetooth: Unknown HCI packet type 50 [ 1258.650719] Bluetooth: Unknown HCI packet type 5e [ 1258.656956] Bluetooth: Unknown HCI packet type 40 14:38:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x7) 14:38:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 1259.234645] Bluetooth: hci9: Frame reassembly failed (-84) [ 1260.024389] Bluetooth: hci12: Frame reassembly failed (-84) [ 1260.620780] Bluetooth: hci0 command 0x1003 tx timeout [ 1260.620794] Bluetooth: hci6 command 0x1003 tx timeout [ 1260.626101] Bluetooth: hci0 sending frame failed (-49) [ 1260.632958] Bluetooth: hci6 sending frame failed (-49) 14:38:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008010) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e06080a000f000010ff0100000060004003546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:38:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e06080a000f000010ff0100000060004003546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 14:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e06080a000f000010ff0100000060004003546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1261.260726] Bluetooth: hci8 command 0x1003 tx timeout [ 1261.260783] Bluetooth: hci9 command 0x1003 tx timeout [ 1261.269379] Bluetooth: hci8 sending frame failed (-49) [ 1261.281539] Bluetooth: hci9 sending frame failed (-49) 14:38:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x33) 14:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c850}, 0x40091) recvmsg$can_bcm(r2, &(0x7f00000008c0)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000600)=""/129, 0x81}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/183, 0xb7}], 0x8}, 0x143) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="1c0000005bebd4e0c10f0e987ef97bcfeadf9f232b17b123e1f14f85e4dbab36"], &(0x7f0000000980)=0x24) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000180)=0x80000000, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000000c0)={0x200, 0x1000}) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)='\\\x84@\x00') [ 1261.449369] Bluetooth: hci10: Frame reassembly failed (-84) [ 1261.457738] Bluetooth: hci10: Frame reassembly failed (-84) 14:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) close(r0) 14:38:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) close(r0) [ 1262.060719] Bluetooth: hci12 command 0x1003 tx timeout [ 1262.066248] Bluetooth: hci12 sending frame failed (-49) [ 1262.700619] Bluetooth: hci0 command 0x1001 tx timeout [ 1262.700637] Bluetooth: hci6 command 0x1001 tx timeout [ 1262.705957] Bluetooth: hci0 sending frame failed (-49) [ 1262.712382] Bluetooth: hci6 sending frame failed (-49) [ 1263.340554] Bluetooth: hci9 command 0x1001 tx timeout [ 1263.345881] Bluetooth: hci9 sending frame failed (-49) [ 1263.351261] Bluetooth: hci8 command 0x1001 tx timeout [ 1263.356513] Bluetooth: hci8 sending frame failed (-49) [ 1263.500597] Bluetooth: hci10 command 0x1003 tx timeout [ 1263.505979] Bluetooth: hci10 sending frame failed (-49) [ 1264.140458] Bluetooth: hci12 command 0x1001 tx timeout [ 1264.145830] Bluetooth: hci12 sending frame failed (-49) [ 1264.780479] Bluetooth: hci0 command 0x1009 tx timeout [ 1264.780492] Bluetooth: hci6 command 0x1009 tx timeout [ 1265.420405] Bluetooth: hci9 command 0x1009 tx timeout [ 1265.430449] Bluetooth: hci8 command 0x1009 tx timeout [ 1265.580365] Bluetooth: hci10 command 0x1001 tx timeout [ 1265.585744] Bluetooth: hci10 sending frame failed (-49) [ 1266.220315] Bluetooth: hci12 command 0x1009 tx timeout [ 1267.660219] Bluetooth: hci10 command 0x1009 tx timeout 14:38:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:38:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xb) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) [ 1268.856659] Bluetooth: Unknown HCI packet type 5e [ 1268.862786] Bluetooth: Unknown HCI packet type 43 [ 1268.869704] Bluetooth: Unknown HCI packet type 5e [ 1268.881555] Bluetooth: Unknown HCI packet type 50 [ 1268.887781] Bluetooth: Unknown HCI packet type 5e [ 1268.894240] Bluetooth: Unknown HCI packet type 40 14:38:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$KDADDIO(r1, 0x400455c8, 0x10000000008) close(r0) 14:38:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) close(r0) 14:38:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:38:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) splice(r4, 0x0, r2, 0x0, 0x4ffe6, 0x6) ioctl$KDADDIO(r1, 0x4b34, 0xffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:38:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{r1, r2+60000000}}, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400000, 0x100) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000180)) close(r0) [ 1270.136646] sp0: Synchronizing with TNC [ 1270.158573] Bluetooth: hci8: Frame reassembly failed (-84) [ 1270.186756] sp0: Synchronizing with TNC [ 1270.859961] Bluetooth: hci0 command 0x1003 tx timeout [ 1270.865269] Bluetooth: hci0 sending frame failed (-49) 14:38:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$KDADDIO(r1, 0x400455c8, 0x10000000008) close(r0) 14:38:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r1, &(0x7f0000000000)={[0x7]}, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x22e541, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(r1, 0x540b, 0x1) 14:38:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1272.139760] Bluetooth: hci6 command 0x1003 tx timeout [ 1272.145984] Bluetooth: hci6 sending frame failed (-49) [ 1272.219829] Bluetooth: hci8 command 0x1003 tx timeout [ 1272.225147] Bluetooth: hci8 sending frame failed (-49) [ 1272.949736] Bluetooth: hci0 command 0x1001 tx timeout [ 1272.955034] Bluetooth: hci0 sending frame failed (-49) [ 1273.019673] Bluetooth: hci9 command 0x1003 tx timeout [ 1273.025012] Bluetooth: hci9 sending frame failed (-49) [ 1274.219694] Bluetooth: hci6 command 0x1001 tx timeout [ 1274.225020] Bluetooth: hci6 sending frame failed (-49) [ 1274.299621] Bluetooth: hci8 command 0x1001 tx timeout [ 1274.304961] Bluetooth: hci8 sending frame failed (-49) [ 1275.019591] Bluetooth: hci0 command 0x1009 tx timeout [ 1275.099560] Bluetooth: hci9 command 0x1001 tx timeout [ 1275.104895] Bluetooth: hci9 sending frame failed (-49) [ 1276.299443] Bluetooth: hci6 command 0x1009 tx timeout [ 1276.379467] Bluetooth: hci8 command 0x1009 tx timeout [ 1277.179341] Bluetooth: hci9 command 0x1009 tx timeout 14:38:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:38:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300), 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x28844) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001040004ffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000024080b0e000000000000000000000800", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000007000100667100000c0002000800070000000000"], 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r6}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf25050000003c0001800500020004000000060005004e23000008000300640101010600010002000000060005004e200000080003007f00000108000700", @ANYRES32=0x0, @ANYBLOB="08000300040000001c009758053101060005004e240000080006000500000008000700bb596a4a890e35d849b69c65fca813ddf970fe24c59fbab32fc6967ee508ed74192ac52bb531796c76a481d9000000803c0d7e65dfbf881fcec206d55f5a45f90c0e5bd225b7f2cfc164bb3154daa8c50edc75ecb3d3c556e30817b12c1214cc17b54e11c42062738446d5f51ba7a69f54d4b4e266e19385fff601614177453a06e4cfd233194162912a6e03d2e7dc4f0000000000000000", @ANYRES32=0x0, @ANYBLOB="3c000180060005004e24000008000700", @ANYRES32=r6, @ANYBLOB="08000300640101010600010002000000060005004e200000060001000000000008000700", @ANYRES32=r6, @ANYBLOB="080002000200000008000300040000002400018008000700", @ANYRES32=0x0, @ANYBLOB="060005004e2300000800060000000000050002000900000008000300010000000800030004000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) recvfrom$l2tp(r1, &(0x7f0000000100)=""/193, 0xc1, 0x0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7, 0x1000, 0x40, 0x2, 0x18, "f56066563ba8c7093d671d63a8008e89514225"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 14:38:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1c) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x22e541, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCFLSH(r1, 0x540b, 0x1) 14:38:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1279.067765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1279.148022] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 14:38:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) splice(r3, 0x0, r1, 0x0, 0x4ffe6, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:38:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1280.337465] Bluetooth: Unknown HCI packet type 5e [ 1281.178985] Bluetooth: hci10 command 0x1003 tx timeout [ 1281.184315] Bluetooth: hci0 command 0x1003 tx timeout [ 1281.184362] Bluetooth: hci10 sending frame failed (-49) [ 1281.190899] Bluetooth: hci0 sending frame failed (-49) 14:38:23 executing program 1: r0 = semget(0x3, 0x3, 0x110) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f0000000000)=0xf32e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1a1000, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000100)={0x550, 0x960, 0x300, 0x280, 0x7, 0x5, 0x2, 0x1, {0x6, 0xfaf}, {0xffff, 0x2}, {0x1000, 0x2}, {0x9, 0x8, 0x1}, 0x3, 0x1, 0x8001, 0x7fffffff, 0x1, 0x1, 0xff, 0x3ff, 0x9, 0x3, 0xe5e8, 0x300000, 0x1e, 0x4, 0x2, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) close(r1) 14:38:23 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100), 0x8) 14:38:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@empty, @initdev, @local}, &(0x7f0000000080)=0xc) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xd0040, 0x0) signalfd(r0, &(0x7f0000000100), 0x8) 14:38:23 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) [ 1281.622897] Bluetooth: hci8: Frame reassembly failed (-84) [ 1282.378862] Bluetooth: hci6 command 0x1003 tx timeout [ 1282.384198] Bluetooth: hci6 sending frame failed (-49) [ 1283.258761] Bluetooth: hci0 command 0x1001 tx timeout [ 1283.258814] Bluetooth: hci10 command 0x1001 tx timeout [ 1283.264095] Bluetooth: hci0 sending frame failed (-49) [ 1283.273997] Bluetooth: hci10 sending frame failed (-49) [ 1283.658818] Bluetooth: hci8 command 0x1003 tx timeout [ 1283.664146] Bluetooth: hci8 sending frame failed (-49) [ 1284.458665] Bluetooth: hci6 command 0x1001 tx timeout [ 1284.458697] Bluetooth: hci9 command 0x1003 tx timeout [ 1284.464010] Bluetooth: hci6 sending frame failed (-49) [ 1284.475168] Bluetooth: hci9 sending frame failed (-49) [ 1285.338693] Bluetooth: hci10 command 0x1009 tx timeout [ 1285.338818] Bluetooth: hci0 command 0x1009 tx timeout [ 1285.738673] Bluetooth: hci8 command 0x1001 tx timeout [ 1285.744038] Bluetooth: hci8 sending frame failed (-49) [ 1286.538609] Bluetooth: hci9 command 0x1001 tx timeout [ 1286.543857] Bluetooth: hci6 command 0x1009 tx timeout [ 1286.543945] Bluetooth: hci9 sending frame failed (-49) [ 1287.818479] Bluetooth: hci8 command 0x1009 tx timeout [ 1288.618390] Bluetooth: hci9 command 0x1009 tx timeout 14:38:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 14:38:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 14:38:31 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) 14:38:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x400000, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x14008044) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6feefc7733ea6589a9fd4a212ad8a05893a6c3a0d1313407fa864df8df7ec7b6fa1796f8d4e3ddfe54b1c0d3c0ac90e04449c18aacb172e9d23a2e39dd3e62a9e94c2d57fa186e79ebf75f190cae348a34770a411875dec9f66361f4bd01c767d4e001b8e71a59af799b5b1722aab3b2bc205a72895881ff32eb78af0200a24b11ed988c08d2a98d756bd083fe128be88dd5a4dc801408a9c69995b01245a9f8ebcd37fb19134ce3a75970ada6a734786163ff337050f7", @ANYRES16=0x0, @ANYBLOB="ea0825bd7000fddbdf2503000000f00004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00001c0007800800010012000000080004000080000008000300070000004400078008000200050000000800030023000000080004000000000008000300000000a008000400ffff00000800040040000000080001001e00000008000200f8ffffff0900010073797a31000000000900010073797a30000000004c0007800800020000800000080002000200000008000300040000000800020002000000080003000200000008000200f60c0000080003000900000008000100040000000800040008000000640004800900010073797a31000000000900010073797a31000000001300010062726f6164636173742d6c696e6b000034000780080002000500000008000400000200000800010014000000080003000100000008bdc2d8d96d6e2c84a0000400593f00000800030005000000100005800c0002800800030040000000300005802c00028008000100140000000800040073090000080000000100010008000200ffffffff080003006e2700000c0009800800020000000100f84a928129deb6029379c0c000d626bef840a9e1b184315386eec80228ffa8633b2f571ed31a1ccb9f520640b995d963dd849f1308fedc0a1a7eba30deee6ee101a12de2f2eb32db872acc6f708d6aee30511945d421521cb0bbf05df8d1841d2a29c313eac264b860f1626c0175c9b9e2d6731f"], 0x1b4}, 0x1, 0x0, 0x0, 0x20004080}, 0x10) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x10000, 0x0, {0x77359400}, {0x5, 0xc, 0x1, 0x4, 0x40, 0x3, "a71d3013"}, 0x0, 0x1, @offset, 0x1, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) 14:38:31 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) [ 1289.336869] Bluetooth: Unknown HCI packet type 5e [ 1289.344280] Bluetooth: Unknown HCI packet type 00 [ 1289.347324] Bearer rejected, not supported in standalone mode [ 1289.357378] Bluetooth: Unknown HCI packet type 43 [ 1289.373302] Bluetooth: Unknown HCI packet type 5e [ 1289.378371] Bluetooth: Unknown HCI packet type 43 [ 1289.387652] Bluetooth: Unknown HCI packet type 5e [ 1289.387995] Bearer rejected, not supported in standalone mode [ 1289.399402] Bluetooth: Unknown HCI packet type 5e [ 1289.409836] Bluetooth: Unknown HCI packet type 50 [ 1289.414596] Bluetooth: Unknown HCI packet type 50 [ 1289.428419] Bluetooth: Unknown HCI packet type 5e [ 1289.433370] Bluetooth: Unknown HCI packet type 5e [ 1289.452967] Bluetooth: Unknown HCI packet type 40 [ 1289.459308] Bluetooth: Unknown HCI packet type 40 14:38:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:38:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1290.586770] Bluetooth: Unknown HCI packet type 5e [ 1290.603249] Bluetooth: Unknown HCI packet type 43 [ 1291.338107] Bluetooth: hci0 command 0x1003 tx timeout [ 1291.343418] Bluetooth: hci0 sending frame failed (-49) [ 1291.418083] Bluetooth: hci10 command 0x1003 tx timeout [ 1291.423597] Bluetooth: hci10 sending frame failed (-49) 14:38:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x525000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f0000000100)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 14:38:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)='net_prio.ifpriomap\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd(r3, &(0x7f0000000000)={[0xc4dd]}, 0x8) 14:38:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x82, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)) bind(r2, &(0x7f0000001280)=@hci={0x1f, 0x1, 0x2}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSBRK(r3, 0x5409, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x0, 0x1000, "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"}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7ff, @ipv4={[], [], @multicast2}, 0xf6}, {0xa, 0x4e23, 0xba16000, @local, 0x80}, 0x1, [0x1, 0x7ff, 0xffffff2f, 0x1, 0x4, 0xffffffff, 0x10000, 0x8]}, 0x5c) 14:38:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1292.627955] Bluetooth: hci6 command 0x1003 tx timeout [ 1292.633364] Bluetooth: hci6 sending frame failed (-49) [ 1293.427901] Bluetooth: hci0 command 0x1001 tx timeout [ 1293.433222] Bluetooth: hci0 sending frame failed (-49) [ 1293.497903] Bluetooth: hci10 command 0x1001 tx timeout [ 1293.503283] Bluetooth: hci10 sending frame failed (-49) [ 1294.697832] Bluetooth: hci6 command 0x1001 tx timeout [ 1294.703154] Bluetooth: hci6 sending frame failed (-49) [ 1295.497771] Bluetooth: hci0 command 0x1009 tx timeout [ 1295.577852] Bluetooth: hci10 command 0x1009 tx timeout [ 1296.777682] Bluetooth: hci6 command 0x1009 tx timeout 14:38:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 14:38:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:41 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) pipe(&(0x7f0000000200)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r1) signalfd(r1, &(0x7f0000000100), 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x80000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) 14:38:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa6d51fd2b138968}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64044}, 0x8) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r6, 0x101}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r1, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffff) 14:38:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x82, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)) bind(r2, &(0x7f0000001280)=@hci={0x1f, 0x1, 0x2}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSBRK(r3, 0x5409, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x0, 0x1000, "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"}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7ff, @ipv4={[], [], @multicast2}, 0xf6}, {0xa, 0x4e23, 0xba16000, @local, 0x80}, 0x1, [0x1, 0x7ff, 0xffffff2f, 0x1, 0x4, 0xffffffff, 0x10000, 0x8]}, 0x5c) [ 1299.561259] Bluetooth: hci0: Frame reassembly failed (-84) [ 1299.584582] Bluetooth: Unknown HCI packet type 5e [ 1299.593614] Bluetooth: Unknown HCI packet type 43 [ 1299.600339] Bluetooth: Unknown HCI packet type 00 [ 1299.611288] Bluetooth: Unknown HCI packet type 5e [ 1299.628537] Bluetooth: Unknown HCI packet type 50 [ 1299.647317] Bluetooth: Unknown HCI packet type 5e [ 1299.656894] Bluetooth: Unknown HCI packet type 40 [ 1300.363231] Bluetooth: hci9: Frame reassembly failed (-84) 14:38:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:38:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x48180, 0x0) close(r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) signalfd(r1, &(0x7f0000000100)={[0x5]}, 0x8) 14:38:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x82, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)) bind(r2, &(0x7f0000001280)=@hci={0x1f, 0x1, 0x2}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSBRK(r3, 0x5409, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x0, 0x1000, "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"}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7ff, @ipv4={[], [], @multicast2}, 0xf6}, {0xa, 0x4e23, 0xba16000, @local, 0x80}, 0x1, [0x1, 0x7ff, 0xffffff2f, 0x1, 0x4, 0xffffffff, 0x10000, 0x8]}, 0x5c) 14:38:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1300.815257] Bluetooth: Unknown HCI packet type 5e 14:38:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40002, 0x0) getsockopt$inet6_buf(r1, 0x29, 0xcc, &(0x7f0000000040)=""/109, &(0x7f0000000140)=0x6d) r2 = dup3(r0, r0, 0x0) ioctl$CHAR_RAW_RRPART(r2, 0x125f, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0xa8080, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x400c010) signalfd(r0, &(0x7f0000000100), 0x8) 14:38:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1301.577153] Bluetooth: hci0 command 0x1003 tx timeout [ 1301.582485] Bluetooth: hci0 sending frame failed (-49) [ 1301.657200] Bluetooth: hci8 command 0x1003 tx timeout [ 1301.662523] Bluetooth: hci8 sending frame failed (-49) [ 1302.377114] Bluetooth: hci9 command 0x1003 tx timeout [ 1302.382560] Bluetooth: hci9: Frame reassembly failed (-84) [ 1302.867034] Bluetooth: hci6 command 0x1003 tx timeout [ 1302.872360] Bluetooth: hci6 sending frame failed (-49) [ 1303.666963] Bluetooth: hci0 command 0x1001 tx timeout [ 1303.672281] Bluetooth: hci0 sending frame failed (-49) [ 1303.737052] Bluetooth: hci8 command 0x1001 tx timeout [ 1303.742413] Bluetooth: hci8 sending frame failed (-49) [ 1304.457022] Bluetooth: hci9 command 0x1001 tx timeout [ 1304.462443] Bluetooth: hci9: Frame reassembly failed (-84) [ 1304.937034] Bluetooth: hci6 command 0x1001 tx timeout [ 1304.942350] Bluetooth: hci6 sending frame failed (-49) [ 1305.736938] Bluetooth: hci0 command 0x1009 tx timeout [ 1305.816915] Bluetooth: hci8 command 0x1009 tx timeout [ 1306.536804] Bluetooth: hci9 command 0x1009 tx timeout [ 1307.016730] Bluetooth: hci6 command 0x1009 tx timeout 14:38:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 14:38:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:52 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close(r1) signalfd(r0, &(0x7f0000000100), 0x8) [ 1309.800925] Bluetooth: Unknown HCI packet type 00 14:38:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x82, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)) bind(r2, &(0x7f0000001280)=@hci={0x1f, 0x1, 0x2}, 0x80) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$TCSBRK(r3, 0x5409, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x0, 0x1000, "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"}) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7ff, @ipv4={[], [], @multicast2}, 0xf6}, {0xa, 0x4e23, 0xba16000, @local, 0x80}, 0x1, [0x1, 0x7ff, 0xffffff2f, 0x1, 0x4, 0xffffffff, 0x10000, 0x8]}, 0x5c) 14:38:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:53 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) close(0xffffffffffffffff) 14:38:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = signalfd(r0, &(0x7f0000000100), 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000200)={0x7, 0x5}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000340)={0x24, r4, 0x917, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r4, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80) 14:38:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:38:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) fcntl$notify(r0, 0x402, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) prctl$PR_SET_FPEXC(0xc, 0x20000) close(r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x808, 0x4) ioctl$int_out(r0, 0x0, &(0x7f0000000540)) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$afs(&(0x7f0000000080)='afs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x5, &(0x7f0000000380)=[{&(0x7f0000000140)="659ea44d556b958fa8792cd83a2f881c5003024a905c92b6a1f1c3531c8056b0cc472344e759d12f53fb898bd30ea0d1a17bb28552ae74344b98253f6e20eab095b257af9a8da748188d0f1053a6768e905743a1e897d3e9e30b53905b0be79c450ade184db63c7ac30902e55ac7c2783f08ffd20bd209f6a986a85e9290d85a717e29235d321ee40956c42eb384916326c1399a5ee9b5be2442c7e825d73394cff25765e46e95cd0ea75b40", 0xac, 0xffffffffffff7fff}, {&(0x7f0000000200)="bf193328380a176519797d2042a7df4ef52bd7262b4f0d465c1f68fb99913fa6144f0807d803ab6f0679fed056e2730f88fb0ec301", 0x35}, {&(0x7f0000000240)="d8426b83266ba71f445ce9d445f16f07845bb1d773ba5ca05392077767f9b72e69014f1f1b1998488d05125558dd567684b81c7ea215c39253a9b894b0de72864eb70e0f7fabff36c5716bf5ce22180ab0dff2ff5922e3c661251f17f9d370ad70f3f2ad7fae96fd3671011a1aa09def2afbc97c657bce10b398c0df32384cd88195d112e8e5cfe3442f76d8e4bdfa4b33fe70168054078ac5c684767cfbfadd19fbb848338743701ea04b1ad3427e052e9575766c70efe4be97d562ab6403", 0xbf, 0x3}, {&(0x7f0000000300)="13ba0de02c6dcac34fae6bc71d9ae643c54cb0f256517c3a335f235954e04c6a3b0b9bd480", 0x25, 0x3}, {&(0x7f0000000340)="5d4e883d12f454b6e628f9f5d6dc8b4c7a6f4701bff4ffe3cb9083f3ca21fe87e54072bdcfa8ba26161c3976885e3962", 0x30, 0x114}], 0x11044, &(0x7f00000004c0)={[{@autocell='autocell'}, {@flock_local='flock=local'}, {@flock_local='flock=local'}, {@flock_local='flock=local'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@uid_gt={'uid>', r1}}]}) 14:38:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) 14:38:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0xcfb2) [ 1311.098514] Bluetooth: Unknown HCI packet type 5e [ 1311.109691] Bluetooth: hci8: Frame reassembly failed (-84) [ 1311.816311] Bluetooth: hci0 command 0x1003 tx timeout [ 1311.821854] Bluetooth: hci0 sending frame failed (-49) [ 1311.888155] Bluetooth: hci9: Frame reassembly failed (-84) [ 1313.176177] Bluetooth: hci8 command 0x1003 tx timeout [ 1313.181474] Bluetooth: hci6 command 0x1003 tx timeout [ 1313.181525] Bluetooth: hci8 sending frame failed (-49) [ 1313.188253] Bluetooth: hci6 sending frame failed (-49) [ 1313.896149] Bluetooth: hci9 command 0x1003 tx timeout [ 1313.896153] Bluetooth: hci0 command 0x1001 tx timeout [ 1313.896708] Bluetooth: hci0 sending frame failed (-49) [ 1313.901442] Bluetooth: hci9 sending frame failed (-49) [ 1315.255999] Bluetooth: hci6 command 0x1001 tx timeout [ 1315.256136] Bluetooth: hci8 command 0x1001 tx timeout [ 1315.261342] Bluetooth: hci6 sending frame failed (-49) [ 1315.271703] Bluetooth: hci8 sending frame failed (-49) [ 1315.976008] Bluetooth: hci9 command 0x1001 tx timeout [ 1315.981327] Bluetooth: hci9 sending frame failed (-49) [ 1315.986889] Bluetooth: hci0 command 0x1009 tx timeout [ 1317.335944] Bluetooth: hci8 command 0x1009 tx timeout [ 1317.335947] Bluetooth: hci6 command 0x1009 tx timeout [ 1318.055804] Bluetooth: hci9 command 0x1009 tx timeout 14:39:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) 14:39:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa6d51fd2b138968}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64044}, 0x8) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r6, 0x101}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r1, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffff) 14:39:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) signalfd(r0, &(0x7f0000000100), 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000680)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="9f745b056c1dd4dccec61766a80f6fbaae6b88e3b87433a864055794d42bd05ea63d248410ed7cc2e806ee2420fbe60daa1a7e8f5299f60c8b9bec518282630c09dd37dfba5133", 0x47, 0xfffffffffffffffb) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x40faeb4d, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000140)="79b952edb14e75d71b6d922771c22fc16efad36308987460ee282cc64b572a7f1296f6d164f73673c15e5d1d9dafbc457653ed0018d64c42ef73ca8db1baa95db23783e881eec540", 0x48, 0x3ff}, {&(0x7f00000001c0)="9c04ab9f26ae69a239e292481f665c282571b3bd133a8550a56dfecabcbc0ac2cb2f6643d3850d7af205f5837b92a27c63721eaa4cc5a3e739e3a9838d9ada647b2a8318e5b464e83368ce53e6d8ad5b1a2fe55bde99d9bbb5680ff068e1d6b1e8b1b11fe901d5748a7089fdcdc472b4584ec94d51d4ac72dcae1810d4ab58748bd7c35b50e912458ca99ec8580074078000", 0x92, 0x8001}, {&(0x7f0000000080)="1520b5debbd90de215853789170a45356958563140afef0ab33539fcf08800005d6b0fc4e1003a88", 0x28, 0xfffffffffffffff7}, {&(0x7f0000000280)="2488bdff2e5fa67061bd9804923fb6e3b2c6703ca019c5d94b26482d61a73107f9c174d7a6302657f48488b952f9ddd4d05a9fb5e3928996f6d7109e2ce00881833714b93f9863b9a05335621ad82903daed0a3de5fc621f2f344e105c91cdd82673fee0ba63ec8148923c5d94188b6adab23b443e0084ff5edf6e586bf7b27381e6075a07dffbc5a218e02a2a779517795d280e86465a2ff43ecc2ce93d9ef22a5de33dfc1fdde86f3de2d80b53d92c07413a4c2f8d53955841d73184ff1a7e8496372dc23e6859e9c879a928c765bfa907398155847d30887b50a67e79de87f275e9ea00ebd264ed", 0xe9, 0x800}, {&(0x7f0000000380)="663c2375b93677174eb59a4f682d34debe4ce3eb58709865439df4", 0x1b, 0x6}], 0x800800, &(0x7f0000000500)=ANY=[@ANYBLOB='/dev/ptmx\x00,/dev/ptmx\x00,/dev/ptmx\x00,},uid=', @ANYRESDEC=r3, @ANYBLOB="2c7375626a5f747970653d212c7063723d3030303030b030303030303030303030303035352c00"]) 14:39:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa6d51fd2b138968}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64044}, 0x8) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r6, 0x101}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r1, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffff) 14:39:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) 14:39:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$NBD_DISCONNECT(r1, 0xab08) signalfd(r0, &(0x7f0000000100), 0x8) [ 1320.043017] Bluetooth: hci0: Frame reassembly failed (-84) [ 1320.063585] Bluetooth: hci10: Frame reassembly failed (-84) 14:39:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0xcfb2) 14:39:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe(&(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:39:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1321.310512] Bluetooth: Unknown HCI packet type 5e [ 1321.318743] Bluetooth: hci8: Frame reassembly failed (-84) 14:39:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x800013) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000000)) close(r0) 14:39:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x10002) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x40010, r1, 0x1) close(r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0x9a, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/154}, &(0x7f0000000280)=0x78) signalfd(r0, &(0x7f0000000100), 0x8) 14:39:04 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'tunl0\x00', @remote}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x15b2, 0x4) close(r1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/4096) signalfd(r1, &(0x7f0000000100), 0x8) 14:39:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) [ 1322.055418] Bluetooth: hci0 command 0x1003 tx timeout [ 1322.064291] Bluetooth: hci0 sending frame failed (-49) [ 1322.136175] Bluetooth: hci10 command 0x1003 tx timeout [ 1322.141734] Bluetooth: hci10 sending frame failed (-49) [ 1323.345351] Bluetooth: hci8 command 0x1003 tx timeout [ 1323.350678] Bluetooth: hci8 sending frame failed (-49) [ 1323.357353] Bluetooth: hci6 command 0x1003 tx timeout [ 1323.362637] Bluetooth: hci6 sending frame failed (-49) [ 1324.135220] Bluetooth: hci0 command 0x1001 tx timeout [ 1324.140535] Bluetooth: hci0 sending frame failed (-49) [ 1324.215245] Bluetooth: hci10 command 0x1001 tx timeout [ 1324.220753] Bluetooth: hci10 sending frame failed (-49) [ 1325.415146] Bluetooth: hci6 command 0x1001 tx timeout [ 1325.420430] Bluetooth: hci6 sending frame failed (-49) [ 1325.425961] Bluetooth: hci8 command 0x1001 tx timeout [ 1325.431347] Bluetooth: hci8 sending frame failed (-49) [ 1326.215108] Bluetooth: hci0 command 0x1009 tx timeout [ 1326.295119] Bluetooth: hci10 command 0x1009 tx timeout [ 1327.494926] Bluetooth: hci6 command 0x1009 tx timeout [ 1327.494929] Bluetooth: hci8 command 0x1009 tx timeout 14:39:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:39:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:39:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{r1, r2+60000000}}, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400000, 0x100) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f0000000180)) close(r0) 14:39:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) close(r0) signalfd(r0, &(0x7f0000000100)={[0x6]}, 0x8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x0, 0x34, 0xfffffffe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdd63}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x0, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc00c001}, 0x40800) 14:39:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/131, 0x83, 0x2042, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = signalfd(r0, &(0x7f0000000100), 0x8) r2 = signalfd(r1, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$KDMKTONE(r2, 0x4b30, 0x6) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000200)={0x6}) 14:39:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x149400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1, 0xff, 0x0, 0xc9, 0xf, "66a3a4ae38712505ca1067a18396de98feb2e7"}) [ 1330.291960] Bluetooth: hci0: Frame reassembly failed (-84) 14:39:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0x4) 14:39:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:39:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) r1 = signalfd(r0, &(0x7f0000000100), 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 14:39:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/hwrng\x00', 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040420}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc8, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8a, 0xbe, "90f31cbc62b343e3624bfa4da830ccc82e2049b39f9371bb2d2b56980a621bff5d9df752608293683049e1814d3bf8c86f6da3e41a1bf4c7d6ef0a54cf767e5344ba221113eeee86a5cc53d3515744bcc15691f502ace0be6eaff53a4ca56b5b8ec337374720ddda86cd55b79d455963aed80c4d61e39bb8081843c4f95586f3e9950bee1cf0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x385}]}, 0xc8}}, 0x20040000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x35}}}}, ["", ""]}, 0x28}}, 0x800) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb29}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000004c0)={0x1, @pix_mp={0x0, 0x69, 0x3447504d, 0x4, 0xb, [{0x6c5, 0x8}, {0x1238df05, 0x4}, {0xcbfb, 0xfd}, {0x0, 0xd7}, {0x7f, 0x1}, {0x410, 0x100}, {0x2, 0x7}, {0x7, 0x7f}], 0x20, 0x20, 0x7}}) 14:39:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 14:39:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/107, 0x6b, 0x100, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) close(r0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000140)=[0x2, 0x1], 0x2) [ 1331.561659] Bluetooth: hci8: Frame reassembly failed (-84) [ 1331.567904] Bluetooth: hci8: Frame reassembly failed (-84) 14:39:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) close(r0) 14:39:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) close(r0) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x7) signalfd(r0, &(0x7f0000000100), 0x8) [ 1332.294555] Bluetooth: hci0 command 0x1003 tx timeout [ 1332.300869] Bluetooth: hci0 sending frame failed (-49) [ 1333.574451] Bluetooth: hci6 command 0x1003 tx timeout [ 1333.574455] Bluetooth: hci8 command 0x1003 tx timeout [ 1333.574534] Bluetooth: hci8 sending frame failed (-49) [ 1333.579742] Bluetooth: hci6 sending frame failed (-49) [ 1333.654431] Bluetooth: hci9 command 0x1003 tx timeout [ 1333.659776] Bluetooth: hci9 sending frame failed (-49) [ 1334.374359] Bluetooth: hci0 command 0x1001 tx timeout [ 1334.380023] Bluetooth: hci0 sending frame failed (-49) [ 1335.654320] Bluetooth: hci6 command 0x1001 tx timeout [ 1335.654324] Bluetooth: hci8 command 0x1001 tx timeout [ 1335.654442] Bluetooth: hci8 sending frame failed (-49) [ 1335.663370] Bluetooth: hci6 sending frame failed (-49) [ 1335.734277] Bluetooth: hci9 command 0x1001 tx timeout [ 1335.739569] Bluetooth: hci9 sending frame failed (-49) [ 1336.454145] Bluetooth: hci0 command 0x1009 tx timeout [ 1337.734220] Bluetooth: hci6 command 0x1009 tx timeout [ 1337.734232] Bluetooth: hci8 command 0x1009 tx timeout [ 1337.814187] Bluetooth: hci9 command 0x1009 tx timeout 14:39:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa0801, 0x0) close(r0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/59) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffffffffff05]}, 0x68) read$usbmon(r1, &(0x7f0000000100)=""/137, 0x89) 14:39:22 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x3) 14:39:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) close(r0) [ 1340.524093] Bluetooth: Unknown HCI packet type 5e [ 1340.524315] FAULT_INJECTION: forcing a failure. [ 1340.524315] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.531580] kasan: CONFIG_KASAN_INLINE enabled [ 1340.555744] CPU: 1 PID: 21349 Comm: syz-executor.3 Not tainted 4.14.210-syzkaller #0 [ 1340.563679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.573143] Call Trace: [ 1340.575824] dump_stack+0x1b2/0x283 [ 1340.579458] should_fail.cold+0x10a/0x154 [ 1340.583609] should_failslab+0xd6/0x130 [ 1340.587597] kmem_cache_alloc_node+0x54/0x410 [ 1340.592180] __alloc_skb+0x5c/0x510 [ 1340.595881] ll_recv+0x590/0x1820 [ 1340.599323] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1340.604883] hci_uart_tty_receive+0x1ec/0x4c0 [ 1340.609416] ? hci_uart_send_frame+0x4b0/0x4b0 [ 1340.613991] tty_ioctl+0xe5a/0x13c0 [ 1340.617700] ? tty_fasync+0x2c0/0x2c0 [ 1340.621492] ? proc_fail_nth_write+0x7b/0x180 [ 1340.625967] ? proc_tgid_io_accounting+0x780/0x7a0 [ 1340.630888] ? trace_hardirqs_on+0x10/0x10 [ 1340.635127] ? fsnotify+0x974/0x11b0 [ 1340.638928] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1340.643852] ? debug_check_no_obj_freed+0x2c0/0x674 [ 1340.649046] ? SyS_write+0x1b7/0x210 [ 1340.652747] ? tty_fasync+0x2c0/0x2c0 [ 1340.657055] do_vfs_ioctl+0x75a/0xff0 [ 1340.660846] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.665237] ? lock_downgrade+0x740/0x740 [ 1340.669372] ? __fget+0x225/0x360 [ 1340.672851] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.676848] ? security_file_ioctl+0x83/0xb0 [ 1340.681685] SyS_ioctl+0x7f/0xb0 [ 1340.686021] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.690169] do_syscall_64+0x1d5/0x640 [ 1340.694141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.699333] RIP: 0033:0x45deb9 [ 1340.702503] RSP: 002b:00007fd9f9b71c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.710296] RAX: ffffffffffffffda RBX: 0000000000019cc0 RCX: 000000000045deb9 [ 1340.717552] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 1340.724890] RBP: 00007fd9f9b71ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.732354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.739938] R13: 00007ffeb5ac5d9f R14: 00007fd9f9b729c0 R15: 000000000119bf2c 14:39:23 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000140)={0x0, "154fe7e0509c637e4bdbb2bc2d9d080e67c0aaa8049c3f8799df9acfe87e34e07fb9a974cfdc1f60f1ec3a8767c23c44c07fd7541968c4cd91e6fc64fbeefbe3", 0x35}, 0x48, 0xfffffffffffffff9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x400000, 0x0, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004010) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xa400, 0x0) close(r2) signalfd(r2, &(0x7f0000000100), 0x8) [ 1340.778734] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1340.800709] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1340.801837] Bluetooth: Can't allocate mem for new packet [ 1340.807121] Modules linked in: [ 1340.807135] CPU: 0 PID: 12931 Comm: kworker/u4:4 Not tainted 4.14.210-syzkaller #0 [ 1340.807138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.807158] Workqueue: events_unbound flush_to_ldisc [ 1340.807163] task: ffff888056532000 task.stack: ffff888056720000 [ 1340.807174] RIP: 0010:skb_put+0x29/0x170 [ 1340.807177] RSP: 0018:ffff888056727b90 EFLAGS: 00010202 [ 1340.807183] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1340.807186] RDX: 000000000000001a RSI: 0000000000000003 RDI: 00000000000000d0 [ 1340.807189] RBP: 0000000000000000 R08: 0000000000000025 R09: 0000000000000000 [ 1340.807192] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 1340.807195] R13: dffffc0000000000 R14: ffff8880b523ae80 R15: ffff88809b3de4e1 [ 1340.807201] FS: 0000000000000000(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1340.807204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1340.807207] CR2: 00007f74e16be000 CR3: 00000000b2c1a000 CR4: 00000000001426f0 [ 1340.807213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1340.807216] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1340.807218] Call Trace: [ 1340.807233] ll_recv+0x6e9/0x1820 [ 1340.807247] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1340.807255] hci_uart_tty_receive+0x1ec/0x4c0 [ 1340.807262] ? hci_uart_send_frame+0x4b0/0x4b0 [ 1340.807268] tty_ldisc_receive_buf+0x12e/0x170 [ 1340.807276] tty_port_default_receive_buf+0x6e/0xa0 [ 1340.807283] flush_to_ldisc+0x1dd/0x3f0 [ 1340.807292] process_one_work+0x793/0x14a0 [ 1340.807301] ? work_busy+0x320/0x320 [ 1340.807305] ? worker_thread+0x158/0xff0 [ 1340.807316] ? _raw_spin_unlock_irq+0x24/0x80 [ 1340.807323] worker_thread+0x5cc/0xff0 [ 1340.807332] ? rescuer_thread+0xc80/0xc80 [ 1340.807340] kthread+0x30d/0x420 [ 1340.807347] ? kthread_create_on_node+0xd0/0xd0 [ 1340.807355] ret_from_fork+0x24/0x30 [ 1340.807361] Code: 00 00 [ 1340.845505] Bearer rejected, not supported in standalone mode [ 1340.849232] 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 7f a4 7d fb 48 8d bd d0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 01 00 00 48 8d bd c8 00 00 00 4c 8b ad d0 [ 1341.027297] RIP: skb_put+0x29/0x170 RSP: ffff888056727b90 [ 1341.047115] ---[ end trace 887bf45de7380797 ]--- [ 1341.052222] Kernel panic - not syncing: Fatal exception [ 1341.058398] Kernel Offset: disabled [ 1341.062032] Rebooting in 86400 seconds..