1babbd70cfa0ef2f82a1f0ab67b9df89609e5da0966731e029207c0fe12c1050277686212e49b3db19e1af576a4c3aa4e61110d159252f077c990062f5f4503f2aaa7ae4419642fcefff9f03de882667ef7c8655e2136c7381f45b897adef5e8ad419e1643ce483", 0x92, 0x1}]) ptrace$cont(0x7, r0, 0x0, 0x0) 12:25:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x32) 12:25:10 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x7, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x8cfd, 0x2, 0x4, 0x200000, 0xb159, {r3, r4/1000+10000}, {0x2, 0x8, 0x3, 0x2, 0x6, 0xbf, "e3921fbf"}, 0x1ff, 0x2, @offset=0x6e3, 0xffffffc0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 927.823376] Bluetooth: Unknown HCI packet type 5e [ 927.823430] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 927.830125] Bluetooth: Unknown HCI packet type 43 [ 927.840638] Bluetooth: Unknown HCI packet type 5e [ 927.850167] Bluetooth: Unknown HCI packet type 50 [ 927.863152] Bluetooth: Unknown HCI packet type 5e [ 927.877306] Bluetooth: Unknown HCI packet type 5e [ 927.884778] Bluetooth: Unknown HCI packet type 40 [ 927.892184] Bluetooth: Unknown HCI packet type 43 [ 927.912523] Bluetooth: Unknown HCI packet type 5e 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 927.924361] Bluetooth: Unknown HCI packet type 50 [ 927.935133] Bluetooth: Unknown HCI packet type 5e [ 927.964124] Bluetooth: Unknown HCI packet type 40 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:25:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 929.078108] Bluetooth: Unknown HCI packet type 5e [ 929.093538] Bluetooth: Unknown HCI packet type 43 [ 929.101111] Bluetooth: Unknown HCI packet type 5e [ 929.106376] Bluetooth: Unknown HCI packet type 50 [ 929.117553] Bluetooth: Unknown HCI packet type 5e [ 929.123729] Bluetooth: Unknown HCI packet type 40 [ 929.898198] Bluetooth: hci2 command 0x1003 tx timeout [ 929.898421] Bluetooth: hci0 command 0x1003 tx timeout [ 929.903717] Bluetooth: hci2 sending frame failed (-49) [ 929.914524] Bluetooth: hci0 sending frame failed (-49) [ 931.098260] Bluetooth: hci1 command 0x1003 tx timeout [ 931.103626] Bluetooth: hci1 sending frame failed (-49) [ 931.978282] Bluetooth: hci2 command 0x1001 tx timeout [ 931.978487] Bluetooth: hci0 command 0x1001 tx timeout [ 931.983610] Bluetooth: hci2 sending frame failed (-49) [ 931.994085] Bluetooth: hci0 sending frame failed (-49) [ 933.178187] Bluetooth: hci1 command 0x1001 tx timeout [ 933.183806] Bluetooth: hci1 sending frame failed (-49) [ 934.058146] Bluetooth: hci2 command 0x1009 tx timeout [ 934.058306] Bluetooth: hci0 command 0x1009 tx timeout [ 935.258158] Bluetooth: hci1 command 0x1009 tx timeout 12:25:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:25:20 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) 12:25:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000240)={"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"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000000c0)) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$rose(r3, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x40) msgctl$IPC_RMID(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 12:25:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000800)="f2bf333b6a8a9fdc7f71c22ff046843c6109d2d27c44ec5c410b28f8790a4ef7ff6550d5fdbaeea90eb01829b00f23cb19a464f568f3abcbece8dead3ef156f70ff4f29e202786fa44594e11cf41941a50e11b7fd3668b43d34540d6ed6d22af0ba2acb02408dbefd00d7fabd1c4cb202cd832c71a8c185e2dc402e7f6f728d4359d620175a11e5b0c304a2959cf18deb96fa9c1354b8f4a2b741305c2d296bea3a2229ff939bc694f255f4ec8a581071bf110f130fa448079c7", 0xba) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x59e) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000006c0)={0x3, [0xdd62, 0x101, 0x3, 0x80, 0x401, 0xadc, 0x4, 0xbe13, 0x3, 0x109d, 0x0, 0x3f, 0x0, 0x8, 0x7, 0x1c6, 0x7f, 0x1, 0x3f, 0x0, 0x7, 0x9b5, 0x1ff, 0x9, 0x8, 0xffff, 0x56a8, 0xe13, 0x5, 0x678, 0x9, 0x0, 0x9, 0x7fff, 0x9, 0x1, 0x7, 0x7, 0x8, 0x1, 0x100, 0xf5, 0x0, 0x4, 0x1000, 0x7, 0x6, 0x5], 0x2}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x480000, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000680)={0x2, 0x7, &(0x7f0000000280)="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"}) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000f70300032d0006002e2f66dedfbf8ac0d216d67e696765302e2f6661306f38e9dad31a69cd0000000044dfe6c14c50965497cd8707c9ae7af5b07af16996e7cb444fd8994ab5559ae3d2e6a4ac027913a501c9e1da995e58ccfea640532e10e3a5d6b7ee9948bb2838602ae4750f10f52f142f059b65114387637b8ed3cd8f79424c839c5cfb9f354cf6a896dd9f14233e3184c83be17930aa2e5504f7b78d49421938c14e5101d1"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) [ 938.142209] Bluetooth: Unknown HCI packet type 5e [ 938.147294] Bluetooth: Unknown HCI packet type 43 [ 938.174437] Bluetooth: Unknown HCI packet type 5e 12:25:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 938.201513] Bluetooth: Unknown HCI packet type 50 [ 938.241009] Bluetooth: Unknown HCI packet type 5e [ 938.266657] Bluetooth: Unknown HCI packet type 40 [ 938.324184] Bluetooth: hci2: Frame reassembly failed (-84) [ 938.330611] Bluetooth: hci2: Frame reassembly failed (-84) 12:25:21 executing program 5: timer_create(0x7, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000f1400012cbd7000fcdbdf2545006f7061df766e69630000000008000100000000000c00450069625f73727074000800010000000000080003000400000008000300000000000800430001000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x48840) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)=ANY=[@ANYBLOB="03eb000000000000000000"]) 12:25:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000002c0)={0x3, 'veth1_to_hsr\x00', {0x3f06}, 0xd21}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x30) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x70, 0x9, 0x6, 0x81, 0x4, 0x0, 0x10000, 0x84480, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffa}, 0x10000, 0xfff, 0x5, 0x3, 0x8, 0x2, 0x6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x80000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="21180000000000003c0012800800010067726500300002800400120008000100", @ANYRES32=0x0, @ANYBLOB="05000a000100000008000700e0000002060003000000000005000a000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x64}}, 0x0) 12:25:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) uname(&(0x7f0000000100)=""/142) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="99730bf54387ffd3b928c5026447ef9ab0cab94b5a296545bc9c1315c62ddc549f38c1e5c5804fb87c499643179083574c1a2e238bd54385eb63c3e9e79ace18ea9cdb36c7f15629e2ec7a8dc3172191320a6c9a3a1ce5d1e853", 0x5a}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1, {0x4, 0x101, 0x7, 0x5}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_dev$rtc(&(0x7f0000000280)='/dev/rtc#\x00', 0xba, 0x40080) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x420800, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000001c0)={0xc, 0x42, {0x56, 0x8001, 0x26e1, {0x180, 0x729}, {0xf010, 0x800}, @const={0x6, {0x8, 0x1000, 0xffff, 0x8}}}, {0x53, 0x6089, 0x3, {0x84c0, 0xbf}, {0x3, 0xd4c1}, @cond=[{0xff, 0x6, 0x6e9d, 0x3f, 0x0, 0xe06}, {0x8001, 0x3f, 0x23, 0x6, 0x3, 0x401}]}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x32) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x102000004) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x40}, 0x1) 12:25:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:25:22 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x220503, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000040)={0x1, 0x1, 0x7}) exit(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) [ 940.217939] Bluetooth: hci0 command 0x1003 tx timeout [ 940.223275] Bluetooth: hci0 sending frame failed (-49) [ 940.377971] Bluetooth: hci2 command 0x1003 tx timeout [ 940.383436] Bluetooth: hci2 sending frame failed (-49) [ 941.337910] Bluetooth: hci1 command 0x1003 tx timeout [ 941.343333] Bluetooth: hci1 sending frame failed (-49) [ 942.297921] Bluetooth: hci0 command 0x1001 tx timeout [ 942.303434] Bluetooth: hci0 sending frame failed (-49) [ 942.458006] Bluetooth: hci2 command 0x1001 tx timeout [ 942.463326] Bluetooth: hci2 sending frame failed (-49) [ 943.417895] Bluetooth: hci1 command 0x1001 tx timeout [ 943.423276] Bluetooth: hci1 sending frame failed (-49) [ 944.387917] Bluetooth: hci0 command 0x1009 tx timeout [ 944.547885] Bluetooth: hci2 command 0x1009 tx timeout [ 945.497831] Bluetooth: hci1 command 0x1009 tx timeout 12:25:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000030000f2c476170000090300006efc4c66785c5a0090a732b637b7240000000000000000000433a0d667d94f5ef86f685fb698833007d4cee79c32123d49bb7b845795c2328e67343297c1b64ee589ad3c533a3d31ec0f187c3b785d5a48bc"], 0x0, 0x80}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000100)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x101002, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2}) 12:25:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000580), &(0x7f00000005c0)=0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x1000, 0xb, 0x4, 0x4, 0xa4c, {0x77359400}, {0x1, 0xc, 0x7, 0x2, 0x0, 0x9e, "201cadd9"}, 0x7, 0x2, @fd, 0xd653, 0x0, r0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000080)={0x1df, 0x1d, &(0x7f0000000180)}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = creat(&(0x7f0000000b00)='./file0\x00', 0x15) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d0000000000201010000000000000000050000000f000600746674702d3230303030000008000440000001016000038006000340000200000c00028005000100110000000c0002800500010006000340000200002c000180140003000000000000000000000000000000000114000400ff01000000000000000000000000000106000340000300000c00018006000340000100000800054000000004300003802c00018014000300ff02000000000000000000000000000114000400fc0100"/208], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000a80)={0x0, 0xfffffffffffffffe, 0xc0, 0xff, @scatter={0x5, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f0000000700)=""/180, 0xb4}, {&(0x7f00000007c0)=""/47, 0x2f}]}, &(0x7f0000000880)="ee49bf61fbf79861943b577a3e90f8ee660f1e934c0e735dff8206fa96e05ae3d9dc36f2019e8c817be49f0d790e16c9ba22edccd9e147c0e42cceb1cf7820a0983ab0717d9923de0cb41a6e5b509bce6cba8b411e834b9f6722e51a3a166fac280e9c2a107ac6aca5e23da5c2d347e034b5802a4b08d2a88f7659f87325c2d8a62c7ab8d3c8a43721fc9205991446d6d96c872534068b2bad1e61a74b3c17d803b89e0e988ac0ec2444664e5b44002c4cfe97b0571f8c1006fe652249c18cff", &(0x7f0000000940)=""/194, 0x3f, 0x32, 0x0, &(0x7f0000000a40)}) 12:25:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:25:30 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x440, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7, 0x101400) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x701040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_delete(0x0) [ 948.270912] Bluetooth: Unknown HCI packet type 5e [ 948.276007] Bluetooth: Unknown HCI packet type 43 [ 948.286487] Bluetooth: Unknown HCI packet type 5e [ 948.330632] Bluetooth: Unknown HCI packet type 50 [ 948.344348] Bluetooth: Unknown HCI packet type 5e [ 948.349586] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 948.356694] Bluetooth: Unknown HCI packet type 40 [ 948.414366] Bluetooth: Unknown HCI packet type 5e [ 948.420249] Bluetooth: Unknown HCI packet type 43 [ 948.431208] Bluetooth: Unknown HCI packet type 5e [ 948.446284] Bluetooth: Unknown HCI packet type 50 [ 948.456782] Bluetooth: Unknown HCI packet type 5e [ 948.471691] Bluetooth: Unknown HCI packet type 40 12:25:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/arp\x00') setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f00000001c0)="cc2b1c743e3b1a099a00702d0f0a5aeadaa6fc880f17eddbbe07a65c37793aba09100d6adbaa644fafb2", 0x2a) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffff801, 0x4) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/175, 0xaf}], 0x1, 0x200000000001f6) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@ipv4={[], [], @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, r3, r5, r6) chown(&(0x7f0000000080)='./file0\x00', r2, r6) 12:25:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 948.897128] Bluetooth: hci2: Frame reassembly failed (-84) [ 948.903217] Bluetooth: hci2: Frame reassembly failed (-84) 12:25:31 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000004) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r4, 0x5, 0x1}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_delete(0x0) 12:25:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000007de67012e66302c3ca709c39396a788ef8ecdd329705d138647048509b307c5a1390c9db24dda258aca0458e0ff673af34f35003d78c203c54b900000061b5d8821599eccc2d06f439fe8db935e34119f3e35266d3080000fcdb00b082eacbee65e629d032c45d6f099e68e481068a4504b6f041a9438a0861bbcdf8fdbcc8c50281a4959250f8874a5bee79d63f6a3fb183b2121c6d5c26a7b7de93dc6bc4c8ed00c34340381fd00a895e9906858cfc452b8273733c65b54a73030130fdccd76a14a42df8618a4ca4bf28c370d5d2cbf8ea3bcf07839c0429e2e70000749a00735c23e8eccdf78ce9d4a20db30e4241945f8e95a6050ca979c1", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x70, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r1}, &(0x7f0000000140)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x1}, 0x2c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0xfffffffffffffeb7) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x3) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xbdb}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:25:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) [ 949.595374] Bluetooth: Unknown HCI packet type 5e [ 949.602308] Bluetooth: Unknown HCI packet type 43 [ 949.612477] Bluetooth: Unknown HCI packet type 5e [ 949.618786] Bluetooth: Unknown HCI packet type 50 [ 949.635356] Bluetooth: Unknown HCI packet type 5e [ 949.648528] Bluetooth: Unknown HCI packet type 40 12:25:32 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) timer_delete(0x0) 12:25:33 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x130, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfe8c, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe151, @private2={0xfc, 0x2, [], 0x1}, 0x2445}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @empty, 0x7}}}}]}]}, 0x130}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x4, 0x9, 0x4, 0x2000000, 0x6, {0x0, 0xea60}, {0x4, 0x2, 0x4, 0x80, 0x8, 0x81, "8f3f13dc"}, 0x9, 0x0, @userptr=0x80, 0xff, 0x0, r1}) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, 0x15, 0x1, 0x70bd2d, 0x25dfdbff, {0x1a, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x67, 0x1, "4da44d842345e758f21e5f326ecdae9e5c18f01fa4724fc79207cf1ebde811162cabccdbfc9fb3b8577e5605cd73c8673be6e5b30f3b348a533354975e48f8b48df2beb4d4d8fc47746acdf7e1369635af02013a778f243434f7fee92331d2539995d0"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080f1}, 0x24000801) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2000000000000048, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x9}, {0xb1}, {0x6, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) [ 950.307815] Bluetooth: hci0 command 0x1003 tx timeout [ 950.319865] Bluetooth: hci0 sending frame failed (-49) [ 950.457752] Bluetooth: hci3 command 0x1003 tx timeout [ 950.463291] Bluetooth: hci3 sending frame failed (-49) 12:25:33 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000000)=""/7) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) [ 950.937652] Bluetooth: hci2 command 0x1003 tx timeout [ 950.943343] Bluetooth: hci2 sending frame failed (-49) 12:25:33 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) syncfs(r2) read$midi(r2, &(0x7f0000000000)=""/126, 0x7e) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x81, 0x1, 0x4, 0x1, 0x0, 0x8, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x2}, 0x108, 0x6, 0x426, 0x9, 0x7ff, 0x4, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={0x1, 0x1, 0x9, 0x8, &(0x7f0000000140)=[{0x7fff, 0x4, 0x1ff}, {0x37, 0xec29, 0x1, 0xfffb}, {0x6, 0x3d, 0xe71b, 0x2}, {0xe631, 0xfe00, 0x20, 0x22}, {0x2, 0x3, 0x8000, 0x8}, {0x0, 0x4, 0x80, 0x1}, {0xffff, 0x7, 0x500, 0x5}, {0xfff, 0x4, 0x39, 0x401}]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 951.657649] Bluetooth: hci1 command 0x1003 tx timeout [ 951.663100] Bluetooth: hci1 sending frame failed (-49) [ 952.377587] Bluetooth: hci0 command 0x1001 tx timeout [ 952.382900] Bluetooth: hci0 sending frame failed (-49) [ 952.537647] Bluetooth: hci3 command 0x1001 tx timeout [ 952.543009] Bluetooth: hci3 sending frame failed (-49) [ 953.017658] Bluetooth: hci2 command 0x1001 tx timeout [ 953.022972] Bluetooth: hci2 sending frame failed (-49) [ 953.737602] Bluetooth: hci1 command 0x1001 tx timeout [ 953.743025] Bluetooth: hci1 sending frame failed (-49) [ 954.457585] Bluetooth: hci0 command 0x1009 tx timeout [ 954.617659] Bluetooth: hci3 command 0x1009 tx timeout [ 955.097585] Bluetooth: hci2 command 0x1009 tx timeout [ 955.817539] Bluetooth: hci1 command 0x1009 tx timeout 12:25:41 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x400800, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x2b05) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x21}) 12:25:41 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ip6_vti0\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@remote={0xfe, 0x7c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x5]}, 0x36, r2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000180)={{0x4eeae72f2ef3d882, 0x0, @identifier="029272e4e893cce830d37b008768f2ae"}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) r5 = socket$unix(0x1, 0x0, 0x0) sendto$unix(r5, 0x0, 0x0, 0x4000811, 0x0, 0xffffffffffffff4c) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000000600)="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", 0xe00) sendfile(r6, r7, 0x0, 0x12000) 12:25:41 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) 12:25:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 958.610674] audit: type=1800 audit(1590063941.345:246): pid=28513 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=15884 res=0 [ 958.655801] Bluetooth: hci0 sending frame failed (-49) [ 958.673164] audit: type=1804 audit(1590063941.345:247): pid=28513 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir840850110/syzkaller.VJZbHZ/67/file0" dev="sda1" ino=15884 res=1 [ 958.920473] audit: type=1800 audit(1590063941.655:248): pid=28513 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.4" name="file0" dev="sda1" ino=15884 res=0 12:25:41 executing program 4: statfs(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="19bcbd06746a378248638c917a69f71a073f71f38ae7", @ANYRES32=0x0], 0x34}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000007060103210049c17b5a08181a383d0095000000000c00000508dd0540000000030900020073797a30000000000900020073797a30000000000800064000000000090049e9c9e57a3900000000050001000700000008000684"], 0x60}, 0x1, 0x0, 0x0, 0x24004040}, 0x800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xf17) unshare(0x40040400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) memfd_create(0x0, 0x5) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x79}}, 0x0) 12:25:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 959.137117] Bluetooth: hci2: Frame reassembly failed (-84) [ 959.138662] Bluetooth: hci2: Frame reassembly failed (-84) [ 959.253005] IPVS: ftp: loaded support on port[0] = 21 12:25:42 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x200}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FITHAW(r4, 0xc0045878) pwrite64(r2, &(0x7f00000006c0)="554d11ce988b141cc11cce7a4f7ba94574c6201b22611579ef659e58b9a43626240ad063c445d5f544b2819c83e3449fe0890e7b4a3f2a22b52fb5d3fe20cda472af316eae24e04466630ed1b8a8021caaa2d28cd032f8c386b3c08ff68cc21942a1026a88836a511435e63246c69f3159fece27ff1e753be61824533d3f6a47dcb7c3ca1da64d33033231e4ecb9406492f658af91a841e0dda95797cd92b8e6e726d3a0b02781aed550239806aca81082b41df5303cd215e260ef61100eaf119c2e4197f77425f4840ba421ac2e27802798c01223cb6a28b29f373d0f21fa33dda049b81e148845e6abfccc", 0xec, 0x8bb) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r3, @ANYBLOB="01033e97feaf2187e6680b000000e87631ba22e6432232cdf35329cb3e"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000050) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x32) [ 959.534639] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 959.541558] Bluetooth: Unknown HCI packet type 5e [ 959.546408] Bluetooth: Unknown HCI packet type 43 [ 959.552571] Bluetooth: Unknown HCI packet type 5e [ 959.565398] Bluetooth: Unknown HCI packet type 50 [ 959.571402] Bluetooth: Unknown HCI packet type 5e [ 959.576356] Bluetooth: Unknown HCI packet type 40 12:25:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:25:42 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) r3 = dup(r1) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x9, 0xeaecb79f6c37f1aa, 0x4, 0xfffffffe, 0x6, 0x5, 0x6, r5}, &(0x7f0000000280)=0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000000)={'geneve1\x00', 0x9, 0x88}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) [ 959.933856] IPVS: ftp: loaded support on port[0] = 21 12:25:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) sched_setscheduler(0x0, 0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200040, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r0, &(0x7f0000000300)=r1, 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x190, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x76}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x9db2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private2, 0xb5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x717}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x25}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x84}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x759}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x80}, 0x20000055) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 12:25:42 executing program 4: syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902800000a8a989000000007ba79554354cdddb4e627263a72ff58ab16f88b9663da5668b145e6313c17b22b9e79c9258687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e543506a3bfffff000000000000649caab8d914916ee79d501a3aa4f0"], 0x10}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:25:43 executing program 4: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f0000000300)='\x00\x00\x00\x00\"\xa8\x99:\xab\x02\x92H\x81\x05\xefN\x04\xd4;\xbe\xf3\xec\xef6\x1a\t\x00j\xbd=F\x00C\xd1A*\xff\xff3\xf7V\xdez\xc6d\x18\xaaJ\xdb\x11\x9c\x8b\xb8\xf8\xb3)\xed\xaf\xea\nq\x1c\x10S\x9c\x9cp\xd6N\x1a\x1d\x16\x84C\xf0\x96fw\xc0\xacz.J\xc1C-i<\b\x00\xfd\xf8E\xa14b\x87\xea7\xd1\xf9+\x05\x06\xe7\xe2\xd7\x82\xdef\xce\x94T|\xc6x\xb1\x0f-\a^\xa1\xb2d\xca\xe5\xack', 0x6) pwritev(r2, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000100)=""/8, &(0x7f0000000140)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$midi(r3, &(0x7f0000000000)="5e71dde6ea73c3bc9928fc49dcab4435ded07bfed7ec7db821035955c0fedd59e6f98a9a6f1e279cb5ac9bda469d978e8b645a6b043ba9c4abe062205e1fa97985f24f8ef8a0362742285467b3d4fbce6e61c04f26d6", 0x56) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) 12:25:43 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_THP_DISABLE(0x29, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r3) [ 960.697398] Bluetooth: hci0 command 0x1003 tx timeout [ 960.703122] Bluetooth: hci0 sending frame failed (-49) 12:25:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0xa}, 0x8, 0x0, 0x800, 0x6, 0x0, 0x0, 0xfffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpid() socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x430, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @common=@dst={{0x48, 'dst\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) [ 960.795239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 961.177402] Bluetooth: hci2 command 0x1003 tx timeout [ 961.183208] Bluetooth: hci2 sending frame failed (-49) 12:25:44 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) [ 961.587365] Bluetooth: hci3 command 0x1003 tx timeout [ 961.592704] Bluetooth: hci3 sending frame failed (-49) [ 961.817521] Bluetooth: hci1 command 0x1003 tx timeout [ 961.823147] Bluetooth: hci1 sending frame failed (-49) [ 962.777387] Bluetooth: hci0 command 0x1001 tx timeout [ 962.782771] Bluetooth: hci0 sending frame failed (-49) [ 963.257341] Bluetooth: hci2 command 0x1001 tx timeout [ 963.262794] Bluetooth: hci2 sending frame failed (-49) [ 963.657370] Bluetooth: hci3 command 0x1001 tx timeout [ 963.662695] Bluetooth: hci3 sending frame failed (-49) [ 963.897503] Bluetooth: hci1 command 0x1001 tx timeout [ 963.903373] Bluetooth: hci1 sending frame failed (-49) [ 964.857289] Bluetooth: hci0 command 0x1009 tx timeout [ 965.337180] Bluetooth: hci2 command 0x1009 tx timeout [ 965.737139] Bluetooth: hci3 command 0x1009 tx timeout [ 965.977505] Bluetooth: hci1 command 0x1009 tx timeout 12:25:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:25:51 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x4000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setreuid(0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r5, 0x97, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x5, 0x4, 0x1, 0x8, 0xfffffffd, 0x6, 0x2, r6}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa0d35b1004bb080045000070000b41d39ab09f5e05723200000000019078ac1e0001ac1414aa0400907800000000450000000000000000290000ffffffffac1e0001071b00ac1414bbac141400ac1414bbac1e000100000000000000000001441404010000000000000000000000000000000000000b8f58b6ca8b16574a810000004f3e41270b178d4560b06987049d24cf04448a7f87ae882fb8aff6313d2b9125197777b5dc6cbfdb4168a93e7110"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x4, @private2, 0xbc}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x7}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, [], 0x1}, 0x56}, @in6={0xa, 0x4e20, 0xfff, @local, 0xfff}, @in6={0xa, 0x4e24, 0x3f, @mcast2, 0x8}], 0xdc) [ 968.798113] Bluetooth: Unknown HCI packet type 5e [ 968.804008] Bluetooth: Unknown HCI packet type 43 [ 968.822554] Bluetooth: Unknown HCI packet type 5e [ 968.844300] Bluetooth: Unknown HCI packet type 50 [ 968.849640] Bluetooth: Unknown HCI packet type 5e [ 968.854564] Bluetooth: Unknown HCI packet type 40 12:25:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:25:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:25:52 executing program 5: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0xdfd5a000) timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)={0x2, 0x0, 0x101}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x9feb, 0x2}) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x6, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x40009fee, 0x10000002}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r6 = accept4(r5, &(0x7f0000000080)=@ax25={{}, [@null, @default, @null, @remote, @rose, @null, @netrom, @netrom]}, &(0x7f0000000000)=0x80, 0xc1000) r7 = dup2(r1, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) timer_delete(0x0) 12:25:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "002000000000ffd7001ce1ffffffffa94ce1ce"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f00000000c0)) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) splice(r2, 0x0, r0, 0x0, 0x2000000020000038, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) 12:25:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() keyctl$setperm(0x5, 0x0, 0x1b3329de939aa60b) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) r1 = open(&(0x7f0000000080)='./bus\x00', 0x80, 0x79) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 970.063780] Bluetooth: Unknown HCI packet type 5e [ 970.072882] Bluetooth: Unknown HCI packet type 43 [ 970.080211] Bluetooth: Unknown HCI packet type 5e [ 970.085695] Bluetooth: Unknown HCI packet type 50 [ 970.094417] Bluetooth: Unknown HCI packet type 5e [ 970.102399] Bluetooth: Unknown HCI packet type 40 12:25:53 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x161, &(0x7f0000003340)={0x0, 0x3938700}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000001c0)={'syz_tun\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'dummy0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0x100000110) r2 = epoll_create(0x2000007) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x1000, 0x9}, 0x0) kcmp(0x0, 0x0, 0x0, r1, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 12:25:53 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x6, 0xa, 0x4, 0x100, 0x1ff, {0x0, 0xea60}, {0x1, 0xc, 0x40, 0x1, 0x5, 0x3, "cbd1260d"}, 0xffffff01, 0x1, @fd=r2}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000002c0)={0x9, 0x3798000, 0xffffff00, 0x5, 0x81, "0f077a4ec0328582dab00489847ccbf7c09af5", 0x6, 0x8}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) 12:25:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000100)=""/175) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:25:53 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) [ 970.856233] Bluetooth: hci0 command 0x1003 tx timeout [ 970.862767] Bluetooth: hci0 sending frame failed (-49) [ 971.416097] Bluetooth: hci2 command 0x1003 tx timeout [ 971.421785] Bluetooth: hci2 sending frame failed (-49) [ 972.135979] Bluetooth: hci1 command 0x1003 tx timeout [ 972.141305] Bluetooth: hci1 sending frame failed (-49) [ 972.935933] Bluetooth: hci0 command 0x1001 tx timeout [ 972.941232] Bluetooth: hci0 sending frame failed (-49) [ 973.495869] Bluetooth: hci2 command 0x1001 tx timeout [ 973.501194] Bluetooth: hci2 sending frame failed (-49) [ 974.215770] Bluetooth: hci1 command 0x1001 tx timeout [ 974.221476] Bluetooth: hci1 sending frame failed (-49) [ 975.015727] Bluetooth: hci0 command 0x1009 tx timeout [ 975.575562] Bluetooth: hci2 command 0x1009 tx timeout [ 976.295426] Bluetooth: hci1 command 0x1009 tx timeout 12:26:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:01 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x20000814) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000e3ff0000000000000000000002000000039321fc1b160d5b00000048020000e000000000000000e000000000000000e0000000b0010000b0010000b0010000b0010000b0010000030000000000000000000000e0000002ac1e000100000000000000006c6f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e0000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000068000000000000002800727066696c746572000000000000000000000000000000000000000000000000000099c7e90020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/666], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) dup(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) [ 979.098781] Bluetooth: Unknown HCI packet type 5e [ 979.105564] Bluetooth: Unknown HCI packet type 43 [ 979.110891] Bluetooth: Unknown HCI packet type 5e [ 979.137340] Bluetooth: Unknown HCI packet type 50 [ 979.142619] overlayfs: filesystem on './file0' not supported as upperdir [ 979.146973] Bluetooth: Unknown HCI packet type 5e [ 979.161574] Bluetooth: Unknown HCI packet type 40 12:26:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:26:02 executing program 3: ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x9, 0x1, 0x10000, 0x5, 0xffffffc0, 0x8001}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x105980, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:26:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:26:02 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x401) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) bind$isdn(r2, &(0x7f0000000080)={0x22, 0xe7, 0x0, 0xae, 0x8}, 0x6) timer_delete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x3) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="b66060928fa12e1ece9b2e070ab54822"}}) 12:26:02 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x20000814) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000e3ff0000000000000000000002000000039321fc1b160d5b00000048020000e000000000000000e000000000000000e0000000b0010000b0010000b0010000b0010000b0010000030000000000000000000000e0000002ac1e000100000000000000006c6f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e0000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000068000000000000002800727066696c746572000000000000000000000000000000000000000000000000000099c7e90020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/666], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) dup(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) [ 980.308833] Bluetooth: Unknown HCI packet type 5e [ 980.314090] Bluetooth: Unknown HCI packet type 43 [ 980.344176] Bluetooth: Unknown HCI packet type 5e [ 980.372717] Bluetooth: Unknown HCI packet type 50 [ 980.379792] Bluetooth: Unknown HCI packet type 5e [ 980.390285] Bluetooth: Unknown HCI packet type 40 12:26:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/166) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:26:03 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x20000814) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000e3ff0000000000000000000002000000039321fc1b160d5b00000048020000e000000000000000e000000000000000e0000000b0010000b0010000b0010000b0010000b0010000030000000000000000000000e0000002ac1e000100000000000000006c6f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e0000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000068000000000000002800727066696c746572000000000000000000000000000000000000000000000000000099c7e90020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/666], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) dup(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) [ 980.532927] Bluetooth: Unknown HCI packet type 5e [ 980.533212] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 980.551864] Bluetooth: Unknown HCI packet type 43 [ 980.566739] Bluetooth: Unknown HCI packet type 5e [ 980.571622] Bluetooth: Unknown HCI packet type 50 [ 980.583983] Bluetooth: Unknown HCI packet type 5e [ 980.590856] Bluetooth: Unknown HCI packet type 40 12:26:03 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x20000814) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000e3ff0000000000000000000002000000039321fc1b160d5b00000048020000e000000000000000e000000000000000e0000000b0010000b0010000b0010000b0010000b0010000030000000000000000000000e0000002ac1e000100000000000000006c6f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e0000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000068000000000000002800727066696c746572000000000000000000000000000000000000000000000000000099c7e90020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/666], 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4c22, @multicast1=0xe0000002}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) dup(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file1\x00', 0x100) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) 12:26:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x2043) 12:26:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10, 0xeaebf0c1cbe870d6}}}}}}]}, 0x48}}, 0x0) [ 981.174795] Bluetooth: hci0 command 0x1003 tx timeout [ 981.180343] Bluetooth: hci0 sending frame failed (-49) [ 981.664700] Bluetooth: hci2 command 0x1003 tx timeout [ 981.671189] Bluetooth: hci2 sending frame failed (-49) [ 982.374570] Bluetooth: hci1 command 0x1003 tx timeout [ 982.380170] Bluetooth: hci1 sending frame failed (-49) [ 982.534519] Bluetooth: hci3 command 0x1003 tx timeout [ 982.539920] Bluetooth: hci3 sending frame failed (-49) [ 983.254373] Bluetooth: hci0 command 0x1001 tx timeout [ 983.259808] Bluetooth: hci0 sending frame failed (-49) [ 983.734489] Bluetooth: hci2 command 0x1001 tx timeout [ 983.739913] Bluetooth: hci2 sending frame failed (-49) [ 984.454226] Bluetooth: hci1 command 0x1001 tx timeout [ 984.459533] Bluetooth: hci1 sending frame failed (-49) [ 984.614278] Bluetooth: hci3 command 0x1001 tx timeout [ 984.619622] Bluetooth: hci3 sending frame failed (-49) [ 985.334287] Bluetooth: hci0 command 0x1009 tx timeout [ 985.814189] Bluetooth: hci2 command 0x1009 tx timeout [ 986.534049] Bluetooth: hci1 command 0x1009 tx timeout [ 986.694038] Bluetooth: hci3 command 0x1009 tx timeout 12:26:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x2002001}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fcntl$getown(r3, 0x9) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x4000, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x103803, 0x0) sendmsg$inet6(r4, &(0x7f0000000980)={&(0x7f0000000240)={0xa, 0x4e21, 0x100, @local}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000002c0)="3b5488b085be1d4bd373293eb97c7ea2cd804233c7a664fd2fae5164270143cd9be467f004e2a2c2c148f5aa4c43e37b0098cf8d4012a8c9763fbaa2a935594e4968b6798d82831d4a095171ae52a88830fc26afe02aca896f5d812f96200b2ae160ef6f9ccd656d67211d4c3fc9dea0a9e69968e7163eb9b753478927a2b9d972e1b6c22aa08ffb0e87c71245918414fba9847939d93b17cdaa9c882c486cdd7ff27873a263a2616b0deaf61f0556abc274053ac21cead2e5dcb5051174f189d90b59cb2d4e60155c8f54caf89ed843d4171b57", 0xd4}, {&(0x7f00000003c0)="c259b554d290d3bb8b284e03f6a8b04f1ace4aee10fca1f9dfaf21281226f789899c2019bb308ed3c836cf1ce004a5c192183511f1b8c438c83625d70873116eb489c8d4e80ecd51f62dabf37b2b5750f5d0b19d885e71c0b66539cb3d2bc5", 0x5f}, {&(0x7f0000000440)="f15aabaab0361293c947bae5a8e432861cf059a2c31c778b2f242310147b7899ba12550cf0679ccc48e41caef5b0acd344ff928c838b182bf2ca71fbd61795c47230d7939ef92b82ffec9c16cb1225293a9b7b662e9915b7d496ad4e726b5724e5389cab8ab17ca61fe46409ecba448add51e095b3529717016e2536aebd5524df2a7df804ddf29e6625f88905c110b276e9f6381b5a58ff2e5dfc1252a83bc22aab9fbc4f370aac413dcfe927a0a82dc87d64c2e43f9cdc12c1f85f06f2ec62eda2ad807febb149bc0b38785929c4f9a2db692744a0c5c5404d2d522c0e0d2d0828", 0xe2}, {&(0x7f0000000540)="2dec7a79d07bb5de33fa963d22a5de3dd7953282cd0d7702ece64efeaaed5b3f54d4d04e622391d364efdb79d877f57a4eeed5f31c247ce184331a962607d7fb9857cb13dfa9e22e604febc2f8ccd28a93351d0f7babc313f3df5b24a92794cf5126fc92e2cf549d99d8deb91d7d1a761af9c3518c2caebf948964e3dc44b1bf7ce27d6e4e242fd190b5617556e7ef5412e278cccfc58fd37629a10b0ce701a1de33f807710af39c1c2476422b6947d6a586d937ce0c0fc8bf78", 0xba}, {&(0x7f0000000600)="1199f1f4cd39b6f0879ca24eb6c3893cf131416333b331bb77a8253f6e52c951a9ac2ec2be8e5485645b01685efa4ce4c2b3d62bae254ef6ce55622c0fa1aea7eddd19cd7ad01e0b7b7bb3426a9c81d3200ab4fd010396d07de114a18dafeb0fb3789ac900e3367875bec71dbb303c0ea78e551f04f6f860891a1b5d0010f5340905c94285bef2d321ca3d749d682c87dfcc0fc4cf7ca31c53bb50e3e917c0ab07992380c0e0108aa7021308c391f9ad07985586b660c7cf0d9458467cca3865c82e5188aec30b0b71d493f11ba5543d7e08ce360711a1925f38ab4a297074cb62d756f1df2a5de97dba3f7f496ea19e996a8cb90925c3796ce10a31e097a7", 0xff}, {&(0x7f0000000700)="40022785c5d4e5d7", 0x8}, {&(0x7f0000000740)="b2ff75663f3206aba1d0633ffa08f9739bfc26e77be2be0a539895c4646269c94ba4aae65dffc6dac0fd79bc1319568d3e24cadcc790c9ca154b4780d31773de858ba5df083771cda82e1a1ecd23ef059448218f7042beaa434166b9a582bdcf562c4fd198b836a612a52ed87cb1b37fa8d3ea8e267a0768c00230d9e243e056a2ec5e5c4da68f08c60c1f264ed84ba1a59197639af9fc3f484d1fd132ef4b79263a65894571b8b343ad1e02a9eff957c13be60947ed2a5605c3ea61e1f84822f5a2b05b427c3f5ea1df2f885359c60cb1cc5c147aa025021bf14a748d98fa36ec69409ded6a8b0e", 0xe8}], 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="4800000000d0d71933ae6df741fe28d6fc9200000029000000390000008706010200000000fe8000000000000000004000000000bbff0100000000000000000000000000010000000000000000000000000000000014000000000000005d513880174855aeb3aae96210a729000000430000000400000000000000140000000000000029000000430000000800000000000000140000000000000029000000430000000700000000000000"], 0x90}, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x79, 0x9, 0x3a3596db, 0x5, 0x7, 0x81, 0x9}) socket$inet_udplite(0x2, 0x2, 0x88) [ 989.283384] Unknown ioctl -1071881042 [ 989.290448] Bluetooth: Unknown HCI packet type 5e [ 989.295584] Bluetooth: Unknown HCI packet type 43 [ 989.300442] Bluetooth: Unknown HCI packet type 5e [ 989.318698] Bluetooth: Unknown HCI packet type 50 [ 989.329215] Bluetooth: Unknown HCI packet type 5e [ 989.329696] Unknown ioctl -1071881042 [ 989.340930] Bluetooth: Unknown HCI packet type 40 12:26:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:26:12 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1ca0, 0x9, {}, {r2}, 0x3, 0x7}) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, r4, r6, r7) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000140)={0x208, 0x0, 0x2, [{{0x6, 0x3, 0x6, 0x6, 0xfff, 0x7f, {0x3, 0xea8ee27, 0x7, 0x3, 0x6, 0x3, 0x5, 0x200, 0x1, 0x4, 0x318e7c98, 0x0, 0xffffffffffffffff, 0x7ff, 0x7}}, {0x1, 0x6, 0x9, 0x4, ')^keyring'}}, {{0x5, 0x0, 0x0, 0x6, 0x5, 0x5, {0x5, 0x80000000, 0x81, 0x800, 0x1, 0x8001, 0x80000000, 0x5, 0x0, 0x200, 0x8, 0xee01, 0x0, 0x3, 0x1ff}}, {0x2, 0xffffffffffff7e8c, 0x1f, 0x3, '%/^vmnet1procvboxnet1em1@md5sum'}}, {{0x6, 0x1, 0x800, 0x100, 0x88, 0x4, {0x6, 0x7fffffff, 0x0, 0x5, 0x4, 0xa8, 0x0, 0x3ff, 0x9, 0x0, 0x200, r3, r7, 0x80000000, 0x3}}, {0x1, 0x3ff, 0x0, 0x10001}}]}, 0x208) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_delete(0x0) [ 989.844426] Bluetooth: hci2 sending frame failed (-49) 12:26:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:26:13 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$cont(0x20, r3, 0x2, 0x7) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 990.494349] Bluetooth: Unknown HCI packet type 5e [ 990.501781] Bluetooth: Unknown HCI packet type 43 [ 990.508895] Bluetooth: Unknown HCI packet type 00 [ 990.521830] Bluetooth: Unknown HCI packet type 5e [ 990.532232] Bluetooth: Unknown HCI packet type 50 [ 990.548172] Bluetooth: Unknown HCI packet type 5e [ 990.559006] Bluetooth: Unknown HCI packet type 40 12:26:13 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7, 0x200, 0x3, 0xffffffffffffff50}) 12:26:13 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = eventfd2(0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010007000000000006"], 0x71}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r8 = dup3(r5, 0xffffffffffffffff, 0x80000) sendmsg$nl_crypto(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@del={0x130, 0x11, 0x20, 0x70bd29, 0x25dfdbfb, {{'morus1280\x00'}, [], [], 0x4200, 0x2400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x101}, {0x8, 0x1, 0x401}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x401}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0xa00000000000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setstatus(r0, 0x4, 0x44800) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x8000000, 0x3, 0x1, 0x0, r0}]) 12:26:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000001c0)=""/40) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) dup3(r3, r0, 0x80000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) [ 991.169625] sp0: Synchronizing with TNC 12:26:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611158e9ffffffff03000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) [ 991.347355] Bluetooth: hci0 command 0x1003 tx timeout [ 991.352669] Bluetooth: hci0 sending frame failed (-49) 12:26:14 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x200000000000016) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) memfd_create(&(0x7f0000000000)='security\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) [ 991.893323] Bluetooth: hci2 command 0x1003 tx timeout [ 991.898869] Bluetooth: hci2 sending frame failed (-49) 12:26:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = semget$private(0x0, 0x3, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) memfd_create(&(0x7f0000000240)='/dev/ptmx\x00', 0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffd, 0x1000}], 0x2aaaaaaaaaaaabfd) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000180)=""/131) munlockall() ioctl$KDADDIO(r0, 0x400455c8, 0xfaba) r3 = open(&(0x7f0000000080)='.\x00', 0x20480, 0x100) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000280)={0x1, 0x9, 0x4, 0x400000, 0x100, {0x77359400}, {0x2, 0x2, 0x2, 0x7, 0x8, 0x7, "0857d540"}, 0x1, 0x3, @offset=0x37fe, 0x8}) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000300)={0x5, 0x10003, {0x53, 0xaa, 0x3800, {0xfffe, 0xffe0}, {0x9, 0x5}, @ramp={0x5, 0x1, {0x83ac, 0x1, 0x4, 0xe}}}, {0x55, 0x81, 0x8, {0x61b, 0x2a44}, {0xfffb, 0x1006}, @ramp={0x1b, 0x4, {0x1, 0x81, 0x101, 0xc3b}}}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 992.533207] Bluetooth: hci1 command 0x1003 tx timeout [ 992.538582] Bluetooth: hci1 sending frame failed (-49) [ 993.413129] Bluetooth: hci0 command 0x1001 tx timeout [ 993.418520] Bluetooth: hci0 sending frame failed (-49) [ 993.973144] Bluetooth: hci2 command 0x1001 tx timeout [ 993.978457] Bluetooth: hci2 sending frame failed (-49) [ 994.612981] Bluetooth: hci1 command 0x1001 tx timeout [ 994.618548] Bluetooth: hci1 sending frame failed (-49) [ 995.492883] Bluetooth: hci0 command 0x1009 tx timeout [ 996.052773] Bluetooth: hci2 command 0x1009 tx timeout [ 996.692787] Bluetooth: hci1 command 0x1009 tx timeout 12:26:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:22 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) [ 999.510362] Bluetooth: Unknown HCI packet type 5e [ 999.521596] Bluetooth: Unknown HCI packet type 43 [ 999.528894] Bluetooth: Unknown HCI packet type 5e [ 999.547548] Bluetooth: Unknown HCI packet type 50 [ 999.556667] Bluetooth: Unknown HCI packet type 5e [ 999.565464] Bluetooth: Unknown HCI packet type 40 12:26:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:26:22 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/92, 0x5c, 0x1, 0x0, 0x0) timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) [ 1000.097036] Bluetooth: Unknown HCI packet type 5e [ 1000.102058] Bluetooth: Unknown HCI packet type 43 [ 1000.116209] Bluetooth: Unknown HCI packet type 5e [ 1000.121332] Bluetooth: Unknown HCI packet type 50 [ 1000.128168] Bluetooth: Unknown HCI packet type 5e [ 1000.133920] Bluetooth: Unknown HCI packet type 40 12:26:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:26:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000200)="ddd0d9853abeedf9df6223c4d6a0017c66a27242303cccefad2fca1f60838ecc0b63f6f6d65cc817d22d89803b23a5a2123b6b12fcc2138ee39ac7b4c128249234638529ddfaf4ca356758cf6a3e", &(0x7f0000000280)=""/219, &(0x7f0000000380)="3eeb2eb925240fb115d6ba691bf4a503b58e44c46040dd88d17360e5f1b7640c7ff1810ef1dc4ca83689256a8796f2fa2bd2fca455d014d3fd58ca5430197adb9563d1c69b37a7200fe517c099df6c1edfd62520f1", &(0x7f0000000400)="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", 0x7f, r3}, 0x38) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000500)) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r1, r2, 0x0, 0x102000004) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:26:23 executing program 4: syz_emit_ethernet(0x1b2, &(0x7f0000000340)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x178, 0x2c, 0x0, @empty, @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x1, 0x4, [{0x1, 0x3, 0x1, @empty, [@remote], [0xfffffe6a, 0x5, 0x0]}, {0x8, 0x6, 0x3, @dev={0xfe, 0x80, [], 0x1d}, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @loopback], [0x8, 0xba, 0x101, 0x401, 0x1, 0x0]}, {0x81, 0x9, 0x8, @private2={0xfc, 0x2, [], 0x1}, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @empty, @local, @remote, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1], [0x7, 0x3, 0x1, 0x80, 0x1, 0x8, 0x3, 0x2, 0xb38b]}, {0x50, 0x2, 0x1, @mcast1, [@private0={0xfc, 0x0, [], 0x1}], [0x5, 0x4]}]}}}}}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f00000001c0)={{0x3, @name="ed923640b23dd6aa0f59a720dd81e293fc665def72bccba4e5aaa262a15b2c43"}, "0b45896f6c439f2ed7179fb8d52ab46e2a1372199b58a84a474a686855f3cb14", 0x3}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/101) [ 1000.747421] Bluetooth: Unknown HCI packet type 5e [ 1000.759352] Bluetooth: Unknown HCI packet type 43 [ 1000.764467] Bluetooth: Unknown HCI packet type 00 [ 1000.771782] Bluetooth: Unknown HCI packet type 5e [ 1000.789031] Bluetooth: Unknown HCI packet type 50 [ 1000.797154] Bluetooth: Unknown HCI packet type 5e [ 1000.804356] Bluetooth: Unknown HCI packet type 40 [ 1000.884568] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1000.894174] Bluetooth: Unknown HCI packet type 5e [ 1000.899155] Bluetooth: Unknown HCI packet type 43 [ 1000.909561] Bluetooth: Unknown HCI packet type 5e [ 1000.917619] Bluetooth: Unknown HCI packet type 50 [ 1000.928247] Bluetooth: Unknown HCI packet type 5e 12:26:23 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1ff, @null, @rose={'rose', 0x0}, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1, 0x8, 0x62, 0x40}, {0x5, 0x9, 0x41, 0x6}, {0xdc69, 0x4, 0x0, 0x4}, {0xda, 0xff, 0x5, 0x4}]}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) getpgrp(r5) timer_delete(0x0) rt_sigpending(&(0x7f0000000000), 0x8) [ 1000.939446] Bluetooth: Unknown HCI packet type 40 [ 1001.572156] Bluetooth: hci0 command 0x1003 tx timeout [ 1001.584429] Bluetooth: hci0 sending frame failed (-49) 12:26:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x44200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x40040) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x6}, [{0x2, 0x6}], {}, [{}]}, 0x34, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7570706572b5bb723d2e2f66836c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f716ecdc600"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x33, "b14bc96f2adc6c0ed89284e0d6666460246db1b318b9d405eacafe1b56d77d8d014d45a72fca14b2d9406d2570f251a9f93d5a"}, &(0x7f0000000400)=0x3b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e20, 0x7f, @ipv4={[], [], @remote}, 0x8001}}, 0x6, 0x7, 0x0, 0xc6, 0x80000001}, &(0x7f0000000540)=0x98) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='.//ile0\x00', &(0x7f0000000140)='fuse\x00', 0x400, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYBLOB="2c67726f75705f69643dfb71c3c1c3cd5893393e890ff8234c783a839bc64267f8240ec2d9cabd7e65f6508410b69b5f5483600c6e3bdb8412c31b85012a3617ec30543b94950ac2108401b53c2a55295f41bf8511e7d458cce3b0ade76ef693364e1394bf3fc257cab8f2543518804a504c8c3cd42546d5", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',pcr=00000000000000000041,fsna', @ANYRESDEC, @ANYBLOB, @ANYRES32=r1, @ANYRESDEC=0x0]) socket(0x0, 0x0, 0x1f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000200)=""/183) [ 1001.669989] overlayfs: unrecognized mount option "upperµ»r=./fƒle0" or missing value [ 1001.697705] overlayfs: unrecognized mount option "upperµ»r=./fƒle0" or missing value 12:26:24 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x2, &(0x7f0000000180)=[{&(0x7f0000000640)="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", 0x10d}, {&(0x7f0000000140)="5f233fdc7742a399a9e5841363b48cb788547f698bb7e6aa8615d390500f1193afd43b87df03d776c10a096ae47c2ac8589784cdaf48a391d1d5", 0x3a, 0x5}], 0x2000010, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f6b70726f746f3d6c6f636b5f6e6f6c6f636b2c6673636f6e746578743d73797361646d5f752c669b138a15723c", @ANYRES16, @ANYBLOB=',hash,\x00']) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000002c0)={'ip6gre0\x00', 0x1f}) exit(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000002000)) fcntl$lock(r7, 0x7, &(0x7f0000000200)={0x2, 0x4, 0x9feb, 0x2}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)="39fa19e647c3997fc5b14e49d45cdacf1d2a05374201b9eb12cd8c5db9c4f7fc4b6730246b8def8c4f954171ae4111795d1fdc3babb3150522aa9f4c2ea01320c7c28bd6235bfc890eec2cb3258aa9cc142b4aff64b5cc59d111e463ec94fb60b592ce2c6326c7d971397f90b12a421139128e5a2a07a1ce61fdb188632d337d1b22f8c838772f20e7cf2ed3aa340a9df278774bfcc127a7159cef2780d8088efdd73a774a5ef5f3d4c4f4ec3610585d64e55d0ee960b43c816064e2744cb311628dfe264852a39cbacc8962f9f58ca06979cfb662157d28a1", 0xd9}, {&(0x7f0000000480)="4b92fd302de14a507d", 0x9}, {&(0x7f00000004c0)="3d29f4c664b8bc6b6468bb3b", 0xc}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x68, 0x40000}, 0x854) r8 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) timer_delete(0x0) 12:26:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f043051fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010908098da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="81c30434", @ANYRES16=r3, @ANYBLOB="20002dbd7000fddbdf2505000000080005000300000008000500010000000500020053000000050002007f00000005000600200000006000038058000380540001803100020021776c616e312c6d696d655f7479706528a42e766d6e6574315c236d696d655f747970657365637572697479000000000c0002006e6c3830323131000800010008000000000400030004000100"], 0x9c}, 0x1, 0x0, 0x0, 0x60040004}, 0x40000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x10, 0x2, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xcd}]}, 0x68}, 0x1, 0x0, 0x0, 0x88000}, 0x4000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) [ 1002.132081] Bluetooth: hci2 command 0x1003 tx timeout [ 1002.137731] Bluetooth: hci2 sending frame failed (-49) [ 1002.280062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.694721] gfs2: invalid mount option: lokproto=lock_nolock [ 1002.708435] gfs2: can't parse mount arguments [ 1002.771988] Bluetooth: hci1 command 0x1003 tx timeout [ 1002.777390] Bluetooth: hci1 sending frame failed (-49) [ 1002.932014] Bluetooth: hci3 command 0x1003 tx timeout [ 1002.938917] Bluetooth: hci3 sending frame failed (-49) 12:26:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) sendfile(0xffffffffffffffff, r0, 0x0, 0x1000) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x4b, 0xffffffff, 0x4, 0xb, 0x8001}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x4, 0xc11, 0x5, 0x4], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x9, 0xeeeeeeee}) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) [ 1003.651931] Bluetooth: hci0 command 0x1001 tx timeout [ 1003.657621] Bluetooth: hci0 sending frame failed (-49) [ 1004.216189] Bluetooth: hci2 command 0x1001 tx timeout [ 1004.221603] Bluetooth: hci2 sending frame failed (-49) [ 1004.851782] Bluetooth: hci1 command 0x1001 tx timeout [ 1004.857092] Bluetooth: hci1 sending frame failed (-49) [ 1005.011840] Bluetooth: hci3 command 0x1001 tx timeout [ 1005.017507] Bluetooth: hci3 sending frame failed (-49) [ 1005.731707] Bluetooth: hci0 command 0x1009 tx timeout [ 1006.292635] Bluetooth: hci2 command 0x1009 tx timeout [ 1006.931591] Bluetooth: hci1 command 0x1009 tx timeout [ 1007.091529] Bluetooth: hci3 command 0x1009 tx timeout 12:26:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x3fa, 0x0, 0x0, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x4800) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r2, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r5, r6, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x2, &(0x7f0000000380)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}, {0x0}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 12:26:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:26:33 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x84800) timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000140)="96c0fcfde29778383e154f1220519e250c64d1933952d7e3d19fbb0874946ca972f25e2a4a59375c3b6abfa5759403be3344ba6867494ca9f0f00d424d447b47b61eb31db3ef392073ad15c637b4145278ca8e313f19b39a27175783c0bf65997be1f6c4262cbdfaa914271b2acef802775cd8f54d85c1106c585211f56c7ddd427fff008b3c26d22efc69a5a0ed90a4720981dfb8", 0x95, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000300)={r5, 0xae, &(0x7f0000000240)=""/174}) timer_delete(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x7fff, 0x608000, 0x3f, 0x3b, 0x6, 0x24}}, 0x50) [ 1010.328247] Bluetooth: Unknown HCI packet type 5e [ 1010.333399] Bluetooth: Unknown HCI packet type 43 [ 1010.339769] Bluetooth: Unknown HCI packet type 5e [ 1010.345520] Bluetooth: Unknown HCI packet type 50 [ 1010.350903] Bluetooth: Unknown HCI packet type 5e [ 1010.356621] Bluetooth: Unknown HCI packet type 40 [ 1010.491278] audit: type=1800 audit(1590063993.231:249): pid=29065 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="sda1" ino=15978 res=0 12:26:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:26:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="e63c7f2febe1ff540f8736b096af980d1ff7d8b379d02c2971d5074b284f8c18576d7bf617d04881e855ecbb246ed0de6df2128adecb4b46d403be86018ff9766e29f8bfd925", 0x46}], 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000480)={0x0, &(0x7f0000000040)=[&(0x7f0000000280)="761fad82894fbc699d53cc8cea55549f8e0463ed7f48f878367987455267fc445cc509cb821e5cddc9efa212a3ac54684f1ebf4494c38eb2c6f3c432dc84d48d505600652bbb79d8cf6fbfb6fe7686b04e3513bb09bebe126c0d1ce37380a7c529ddeb1bb0c96bf13ec2039f449be0641bb37a988604a3ab97759c533c499fb070293860b103c8c61c267e2e718b408a6f4a844284b89f35b4b7b7189376e915bd985b429e107d02ad2af905", &(0x7f00000000c0)="69e15aa0f884ec3c3b98abef298cb62389eb272cbd7831714ec855b600880bbc9d0b225f14fd75332136971fd277e164d2fd1704cfc17be90237dcd5ec1b8d68301d8647b7a942d5ba688739788279ec5d61211d676edf259e0fcabe9cd8a4b6f83ca2244c0a5c5631340c38de9bdb47aabd4c", &(0x7f0000000340)="2d2123ab900002d73f8b2f18b2ffafe98a0e59c6f09ef29a462268f204b210c5ad778fe650cf0236c6932a5a87a3dfdf4f54f85c122e266d35f615500b2cd4d02a141d25370089d809eb02e868f80170b6b4ab0a6ee2ee7929040e7774b41c8cfa75ace5b28101f5c3d983c017dd7a527b20284b9b1a0cda459c475f72068c396db51e3b2c4de0197d486ded14573e28d2ac0798064ba4d679abe1ee0d349b625b591b90e0af445e558ab661d83f60643a", &(0x7f0000000400)="9e212db5715113398ff65a2aa33b3b263c8396662a1c5e4f135f38dee77e7e933312975e7bceea46366598770ef47a571f35871faa9f8277cb79150b1a942abe215d"]}) fchdir(0xffffffffffffffff) r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) connect$bt_rfcomm(r3, &(0x7f0000000240)={0x1f, @any, 0x40}, 0xa) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00003e6000/0x18000)=nil, 0x0, 0x1d000080, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4b, 0x1}, 0x7) [ 1010.990552] Bluetooth: Unknown HCI packet type 5e [ 1010.997124] Bluetooth: Unknown HCI packet type 43 [ 1011.012198] Bluetooth: Unknown HCI packet type 00 [ 1011.025414] Bluetooth: Unknown HCI packet type 5e [ 1011.045507] Bluetooth: Unknown HCI packet type 50 12:26:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x25, 0x2, 0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000000100000044000100"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x809}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x29}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008085) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1011.066401] Bluetooth: Unknown HCI packet type 5e [ 1011.080203] Bluetooth: Unknown HCI packet type 40 [ 1011.130775] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1011.167848] Bluetooth: Unknown HCI packet type 5e [ 1011.173748] Bluetooth: Unknown HCI packet type 43 12:26:33 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'em0}\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) [ 1011.179367] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1011.187433] Bluetooth: Unknown HCI packet type 5e [ 1011.193651] Bluetooth: Unknown HCI packet type 50 [ 1011.205707] Bluetooth: Unknown HCI packet type 5e [ 1011.211686] Bluetooth: Unknown HCI packet type 40 12:26:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:34 executing program 4: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r2 = memfd_create(&(0x7f0000000040)='u', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000f0601010000000000000000000000000500010006000000"], 0x1c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000140)) dup(r2) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 12:26:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:34 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:34 executing program 4: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$afs(0x0, &(0x7f0000000500)='./file0\x00', 0x101, 0x3, &(0x7f00000017c0)=[{&(0x7f0000000540)="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", 0xbcf, 0x3}, {0x0, 0x0, 0x401}, {0x0}], 0x0, &(0x7f0000001880)={[{@flock_strict='flock=strict'}, {@dyn='dyn'}], [{@dont_measure='dont_measure'}, {@obj_type={'obj_type'}}, {@permit_directio='permit_directio'}]}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x557e1b66f3da8d9a}, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0x40840, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r4 = dup3(r2, r3, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000240)=0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='0', 0x1}], 0x1) [ 1012.381019] Bluetooth: hci0 command 0x1003 tx timeout [ 1012.386364] Bluetooth: hci0 sending frame failed (-49) [ 1013.010946] Bluetooth: hci1 command 0x1003 tx timeout [ 1013.016298] Bluetooth: hci1 sending frame failed (-49) [ 1013.170935] Bluetooth: hci2 command 0x1003 tx timeout [ 1013.176369] Bluetooth: hci2 sending frame failed (-49) [ 1014.450831] Bluetooth: hci0 command 0x1001 tx timeout [ 1014.456287] Bluetooth: hci0 sending frame failed (-49) [ 1015.100779] Bluetooth: hci1 command 0x1001 tx timeout [ 1015.106080] Bluetooth: hci1 sending frame failed (-49) [ 1015.250789] Bluetooth: hci2 command 0x1001 tx timeout [ 1015.256109] Bluetooth: hci2 sending frame failed (-49) [ 1016.530642] Bluetooth: hci0 command 0x1009 tx timeout [ 1017.170584] Bluetooth: hci1 command 0x1009 tx timeout [ 1017.330606] Bluetooth: hci2 command 0x1009 tx timeout 12:26:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:26:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1020.577483] Bluetooth: Unknown HCI packet type 5e [ 1020.584369] Bluetooth: Unknown HCI packet type 43 [ 1020.596449] Bluetooth: Unknown HCI packet type 5e [ 1020.603884] Bluetooth: Unknown HCI packet type 50 [ 1020.609310] Bluetooth: Unknown HCI packet type 5e [ 1020.618546] Bluetooth: Unknown HCI packet type 40 12:26:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:43 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) pkey_alloc(0x0, 0x2) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x0, [], [{0x9, 0x1000, 0x0, 0xc4d, 0x0, 0x8}, {0x7fffffff, 0x6, 0x4, 0x20, 0x2, 0x8001}], [[], [], [], [], [], [], [], [], []]}) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = dup2(r0, r0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @descriptor="6d96643c1222bbd9"}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) 12:26:43 executing program 4: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000200), 0x4) r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x3, 0x404000) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000280)={'ah\x00'}, &(0x7f00000002c0)=0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000007f00"/21], 0x15) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 12:26:43 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:26:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:44 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x2, 0x3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001400)=0x5db, &(0x7f0000001440)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0x28, 0xa, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r4, 0x6, 0xfffffffffffffe53, &(0x7f0000000240)="aa9f90fb9270ba910cb000cfd2c3af8ced9c1b5b8a6b27e5e998060794c77cae149f7b298bfe01000c62815751b5fe2e6dbf89399d808a22206742b749e46ae112ba8490e45dcb1efd730548a95836f0f30686b07371715ddbddf005f863c1beef6775c3ab85fb210d525c0c8c0225b85454b7dcfb321bf2acc9a6187aa5f3679da8d64c7f46875aa28dc3fab5c3a4943caba0979ffd867ce68f3df2b73807d7be100b3708e7da4149e986b90c096bbda1daa985055b46bb8929a2d9913c99f9bd64ba8880a7b978087c975672c060215d0df6561774190741110377a803a18d0ec77edbaa14978805995c8335", 0x5, 0xfe, 0x8, 0xfcb, 0x4bc, 0x2, 0x7fffffff, 'syz1\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$snddsp(r6, &(0x7f0000000100)="fdb870df0eeda0130f2186d3548573cf27d9312eee146b55cddedf27ae00d3656e49a92f520acc67a29328e1dcb16dbcf9344b94603f76a973b7d80e4cbe4b456343b0c76fc49c2744121b665dd8b46bbc64591c58ab732187020acfc66bcb41fd31414091930c40f26b88788efbc1aec6fc272adf558f", 0x77) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x36) [ 1021.292552] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1021.292796] Bluetooth: Unknown HCI packet type 5e [ 1021.326810] Bluetooth: Unknown HCI packet type 43 12:26:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1021.359931] Bluetooth: Unknown HCI packet type 5e [ 1021.363062] Bluetooth: Unknown HCI packet type 5e [ 1021.378140] Bluetooth: Unknown HCI packet type 36 [ 1021.384779] Bluetooth: Unknown HCI packet type 43 [ 1021.392716] Bluetooth: Unknown HCI packet type 50 [ 1021.411385] Bluetooth: Unknown HCI packet type 5e [ 1021.418480] Bluetooth: Unknown HCI packet type 5e [ 1021.424117] Bluetooth: Unknown HCI packet type 50 [ 1021.442698] Bluetooth: Unknown HCI packet type 5e [ 1021.452277] Bluetooth: Unknown HCI packet type 40 12:26:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1021.467987] Bluetooth: Unknown HCI packet type 40 12:26:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1022.620049] Bluetooth: hci0 command 0x1003 tx timeout [ 1022.625433] Bluetooth: hci0 sending frame failed (-49) [ 1023.329917] Bluetooth: hci1 command 0x1003 tx timeout [ 1023.335273] Bluetooth: hci1 sending frame failed (-49) [ 1023.409967] Bluetooth: hci2 command 0x1003 tx timeout [ 1023.415389] Bluetooth: hci2 sending frame failed (-49) [ 1024.689940] Bluetooth: hci0 command 0x1001 tx timeout [ 1024.695277] Bluetooth: hci0 sending frame failed (-49) [ 1025.409882] Bluetooth: hci1 command 0x1001 tx timeout [ 1025.415339] Bluetooth: hci1 sending frame failed (-49) [ 1025.489815] Bluetooth: hci2 command 0x1001 tx timeout [ 1025.495534] Bluetooth: hci2 sending frame failed (-49) [ 1026.769811] Bluetooth: hci0 command 0x1009 tx timeout [ 1027.489675] Bluetooth: hci1 command 0x1009 tx timeout [ 1027.569653] Bluetooth: hci2 command 0x1009 tx timeout 12:26:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:26:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004080) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380074696d65000000000000000000000000000000000000000000000000000000000000ffffffff4f970000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000040380071756f7461000000000000000000000000000000000000000000000000000100000000000000470d0000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x3c}}, 0x5) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local, {[@timestamp={0x44, 0x4, 0x66}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 12:26:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:53 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000040)="a62f37f680d60abc4cbca391eaab62ee0cb21daa9ab26b5ecd67f320002d227fa3fb945034dab07a3d2655b79029c9cbf5ef34b4fcc305cbb47e9ef2bd74ba9164260a762b3348fc83c087a23710f8dbcecedbb459a633e42528322a98dca653", 0x60) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:hwclock_exec_t:s0\x00', 0x24) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x72, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e20, 0x7, @ipv4={[], [], @rand_addr=0x64010100}, 0x1}}}, 0x84) 12:26:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1030.843626] Bluetooth: Unknown HCI packet type 00 [ 1030.844699] Bluetooth: Unknown HCI packet type 5e [ 1030.872735] ip_tables: iptables: counters copy to user failed while replacing table [ 1030.885259] Bluetooth: Unknown HCI packet type 43 [ 1030.896718] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1030.913232] Bluetooth: Unknown HCI packet type 5e [ 1030.918957] Bluetooth: Unknown HCI packet type 50 [ 1030.927291] Bluetooth: Unknown HCI packet type 5e [ 1030.955137] Bluetooth: Unknown HCI packet type 40 12:26:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x17) 12:26:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 12:26:54 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @ipv4={[], [], @broadcast}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 12:26:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:26:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1032.849201] Bluetooth: hci0 command 0x1003 tx timeout [ 1032.854551] Bluetooth: hci0 sending frame failed (-49) [ 1034.929014] Bluetooth: hci0 command 0x1001 tx timeout [ 1034.934486] Bluetooth: hci0 sending frame failed (-49) [ 1037.008983] Bluetooth: hci0 command 0x1009 tx timeout 12:27:03 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x24000094) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc189190}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff1c}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0xc0c0) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x8, 0x8224}) timer_delete(0x0) 12:27:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:27:03 executing program 4: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x191) keyctl$set_timeout(0xf, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x4}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/195, 0xc3, 0x100, &(0x7f00000000c0)={0xa, 0x4e21, 0x800, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 12:27:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0xd844) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) inotify_init1(0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x5, 0x4}, {0x1, 0x2c}, 0x0, 0x2, 0x33}) [ 1041.091221] Bluetooth: Unknown HCI packet type 5e [ 1041.096392] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1041.105510] Bluetooth: Unknown HCI packet type 43 [ 1041.117846] Bluetooth: Unknown HCI packet type 5e [ 1041.125576] Bluetooth: Unknown HCI packet type 43 [ 1041.132505] Bluetooth: Unknown HCI packet type 00 12:27:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1041.143339] Bluetooth: Unknown HCI packet type 5e [ 1041.154654] Bluetooth: Unknown HCI packet type 5e [ 1041.174470] Bluetooth: Unknown HCI packet type 50 [ 1041.180008] Bluetooth: Unknown HCI packet type 50 12:27:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1041.198168] Bluetooth: Unknown HCI packet type 5e [ 1041.204938] Bluetooth: Unknown HCI packet type 5e [ 1041.212076] Bluetooth: Unknown HCI packet type 40 [ 1041.218129] Bluetooth: Unknown HCI packet type 40 12:27:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:04 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x100000, &(0x7f00000000c0), 0x1, r2, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) 12:27:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20003, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x32) syz_mount_image$nfs(&(0x7f0000000100)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000180)="ea2fd0cea6a6978fb5b76c10b1fdf9611ba3e976c97904c0a7e1d3712913d1ee2ff42b73f1c2cc73d52732714135f0ff6ff9b40fa1b19587b14faaad", 0x3c, 0xfffffffffffffffc}, {&(0x7f0000000240)="0680b02f4bb46644171683254b30d8213584e6ae5d89693694b004a51b47a611736a014b2a7827de2e0db0d044baaee5577b92ad3b73f368ce6cf613675ae994aecdd74def5f667f9027ec8ff47fd7220d0beb33dc15abd775b3a375a98855c5c3fd04b72168f2aa70c75246074dcad9803a52e653a22d9e07db04df3373ade0b94468e1802d121e8c5bec8e34bf01a0a3", 0x91, 0x6}, {&(0x7f0000000300)="05bd4108ee5d5f4ec755f11710c5f04115870c63bc0e0beb77fd824890daa065fac5dcb7b3ca3fa5c496a9bff92c79290e49eaf61821511d76ac0a43e71ebdf7faeb0ee10d2b7b3b20b4d76074a9a5a60fd6db2fb19738ed8d0c94d51d580a679876042c259fa7249dc5a35ee6517e8b18a5bfe7e7ebda8fa7a4d6584fc1bd4d146f006af4936038c6f0ed9117bbc34c700a684a9f78e9d7ab1cabe69e0a5f108394eef1cf13fe9b696210dd9ec5b59924f0233e38986edea3704c2d4fc675ee42ec399dba060fc0fd9d4d1476e3b96f7a91aa8b", 0xd4, 0xa3}, {&(0x7f0000000640)="acd4ffed28ab54aba4747b1b945bffeaa3d9aa89e9ce8b12cfb92d4776cd2e2a6ab20d348aa5d28dca7b575f0b50bc90d54e76d3792cc1e8772469761efc2ed48b96506e44d157cb63044b4e9b58b1e7574d5524aada2337e0c31c037709ff7b2251f1b17b5b3607000000000000004aa0e93329481137cc120400080000a74e1478f41cc2c7207d0945e084ed1f11777dd57b287f348d51ac009ae816513777cf714d0a0054bd25e2a916b7ba80363f348c10bbd16e4b0ed01c0ddd0929b2041ffb0530", 0xc4, 0xad5}, {&(0x7f00000004c0)="973ecaebdb9a7790800dd07ba14673945eea83229f4dffeac12c4873f0b2fc9bdf8d322a755f54a098e1b60a8c04c61184ce93284544e34caa9ee0194e1f7f36c5d3fa595ada67091abce48a030c9ef9f00f5989ccf7ae429673de0ba71680f635e5fc6467fa1fc3bc8e90e943342119995165ed88634a3f2cd23bacc42977efd64a3d3de7667bd51d974319b599a9126a5115271c9304ceabef82c2b2b527171437c9e4314d675da17e03cf07b622950fdfd26d442f68bf608ae2fe4ece79d50062a9f3d7c09966253ee55dd84f2ce0c553eb6f641d93c00eaf1c8e7afa69095fcada8ddbe7e136c99ec7330e9da71bfacb68d5312c41821b", 0xf9, 0x21df7576}], 0x80080, &(0x7f00000001c0)=']wlan0:\\\x00') [ 1042.018886] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1042.025181] Bluetooth: Unknown HCI packet type 5e [ 1042.030250] Bluetooth: Unknown HCI packet type 43 [ 1042.035099] Bluetooth: Unknown HCI packet type 5e [ 1042.050268] Bluetooth: Unknown HCI packet type 50 [ 1042.060920] Bluetooth: Unknown HCI packet type 5e [ 1042.071354] Bluetooth: Unknown HCI packet type 40 [ 1043.168280] Bluetooth: hci1 command 0x1003 tx timeout [ 1043.173600] Bluetooth: hci1 sending frame failed (-49) [ 1043.178386] Bluetooth: hci0 command 0x1003 tx timeout [ 1043.189784] Bluetooth: hci0 sending frame failed (-49) [ 1044.048319] Bluetooth: hci2 command 0x1003 tx timeout [ 1044.054063] Bluetooth: hci2 sending frame failed (-49) [ 1045.248179] Bluetooth: hci0 command 0x1001 tx timeout [ 1045.253611] Bluetooth: hci0 sending frame failed (-49) [ 1045.259926] Bluetooth: hci1 command 0x1001 tx timeout [ 1045.265245] Bluetooth: hci1 sending frame failed (-49) [ 1046.130907] Bluetooth: hci2 command 0x1001 tx timeout [ 1046.136238] Bluetooth: hci2 sending frame failed (-49) [ 1047.328105] Bluetooth: hci1 command 0x1009 tx timeout [ 1047.333425] Bluetooth: hci0 command 0x1009 tx timeout [ 1048.208112] Bluetooth: hci2 command 0x1009 tx timeout 12:27:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:14 executing program 5: timer_create(0x7, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$RTC_WIE_ON(r0, 0x700f) exit(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_delete(0x0) 12:27:14 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1e0, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "294fcd", 0x1aa, 0x6, 0xff, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x19}, {[@hopopts={0x21, 0xa, [], [@ra, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @pad1, @ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x3, [0x5, 0x7, 0x9, 0x1]}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x5f}, @ra={0x5, 0x2, 0x69d7}]}, @fragment={0x0, 0x0, 0x94, 0x0, 0x0, 0x8, 0x68}, @srh={0x84, 0x10, 0x4, 0x8, 0x8, 0x50, 0x3, [@private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @rand_addr=0x64010101}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private1, @empty]}], {{0x4e21, 0x4e20, r0, r1, 0x1, 0x0, 0x5, 0xc2, 0x100, 0x0, 0x7}, {"1ca7905ff90497e5f55399d32f254f88d55e4c5e194192829ca14f55f086fc2e8defb409b2687e77a2b37f9fa808de63321b0e5c826d4a530db99e858f38b6c6de2b6fff56f642ddfbdb6c5d00ebf0eeb3ad9888637c8e43e2c98bca273a486faac75e6de3e53de9d1b6efb4de20fdd1cad72982d86853f563784323fd2d27b6aa23911493a6e4543e39bf9de244ca47afcd78df06b28375e887cda76dec0c722fc1f789c666"}}}}}}}, 0x0) 12:27:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10, 0x80800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1051.335907] Bluetooth: Unknown HCI packet type 5e [ 1051.335972] Bluetooth: Unknown HCI packet type 00 [ 1051.341499] Bluetooth: Unknown HCI packet type 43 12:27:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{&(0x7f0000000740)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000880)=""/2, 0x2}}, {{&(0x7f0000001180)=@generic, 0x80, &(0x7f0000001280)}}, {{&(0x7f0000002340)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000023c0)=""/156, 0x9c}, {&(0x7f0000000980)=""/219, 0xdb}, {&(0x7f0000002640)=""/242, 0xf2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002e00)=""/62, 0x3e}, {&(0x7f0000000480)=""/145, 0x91}], 0x8, &(0x7f0000002ac0)=""/158, 0x9e}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) syz_mount_image$vfat(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x208400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={'virt_wifi0\x00', {0x2, 0x4e22, @remote}}) [ 1051.382843] Bluetooth: Unknown HCI packet type 5e [ 1051.401603] Bluetooth: Unknown HCI packet type 50 [ 1051.407322] Bluetooth: Unknown HCI packet type 5e [ 1051.412593] Bluetooth: Unknown HCI packet type 43 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1051.436138] Bluetooth: Unknown HCI packet type 5e [ 1051.443473] Bluetooth: Unknown HCI packet type 5e [ 1051.460003] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1051.460079] Bluetooth: Unknown HCI packet type 50 [ 1051.472857] Bluetooth: Unknown HCI packet type 40 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1051.493339] Bluetooth: Unknown HCI packet type 5e [ 1051.507869] Bluetooth: Unknown HCI packet type 40 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1053.407689] Bluetooth: hci1 command 0x1003 tx timeout [ 1053.407806] Bluetooth: hci0 command 0x1003 tx timeout [ 1053.412983] Bluetooth: hci1 sending frame failed (-49) [ 1053.425011] Bluetooth: hci0 sending frame failed (-49) [ 1055.487588] Bluetooth: hci0 command 0x1001 tx timeout [ 1055.492907] Bluetooth: hci0 sending frame failed (-49) [ 1055.499060] Bluetooth: hci1 command 0x1001 tx timeout [ 1055.504533] Bluetooth: hci1 sending frame failed (-49) [ 1057.567322] Bluetooth: hci0 command 0x1009 tx timeout [ 1057.567487] Bluetooth: hci1 command 0x1009 tx timeout 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESDEC=r5, @ANYRESDEC], 0x48}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) gettid() mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="caa86789284c22cf0fde9b01c9675d6fa5162bfa519c07c3aab5185b564377a4d8db01fa19105de4a914f949be45b17d036106b7cbfd596ba72ed00cfa600b6f773514a025371e82eb9bfeace32715365dbf02436cfb771f47455269e16cb02ff09f122d338edb1ff2a57845320ccd7b"], 0x87ffffc) 12:27:24 executing program 5: timer_create(0x200000003, 0x0, &(0x7f0000000100)) exit(0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timer_delete(0x0) 12:27:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0x18, 0x6, r2, 0x0, &(0x7f0000000100)={0x990a75, 0x10001, [], @p_u32=&(0x7f0000000080)=0x200}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 12:27:24 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1061.597326] audit: type=1800 audit(1590064044.335:250): pid=29494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15893 res=0 [ 1061.628360] Bluetooth: Unknown HCI packet type 5e [ 1061.633871] Bluetooth: Unknown HCI packet type 43 [ 1061.634155] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1061.652779] Bluetooth: Unknown HCI packet type 5e [ 1061.676286] Bluetooth: Unknown HCI packet type 50 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1061.708220] Bluetooth: Unknown HCI packet type 5e [ 1061.725779] audit: type=1800 audit(1590064044.365:251): pid=29494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=15893 res=0 [ 1061.775232] Bluetooth: Unknown HCI packet type 40 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:24 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyS3\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmmsg$inet(r1, &(0x7f0000003200)=[{{&(0x7f00000012c0), 0x10, 0x0}}], 0x1, 0x804) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x84, 0x0, 0x2, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x44) ftruncate(r1, 0x8204) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8000, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca003f0800ffffffba0e7200ffff86", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 12:27:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:24 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x40000003, 0x200002) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @raw_data="5f91464de9108fd71c2476f753c09cef2b4a22948f283c74c3011ef4e4457f04fd87fbfc6deec82411499e9df332537e86feffb0a62b0ab150e27fd419c4e0e46039239583aeeaf98987f9bb896d5e179507bb0dc7f547e7d3a4088bc750585cdaae1a411da655f0737ff4f24eede13c74f581d0e5bfbaf14c43ac4a44f9b2d284886ea9ffffa362c680b070062d9b9a62072f78202995bfeb6b57f315e80b174b17e6cdff733d649610d97468c89f1953a973e7d6a62d28dc98767f73a51bb14b0f2e70ef135f92"}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_UNALIGN(0x6, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x480, 0x4) ftruncate(r3, 0x80006) sendfile(r2, r3, 0x0, 0x8000fffffffe) write$P9_RLERROR(r3, &(0x7f0000000040)={0x1a, 0x7, 0x1, {0x11, 'em1bdevppp1wlan1\\'}}, 0x1a) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0x4c, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004c001}, 0x40001) [ 1062.362742] audit: type=1800 audit(1590064045.105:252): pid=29536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.4" name="bus" dev="sda1" ino=16060 res=0 12:27:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x4e23, 0x7, 0xa, 0x189922fe5d6823e9, 0xa0, 0x6c}, {0x400, 0x4, 0x2, 0x4, 0x4, 0x0, 0x9, 0x3f}, {0x3, 0x7, 0x8, 0x3}, 0x40, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x3500, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x81) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4801, &(0x7f0000000100)={0x2, 0x4e2a, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5, 0x4, 0x6, 0x500, 0x4, 0x80000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="54d7010000800000000059a418bd53096beeb5cbed9e99fcbbcede832447336777c872f0507c7bbd37970ea64fe596fc3728a2cc43051929e9888462443205029f7e8d566609ec9aae65899b0fb0e3ec2b00142749756931e2c8911ce84b38f8f02b137b473c6184c1187f8615f910ebad134f30eba7997207f3542998b4efc3fe33ef6be4c99b96f58ee1da52", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 12:27:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x92000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x5}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r4, &(0x7f0000000140), 0x0, 0x8) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000340), 0x41395527) r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3f00000000000, 0x3c400) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x208203, 0x0) bind$isdn(r6, &(0x7f0000000340)={0x22, 0x7, 0xff, 0x5, 0x7}, 0x6) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000240)=""/133) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1062.750550] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 1062.759122] FAT-fs (loop5): Filesystem has been set read-only [ 1062.765683] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769) [ 1063.656878] Bluetooth: hci0 command 0x1003 tx timeout [ 1063.662208] Bluetooth: hci0 sending frame failed (-49) [ 1065.726663] Bluetooth: hci0 command 0x1001 tx timeout [ 1065.732185] Bluetooth: hci0 sending frame failed (-49) [ 1067.806688] Bluetooth: hci0 command 0x1009 tx timeout 12:27:34 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="240000004f0007031dfffd946fa2830020020a0009000800001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x181003, 0x0) pread64(r1, &(0x7f00000000c0)=""/143, 0x8f, 0xfff) 12:27:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x4e23, 0x7, 0xa, 0x189922fe5d6823e9, 0xa0, 0x6c}, {0x400, 0x4, 0x2, 0x4, 0x4, 0x0, 0x9, 0x3f}, {0x3, 0x7, 0x8, 0x3}, 0x40, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x3500, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x81) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4801, &(0x7f0000000100)={0x2, 0x4e2a, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5, 0x4, 0x6, 0x500, 0x4, 0x80000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="54d7010000800000000059a418bd53096beeb5cbed9e99fcbbcede832447336777c872f0507c7bbd37970ea64fe596fc3728a2cc43051929e9888462443205029f7e8d566609ec9aae65899b0fb0e3ec2b00142749756931e2c8911ce84b38f8f02b137b473c6184c1187f8615f910ebad134f30eba7997207f3542998b4efc3fe33ef6be4c99b96f58ee1da52", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 12:27:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x115, 0x0, 0x4c9, 0x4f, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000180)={r2}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) 12:27:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1071.809071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1071.834141] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1071.834144] Bluetooth: Unknown HCI packet type 5e [ 1071.834152] Bluetooth: Unknown HCI packet type 43 [ 1071.880607] Bluetooth: Unknown HCI packet type 5e [ 1071.881314] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1071.885747] Bluetooth: Unknown HCI packet type 43 12:27:34 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="240000004f0007031dfffd946fa2830020020a0009000800001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x181003, 0x0) pread64(r1, &(0x7f00000000c0)=""/143, 0x8f, 0xfff) 12:27:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1072.097334] Bluetooth: Unknown HCI packet type 5e [ 1072.192892] Bluetooth: Unknown HCI packet type 5e [ 1072.226852] Bluetooth: Unknown HCI packet type 50 [ 1072.231189] Bluetooth: Unknown HCI packet type 50 [ 1072.247433] Bluetooth: Unknown HCI packet type 5e [ 1072.264866] Bluetooth: Unknown HCI packet type 40 [ 1072.304892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1072.323579] Bluetooth: Unknown HCI packet type 5e [ 1072.338682] Bluetooth: Unknown HCI packet type 40 12:27:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TCFLSH(r2, 0x540b, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, r3, r5, r6) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, r6, 0x20, 0x6}, 0x86d4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8f}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x10}) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000100)=0x6000000, &(0x7f0000000140)=0x4) 12:27:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1072.434330] Bluetooth: Unknown HCI packet type 5e [ 1072.434448] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1072.440686] Bluetooth: Unknown HCI packet type 43 12:27:35 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="240000004f0007031dfffd946fa2830020020a0009000800001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x181003, 0x0) pread64(r1, &(0x7f00000000c0)=""/143, 0x8f, 0xfff) [ 1072.530472] Bluetooth: Unknown HCI packet type 5e 12:27:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1072.562855] Bluetooth: Unknown HCI packet type 50 12:27:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x2, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x4e23, 0x7, 0xa, 0x189922fe5d6823e9, 0xa0, 0x6c}, {0x400, 0x4, 0x2, 0x4, 0x4, 0x0, 0x9, 0x3f}, {0x3, 0x7, 0x8, 0x3}, 0x40, 0x6e6bb2, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x3500, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}}, 0xe8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x81) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4801, &(0x7f0000000100)={0x2, 0x4e2a, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd5, 0x4, 0x6, 0x500, 0x4, 0x80000000}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="54d7010000800000000059a418bd53096beeb5cbed9e99fcbbcede832447336777c872f0507c7bbd37970ea64fe596fc3728a2cc43051929e9888462443205029f7e8d566609ec9aae65899b0fb0e3ec2b00142749756931e2c8911ce84b38f8f02b137b473c6184c1187f8615f910ebad134f30eba7997207f3542998b4efc3fe33ef6be4c99b96f58ee1da52", @ANYRES32=0x0], &(0x7f0000a8a000)=0x2) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) [ 1072.608193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1072.620733] Bluetooth: Unknown HCI packet type 5e [ 1072.632604] Bluetooth: Unknown HCI packet type 40 [ 1073.053018] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 1073.061501] FAT-fs (loop5): Filesystem has been set read-only [ 1073.068391] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970769) [ 1073.886239] Bluetooth: hci1 command 0x1003 tx timeout [ 1073.886265] Bluetooth: hci0 command 0x1003 tx timeout [ 1073.891566] Bluetooth: hci1 sending frame failed (-49) [ 1073.898261] Bluetooth: hci0 sending frame failed (-49) [ 1074.446231] Bluetooth: hci2 command 0x1003 tx timeout [ 1074.453022] Bluetooth: hci2 sending frame failed (-49) [ 1075.966179] Bluetooth: hci1 command 0x1001 tx timeout [ 1075.966185] Bluetooth: hci0 command 0x1001 tx timeout [ 1075.966776] Bluetooth: hci0 sending frame failed (-49) [ 1075.971459] Bluetooth: hci1 sending frame failed (-49) [ 1076.526117] Bluetooth: hci2 command 0x1001 tx timeout [ 1076.531436] Bluetooth: hci2 sending frame failed (-49) [ 1078.046034] Bluetooth: hci1 command 0x1009 tx timeout [ 1078.046037] Bluetooth: hci0 command 0x1009 tx timeout [ 1078.606009] Bluetooth: hci2 command 0x1009 tx timeout 12:27:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:27:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0xc0000) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x2, 0x1}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)="77c8fbcf4bcdd25c822e129e5d9cb7accf829246e41d367838d23d5632a5c44aaef3a7c2ce6c3ba640cffc9a1b9fe1e2977a52b8df4fa089a22e6e08df6b95cd2012336693d33bc0611531ab9b98f5e12ec9abb021013cc6fa9b260d0fcfdcb87051febd223dd144ab418b94069edfdccafe5131d146731c81e23a374ddbb0c985eaa795f14929bb06b29d77d2727bc25fcac6b3839acb9cc9fa8d", 0x9b}, {&(0x7f0000000040)="b980cb930686d6daf7abb7261fdbf65589", 0x11}, {&(0x7f00000003c0)="1b18ba1cbd0dc6e78ae641d4100565e4de18e2187c97dea9843db9dda7275dff84fe968e65f637ebccf44db770216e252de55dc1e7a5669f38a6ef415c3bccaf82a4718df646fcf48e53ad11b2dbc59141b229eff7363c42e85b65e3f4bcf0ae76d668ea54e65f92d9aa", 0x6a}, {&(0x7f0000000440)="93bec9ea2eae90166c92c24453c2fa586125124bbad46566737d74b721e15389944bc057ebfdfa5b53052b54302fcd331cb19ca3397f030b12a09fe2e6455013ddb68a8b8d90d1f04cc7f73c0aead647", 0x50}, {&(0x7f0000000280)="596a09025bb6d1bca71b3380a70bea8c6a", 0x11}, {&(0x7f00000004c0)="1f759ddc27ce231d02e2f689ac4d41d72ebbf1d683da458ccdbcaa4b2247fe71", 0x20}, {&(0x7f0000000500)="4568a650104a9cbf7f0ff4b1ce94f50bf530bd58e38619bc1f62613d36adef4a185be85df98ef2207929c6a8b9cb3c896b6fb2bedcd75a572a11cd20dc32b512044e40bfb7cb74df284a7d4029fc05aea336442756289dd13405b9de7e42360c3648c1406edbd62aa3db72e2adfcabc192b5", 0x72}, {&(0x7f0000000580)="e6ab9f4f94441b7338819b52625ac4c575092ee0f4cba91801a69b6b1bd46bd674a728e449ad15ee941a7015a1d79d6eca037511bb68cd71fa49da8367e1a43e69abe4ad6bef0651608e41b23e3f82fdfde26049d070aac649281e054e6eb0ae21f57d53d327d744a89b85ce56c2bb15633e863d444952c7aac2a30ce5063ab8eb23f42aef3f217c988fd023821f723b6efb8556fb44483b38038a985277762c", 0xa0}], 0x8, &(0x7f0000001040)=[{0x70, 0x103, 0x7fff, "38c051180e5034a7b0532fd2844fa9c30dc213ddc80f1b0fd174d1ee27e241253a9e37251edd9567ec79fbaf9fc6845278379708e5ae215738d5b32cce7e2c99b0b94307ec4cc0d69b8b081e961d8a96517441bb08bcbd8a5e45da"}, {0x1010, 0x111, 0xb163, "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"}, {0xe0, 0x119, 0x3, "7b5ea87aa3dc89bccd39ef47876b1609c0f366bad224cb3977e6578ecadb3208c365f647cc062af7830c792590224b14ed881ca9d5b5374e1e1b7e155b47064a3838b4aa375e643381027d6bc5b39e1e0805919974c9bfaf31d078eb9a485b530c5eaca28a3bbf937408ef01c0df4ba5def658f9eff54e15178d3784ec90f9ecafacbacad782fa7770d84d4464a936d3b69e5288fd2bf417ddd1188676e84aabc2119c6531752311c3a8ab85db276cb2fc806f7c2b90aa676d3fed1334d4de45e13140f784e82d96b42292b7900672"}, {0xc0, 0x109, 0x101, "ffd3ffaaa8770f5b9534e5c9f78b99d46d9f4ad92d43c7e4201863e755f28eeb1b8f3f9e4dfd5009b31ca8081eb4ce6421ea605e79cf859ef760c2df24551906c00684036e4d04f8ea5264a6420fb88dab0a753ed778eaf37c201053bd464dd94d0a6c9c044e00f9efae26ac645ad9ef19acd0ff8d781cd9666dbecdd23fd17ed313ec5a141806791c62c823f8a3127f628cc92b619bd29ce076ca309672f0ed3b4d3b0bc4b71d83976de63649f1"}, {0x100, 0x119, 0x7, "f9be87281757d45d349f3a0e47d56ca1cc33deeb4c74ddf516542e9b3030cda43296d2d8be142b02adf1b2d886e606870103a2da343387d98176a8687f07785747ccf8043af317be3107af740ced3513680b518939df84f811cc329d3d6402a5a460cf2065ba5438e9b1d7c25ea7dd2329f57c119af1d2c69091e9ee4f6d49387db8401453be38477e54f951ba35d21af857ed4c3b1b2cbe93b30b3f7ee43f793e87c87687e4b96f21f93b66ce31aa36f88ed2308f25e76cdb68abe9b208ad0f31ad111355fa7534b2f10fa07bec20977d43f77a9b0c2e19053e2af51a087fc14b402d019adefba0493dbfd1"}], 0x1320}, 0x8004) chdir(&(0x7f0000000300)='./file0\x00') r3 = memfd_create(&(0x7f00000002c0)='system.sockprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x4000051, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="dc7afea08184959730c775ccefbbc44b0a03a9e45afc4ef1be01fa8dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06d94342c64dd8165ebea25878b8a8da2560890b8f323579e28943ebc6c05f442ec8ab4712545e6e3d021fdf6b8ff2137a52dc71c80e3c56001709c67a1ec8cb095ca2295"], 0x100) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 12:27:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = gettid() tkill(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000380)={'bond0\x00', @ifru_mtu=0x6}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ptrace$cont(0x7, r1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0xcc2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x13f, 0x4}}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r5, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x5) dup3(r3, r5, 0x0) 12:27:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0xfffffffffffffffe) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x1, 0x100000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1082.058098] Unknown ioctl 44609 12:27:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1082.086454] Bluetooth: Unknown HCI packet type 5e [ 1082.092490] Bluetooth: Unknown HCI packet type 43 [ 1082.111440] Bluetooth: Unknown HCI packet type 5e [ 1082.129354] Bluetooth: Unknown HCI packet type 50 [ 1082.141876] Bluetooth: Unknown HCI packet type 5e [ 1082.147685] Bluetooth: Unknown HCI packet type 40 [ 1082.228550] Unknown ioctl 44609 12:27:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = gettid() tkill(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000380)={'bond0\x00', @ifru_mtu=0x6}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ptrace$cont(0x7, r1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0xcc2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x13f, 0x4}}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r5, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x5) dup3(r3, r5, 0x0) 12:27:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) [ 1082.681237] Unknown ioctl 44609 12:27:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f0000000080)) 12:27:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x72, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r3, 0xcb89}, &(0x7f0000000100)=0x8) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSIG(r1, 0x40045436, 0x25) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) [ 1082.788284] Bluetooth: Unknown HCI packet type 5e [ 1082.801419] Bluetooth: Unknown HCI packet type 43 [ 1082.814623] Bluetooth: Unknown HCI packet type 5e [ 1082.825460] Bluetooth: Unknown HCI packet type 50 [ 1082.837533] Bluetooth: Unknown HCI packet type 5e [ 1082.849753] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1082.854407] Bluetooth: Unknown HCI packet type 40 [ 1084.135698] Bluetooth: hci0 command 0x1003 tx timeout [ 1084.141104] Bluetooth: hci0 sending frame failed (-49) [ 1084.855550] Bluetooth: hci1 command 0x1003 tx timeout [ 1084.861189] Bluetooth: hci1 sending frame failed (-49) [ 1086.205596] Bluetooth: hci0 command 0x1001 tx timeout [ 1086.210914] Bluetooth: hci0 sending frame failed (-49) [ 1086.925467] Bluetooth: hci1 command 0x1001 tx timeout [ 1086.930785] Bluetooth: hci1 sending frame failed (-49) [ 1088.295382] Bluetooth: hci0 command 0x1009 tx timeout [ 1089.005646] Bluetooth: hci1 command 0x1009 tx timeout 12:27:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 12:27:54 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = gettid() tkill(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000380)={'bond0\x00', @ifru_mtu=0x6}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ptrace$cont(0x7, r1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0xcc2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x13f, 0x4}}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r5, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x5) dup3(r3, r5, 0x0) 12:27:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000440)={0x0, 0x0, {0x100, 0xffffffff, 0x80, 0x8}}) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000140)="cdeda86c3ab26d6adc336bb8666673a8fe3a06f6be6cb82a647b1892cfd0dad3f6c88b385f502ff497aa32665635ed81a88e417150ee13227c0709cceb2d3c65dc7eddb4497243759629491bab9f0ee0846cf1e02d818598a19850", 0x5b, 0x1}, {&(0x7f0000000240)="cc9764986c45b0e32f3b1ad4a5926bd99907bcecf15d437f2f1aec7226cc70a335ada8891c311e7abc3334ce5af4f3a5bb68a92ecc4424a4408c90bf061b0d815b", 0x41, 0xffffffff}, {&(0x7f00000002c0)="c2bf5084c61388806e56db46420bc184cdeb8c17abcd217631db23b0ec1a5fbe47ccd40714c35f603a25c3c11d17037a26a2b72f1c12e864ca5a6855011ecf67788f734338477db8f653737b003d2bf15359e31a19a25accb3da8b00b37e587dab0c327d98410a85a4f6c4f998a5be98581a9692dda8d3c079f5f73308b5bd2b0a480d0fe6ea296f30d2ab7b5dfa15484afc1b3637d5cc63d96cd6f6b5c004d3a818d1a17dafcc2f88b2df4bbe66aca467e796a86e548a9041cd1528a4ee0801bc3109f973fbb21b8252e126879a30efb2b5f6602746617f31136d1274ae5bcf18d503f523c2dc4d08e575a97de04c6e504ca44f1aee0bb4f03dfa7b", 0xfc, 0x4ac1}], 0x8000, &(0x7f00000001c0)={[{@barrier='barrier'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x7ff) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:27:54 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x40000008}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x17, 0x1000, &(0x7f00000003c0)="5f28cd6be4eb184834c74b04b0304ceabe2c3c9bfb8bc3fd180c3eb6d4a18d11babbe746c7eedaaa23c1cded70f522e695720cc6fa5d65941d01aa7a67fd888f29202a270cfd9cee341273f9f6599511c0cbe61bd4ead5b7fd118b6ce58dd57a98af2216ccc3ec511a7a50361fbae780e92384be241a4e934cc6288480dd3acb3290e9f72659e3e3472402095107119820d98cc4687627a9398f02d9bef4b2468811e7417dce34c0d86f367f40b8962567a0a8d681ccb29b783a0b3cdf4f23a929d924f224fb7a4e265cb235691232f9d6e85b3239c755b8738d0f90aeeb5f062f5ce10213aa57fb649698f9c71ec562d18ee92b3c4018a9980d70f1ae1d2513ebedc143a279c813f3391f2145a34f4078b476ecfdd273f4d6e0acd66305f0a6012ce6d6dbbbadad88bf1ed400d70901f580391832ea76da8c8dcc0a12d7a1a931fa13e08bd7cdb99374b4dd6c78eee1e07f7efc38765aa611835e98532420dd2a5cbbaf00abf34e3e652b28c4f9614e4b8f60d4bae217044c10981bfc67f10e14fb7f8d08015985c93d5d2b196fe67331f3e0f1f7d1dd94e079752f01c7cfc81bee02e41c3b7534581c571f7a172ab2a9d8b239f35f7eb890904c1ec7adc7eb2c1bc1f89ae7212cc8aaaaaac0cbbc9e7e12f2ca4de8d89edc0591563a946d91fe7b387341ae065188edc43ad9d4096f0003b18e6e54f5524a65b4acaebe3884ed22256b842592214169d7c534cde4ef1ac37f9b1bb5e574e5ceb115f709c2e5fd5349c809af17b5e8cfd4be7aab426d93928d21f89dddf101437491159e03e67b2e937ac7c342a44978ef1fff30d7f46249d0d6dc0fef0d17d772066a5e414d0aadea62e750be8f6e5c880ec8a00fde0967f8b73bc4a90c5b7c1b00c9510a1c0a33d527c2948d3ac61afe08111e4e878121c279ea6e95768673b8c429a1ff0f935c1bedee93bf11a753726c8897d98f940109d6cef1f27345e3893dad5091c261ccee7ffde0b09833e0c66bd8ae2eb10eb1dae613e87b6df2f02e2b87fb96ee2e670a182330cc1fc2de0fe35d4b2d8d6b8a3fa0e968583fe08bc7832f8c1b9281e7442e5da215cec181e4f56445e3a02496f8a73737c00a5c4da6b71457760ec83fb6a49796040bd098041a28290299ce5986828f5f678a43f85f83a9d9b171ca7594a0cb509841879a3d3cb0da00d4746459d0bbdf6ddab2b9699e3c2544c2e1238c724fa523e34637f9b8aab99fb901809ae8355b44956f1a32eb14b946100bef3dd473e87132cb7a511cd8d352009c434c0711396f1ac7922411e0b3c7808194014d51b82828ea3b51253d1783e08e125853634939d09506ecc691a87404eb4fb10982c24030d8710b4d360e9edd51c2a0a96214e4fda9cbfcc3d3cabd42ac8e3ee3e76c6e44ab501c489b6d6ec8e20f5901ea00c4ac99370e11ab2c14497b6d6f5bdc5f9cb05c38aa419a593fc46b3321388ddb5ba55e0e9faca32c3010bbe68e938e596489b506f86682d1f6f520ba09038c6f34e01162ee3eaf96bb001406ccc73195b0f07808333857b349b1747b0302f5c1a2e3a73c46ebfae85fedf69acfdef64e01af448a7e9d6b21145f8661bfa828351909b2f74df0c16c9f9c0d4a48a3984c102d6543d8ad975627d9a29810367150da73763f0c66badcb9cd2e30be13cb53deb992b7b12341b8a72ac9526add5d41c63f005d41bb837f648d8e797440a422d8a82d1d15b466a0877d6be406ecce2bce9bacf472d59f412ba81027ea633eef4faa17a8d30de121513e636f0729527de2f5b8631545e99b7d0224fdfc4894a9126c000ba496a885bba84a85443d4dced3e293e57558922b1ca0905ab31e183e738e862579785ad1dd3fc196cca17b0ac6567ae3317f6219c0255d2ad32d33588ff7bf21454c8add23268b53a7b62f8ad5917c3f8b62c57245cb98b9aa60a50a8f64648c32ab30dd898384ef410715b7595dfdea4193f5e22fdc9e3c05563f2c41e9a1b712761ac4056df593cdd70200d75325c4c6828748c8f14f3738dc860991610db37bbc41bbb02d32870179f2392e9072fc55ed49857a894e55c4ba8380250d77fa15eb752238650d2861a99be9b847c26008296eadb1926da9b879d53f5d9915fe104ba8f141c7ec5d2ffb9dad0a173c3cb9b4c1a9a1d3d264bc59e27aa6cd300a88525c6d7b0b147d506091ce7aa772ecd1363f1c89a7f8fb8fc6ff8dffab539f33ab6630086e6331031533fd3b1d5982e84c4317148acd0079b40dea4f72a7962bcdedd0e2a234b72cbe2df805282fcd32f1789e269f94faaf8316cc3a31c9278125bc0436b0ffbaf1383b01b0ed720338d5d761ed45691282d0607a400e63f551c464ebd85097a84092c5730c524b90f6c20cd6c51a74c25bff6db3f04f5c59fd1e35d0fa3d6d523a2e9d29ec389e549e76a5a1a9a7c70265f7c7f3e9721af19ac10f5de500ea0dfeedf09c89d704c4ead75814bf45b056ccfaf6ac161d8b9a0d9f809586532a7ddf29c9afb2d3d92165cb2762bf6ff8aa70fa4f7b679dceee60fb6c69d46a253c42199aa8baa72a72c50cd2c0fa098588bdf5836976a7c587a137d6c699f58cffe85df2ce28aca0c575d2ec91d919954d94410582a853c62d90ca6d945577f9d52acc32f0df08d6bcdb15686ad2069f3000c06740640534d363da7634477025d838fc52e9aece163f7f1350d8a5c70ab2d80a76af8f3613ec7c92a7b5a0afdb36b4feda27d1baf19574b3de2510367b6ad574eb556bcb7491dc809f2ffc506e1b788b8942446c8ee7bcc2907a9b93f717b3df382d8e50c4d000ce532e242d97090a7bae2051e65c5c848fa43e39843def633d1931852a8f173b059b5e82b5d97d2ecefacd003ce1521c94e84887d68a635a65335b11c08755dea786d88ff2f7f92463347d0bd99924dca981e7f222c0eaf7c599bfb531a1405e3a2f0a250832e63258de3bb13807ceb10fe48758069f4478bd9c4f683eaab0101ec42e59c676c44931ef0f9ae48f7fe251740e6828dcb62f0c46d8bd10125e0f3782e376e784f090918fe2e8d6f10609a2f700dc3f6cb49f38895295016d4aebe644594608f80ec70b07b2cde9b9fc38bfaabb406eaf55ebc1e9299978501d636283c0c744eda728036cf07d9a98a683541ec5cf904b1d9e8e57c3730e94100c78c7c72b9a4de950efe0e91b0154fda5d82f41738e401ad96af5ee2eb5dbad20e97a7c8ed02c7e8229b12684d1bb85d947db6078f677357d9c82ea1d5c95df705264e386f528c491f88f2094af1525cb8348308057f45cf1eb571df025cb34e6eb0666e8dc2fbed7e7622397baf68c17b64fef50d55ffee02805f5593cd3156e31a56bdb83847e6e426c4f234160107c3880839d5270e7bf98ac56ac68d3f07b4fba48798e651fcfc9b50080e882d76be1f77dedfb6f41e513fb058aad5d923ee06891f6683e55119106b2fe35c7e31cd7771e73dc558c4fcc8eaf0593164ac6a55400333a43d9211db2c9326f342b33cbcd56c76775ed689043d0f5b26dfc81fa896636f469841af17806918a4d13235d516c8e364c26f3c69e701f2eedd18f4d8dd0f04fc5f418b391c6a9204b5060ff0e8bb30a3b02f26d7e1cf2f86397057977d8b1e611f0c006dec657ac4351a101cd00767d0cdba4ca251d71597f15f41fb26c5d1760fed89f0ca8034c814fc48a2940ea26cc93fbf119e84e26d23192b315d1a42a538dccdbf605313b8ef0a9567a2d4166e6dfe4a19e7d10aa973eb703101075954b944bf416b830468daf99fc36ad6b39785ce569896b322128e0129beb1d851fe2a29ac44fad3e917b0fa22368c19895adb712aee16ef0a9e5d802e006d1e4eaa19ebe3fdb28949513f99c3bb4bc280ff073e667f66fd944ce4363b5af443d4b58067ff7732ba6e6b8779e79fa65a5a3a908bca3430d08ffd538f967b7987586441332fb796c59d92a25903a08ce3ea0a4b0b601dd2b3ff93daeb2e4c0d6cfa0b164065e5dfcb68b9fe7eb243e4669fc04b07f18ca52d5ebbc50ca69c8f89bc4665dca85b3401ec55625ed236126fb9d313969cd8e3b5edffaa2393e07b81017a44ebcac179dba09abab786e138dc81c5fd0294fc51461c71aff430e3a00226a2b77d773c1322d25d062c2ff3390686af13c80a31106defb7b749aa0631f8a9bf85044478c212628ad4097618a3cf3e51dc3cb9fb9a9e912a7e940478f43441c141bfa7ffe05b051b962108364a42354d260376b95889167868e4857832e4a8d2fc03c9c6876575c1c3a245b339c3fad8d3e1a7bfcfdd90479f657070af1cde4f8ba9ac3564242cfe3f21071852a75cb1394e0c0ab7fff7023f1cbe53b3b08827ac6cd68ca0f9b732570797f3a873d458e19f54a2f53ae238721e1758a753bd2801ea2f71e5cdd23ffdfad1cd6572fe7ea5a2369f5d36e0c97e6737af35175c0924aedfb94375ba92f5ba248cabac24c1a96bc3ac90a951da0b124ef46c574da0c1fd708161dc0a519bc00100eb07e2f46cf41fc91328cad3ac482756c91a8c969c9dc8c4c1553604b3ffec3e04d45562ef4415d2fda47f85a3ff3ac332e664672ea9ec2a4ebe478035040ba74d1aa2afcf8bc99fd0eb0478f70652094da396fe91d544e23c6cf1f161f8b7f04ef68c3ea1429c6089a977f3d2fd51078b8bc224f270269283b8f54131b19c0c9a2877a9b0b697b3247eb28a7e5d2164369151669d1d3bce93f141369c02c7fa1634bf9f5612ec4d7a4546ab7892628c378d3964b0e106876d639669b269adcda3018e4da3dc2e504265cb25bf84765b54bdd74fb1d559dd54fac993127207b4932f21a70484ccb27d4319957e13f621e995b73b120f519367f9535058cd56336afc2798a8b37a15beb097df6e426c909a975e48c1054f53db0f8e2d327e8e39b672fda03d2976ac8aaf44d02847e067bf164eaa5eaa159fae9e4f3a4d2ad073afb4ac5179c3a64d606b2ff78465f7abb973bd5a2d36c7ecc2a3380aa526f99b1fc452aac69c0665401c14a93b1c0ee9e8e8a60132e5cb6e72ec245bfd4915f4c6c9ddae61ac6bb12124e363e5463a8040dbf9b96968a6781e298a58ab86937ba67bee776a13c69447ba79ba2b117b0aeecf17ab932fd963a2f0070a4dce459c5032560d465890d664fdbb35df32ea4cda814109f7500182746f63fa46c6acc8f2a16f109dbdd001cd5bfd08afd0c5bb752b46ce03eb017dac247560ad1617ae95cdfea8da66b246ce5a31d56e60160d9728143972d8256fe380e085da401fc213891603eb07a4ac8acbc8fc846a2dc351028c124f1ce2ca1245323a8a5cc48c13d3e7e8162256a63900784a4c9c2f4ccafd557e5efa5508297acccbb78566d2b39c681a4e4d0fdb158d76e452cc7db2b59c6aef488f60c7ca8610c8a9274a03ce4e5b854548c8b912f271c85b381c48eb3b210c584dc6ba7f78a51867e0fd87aae38bb93532f8776312a2715f0d8fd12f4d6a704cbef602f149abebb2d301b9f16afdb8fe2f90630d2ae3d9f79ec5d1282267487d6cfb249f5a4efcf76b3f7475423b01c08f0325f126e9d257782ad36a44080c2dc98c74031e92890b67daebf024baacd0e0288bb2f2cffdf31f924f2bdf22af99e0fe1fba64b3e43f1c2db90f1575c805912867c5aeb6a01a409b648ffad8d7d944d50997545eeb7e9c1eb0e272a980a70bcf500d3bdaa05e807ebe21db1ef9f767b5ce9f9c60c107a2df9a38e2860e21d91003b8c14a2b1e1425f17a01e5292f9d90eadaa3aaa952d1063435a33c9"}) r1 = socket$inet6(0xa, 0x2, 0x0) personality(0x5000007) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0100002000ab7f781274b69a9d8fba7f95ba0155c821a1b77f5a1ab2706f4e772dbf3fc0245623baaa1ad44023e83e59164d95f38d1c1cecc88f5faf81a78edd6f2f6d56654cc7042cc28c00"/94], 0x28}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x10a) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) [ 1092.263483] Unknown ioctl 44609 12:27:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) 12:27:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:27:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1092.408935] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1092.416042] Bluetooth: Unknown HCI packet type 5e [ 1092.420934] Bluetooth: Unknown HCI packet type 43 12:27:55 executing program 0 (fault-call:6 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1092.449898] Bluetooth: Unknown HCI packet type 5e [ 1092.475549] Bluetooth: Unknown HCI packet type 50 [ 1092.507446] Bluetooth: Unknown HCI packet type 5e 12:27:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000140)=""/75, 0x4b}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1092.528579] Bluetooth: Unknown HCI packet type 5e [ 1092.533796] Bluetooth: Unknown HCI packet type 43 [ 1092.534923] Bluetooth: Unknown HCI packet type 40 [ 1092.555314] Bluetooth: Unknown HCI packet type 5e [ 1092.572718] Bluetooth: Unknown HCI packet type 50 [ 1092.597801] Bluetooth: Unknown HCI packet type 5e [ 1092.614102] Bluetooth: Unknown HCI packet type 40 12:27:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1092.920345] Bluetooth: Unknown HCI packet type 5e [ 1092.925731] Bluetooth: Unknown HCI packet type 43 [ 1092.942505] Bluetooth: Unknown HCI packet type 5e [ 1092.947535] Bluetooth: Unknown HCI packet type 50 [ 1092.952435] Bluetooth: Unknown HCI packet type 5e [ 1092.958987] Bluetooth: Unknown HCI packet type 40 [ 1092.977342] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:27:55 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = gettid() tkill(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8936, &(0x7f0000000380)={'bond0\x00', @ifru_mtu=0x6}) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ptrace$cont(0x7, r1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0xcc2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280), 0x13f, 0x4}}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) readv(r5, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x5) dup3(r3, r5, 0x0) [ 1093.104528] Unknown ioctl 44609 12:27:55 executing program 5: clone(0xb01b0500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c008000030040"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [{0x0, 0xfffffffb, 0x1000, 0x80000001, 0x401, 0x6a4e}, {0xffff, 0x6, 0x101, 0x7f, 0x1, 0x5}], [[]]}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) syz_init_net_socket$ax25(0x3, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001040)=""/4096, 0x1000) 12:27:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='hfs\x00', 0x0, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 12:27:56 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x3, 0x0, &(0x7f0000000580)=""/156, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1094.455031] Bluetooth: hci0 command 0x1003 tx timeout [ 1094.460499] Bluetooth: hci0 sending frame failed (-49) [ 1094.615103] Bluetooth: hci2 command 0x1003 tx timeout [ 1094.620720] Bluetooth: hci2 sending frame failed (-49) [ 1094.935234] Bluetooth: hci1 command 0x1003 tx timeout [ 1094.941805] Bluetooth: hci1 sending frame failed (-49) [ 1096.524925] Bluetooth: hci0 command 0x1001 tx timeout [ 1096.530234] Bluetooth: hci0 sending frame failed (-49) [ 1096.694919] Bluetooth: hci2 command 0x1001 tx timeout [ 1096.700634] Bluetooth: hci2 sending frame failed (-49) [ 1097.005164] Bluetooth: hci1 command 0x1001 tx timeout [ 1097.010475] Bluetooth: hci1 sending frame failed (-49) [ 1098.605082] Bluetooth: hci0 command 0x1009 tx timeout [ 1098.764811] Bluetooth: hci2 command 0x1009 tx timeout [ 1099.094799] Bluetooth: hci1 command 0x1009 tx timeout 12:28:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:28:05 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)="5960497dce3c", 0x6, 0x5}, {&(0x7f00000003c0)="29aabbc68e8f24df84417c28a4b6cb9c183bc143b48900d85d2ad22dd63e0475a67d3aabb38ad6b44ac1b5bd594110ff703fa9433d3beab20e593064b76798b38d5d37853f8c11", 0x47, 0xd9}, {&(0x7f0000000580), 0x0, 0x3ff}, {&(0x7f0000000700)="07605596eb32e24c3d23643a09ce4ae0f537d6cd1de70dda056ce228bb11c9a5a2ba9400ca6382aa9aec480088dca30b9b702efd9872654ef4725c385a", 0x3d, 0x6f}], 0x22080, &(0x7f0000000800)=ANY=[@ANYBLOB='dax,smackfsroot=!,uid', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,smackfshat=,fowner>', @ANYRESDEC, @ANYBLOB=',obext=user_u,\x00\x00\x00\x00\x00f\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x3, @pix={0x0, 0x2, 0x38414762, 0x8, 0x3, 0xed1f, 0x3, 0x7fff, 0x1, 0x3, 0x3, 0x4}}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./bus\x00', &(0x7f0000000580)='trusted.overlay.redirect\x00', &(0x7f00000005c0)='\x00', 0x1, 0x3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20302, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000600)={0x30, 0x1}, 0x2) 12:28:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x100, 0x2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="84c00838b56cacdc5d6b4a67098116a02a24b34d1a05ada31ea140b32bbfde3ac25883b8f85ff9a4758a852dd688490542459e4d2648dab82267940cd26b16551aa41a1fcd055c5032c7e3217c5b132f234f794df261e61e690395ec63af0502515d48f3f723441e9d63665c62946c5825cfae131b8f8e91af67de12c0724c0b7f5e5e8db57a356f37df8035d5bdff0fe2c8889519e664ea15ee700c98099243b43507befc3e93e2f8a0e7af5a306e3c0f9a728eb635bf", 0xb7}, {&(0x7f00000001c0)="d886f5bbcbec8ea4b955eb96e6c1122b50aa9eb01076585cef4ee0b731b5749ab35b4a7358aa17790156b969f31c1711c85b8e168893234be5b904ca004d383309a494cef514cf6fed57ff357b8fb9e9bf38902e89bb0d7d6bbda8052da9010e824061fd45a1cc6e3aa483c5156e5aecc3439049c7f1d0842c5de4e24d303b171756ff14b5", 0x85}, {&(0x7f0000000280)="3df4a805c08c3bc7bbfaf33cbfb47d7aee1e4d586e2cb6ce5db50733c2334c09fa99a5c12c449c9fe0483e543c62acad25db8c43c91616ffee982de465133d13f06988053adcb4d7f16672c5d0da782854e1ce882c8a103d7ec8af5b12b8ade3b9f301752b2efef6991ab0f8d2d23c2049879971802e7933ab02088a80dc183bb58320c6fa9431e1b311c3f0153677747c46f5a10b4a8985ce393b0dc16887cefbfe515595ae887114f548f3e5c6395a7ea4f3173cc99183ea57a2a3cd02d0ba5bceabf32196e62e1828a8af057420c91b44055eb57fb78cc7d55ff87b8bab8b", 0xe0}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="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", 0x1000}], 0x5, 0x5) [ 1102.510704] Bluetooth: Unknown HCI packet type 5e [ 1102.516712] Bluetooth: Unknown HCI packet type 43 [ 1102.522367] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1102.538664] Bluetooth: Unknown HCI packet type 5e [ 1102.545577] Bluetooth: Unknown HCI packet type 50 [ 1102.551279] audit: type=1804 audit(1590064085.298:253): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 [ 1102.584119] Bluetooth: Unknown HCI packet type 5e [ 1102.584154] Bluetooth: Unknown HCI packet type 5e [ 1102.589699] Bluetooth: Unknown HCI packet type 40 [ 1102.601838] Bluetooth: Unknown HCI packet type 43 [ 1102.619723] Bluetooth: Unknown HCI packet type 5e [ 1102.630085] audit: type=1804 audit(1590064085.378:254): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 [ 1102.637559] Bluetooth: Unknown HCI packet type 50 [ 1102.727568] audit: type=1804 audit(1590064085.438:255): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 [ 1102.731420] Bluetooth: Unknown HCI packet type 5e [ 1102.753909] audit: type=1804 audit(1590064085.458:256): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 [ 1102.793258] Bluetooth: Unknown HCI packet type 40 [ 1102.872881] audit: type=1804 audit(1590064085.618:257): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 [ 1102.899669] audit: type=1804 audit(1590064085.618:258): pid=29814 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/478/bus" dev="sda1" ino=15970 res=1 12:28:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xbc, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24040444}, 0x4004) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x4000000, 0x0, &(0x7f0000000140)=""/106, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000600)="a2230a88df1c33979f070db15ebb40235634efa8d980c45e4a41", 0x1a) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1004007}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0xa8, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6e9142dd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcdb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4a71}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x865f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/179, 0x0, 0x2000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x10640, 0x20) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000001c0)=0x0) 12:28:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xcd, 0x101}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xd5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ftruncate(r1, 0x208200) link(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000002c0)={0x8c, 0x7d, 0x1, {{0x0, 0x6f, 0x1, 0x3, {0x0, 0x0, 0x8}, 0xc0000, 0x9, 0xfffff247, 0x9, 0x1, '^', 0x1, '\\', 0x27, '\x17\xf8\xa9\xff\x7f\x00\x00=\x03\x89\x1ar_\x04\v\xcf\xed\xaf\xb3\xe6\xa2h\xb3\xd4\x9dDXN\x05\x999\xf8B\x81\x10_ \xfa\xb2', 0x13, ':ppp1\feth1security*'}, 0x8, 'keyritg:'}}, 0x8c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000000c0)={0x1}) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 12:28:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) [ 1103.129870] Bluetooth: Unknown HCI packet type 5e [ 1103.141313] Bluetooth: Unknown HCI packet type 43 [ 1103.157040] Bluetooth: Unknown HCI packet type 5e [ 1103.181272] Bluetooth: Unknown HCI packet type 50 [ 1103.196609] audit: type=1804 audit(1590064085.948:259): pid=29851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/479/file0/bus" dev="ramfs" ino=90220 res=1 [ 1103.203987] Bluetooth: Unknown HCI packet type 5e [ 1103.259052] Bluetooth: Unknown HCI packet type 40 [ 1103.264557] Bluetooth: Unknown HCI packet type 5e [ 1103.266001] audit: type=1804 audit(1590064085.978:260): pid=29851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/479/file0/bus" dev="ramfs" ino=90220 res=1 [ 1103.269702] Bluetooth: Unknown HCI packet type 43 [ 1103.269708] Bluetooth: Unknown HCI packet type 5e [ 1103.269712] Bluetooth: Unknown HCI packet type 50 [ 1103.269716] Bluetooth: Unknown HCI packet type 5e [ 1103.269720] Bluetooth: Unknown HCI packet type 40 [ 1103.304866] Bluetooth: Unknown HCI packet type 13 [ 1103.352750] audit: type=1804 audit(1590064085.988:261): pid=29851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir861644460/syzkaller.FhEdXR/479/file0/bus" dev="ramfs" ino=90220 res=1 12:28:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)) 12:28:06 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x4e0800, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0xb, 0x6, 0x10002, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r0, &(0x7f00000001c0)='s', 0xffcf) 12:28:06 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$KDDELIO(r0, 0x4b35, 0x80000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x248400, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x40, {0x2, 0x6e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_0\x00'}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000001c0)={0x3f, 0x401, 0x4, 0x4, 0xffff}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f00000000c0)={0x1, 0x8}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x42c0c0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x692, 0x0, 0x0, 0x70a4, 0x0, 0x0, 0x4cb, 0x0, 0x101, 0x0, 0x3, 0x0, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1104.524523] Bluetooth: hci0 command 0x1003 tx timeout [ 1104.533213] Bluetooth: hci0 sending frame failed (-49) [ 1104.604752] Bluetooth: hci3 command 0x1003 tx timeout [ 1104.610194] Bluetooth: hci3 sending frame failed (-49) [ 1105.164390] Bluetooth: hci1 command 0x1003 tx timeout [ 1105.169783] Bluetooth: hci1 sending frame failed (-49) [ 1105.324752] Bluetooth: hci2 command 0x1003 tx timeout [ 1105.331115] Bluetooth: hci2 sending frame failed (-49) [ 1106.604398] Bluetooth: hci0 command 0x1001 tx timeout [ 1106.609791] Bluetooth: hci0 sending frame failed (-49) [ 1106.684443] Bluetooth: hci3 command 0x1001 tx timeout [ 1106.689784] Bluetooth: hci3 sending frame failed (-49) [ 1107.244527] Bluetooth: hci1 command 0x1001 tx timeout [ 1107.250043] Bluetooth: hci1 sending frame failed (-49) [ 1107.404354] Bluetooth: hci2 command 0x1001 tx timeout [ 1107.409902] Bluetooth: hci2 sending frame failed (-49) [ 1108.684308] Bluetooth: hci0 command 0x1009 tx timeout [ 1108.764454] Bluetooth: hci3 command 0x1009 tx timeout [ 1109.324284] Bluetooth: hci1 command 0x1009 tx timeout [ 1109.484527] Bluetooth: hci2 command 0x1009 tx timeout 12:28:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024008f9be3f5965c9bacbc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48d9f1e128a0", 0x52}], 0x1}, 0x0) socket(0x10, 0x3, 0x1000000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x1cb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x19f, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:28:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$ax25(r1, 0x0, &(0x7f0000000080), 0x80000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) fremovexattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fcntl$getown(r5, 0x9) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002dbd7016ffdbdf250c0000006800038014000200000000000014000600ff020000000000000000000000000001140002006772657461703000000000000000000008000100ac1414aa0500080040000000060007004e220000060007004e2100000500080006000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) [ 1112.829637] Bluetooth: Unknown HCI packet type 5e [ 1112.834941] Bluetooth: Unknown HCI packet type 43 [ 1112.840680] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1112.850811] Bluetooth: Unknown HCI packet type 5e [ 1112.858604] Bluetooth: Unknown HCI packet type 50 [ 1112.864426] Bluetooth: Unknown HCI packet type 5e [ 1112.869448] Bluetooth: Unknown HCI packet type 40 [ 1112.921795] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.931289] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.952217] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.975566] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1112.991106] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.010565] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.024647] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.036640] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.050011] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1113.062311] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 12:28:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xc240, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x9f58) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x3, 0x8, 0x4, 0x40, 0x3, {r3, r4/1000+60000}, {0x1, 0x2, 0xff, 0x12, 0x2, 0x81, "00000002"}, 0x1, 0x2, @offset=0x102, 0xc4, 0x0, r0}) [ 1113.411150] Bluetooth: Unknown HCI packet type 5e [ 1113.420489] Bluetooth: Unknown HCI packet type 43 [ 1113.422501] Bluetooth: Unknown HCI packet type 5e [ 1113.432569] Bluetooth: Unknown HCI packet type 43 [ 1113.437606] Bluetooth: Unknown HCI packet type 5e [ 1113.437612] Bluetooth: Unknown HCI packet type 50 [ 1113.437616] Bluetooth: Unknown HCI packet type 5e [ 1113.437621] Bluetooth: Unknown HCI packet type 40 [ 1113.471484] Bluetooth: Unknown HCI packet type 5e [ 1113.487511] Bluetooth: Unknown HCI packet type 50 [ 1113.509492] Bluetooth: Unknown HCI packet type 5e [ 1113.537726] Bluetooth: Unknown HCI packet type 40 12:28:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) exit(0x6) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x4000, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/172, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x72, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7ffffffb, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0xe5}, &(0x7f0000000240)=0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ff, 0x250280) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x8, 0x2, 0xbe1, 0x7d5, 0xcdb, 0x8, 0x4}) 12:28:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024008f9be3f5965c9bacbc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48d9f1e128a0", 0x52}], 0x1}, 0x0) socket(0x10, 0x3, 0x1000000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x1cb, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) sendto$inet(0xffffffffffffffff, &(0x7f0000001680)="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", 0x19f, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:28:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FITHAW(r2, 0xc0045878) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1113.773615] Bluetooth: Unknown HCI packet type 5e [ 1113.779844] Bluetooth: Unknown HCI packet type 43 [ 1113.785908] Bluetooth: Unknown HCI packet type 5e [ 1113.788523] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1113.796014] Bluetooth: Unknown HCI packet type 50 [ 1113.831977] Bluetooth: Unknown HCI packet type 5e [ 1113.838203] Bluetooth: Unknown HCI packet type 40 12:28:17 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="0bdc264e7a7a86f5bd8b8287eb63655e92d5acee95308c824063ea09b9f3e46fb10593fa3ff7c9b1dd89ffaf89d53387804ae2d9bc2630d55b0d6d73135953d8bcb1a81cacde44cbb3ee20ac0f7f1322c4bd61d98aae6fe3dd7b6c96702662945debdf8d882bc34b85b72e574b64779f2c11e32e0d8d63ccaa6cac587fbe4ee274406794a1", 0x85}], 0x1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/162, 0x0, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="84c00838b56cacdc5d6b4a67098116a02a24b34d1a05ada31ea140b32bbfde3ac25883b8f85ff9a4758a852dd688490542459e4d2648dab82267940cd26b16551aa41a1fcd055c5032c7e3217c5b132f234f794df261e61e690395ec63af0502515d48f3f723441e9d63665c62946c5825cfae131b8f8e91af67de12c0724c0b7f5e5e8db57a356f37df8035d5bdff0fe2c8889519e664ea15ee700c98099243b43507befc3e93e2f8a0e7af5a306e3c0f9a728eb635bf", 0xb7}, {&(0x7f00000001c0)="d886f5bbcbec8ea4b955eb96e6c1122b50aa9eb01076585cef4ee0b731b5749ab35b4a7358aa17790156b969f31c1711c85b8e168893234be5b904ca004d383309a494cef514cf6fed57ff357b8fb9e9bf38902e89bb0d7d6bbda8052da9010e824061fd45a1cc6e3aa483c5156e5aecc3439049c7f1d0842c5de4e24d303b171756ff14b5", 0x85}, {&(0x7f0000000280)="3df4a805c08c3bc7bbfaf33cbfb47d7aee1e4d586e2cb6ce5db50733c2334c09fa99a5c12c449c9fe0483e543c62acad25db8c43c91616ffee982de465133d13f06988053adcb4d7f16672c5d0da782854e1ce882c8a103d7ec8af5b12b8ade3b9f301752b2efef6991ab0f8d2d23c2049879971802e7933ab02088a80dc183bb58320c6fa9431e1b311c3f0153677747c46f5a10b4a8985ce393b0dc16887cefbfe515595ae887114f548f3e5c6395a7ea4f3173cc99183ea57a2a3cd02d0ba5bceabf32196e62e1828a8af057420c91b44055eb57fb78cc7d55ff87b8bab8b", 0xe0}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="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", 0x1000}], 0x5, 0x5) [ 1114.556381] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1114.571507] Bluetooth: hci4 sending frame failed (-49) [ 1114.843973] Bluetooth: hci0 command 0x1003 tx timeout [ 1114.849481] Bluetooth: hci0 sending frame failed (-49) 12:28:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x72, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x7, 0x10}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) connect$phonet_pipe(r4, &(0x7f0000000080)={0x23, 0x8, 0x6}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1115.493957] Bluetooth: hci2 command 0x1003 tx timeout [ 1115.500420] Bluetooth: hci1 command 0x1003 tx timeout [ 1115.500473] Bluetooth: hci2 sending frame failed (-49) [ 1115.512286] Bluetooth: hci1 sending frame failed (-49) [ 1115.803952] Bluetooth: hci3 command 0x1003 tx timeout [ 1115.809655] Bluetooth: hci3 sending frame failed (-49) 12:28:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) r2 = open(&(0x7f0000000200)='./file0\x00', 0x64e000, 0x68) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380074696d65000000000000000000000000000000000000000000000000000000000000ffffffff4f970000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000040380071756f7461000000000000000000000000000000000000000000000000000100000000000000470d0000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000140)=""/163, &(0x7f00000000c0)=0xa3) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1000000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1116.246956] ip_tables: iptables: counters copy to user failed while replacing table [ 1116.262959] ip_tables: iptables: counters copy to user failed while replacing table [ 1116.603820] Bluetooth: hci4 command 0x1003 tx timeout [ 1116.609735] Bluetooth: hci4 sending frame failed (-49) [ 1116.923829] Bluetooth: hci0 command 0x1001 tx timeout [ 1116.930625] Bluetooth: hci0 sending frame failed (-49) [ 1117.573819] Bluetooth: hci1 command 0x1001 tx timeout [ 1117.579157] Bluetooth: hci2 command 0x1001 tx timeout [ 1117.579209] Bluetooth: hci1 sending frame failed (-49) [ 1117.584618] Bluetooth: hci2 sending frame failed (-49) [ 1117.894072] Bluetooth: hci3 command 0x1001 tx timeout [ 1117.899707] Bluetooth: hci3 sending frame failed (-49) [ 1118.683820] Bluetooth: hci4 command 0x1001 tx timeout [ 1118.689296] Bluetooth: hci4 sending frame failed (-49) [ 1119.003782] Bluetooth: hci0 command 0x1009 tx timeout [ 1119.643825] Bluetooth: hci2 command 0x1009 tx timeout [ 1119.654402] Bluetooth: hci1 command 0x1009 tx timeout [ 1119.963869] Bluetooth: hci3 command 0x1009 tx timeout [ 1120.763713] Bluetooth: hci4 command 0x1009 tx timeout 12:28:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000100)="b90e718b7fb166d08510960202fa3448922094031832081763154a0a0d73d9726040", 0x22) ioctl$KDADDIO(r1, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r2, &(0x7f0000001300)=[{&(0x7f0000000140)="eabbb6886facdf57593a4803a228039bcf579646cf3601d6cfb30fccb27c52a1f9fb41e71ca28527af19b24446a763530ba188ac948291945bb8ce621e2013c23617649b8ad7ae06a44a29a0010a9f813ab6676922e73fda7fd40af29e0d2e8cde31e6a1c52040e5b9047121fbf32e77f18a70280f3aff84601c43a85ff938f8d2439cdba184ce395358f30303c5262148b35ada01a62fb344", 0x99}, {&(0x7f0000000080)="8a831a6926e11cd8436cf1c8eb", 0xd}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="619eae2c462c42dbc815aaec0edd13ab5a61d75228e310cb73277013e26b0bc25ae898484339f3f7aad472e610909d339f92f732f518df7020f8d2aefdda8b040f3eb38c824b9106e283c1c3ae90be9e1f3578954ba7e6b5e1753e275433d832fccb060ad06419b20a2d898c8daedf20a08b9008363c6b643174de2c293a427ff6849aa660a03ea07044ddfec5b75858fd3fb680d6ac7062b606617a617935c47b374715e48c07d7148b8b618c4b4f82ba51d5be410c1114a9a762b1e499", 0xbe}], 0x4, 0x6) 12:28:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2080, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x440, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000001c0)={0x1790000, 0x7, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xa2092a, 0xffffff7c, [], @p_u16=&(0x7f0000000140)=0x9}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) prctl$PR_SET_TIMERSLACK(0x1d, 0x9281) 12:28:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x200, 0x100) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 1123.620646] Bluetooth: Unknown HCI packet type 5e [ 1123.627893] Bluetooth: Unknown HCI packet type 43 [ 1123.636155] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1123.646979] Bluetooth: Unknown HCI packet type 5e [ 1123.654695] Bluetooth: Unknown HCI packet type 50 [ 1123.659869] Bluetooth: Unknown HCI packet type 5e 12:28:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1123.666586] Bluetooth: Unknown HCI packet type 40 12:28:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000300)="1c5cd8533e438216e4ea3f3c9b65fe73234ac3d51f0472066a3d52087fcf71bda3595109eabd5f3c87b14a8ea91c4fb84b1e82993cd12597344a71c0e0f3f6593940f6c8c64cf51fd19ecfc45254420ca43092ee53887df1da1ec6dd38292c5b9f9b4b77704d34f8039032ee02ed8ff7a8811e11cb676b088867d6a0e72f46e329e9204d1c3168", 0x87}], 0x1, 0x0, 0x0, 0x20000010}, 0x844) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "c0f8ad7f4f81f890ef4b9a7f42bc83ae"}, 0x11, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="84c00838b56cacdc5d6b4a67098116a02a24b34d1a05ada31ea140b32bbfde3ac25883b8f85ff9a4758a852dd688490542459e4d2648dab82267940cd26b16551aa41a1fcd055c5032c7e3217c5b132f234f794df261e61e690395ec63af0502515d48f3f723441e9d63665c62946c5825cfae131b8f8e91af67de12c0724c0b7f5e5e8db57a356f37df8035d5bdff0fe2c8889519e664ea15ee700c98099243b43507befc3e93e2f8a0e7af5a306e3c0f9a728eb635bf", 0xb7}, {&(0x7f00000001c0)="d886f5bbcbec8ea4b955eb96e6c1122b50aa9eb01076585cef4ee0b731b5749ab35b4a7358aa17790156b969f31c1711c85b8e168893234be5b904ca004d383309a494cef514cf6fed57ff357b8fb9e9bf38902e89bb0d7d6bbda8052da9010e824061fd45a1cc6e3aa483c5156e5aecc3439049c7f1d0842c5de4e24d303b171756ff14b5", 0x85}, {&(0x7f0000000280)="3df4a805c08c3bc7bbfaf33cbfb47d7aee1e4d586e2cb6ce5db50733c2334c09fa99a5c12c449c9fe0483e543c62acad25db8c43c91616ffee982de465133d13f06988053adcb4d7f16672c5d0da782854e1ce882c8a103d7ec8af5b12b8ade3b9f301752b2efef6991ab0f8d2d23c2049879971802e7933ab02088a80dc183bb58320c6fa9431e1b311c3f0153677747c46f5a10b4a8985ce393b0dc16887cefbfe515595ae887114f548f3e5c6395a7ea4f3173cc99183ea57a2a3cd02d0ba5bceabf32196e62e1828a8af057420c91b44055eb57fb78cc7d55ff87b8bab8b", 0xe0}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="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", 0x1000}], 0x5, 0x5) 12:28:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20000, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) write$binfmt_aout(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="07010607a6020000e4000000030000006d0300000c0d00000000000000000000fb39b6ba3652bea0bd22a498068a0212d4064088d9f412703f3b80f0ed669b847d754feb258cb041f28ae5b392876d99efc2b0de406c8698ddbb502b38560b15000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a165556e869800f8884c62"], 0x960) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000100)=0x13) 12:28:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x6, 0x0, @descriptor="522be48c752df9b6"}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x0, 0x20, "fa1e126a8bf215e0461ee4e0bbd565a934fe7e0eeae239aa1523cedf664125ea"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1124.913848] Bluetooth: hci1 sending frame failed (-49) [ 1124.933014] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1124.943643] Bluetooth: Unknown HCI packet type 5e [ 1124.948833] Bluetooth: Unknown HCI packet type 43 12:28:27 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x4112, r0, 0x7000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/172, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) [ 1124.970740] Bluetooth: Unknown HCI packet type 5e [ 1124.976814] Bluetooth: Unknown HCI packet type 5e [ 1124.981855] Bluetooth: Unknown HCI packet type 43 [ 1124.982968] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1125.002031] Bluetooth: Unknown HCI packet type 5e [ 1125.008871] Bluetooth: Unknown HCI packet type 50 [ 1125.024027] Bluetooth: Unknown HCI packet type 50 [ 1125.039743] Bluetooth: Unknown HCI packet type 5e [ 1125.045970] Bluetooth: Unknown HCI packet type 5e [ 1125.051032] Bluetooth: Unknown HCI packet type 40 [ 1125.051175] Bluetooth: Unknown HCI packet type 40 [ 1125.643432] Bluetooth: hci0 command 0x1003 tx timeout [ 1125.652345] Bluetooth: hci0 sending frame failed (-49) [ 1126.923496] Bluetooth: hci1 command 0x1003 tx timeout [ 1126.931547] Bluetooth: hci1 sending frame failed (-49) [ 1127.003414] Bluetooth: hci3 command 0x1003 tx timeout [ 1127.010078] Bluetooth: hci2 command 0x1003 tx timeout [ 1127.010168] Bluetooth: hci3 sending frame failed (-49) [ 1127.018113] Bluetooth: hci2 sending frame failed (-49) [ 1127.723395] Bluetooth: hci0 command 0x1001 tx timeout [ 1127.729504] Bluetooth: hci0 sending frame failed (-49) [ 1129.003389] Bluetooth: hci1 command 0x1001 tx timeout [ 1129.010330] Bluetooth: hci1 sending frame failed (-49) [ 1129.083386] Bluetooth: hci2 command 0x1001 tx timeout [ 1129.083403] Bluetooth: hci3 command 0x1001 tx timeout [ 1129.099356] Bluetooth: hci2 sending frame failed (-49) [ 1129.106808] Bluetooth: hci3 sending frame failed (-49) [ 1129.803351] Bluetooth: hci0 command 0x1009 tx timeout [ 1131.083240] Bluetooth: hci1 command 0x1009 tx timeout [ 1131.163242] Bluetooth: hci3 command 0x1009 tx timeout [ 1131.169338] Bluetooth: hci2 command 0x1009 tx timeout 12:28:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8000000400000004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "ec0f23d9ccb6bc13", "c92434fe52455a1367c9420fe055fc13", '<2 M', "1068ad16756573df"}, 0x28) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:36 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) [ 1133.866607] Bluetooth: Unknown HCI packet type 5e [ 1133.871937] Bluetooth: Unknown HCI packet type 43 [ 1133.888538] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1133.902453] Bluetooth: Unknown HCI packet type 5e 12:28:36 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) [ 1133.917648] Bluetooth: Unknown HCI packet type 50 [ 1133.932219] Bluetooth: Unknown HCI packet type 5e [ 1133.951764] Bluetooth: Unknown HCI packet type 40 12:28:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2e) 12:28:37 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) 12:28:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000001180)={0xfffffff, 0x5, 0x7, r0, 0x0, &(0x7f0000001140)={0x9c0905, 0x2, [], @string=&(0x7f0000001100)=0x6}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendto$rose(r2, &(0x7f0000000100)="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", 0x1000, 0x4004015, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}, 0x40) mlock(&(0x7f0000b2f000/0x3000)=nil, 0x3000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RLINK(r3, &(0x7f00000011c0)={0x7, 0x47, 0x1}, 0x7) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000001240)=0x8, 0x4) 12:28:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000400)={0x4, @win={{0x0, 0x7ac15cda, 0x40, 0x5}, 0x3, 0x3ff, &(0x7f0000000140)={{0xb9, 0xc5, 0x3f, 0x27}, &(0x7f00000000c0)={{0x3ff, 0x9, 0xffff, 0x7fff}, &(0x7f0000000080)={{0x80000001, 0xffff9f02, 0x3, 0x9}}}}, 0x6, &(0x7f0000000180)="9dcd40b70a447d69481bef3c7c6d89b92c95851b3f9c991434d0b07e0d46f0d9dbb7e7bc5e563eda501056f6756918735a0d0396a3795b32", 0xda}}) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)={&(0x7f0000000300)="cee60bbbacd0df96c3b2dfd7c2f7a45fbb95f9a30a14f04a4c750ec2d5f0f20cf73c2715ef711eaed1138b3bd4e2f669cba266a875b921ea37ac39c61422b49b368ddde02cf3932e2c6a58e65bd4c027f8f9c522a48931eb45dab8260ebbbe2c3c9974655cfa2cc65da4a11b00d0134e7af225ad3553d8bce58d7076c283269bec06add7074a07fddf512dcf9429b1b22cd060afdd93513bc16ffcb8f014b4450973bc86f579687b0f", 0xa9}) 12:28:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) vmsplice(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="84c00838b56cacdc5d6b4a67098116a02a24b34d1a05ada31ea140b32bbfde3ac25883b8f85ff9a4758a852dd688490542459e4d2648dab82267940cd26b16551aa41a1fcd055c5032c7e3217c5b132f234f794df261e61e690395ec63af0502515d48f3f723441e9d63665c62946c5825cfae131b8f8e91af67de12c0724c0b7f5e5e8db57a356f37df8035d5bdff0fe2c8889519e664ea15ee700c98099243b43507befc3e93e2f8a0e7af5a306e3c0f9a728eb635bf", 0xb7}, {&(0x7f00000001c0)="d886f5bbcbec8ea4b955eb96e6c1122b50aa9eb01076585cef4ee0b731b5749ab35b4a7358aa17790156b969f31c1711c85b8e168893234be5b904ca004d383309a494cef514cf6fed57ff357b8fb9e9bf38902e89bb0d7d6bbda8052da9010e824061fd45a1cc6e3aa483c5156e5aecc3439049c7f1d0842c5de4e24d303b171756ff14b5", 0x85}, {&(0x7f0000000280)="3df4a805c08c3bc7bbfaf33cbfb47d7aee1e4d586e2cb6ce5db50733c2334c09fa99a5c12c449c9fe0483e543c62acad25db8c43c91616ffee982de465133d13f06988053adcb4d7f16672c5d0da782854e1ce882c8a103d7ec8af5b12b8ade3b9f301752b2efef6991ab0f8d2d23c2049879971802e7933ab02088a80dc183bb58320c6fa9431e1b311c3f0153677747c46f5a10b4a8985ce393b0dc16887cefbfe515595ae887114f548f3e5c6395a7ea4f3173cc99183ea57a2a3cd02d0ba5bceabf32196e62e1828a8af057420c91b44055eb57fb78cc7d55ff87b8bab8b", 0xe0}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="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", 0x1000}], 0x5, 0x5) 12:28:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1135.203505] Bluetooth: Unknown HCI packet type 5e [ 1135.217738] Bluetooth: Unknown HCI packet type 43 [ 1135.236422] Bluetooth: Unknown HCI packet type 5e [ 1135.249671] Bluetooth: Unknown HCI packet type 50 [ 1135.265724] Bluetooth: Unknown HCI packet type 5e [ 1135.284285] Bluetooth: Unknown HCI packet type 40 [ 1135.288230] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1135.295358] Bluetooth: Unknown HCI packet type 5e 12:28:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1135.321368] Bluetooth: Unknown HCI packet type 43 [ 1135.344654] Bluetooth: Unknown HCI packet type 5e [ 1135.347105] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1135.349672] Bluetooth: Unknown HCI packet type 50 [ 1135.363002] Bluetooth: Unknown HCI packet type 5e [ 1135.369069] Bluetooth: Unknown HCI packet type 43 [ 1135.373126] Bluetooth: Unknown HCI packet type 5e [ 1135.405473] Bluetooth: Unknown HCI packet type 5e [ 1135.422295] Bluetooth: Unknown HCI packet type 40 [ 1135.425798] Bluetooth: Unknown HCI packet type 50 [ 1135.462639] Bluetooth: Unknown HCI packet type 5e [ 1135.477879] Bluetooth: Unknown HCI packet type 40 [ 1135.882967] Bluetooth: hci0 command 0x1003 tx timeout [ 1135.888617] Bluetooth: hci0 sending frame failed (-49) [ 1137.252958] Bluetooth: hci1 command 0x1003 tx timeout [ 1137.258312] Bluetooth: hci1 sending frame failed (-49) [ 1137.322904] Bluetooth: hci2 command 0x1003 tx timeout [ 1137.328444] Bluetooth: hci2 sending frame failed (-49) [ 1137.402791] Bluetooth: hci3 command 0x1003 tx timeout [ 1137.408985] Bluetooth: hci3 sending frame failed (-49) [ 1137.962813] Bluetooth: hci0 command 0x1001 tx timeout [ 1137.969245] Bluetooth: hci0 sending frame failed (-49) [ 1139.322794] Bluetooth: hci1 command 0x1001 tx timeout [ 1139.329732] Bluetooth: hci1 sending frame failed (-49) [ 1139.402822] Bluetooth: hci2 command 0x1001 tx timeout [ 1139.408550] Bluetooth: hci2 sending frame failed (-49) [ 1139.482758] Bluetooth: hci3 command 0x1001 tx timeout [ 1139.490262] Bluetooth: hci3 sending frame failed (-49) [ 1140.042733] Bluetooth: hci0 command 0x1009 tx timeout [ 1141.402734] Bluetooth: hci1 command 0x1009 tx timeout [ 1141.482812] Bluetooth: hci2 command 0x1009 tx timeout [ 1141.562709] Bluetooth: hci3 command 0x1009 tx timeout 12:28:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x78fa80) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000480)={0xffff, 0x1, 0x4, 0x4000000, 0xe25, {0x0, 0xea60}, {0x1, 0x1, 0xbc, 0x6, 0xbd, 0x8, "693af4bd"}, 0xffff, 0x4, @offset=0x4, 0xf16c, 0x0, r3}) set_robust_list(&(0x7f0000000400)={&(0x7f0000000300)={&(0x7f0000000240)}, 0x8, &(0x7f0000000380)={&(0x7f0000000340)}}, 0x18) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000200)={0xb78, 0x3, 0xa, 0x40, 0xb, 0xfffffffe, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000080)=0xfffffffd) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000), 0x0, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) dup(r6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000080)=0x15) 12:28:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1144.151177] Bluetooth: Unknown HCI packet type 5e [ 1144.157414] Bluetooth: Unknown HCI packet type 43 [ 1144.189462] Bluetooth: Unknown HCI packet type 5e [ 1144.207563] Bluetooth: Unknown HCI packet type 50 [ 1144.216928] Bluetooth: Unknown HCI packet type 5e [ 1144.221980] Bluetooth: Unknown HCI packet type 40 12:28:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002340)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000002440)=0xe8) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYBLOB="000026bd7000ffdbdf250800000008000600", @ANYRES32=r3, @ANYBLOB="05003700000000659cc2b700", @ANYRES32=r5, @ANYBLOB="08003400090000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4000840) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FIOCLEX(r6, 0x5451) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1145.369226] nla_parse: 39 callbacks suppressed [ 1145.369233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1145.405244] ip_tables: iptables: counters copy to user failed while replacing table [ 1145.416076] Bluetooth: Unknown HCI packet type 5e [ 1145.421257] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1145.427416] Bluetooth: Unknown HCI packet type 43 [ 1145.433363] Bluetooth: Unknown HCI packet type 5e [ 1145.440410] Bluetooth: Unknown HCI packet type 50 [ 1145.447275] Bluetooth: Unknown HCI packet type 5e [ 1145.457152] Bluetooth: Unknown HCI packet type 40 [ 1145.465184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1145.475969] ip_tables: iptables: counters copy to user failed while replacing table 12:28:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000180)) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000080)={0x7, 0x7f, [0x1, 0x101, 0x3, 0x817b, 0x20], 0x5}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) 12:28:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000140)={r2, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0xffff, 0x9], 0x10, 0x7, 0x5, &(0x7f00000000c0)=[0x4, 0x9, 0x8, 0x6, 0x0, 0x6, 0x1], &(0x7f0000000100)=[0x4, 0x5, 0x4, 0x0, 0x1, 0xfffffffd, 0x6, 0x401]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={r2, 0x6}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={r2, 0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={r2, 0x6}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)={0x2, 0x0, [{0x4, 0x0, &(0x7f0000000080)}, {0x2000, 0xf, &(0x7f00000000c0)=""/15}]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1146.032826] Bluetooth: Unknown HCI packet type 5e [ 1146.035280] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1146.038230] Bluetooth: Unknown HCI packet type 43 12:28:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x2e, 0x4, 0x0, {0x2, 0x9, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000080)={0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1146.101942] Bluetooth: Unknown HCI packet type 5e 12:28:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800d40) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x401}, {0xffffffffffffffff, 0x4001}, {r3, 0x1}, {r2, 0x58fd8f750b4bae04}, {r4, 0x108}, {r0, 0x80}, {r5, 0x2000}], 0x7, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x10000]}, 0x8) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r7}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r7, 0x2}}, 0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1146.125914] Bluetooth: Unknown HCI packet type 50 [ 1146.143378] Bluetooth: Unknown HCI packet type 5e [ 1146.153308] Bluetooth: Unknown HCI packet type 40 [ 1146.202883] Bluetooth: hci0 command 0x1003 tx timeout [ 1146.208303] Bluetooth: hci0 sending frame failed (-49) [ 1147.492390] Bluetooth: hci1 command 0x1003 tx timeout [ 1147.497784] Bluetooth: hci1 sending frame failed (-49) [ 1148.042403] Bluetooth: hci2 command 0x1003 tx timeout [ 1148.047887] Bluetooth: hci2 sending frame failed (-49) [ 1148.282328] Bluetooth: hci0 command 0x1001 tx timeout [ 1148.288013] Bluetooth: hci0 sending frame failed (-49) [ 1149.562291] Bluetooth: hci1 command 0x1001 tx timeout [ 1149.567801] Bluetooth: hci1 sending frame failed (-49) [ 1150.122348] Bluetooth: hci2 command 0x1001 tx timeout [ 1150.127671] Bluetooth: hci2 sending frame failed (-49) [ 1150.362306] Bluetooth: hci0 command 0x1009 tx timeout [ 1151.642214] Bluetooth: hci1 command 0x1009 tx timeout [ 1152.212294] Bluetooth: hci2 command 0x1009 tx timeout 12:28:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'veth0_vlan\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) signalfd4(r2, &(0x7f0000000040), 0x8, 0x0) 12:28:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000004) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e23, 0x1, @private0, 0x9e9}}, [0x100000000, 0x7ce7, 0x8000, 0x8, 0x9, 0x8000, 0x0, 0x8001, 0x5650b9bc, 0x1, 0x20, 0x7, 0x3, 0x3, 0x1]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r5, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0xfffffffe) 12:28:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x408501, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000000000000069fc39db6ef3fa514d5afe50e5c7a58180263b5ab6986d6ba860ab59b21c209337efdca38b91372285ad8ae88c32ee94942ce5ebcd8e1337308b42c87ddf2be4e295f689941138a32bd03acf95882ebbb377541fec7dfd690b9c9fedbec89e1654435101ccb5dd86f03d6fd315c6de17541b0c41bc582da47850cee3a21ea954ee064827b0a92"], 0x71}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x3ff, 0x7}}}, ["", "", "", "", ""]}, 0x30}}, 0x8040) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:28:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xf) 12:28:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSBRK(r1, 0x5427) 12:28:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000140)=0x78) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) 12:28:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1156.250670] ip_tables: iptables: counters copy to user failed while replacing table [ 1156.275474] Bluetooth: Unknown HCI packet type 5e [ 1156.280548] Bluetooth: Unknown HCI packet type 43 [ 1156.288315] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:28:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:28:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1156.300077] ip_tables: iptables: counters copy to user failed while replacing table [ 1156.308868] Bluetooth: Unknown HCI packet type 5e [ 1156.316939] Bluetooth: Unknown HCI packet type 50 [ 1156.333080] Bluetooth: Unknown HCI packet type 5e [ 1156.338132] Bluetooth: Unknown HCI packet type 43 [ 1156.346067] Bluetooth: Unknown HCI packet type 5e 12:28:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) r1 = syz_open_pts(0xffffffffffffffff, 0x380) ioctl$KDDISABIO(r1, 0x4b37) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffff8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000000c0)={0x10000000}) [ 1156.350219] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1156.368051] Bluetooth: Unknown HCI packet type 40 [ 1156.386038] Bluetooth: Unknown HCI packet type 5e 12:28:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1156.403837] Bluetooth: Unknown HCI packet type 50 [ 1156.417547] Bluetooth: Unknown HCI packet type 5e [ 1156.426772] Bluetooth: Unknown HCI packet type 40 12:28:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:28:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1157.084413] Bluetooth: Unknown HCI packet type 5e [ 1157.089526] Bluetooth: Unknown HCI packet type 43 [ 1157.107176] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1157.111133] Bluetooth: Unknown HCI packet type 5e [ 1157.119562] Bluetooth: Unknown HCI packet type 50 [ 1157.125788] Bluetooth: Unknown HCI packet type 5e [ 1157.130647] Bluetooth: Unknown HCI packet type 40 [ 1158.281947] Bluetooth: hci0 command 0x1003 tx timeout [ 1158.288501] Bluetooth: hci0 sending frame failed (-49) [ 1158.361874] Bluetooth: hci1 command 0x1003 tx timeout [ 1158.367334] Bluetooth: hci1 sending frame failed (-49) [ 1159.091859] Bluetooth: hci2 command 0x1003 tx timeout [ 1159.097308] Bluetooth: hci2 sending frame failed (-49) [ 1160.361856] Bluetooth: hci0 command 0x1001 tx timeout [ 1160.367337] Bluetooth: hci0 sending frame failed (-49) [ 1160.441882] Bluetooth: hci1 command 0x1001 tx timeout [ 1160.447198] Bluetooth: hci1 sending frame failed (-49) [ 1161.161820] Bluetooth: hci2 command 0x1001 tx timeout [ 1161.167260] Bluetooth: hci2 sending frame failed (-49) [ 1162.441735] Bluetooth: hci0 command 0x1009 tx timeout [ 1162.521803] Bluetooth: hci1 command 0x1009 tx timeout [ 1163.251868] Bluetooth: hci2 command 0x1009 tx timeout 12:29:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:29:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001540), 0x10) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000001500)={r5, 0x10001, 0x45d600, 0x81, 0x9, 0x1, 0x5, 0x7ff, 0x8, 0x8, 0x18, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:09 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) semget(0x2, 0x0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x8, 0x1, 0x6}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:29:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r4, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1166.536214] Bluetooth: Unknown HCI packet type 5e [ 1166.536242] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1166.541244] Bluetooth: Unknown HCI packet type 43 12:29:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1166.605379] Bluetooth: Unknown HCI packet type 5e [ 1166.622753] Bluetooth: Unknown HCI packet type 50 [ 1166.635120] Bluetooth: Unknown HCI packet type 5e 12:29:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x200, 0x80102) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1166.655028] Bluetooth: Unknown HCI packet type 40 [ 1166.676763] Bluetooth: Unknown HCI packet type 5e [ 1166.682754] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1166.688908] Bluetooth: Unknown HCI packet type 43 [ 1166.696254] Bluetooth: hci1: Frame reassembly failed (-84) [ 1166.696425] Bluetooth: hci1: Frame reassembly failed (-84) [ 1166.707852] Bluetooth: hci1: Frame reassembly failed (-84) [ 1166.708590] Bluetooth: Unknown HCI packet type 5e [ 1166.720992] Bluetooth: Unknown HCI packet type 50 [ 1166.730549] Bluetooth: Unknown HCI packet type 5e [ 1166.736849] Bluetooth: Unknown HCI packet type 40 [ 1166.745915] Bluetooth: Unknown HCI packet type 5e [ 1166.752848] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1166.758836] Bluetooth: Unknown HCI packet type 43 [ 1166.769321] Bluetooth: Unknown HCI packet type 5e [ 1166.777382] Bluetooth: Unknown HCI packet type 50 [ 1166.783453] Bluetooth: Unknown HCI packet type 5e [ 1166.788366] Bluetooth: Unknown HCI packet type 40 12:29:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) 12:29:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup2(r0, 0xffffffffffffffff) ioctl$KDADDIO(r1, 0x400455c8, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TIOCCONS(r3, 0x541d) 12:29:10 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x13, 0x1c, 0x4, 0x6, 0x1, 0x0, 0x6, 0x102, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:10 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000b00)=0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1cc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) [ 1167.430712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:29:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1168.014085] Bluetooth: Unknown HCI packet type 5e [ 1168.019534] Bluetooth: Unknown HCI packet type 43 [ 1168.019609] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1168.033610] Bluetooth: Unknown HCI packet type 5e [ 1168.045271] Bluetooth: Unknown HCI packet type 50 [ 1168.050782] Bluetooth: Unknown HCI packet type 5e [ 1168.056670] Bluetooth: Unknown HCI packet type 40 12:29:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101200, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_to_team\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) connect$netlink(r2, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) r3 = accept4$tipc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 1168.229218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1168.601530] Bluetooth: hci0 command 0x1003 tx timeout [ 1168.607046] Bluetooth: hci0 sending frame failed (-49) [ 1168.681475] Bluetooth: hci3 command 0x1003 tx timeout [ 1168.686983] Bluetooth: hci3 sending frame failed (-49) [ 1168.761551] Bluetooth: hci1 command 0x1003 tx timeout [ 1168.761577] Bluetooth: hci4 command 0x1003 tx timeout [ 1168.766861] Bluetooth: hci1 sending frame failed (-49) [ 1168.773742] Bluetooth: hci4 sending frame failed (-49) 12:29:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1170.041327] Bluetooth: hci2 command 0x1003 tx timeout [ 1170.046689] Bluetooth: hci2 sending frame failed (-49) [ 1170.681408] Bluetooth: hci0 command 0x1001 tx timeout [ 1170.686725] Bluetooth: hci0 sending frame failed (-49) [ 1170.761343] Bluetooth: hci3 command 0x1001 tx timeout [ 1170.766701] Bluetooth: hci3 sending frame failed (-49) [ 1170.841321] Bluetooth: hci4 command 0x1001 tx timeout [ 1170.841324] Bluetooth: hci1 command 0x1001 tx timeout [ 1170.841422] Bluetooth: hci1 sending frame failed (-49) [ 1170.846982] Bluetooth: hci4 sending frame failed (-49) [ 1172.121290] Bluetooth: hci2 command 0x1001 tx timeout [ 1172.126645] Bluetooth: hci2 sending frame failed (-49) [ 1172.761300] Bluetooth: hci0 command 0x1009 tx timeout [ 1172.841369] Bluetooth: hci3 command 0x1009 tx timeout [ 1172.921311] Bluetooth: hci1 command 0x1009 tx timeout [ 1172.921317] Bluetooth: hci4 command 0x1009 tx timeout [ 1174.201228] Bluetooth: hci2 command 0x1009 tx timeout 12:29:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/142, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x18}, 0xc004004) 12:29:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x8200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x3) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x2}) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fsetxattr$security_ima(r4, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "9cf84d1a9ff4847b343c58b5f93e238fb7ac45d4"}, 0x15, 0x0) [ 1176.775898] Bluetooth: hci0 sending frame failed (-49) [ 1176.783505] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1176.784279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1176.817315] Bluetooth: Unknown HCI packet type 5e [ 1176.822457] Bluetooth: Unknown HCI packet type 43 [ 1176.830716] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1176.836750] Bluetooth: Unknown HCI packet type 5e [ 1176.844089] Bluetooth: Unknown HCI packet type 50 [ 1176.849800] Bluetooth: Unknown HCI packet type 5e [ 1176.855159] Bluetooth: Unknown HCI packet type 40 12:29:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:29:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1177.380806] Bluetooth: hci1: Frame reassembly failed (-84) [ 1177.380829] Bluetooth: hci1: Frame reassembly failed (-84) 12:29:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) getsockname$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) [ 1177.475776] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1177.484593] Bluetooth: Unknown HCI packet type 5e [ 1177.489841] Bluetooth: Unknown HCI packet type 43 [ 1177.499400] Bluetooth: Unknown HCI packet type 5e [ 1177.507046] Bluetooth: Unknown HCI packet type 50 [ 1177.512351] Bluetooth: Unknown HCI packet type 5e [ 1177.517583] Bluetooth: Unknown HCI packet type 40 12:29:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7bcd", 0x2, 0x10, &(0x7f00000000c0)={0xa, 0x8, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x3}, 0x1c) 12:29:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/159, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getregset(0x4204, r1, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/123, 0x7b}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4c6080, 0xa) perf_event_open$cgroup(&(0x7f0000000140)={0x7, 0x70, 0x6, 0x7, 0x8, 0x6, 0x0, 0x4000000000000002, 0x1a4, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x810, 0x3, 0x7, 0x7, 0xffffffff80000001, 0x8, 0x5}, r1, 0x3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$FUSE_LSEEK(r2, &(0x7f0000000240)={0x18, 0x0, 0x7, {0x1f}}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TCGETX(r3, 0x5432, &(0x7f00000001c0)) 12:29:21 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x119000, 0x188) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x72, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r3, 0x5c, "13610c8c98155d0296358becdfc48e7992a7161ac0dd738e04c518a0dc72ed8176ce707c2a6819891effd3c7e2ba9b32aaf11d442079c1775b06870ff828944f788f42204e50f6bc33b137e5f9c06f99a633f30a58d6501eb8fdd51d"}, &(0x7f0000000080)=0x64) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) [ 1178.841103] Bluetooth: hci3 command 0x1003 tx timeout [ 1178.846547] Bluetooth: hci0 command 0x1003 tx timeout [ 1178.846576] Bluetooth: hci3 sending frame failed (-49) [ 1178.854064] Bluetooth: hci0 sending frame failed (-49) 12:29:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000140)=""/104, 0x0, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, &(0x7f00000001c0)=""/162, &(0x7f0000000280)=""/145, &(0x7f0000000400)=""/177, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1179.401035] Bluetooth: hci1 command 0x1003 tx timeout [ 1179.407745] Bluetooth: hci1 sending frame failed (-49) 12:29:22 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) [ 1179.483627] Bluetooth: hci4 command 0x1003 tx timeout [ 1179.495289] Bluetooth: hci4 sending frame failed (-49) [ 1179.574969] Bluetooth: Unknown HCI packet type 5e [ 1179.574986] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1179.580043] Bluetooth: Unknown HCI packet type 43 [ 1179.593129] Bluetooth: Unknown HCI packet type 5e [ 1179.606667] Bluetooth: Unknown HCI packet type 50 [ 1179.611892] Bluetooth: Unknown HCI packet type 5e [ 1179.617180] Bluetooth: Unknown HCI packet type 40 [ 1180.920974] Bluetooth: hci3 command 0x1001 tx timeout [ 1180.921015] Bluetooth: hci0 command 0x1001 tx timeout [ 1180.926291] Bluetooth: hci3 sending frame failed (-49) [ 1180.933580] Bluetooth: hci0 sending frame failed (-49) [ 1181.480863] Bluetooth: hci1 command 0x1001 tx timeout [ 1181.486189] Bluetooth: hci1 sending frame failed (-49) [ 1181.570890] Bluetooth: hci4 command 0x1001 tx timeout [ 1181.576233] Bluetooth: hci4 sending frame failed (-49) [ 1181.640841] Bluetooth: hci2 command 0x1003 tx timeout [ 1181.646231] Bluetooth: hci2 sending frame failed (-49) [ 1183.000927] Bluetooth: hci3 command 0x1009 tx timeout [ 1183.000968] Bluetooth: hci0 command 0x1009 tx timeout [ 1183.560810] Bluetooth: hci1 command 0x1009 tx timeout [ 1183.650877] Bluetooth: hci4 command 0x1009 tx timeout [ 1183.730826] Bluetooth: hci2 command 0x1001 tx timeout [ 1183.736582] Bluetooth: hci2 sending frame failed (-49) [ 1185.800736] Bluetooth: hci2 command 0x1009 tx timeout 12:29:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4080) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x2, 0x80000000, 0x1}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1b) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x305, 0xf9, 0xf3, 0xdc, 0xff, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000001c0)=0x7) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r5 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x7, 0x1, 0x1, 0x2}}) [ 1187.014703] Bluetooth: Unknown HCI packet type 5e [ 1187.019591] Bluetooth: Unknown HCI packet type 43 [ 1187.030381] Bluetooth: Unknown HCI packet type 5e [ 1187.037445] Bluetooth: Unknown HCI packet type 50 [ 1187.050158] Bluetooth: Unknown HCI packet type 5e [ 1187.064826] Bluetooth: Unknown HCI packet type 1b [ 1187.089463] Bluetooth: Unknown HCI packet type 40 12:29:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) 12:29:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="0a84751c00020040000000000000000000000000000500000000000085ab28d24740e5d80e7893b9beeaf95e93c398ad0071515823c8f371aee32684aaea738263437c7e8e0ba6e56f066fc4178f4d3237974a53ae8355a5622ef932c7adc08378b5fbde343674d27165ebf91b30054cf941d2509e889b11e0dab8b8c64447d993274abd1962b61028371f29a8c6310ec96d9e6d5d"], 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x80) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1187.680293] Bluetooth: hci1: Frame reassembly failed (-84) [ 1187.680408] Bluetooth: hci1: Frame reassembly failed (-84) [ 1187.739878] Bluetooth: Unknown HCI packet type 5e [ 1187.739973] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1187.744949] Bluetooth: Unknown HCI packet type 43 [ 1187.763380] Bluetooth: Unknown HCI packet type 5e [ 1187.768408] Bluetooth: Unknown HCI packet type 50 [ 1187.780160] Bluetooth: Unknown HCI packet type 5e 12:29:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r2}, 0xc) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0xfffffff7, 0x20}, 0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x101080, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x464, 0x3f4, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x1d, [0xcc, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x7f, 0x5, 0x2, 0x800, 0x80, 0xfff, 0x6, 0x2400, 0x1, 0x7f, 0x7bd, 0x8, 0x9, 0x10001, 0x0, 0x8001, 0x0, 0x8, 0x0, 0x3, 0x4, 0x7, 0x7, 0x200, 0x20, 0x2, 0x2, 0x8000, 0x1, 0x3, 0x0, 0x8e, 0x0, 0x1, 0xffffffff, 0x4, 0x48, 0xff6f, 0x6, 0x3, 0xffffffff, 0x3, 0x4, 0x40, 0x1, 0x1, 0x4, 0x200, 0x1, 0x4bb, 0x2, 0x7f, 0x5, 0x0, 0x80000000, 0x1ff, 0x1f, 0x7, 0xda5], [0x2, 0x80, 0x596, 0x0, 0x3, 0x3, 0x80000001, 0x34de, 0x7, 0x4, 0x4, 0x9, 0x5, 0x81, 0xa5f, 0x8, 0xfff, 0x8, 0x6, 0x4, 0x6128, 0x4, 0x401, 0x9, 0x3, 0x8, 0x5, 0x808f, 0x6, 0xfffff935, 0x2, 0x8e77, 0xbbad, 0xff, 0x7, 0x2, 0xffff0000, 0x0, 0x1, 0x6, 0x81, 0x40, 0x4, 0xfffffe00, 0x2, 0x0, 0xfffffff9, 0xff, 0x3, 0x6, 0x80000001, 0x8000, 0x8, 0x1, 0x1, 0x1f, 0x7, 0x3, 0x8, 0x7, 0x9, 0x2, 0x5, 0xfff], [0x2, 0x2, 0x8, 0x8, 0x8, 0x0, 0x4, 0x80000000, 0x3, 0x1, 0x10001, 0x1, 0xb3, 0x8, 0x6, 0x3ff, 0x9, 0x0, 0xffffffce, 0x4, 0xf91, 0xfffffff7, 0x3, 0x5, 0xc5a, 0x1, 0x101, 0x1849, 0x7, 0x4, 0x5, 0x1, 0xfff, 0xffff, 0x1, 0x2, 0x5, 0x1, 0x3, 0x10000, 0xbc, 0x7f80000, 0x1000, 0xd4d6, 0x1, 0x3ff, 0x477, 0xffffff00, 0x75, 0xfffffffa, 0x4, 0x3, 0x5, 0xffff8001, 0x1, 0x2, 0x600, 0x9, 0xf8d, 0xfff, 0xba4, 0x1a, 0x3, 0x81], [0x8, 0x8001, 0x5, 0xffff8001, 0x4, 0x40000, 0x1, 0x5, 0x2, 0x5, 0x7f, 0xfff, 0x4, 0x29f, 0x8001, 0x1, 0x45bf, 0x7ff, 0x5, 0xc0000, 0xf1d6146, 0x0, 0x4, 0x4, 0x8, 0xfffffffb, 0x80000000, 0x97, 0x9, 0x7, 0xc1a, 0x7, 0x6, 0xc2, 0x9, 0x7fffffff, 0x5, 0x1, 0x0, 0xa0, 0x62c, 0x0, 0xfff, 0x8, 0x3ff, 0x80000001, 0x8, 0xe605, 0x81, 0x3ff, 0x4, 0x5, 0x56cf7226, 0x4f8, 0xb45a, 0x3f, 0x5, 0xfffffc00, 0x4f5, 0x2db6, 0x9ea, 0x81, 0x80000001], 0x43, ['/dev/ptmx\x00', 'ppp0\x00', '/dev/ptmx\x00', 'eth0^lo&\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', '&\x00', '\x00']}, ["", "", "", "", ""]}, 0x464}, 0x1, 0x0, 0x0, 0x4010}, 0x800) [ 1187.794229] Bluetooth: Unknown HCI packet type 40 12:29:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x500, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x48000, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000200)=0xd750, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x191c02, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x16, 0x0, [], {0x0, @bt={0x3ff, 0x3ff, 0x0, 0x3, 0x5, 0x81, 0xfff00000, 0x100, 0x0, 0x3, 0x101, 0x2, 0x800, 0x40, 0xe, 0x4, {0x7ff, 0xffffff56}, 0x7f, 0x20}}}) [ 1187.983910] Bluetooth: Unknown HCI packet type 5e [ 1187.990295] Bluetooth: Unknown HCI packet type 43 [ 1187.995710] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1188.017327] Bluetooth: Unknown HCI packet type 5e [ 1188.040967] Bluetooth: Unknown HCI packet type 50 [ 1188.065847] Bluetooth: Unknown HCI packet type 5e [ 1188.076400] Bluetooth: Unknown HCI packet type 40 12:29:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000240)={0x5, 0x45, &(0x7f0000000180)="b714ee81c0606901356a1878faa7665cfe09eeffb0cc881e88c97cfc11a7480340930dbc3f342d780a9fe1a6c76fcb069a4b39b27ba8f6b1327598b0ecae4e131bb6d747b5"}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) read$dsp(r1, &(0x7f0000000300)=""/1, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x22382, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fedbdf250c00000008000500feffffff60000380140006000000000000000000000000000000000014000600fe8000000000000000000000000000aa060007004e220000140002006c6f00000000000000000d0000000000060004000700000008000100020000000800050064010101080004008e0e0000eba02d7f302dd321c97010ad7a52ae0f7e6265d31180b68c9afa9eb4aa2b0c4986c6dbdc74f513dfdef5a2f0a431baa01b4118514f63f5801c1f949bd9034090c61e50214aba185efbd8d023e8f8412b63b224cac12d5d656c1a72c6f434e20ca963a45fa7103bca1a3ba15e"], 0x84}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x8, 0x0, 0x10000}}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) [ 1189.080595] Bluetooth: hci0 command 0x1003 tx timeout [ 1189.086176] Bluetooth: hci0 sending frame failed (-49) 12:29:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/169, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/166, 0x0, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000200)=r2) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) kcmp(r3, r4, 0x5, r0, r0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1189.720570] Bluetooth: hci1 command 0x1003 tx timeout [ 1189.726087] Bluetooth: hci1 sending frame failed (-49) [ 1189.800544] Bluetooth: hci3 command 0x1003 tx timeout [ 1189.806064] Bluetooth: hci3 sending frame failed (-49) [ 1190.050541] Bluetooth: hci4 command 0x1003 tx timeout [ 1190.056228] Bluetooth: hci4 sending frame failed (-49) 12:29:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000100)={0x50000, 0x0, [0x6, 0x8e, 0x9171, 0x2, 0x9, 0xffffffffffffff47, 0x400, 0x10001]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e24, 0xff, @empty, 0x3ff}, r3}}, 0x38) 12:29:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/rt6_stats\x00') [ 1191.170548] Bluetooth: hci0 command 0x1001 tx timeout [ 1191.175854] Bluetooth: hci0 sending frame failed (-49) [ 1191.800522] Bluetooth: hci1 command 0x1001 tx timeout [ 1191.805922] Bluetooth: hci1 sending frame failed (-49) [ 1191.880529] Bluetooth: hci3 command 0x1001 tx timeout [ 1191.885882] Bluetooth: hci3 sending frame failed (-49) [ 1192.120573] Bluetooth: hci4 command 0x1001 tx timeout [ 1192.126082] Bluetooth: hci4 sending frame failed (-49) [ 1193.240403] Bluetooth: hci0 command 0x1009 tx timeout [ 1193.880492] Bluetooth: hci1 command 0x1009 tx timeout [ 1193.970432] Bluetooth: hci3 command 0x1009 tx timeout [ 1194.210424] Bluetooth: hci4 command 0x1009 tx timeout 12:29:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1197.271720] Bluetooth: Unknown HCI packet type 5e [ 1197.271885] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1197.276640] Bluetooth: Unknown HCI packet type 43 [ 1197.287764] Bluetooth: Unknown HCI packet type 5e [ 1197.298680] Bluetooth: Unknown HCI packet type 50 [ 1197.303962] Bluetooth: Unknown HCI packet type 5e [ 1197.308823] Bluetooth: Unknown HCI packet type 40 12:29:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) 12:29:40 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20840, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) dup(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x20002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x8, 0x297, 0x6, {0xb, @pix_mp={0x8, 0xfff, 0x43564548, 0x5, 0x2, [{0xcc, 0xfff}, {0x0, 0x2}, {0x3, 0x7}, {0xff}, {0x5, 0x3ff}, {0xff, 0xffff721d}, {0x7, 0xffffffff}, {0x1ff, 0x2}], 0x9, 0x4, 0x1, 0x1, 0x2}}, 0x82}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="a8cd340266c83fc566a3c9fa1cce25bed619d32b66a947ff10226b000fdcf1ab418ddfbed175fd5cce76973b3cc49b72f01c9534b6de94f7051e3fa9c96d9687dc087772d7724b90ffffffa87e21af1f727e64ccc5a127735736ea95518a7ae6343a12d5a146d66f5ba7f15024d2771db9ae161c5d58c43054aa4552eea9219920e212bc588d5da05ab53bcfd8fa7ccd06cb5d590103c77f7e6bf8ba37b0466372a03905cb805273748a97b39aead878cc6c0bbc1311bb937800"/201, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={r4, 0xffff40be}, 0x8) [ 1197.879497] Bluetooth: Unknown HCI packet type 5e [ 1197.883683] Bluetooth: Unknown HCI packet type 5e [ 1197.884598] Bluetooth: Unknown HCI packet type 43 [ 1197.889502] Bluetooth: Unknown HCI packet type 43 [ 1197.908233] Bluetooth: Unknown HCI packet type 5e [ 1197.911470] Bluetooth: Unknown HCI packet type 5e [ 1197.913677] Bluetooth: Unknown HCI packet type 43 [ 1197.922893] Bluetooth: Unknown HCI packet type 50 [ 1197.925184] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1197.940215] Bluetooth: Unknown HCI packet type 5e [ 1197.946584] Bluetooth: Unknown HCI packet type 5e [ 1197.956327] Bluetooth: Unknown HCI packet type 5e [ 1197.957352] Bluetooth: Unknown HCI packet type 50 [ 1197.972237] Bluetooth: Unknown HCI packet type 50 [ 1197.979460] Bluetooth: Unknown HCI packet type 5e [ 1197.983175] Bluetooth: Unknown HCI packet type 40 [ 1197.990486] Bluetooth: Unknown HCI packet type 5e [ 1197.997646] Bluetooth: Unknown HCI packet type 40 [ 1198.006775] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1198.007361] Bluetooth: Unknown HCI packet type 40 12:29:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xf) [ 1199.320368] Bluetooth: hci0 command 0x1003 tx timeout [ 1199.325922] Bluetooth: hci0 sending frame failed (-49) [ 1199.393162] Bluetooth: Unknown HCI packet type 5e [ 1199.398353] Bluetooth: Unknown HCI packet type 43 [ 1199.405638] Bluetooth: Unknown HCI packet type 0f [ 1199.420341] Bluetooth: Unknown HCI packet type 5e [ 1199.425218] Bluetooth: Unknown HCI packet type 50 [ 1199.431638] Bluetooth: Unknown HCI packet type 5e [ 1199.437080] Bluetooth: Unknown HCI packet type 40 [ 1199.880060] Bluetooth: hci1 command 0x1003 tx timeout [ 1199.886700] Bluetooth: hci1 sending frame failed (-49) [ 1199.960093] Bluetooth: hci3 command 0x1003 tx timeout [ 1199.960124] Bluetooth: hci2 command 0x1003 tx timeout [ 1199.965698] Bluetooth: hci3 sending frame failed (-49) [ 1199.980185] Bluetooth: hci2 sending frame failed (-49) 12:29:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x2, 0x1, 0x0, &(0x7f0000000580)=""/154, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fgetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000140)=""/175, 0xaf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000400)={0x200, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000440)={0x10001, r4}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x88, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x88}}, 0x4001) [ 1201.400036] Bluetooth: hci0 command 0x1001 tx timeout [ 1201.400080] Bluetooth: hci4 command 0x1003 tx timeout [ 1201.410587] Bluetooth: hci0 sending frame failed (-49) [ 1201.428587] Bluetooth: hci4 sending frame failed (-49) [ 1201.960169] Bluetooth: hci1 command 0x1001 tx timeout [ 1201.965601] Bluetooth: hci1 sending frame failed (-49) [ 1202.050109] Bluetooth: hci2 command 0x1001 tx timeout [ 1202.055393] Bluetooth: hci3 command 0x1001 tx timeout [ 1202.055437] Bluetooth: hci2 sending frame failed (-49) [ 1202.062251] Bluetooth: hci3 sending frame failed (-49) 12:29:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000300)={0x1792, 0x800, 0x3, 0x0, 0x0, [{}, {{}, 0x100}, {{}, 0x401}]}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x990000, 0xfd44, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9e0904, 0xc3, [], @p_u32=&(0x7f0000000080)=0x8}}) write$P9_RAUTH(r2, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x40, 0x1, 0x4}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x24, &(0x7f0000002000)={0x2, 0x0, 0x7f}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYRES64=r3]) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioprio_set$uid(0x3, r5, 0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x8e280, 0x10) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1203.479957] Bluetooth: hci4 command 0x1001 tx timeout [ 1203.485301] Bluetooth: hci4 sending frame failed (-49) [ 1203.491467] Bluetooth: hci0 command 0x1009 tx timeout 12:29:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4080000, 0x200000006}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) io_destroy(r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1204.050435] Bluetooth: hci1 command 0x1009 tx timeout 12:29:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000007c0)={0x1, "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"}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1204.119928] Bluetooth: hci2 command 0x1009 tx timeout [ 1204.119932] Bluetooth: hci3 command 0x1009 tx timeout [ 1205.559969] Bluetooth: hci4 command 0x1009 tx timeout 12:29:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1207.496181] Bluetooth: Unknown HCI packet type 5e [ 1207.501227] Bluetooth: Unknown HCI packet type 43 [ 1207.506116] Bluetooth: Unknown HCI packet type 5e [ 1207.511160] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1207.520924] Bluetooth: Unknown HCI packet type 50 [ 1207.535528] Bluetooth: Unknown HCI packet type 5e [ 1207.541334] Bluetooth: Unknown HCI packet type 40 12:29:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) 12:29:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x3, 0x0, @descriptor="a5815414987bb32f"}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000440)={{0x88, @remote, 0x4e22, 0x1, 'rr\x00', 0x0, 0x9, 0x9}, {@local, 0x4e24, 0x3, 0x2, 0x4, 0x21}}, 0x44) getrandom(&(0x7f0000000140)=""/103, 0x67, 0x3) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x58, 0x140e, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0xfffffffffffffd74}, 0x1, 0x0, 0x0, 0x4048886}, 0x811) 12:29:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) dup(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:29:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e23, @empty}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x204000, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000100)={0x5, 0x0, 0xd1a, 0x7fffffff, 0x7f, 0x2, 0x9}) [ 1208.107357] Bluetooth: Unknown HCI packet type 5e [ 1208.112933] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 1208.113442] Bluetooth: Unknown HCI packet type 43 [ 1208.145738] Bluetooth: Unknown HCI packet type 5e [ 1208.148237] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 1208.153851] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1208.157496] Bluetooth: Unknown HCI packet type 5e [ 1208.178438] Bluetooth: Unknown HCI packet type 50 [ 1208.181714] Bluetooth: Unknown HCI packet type 43 [ 1208.184425] Bluetooth: Unknown HCI packet type 5e [ 1208.191502] Bluetooth: Unknown HCI packet type 5e [ 1208.195786] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:29:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) r2 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x1, 0x24400) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000400)={{0x2, @addr=0x40fb}, "0595c2e3ddfca914b47cf1b960db17aa8a8b889cae57b2569a34376c0e461cf9", 0x3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f00000001c0)=""/105, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1208.203903] Bluetooth: Unknown HCI packet type 50 [ 1208.209357] Bluetooth: Unknown HCI packet type 43 [ 1208.217557] Bluetooth: Unknown HCI packet type 5e [ 1208.221707] Bluetooth: Unknown HCI packet type 5e [ 1208.235114] Bluetooth: Unknown HCI packet type 40 [ 1208.241143] Bluetooth: Unknown HCI packet type 5e [ 1208.253164] Bluetooth: Unknown HCI packet type 40 [ 1208.262419] Bluetooth: Unknown HCI packet type 50 [ 1208.267823] Bluetooth: Unknown HCI packet type 5e [ 1208.279035] Bluetooth: Unknown HCI packet type 40 [ 1209.559705] Bluetooth: hci0 command 0x1003 tx timeout [ 1209.565201] Bluetooth: hci0 sending frame failed (-49) 12:29:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:29:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1210.011059] Bluetooth: Unknown HCI packet type 5e [ 1210.016137] Bluetooth: Unknown HCI packet type 43 [ 1210.029351] Bluetooth: Unknown HCI packet type 5e [ 1210.035984] Bluetooth: Unknown HCI packet type 50 [ 1210.055019] Bluetooth: Unknown HCI packet type 5e [ 1210.062283] Bluetooth: Unknown HCI packet type 40 [ 1210.119692] Bluetooth: hci1 command 0x1003 tx timeout [ 1210.125158] Bluetooth: hci1 sending frame failed (-49) [ 1210.199802] Bluetooth: hci3 command 0x1003 tx timeout [ 1210.205144] Bluetooth: hci2 command 0x1003 tx timeout [ 1210.205168] Bluetooth: hci3 sending frame failed (-49) [ 1210.212341] Bluetooth: hci2 sending frame failed (-49) 12:29:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x3, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:53 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80000001, 0x2000) write$P9_RSETATTR(r0, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000140)="029eca10f168cdbe345517bc0edcf53085a9120e6789d68cab478cdaccbe67de5f718ce9e98e666b3a6f0c4f51593f54c64a3841fe21e56871469653568e2fb686b4385da780a82c8d87bacce892fd6a2df13710c2200319247387843148eb24f4415073e5b41b2101e4fd5f73abbdba5cc8b89d010b542c2c339d622412a01bf6dc817568267f79d23a3878c8ee775978ce1808b664af45f77ac5efa387d4de3417666f750bd3f67c3c8da78dc7704a7249b53778e690f7de4db50b3be8bfe0d9a798b7f61d1d1913eb758b167b46029d9fd2d671e9a03cb297a7a85694ef5f359ade5978b4877edea3a07de5b715cf", 0xf0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:29:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/143, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1211.649766] Bluetooth: hci0 command 0x1001 tx timeout [ 1211.655113] Bluetooth: hci0 sending frame failed (-49) [ 1212.039613] Bluetooth: hci4 command 0x1003 tx timeout [ 1212.044942] Bluetooth: hci4 sending frame failed (-49) [ 1212.199672] Bluetooth: hci1 command 0x1001 tx timeout [ 1212.205025] Bluetooth: hci1 sending frame failed (-49) [ 1212.279715] Bluetooth: hci2 command 0x1001 tx timeout [ 1212.285181] Bluetooth: hci2 sending frame failed (-49) [ 1212.289582] Bluetooth: hci3 command 0x1001 tx timeout [ 1212.295886] Bluetooth: hci3 sending frame failed (-49) [ 1213.719561] Bluetooth: hci0 command 0x1009 tx timeout [ 1214.119566] Bluetooth: hci4 command 0x1001 tx timeout [ 1214.124897] Bluetooth: hci4 sending frame failed (-49) [ 1214.279571] Bluetooth: hci1 command 0x1009 tx timeout [ 1214.359662] Bluetooth: hci3 command 0x1009 tx timeout [ 1214.365067] Bluetooth: hci2 command 0x1009 tx timeout [ 1216.199494] Bluetooth: hci4 command 0x1009 tx timeout 12:30:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000140)={0xa6, "9feec1cb717a5d1bd8db66c9d3456161fff44ad2c733e656242b301873b04a69", 0x800, 0x81fe, 0x549, 0x4, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x30) 12:30:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fchmod(r2, 0x10) 12:30:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x701140, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 12:30:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) dup(r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1218.361273] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1218.369697] Bluetooth: Unknown HCI packet type 5e [ 1218.377351] Bluetooth: Unknown HCI packet type 43 [ 1218.385304] Bluetooth: Unknown HCI packet type 5e [ 1218.389833] Bluetooth: Unknown HCI packet type 5e [ 1218.397132] Bluetooth: Unknown HCI packet type 43 [ 1218.398615] Bluetooth: Unknown HCI packet type 5e [ 1218.407404] Bluetooth: Unknown HCI packet type 43 [ 1218.410342] Bluetooth: Unknown HCI packet type 5e [ 1218.414567] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1218.421883] Bluetooth: Unknown HCI packet type 50 [ 1218.428475] Bluetooth: Unknown HCI packet type 50 [ 1218.430537] Bluetooth: Unknown HCI packet type 5e [ 1218.433782] Bluetooth: Unknown HCI packet type 5e [ 1218.443009] Bluetooth: Unknown HCI packet type 40 [ 1218.448606] Bluetooth: Unknown HCI packet type 5e [ 1218.455557] Bluetooth: Unknown HCI packet type 40 [ 1218.460838] Bluetooth: Unknown HCI packet type 50 [ 1218.466195] Bluetooth: Unknown HCI packet type 5e [ 1218.471624] Bluetooth: Unknown HCI packet type 40 12:30:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="f5e101000067ea3f424e1c77b928d662f5925c071960d9f0b90e31320e2d482602806a5a774e71f0d57b05cf95c1c9cda7e52363049becc7affed772f7ddf00f41f9b81bda7b9501d4269db0ca073f59239201be24a04be5a5", 0x49, 0x400) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX=r5, @ANYBLOB="34e02607d2ea930cc46e03ebd581370100e2841d0375e9c14436d5d1c2e048821947eb8808fb9a28049b115248eacc8e7e96f7bc90cf0581938780ad5bc932eb54bd18ca677d437ee25ed8f0da1a0427a8466d6ea48f24b636b93b0312a1ae936df54fcf2a2e5263290c16e3a0bbbaf5ac606ee601000000274d7fae5e667f1e07ada44f9eff7cdbf1c39ee24f0729db929c4ad87e8137b1093f59c51315d2276dd0c54de3b8590b2a36fd95365e86f34d"]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x101) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x1, 0x0, 'client1\x00', 0xffffffff80000000, "8342069e41fee160", "87ef3ee80132fc7c33925124ddc07590c801fdca546b79cfa2f5ec86345b5b29", 0x8, 0x8}) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x4000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000080)={0xffffff80, "33a7b7c39972c1e24d66c874be735f571dedd394074e7c0448d900dd8f67b9b8", 0x2, 0x1}) clock_settime(0x6, &(0x7f0000000100)={0x0, 0x989680}) pause() ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xe) [ 1220.243188] Bluetooth: Unknown HCI packet type 5e [ 1220.243596] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1220.252505] Bluetooth: Unknown HCI packet type 43 [ 1220.265664] Bluetooth: Unknown HCI packet type 5e [ 1220.272755] Bluetooth: Unknown HCI packet type 5e [ 1220.274645] Bluetooth: Unknown HCI packet type 50 [ 1220.277764] Bluetooth: Unknown HCI packet type 43 12:30:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="104f13211a0e2b5026b6ce8a290ee496f70c3818b6ecab8f3336b6a2280ec8465d426e1ecdabf6370f922ec19b6643b054232903f8b522cad5f332271be2d4735bea80c1b1e26cf7220198c5243cda03e6cf3242bf45533dfa6be60814a577878cc9a93509b204a25dcb115c8c02754419f10ce34f0872ef20df3f95633e7c0bda2144db1c1d2199449e7730e0fb619f930ebb9ad51fc295f2fb004af74d512c0142d114051af6612fa670fe2b1cc8a5d5dcd1ffd3b19f137b9eb2e05184b1308b", 0xc1}], 0x1, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000040)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) dup3(r0, r2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1220.288821] Bluetooth: Unknown HCI packet type 5e [ 1220.297815] Bluetooth: Unknown HCI packet type 40 [ 1220.305403] Bluetooth: Unknown HCI packet type 5e [ 1220.321649] Bluetooth: Unknown HCI packet type 50 [ 1220.332891] Bluetooth: Unknown HCI packet type 5e [ 1220.362090] Bluetooth: Unknown HCI packet type 40 [ 1220.372563] Bluetooth: Unknown HCI packet type 0e [ 1220.439309] Bluetooth: hci2 command 0x1003 tx timeout [ 1220.444887] Bluetooth: hci1 command 0x1003 tx timeout [ 1220.444934] Bluetooth: hci2 sending frame failed (-49) [ 1220.459257] Bluetooth: hci0 command 0x1003 tx timeout [ 1220.459288] Bluetooth: hci1 sending frame failed (-49) [ 1220.469855] Bluetooth: hci0 sending frame failed (-49) 12:30:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0x8, 0x4, [0x1b]}) accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x800) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1222.279081] Bluetooth: hci4 command 0x1003 tx timeout [ 1222.284552] Bluetooth: hci3 command 0x1003 tx timeout [ 1222.284593] Bluetooth: hci4 sending frame failed (-49) [ 1222.291804] Bluetooth: hci3 sending frame failed (-49) [ 1222.519045] Bluetooth: hci1 command 0x1001 tx timeout [ 1222.524414] Bluetooth: hci0 command 0x1001 tx timeout [ 1222.524483] Bluetooth: hci1 sending frame failed (-49) [ 1222.530207] Bluetooth: hci0 sending frame failed (-49) [ 1222.540667] Bluetooth: hci2 command 0x1001 tx timeout [ 1222.545974] Bluetooth: hci2 sending frame failed (-49) 12:30:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r5, 0x4, 0x3ff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x101, 0x4, 0x4, 0x0, 0x5, {r2, r3/1000+10000}, {0x4, 0x2, 0xb2, 0xe0, 0x1f, 0x0, "bd9b35fd"}, 0xffff8001, 0x6, @userptr=0x1, 0x8, 0x0, r4}) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f00000000c0)={0x0, 0xbc}) [ 1224.358848] Bluetooth: hci4 command 0x1001 tx timeout [ 1224.358853] Bluetooth: hci3 command 0x1001 tx timeout [ 1224.358930] Bluetooth: hci3 sending frame failed (-49) [ 1224.365640] Bluetooth: hci4 sending frame failed (-49) [ 1224.598814] Bluetooth: hci2 command 0x1009 tx timeout [ 1224.598826] Bluetooth: hci0 command 0x1009 tx timeout [ 1224.604074] Bluetooth: hci1 command 0x1009 tx timeout [ 1226.438515] Bluetooth: hci4 command 0x1009 tx timeout [ 1226.438519] Bluetooth: hci3 command 0x1009 tx timeout 12:30:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:30:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000140)=""/230, &(0x7f0000000080)=""/61, &(0x7f0000000300)=""/88, 0x6000}) 12:30:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 12:30:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1228.621122] Bluetooth: Unknown HCI packet type 5e [ 1228.626143] Bluetooth: Unknown HCI packet type 43 [ 1228.633185] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1228.661661] Bluetooth: Unknown HCI packet type 5e [ 1228.664592] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1228.667008] Bluetooth: Unknown HCI packet type 5e [ 1228.672478] Bluetooth: Unknown HCI packet type 5e [ 1228.678752] Bluetooth: Unknown HCI packet type 43 [ 1228.692265] Bluetooth: Unknown HCI packet type 43 [ 1228.703979] Bluetooth: Unknown HCI packet type 50 12:30:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000080)=""/41, 0x29, 0x60, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1228.705705] Bluetooth: Unknown HCI packet type 5e [ 1228.711452] Bluetooth: Unknown HCI packet type 5e [ 1228.716274] Bluetooth: Unknown HCI packet type 50 [ 1228.729351] Bluetooth: Unknown HCI packet type 5e [ 1228.741116] Bluetooth: Unknown HCI packet type 5e [ 1228.749572] Bluetooth: Unknown HCI packet type 40 [ 1228.765411] Bluetooth: Unknown HCI packet type 50 [ 1228.773976] Bluetooth: Unknown HCI packet type 40 [ 1228.775619] Bluetooth: Unknown HCI packet type 5e [ 1228.792432] Bluetooth: Unknown HCI packet type 40 12:30:13 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0)={0x2, 0x6b}, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/155, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x3573c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:13 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, r2, r4, r5) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0xfffffffffffffff5, 0x4, {0x3, 0x3, 0x81, 0xfff, 0x5, 0x9, {0x0, 0x9, 0x1, 0x1, 0xff, 0x0, 0xfffffffb, 0x80000001, 0x8f7, 0x5, 0x3, r1, r5, 0x8001, 0x7}}}, 0x90) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_POST(r7, 0x5008, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_MIXER_INFO(r7, 0x805c4d65, &(0x7f0000000100)) [ 1230.677866] Bluetooth: hci2 command 0x1003 tx timeout [ 1230.683321] Bluetooth: hci2 sending frame failed (-49) [ 1230.689808] Bluetooth: Unknown HCI packet type 5e [ 1230.694995] Bluetooth: Unknown HCI packet type 43 [ 1230.696715] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1230.701155] Bluetooth: Unknown HCI packet type 5e [ 1230.707486] Bluetooth: hci1 command 0x1003 tx timeout [ 1230.719351] Bluetooth: Unknown HCI packet type 50 [ 1230.719470] Bluetooth: hci1 sending frame failed (-49) [ 1230.724510] Bluetooth: Unknown HCI packet type 5e [ 1230.731162] Bluetooth: hci0 command 0x1003 tx timeout [ 1230.741826] Bluetooth: Unknown HCI packet type 40 [ 1230.742546] Bluetooth: hci0 sending frame failed (-49) 12:30:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000140)="6866c9bd8579fc", 0x7, 0x7ff}, {&(0x7f0000000180), 0x0, 0x5}, {&(0x7f0000000400)="3350fe4a3072f9be4ac61e4b465a0e2385263ec2273dd75d86597606aaad955207c547ebe6d555735451d8ff29d3d74fe4eb6f23df3df2397ebaa53d4a1db812a14123e1020a61d4e7dc9573861fc2931b69ce42493fe966e1b972a43d50cb8ff2b21dcb6cbe7717321d4976724fc6485332e41cede4770d792f51615582d3bc0fdecd90fe36e76ebda738a05c43c8e6ca08c81c5c3839d381e842d199802387a5b0437c2d3d7a2e2c9440e0cbfe67a52196326ecedaf212eda3d6a4f6b0556a988cf5ee06a4d727a4a13086f84211", 0xcf, 0x7fffffff}, {&(0x7f00000007c0)="3d4479ea6fabb26a176c31bdf33e97d03fdf0a7fb4d724e46579a029f2fae7b92107e62e713ec4bf7ea350a795f383e12cb9cbd07b9f9d8a5c2ebe73f06aac3d35461dbd123cdaa54fd717f25b54c25c0de3d86775cd6cd1403ef74ae8f61d4781338ebf899fbbf719a2c2d9f373f3a9631f1155454439b4a7befcd2643c38d3c0036c774c1c7c7f7e66e5943f62284a7cbbe69e03afc3ea0497226b81198a9c776071b4a73ae9bf156adeeac97831fca26009e6e5719fde2e20b25aae380ec3a637816ab01021c121ce9d27c7a656e9d9c0f950582f8ef44ede18b35ba3cb6ff92060b8967b3ae9eef7a16b668667cd512918539baa07b7fbc172bf8ab767989c550e390ec6c9250c94b8f1400ebe044b5580b92d2682693c11f3a790b29dd6fe1a3deb710c7f6c685f5312d9092fee31c6db1196b49fc3a5065bf0809960046afd3fb2f61bc93086df07710ba584f1924a249b0a71e57ee3063f64bdcf8bd18edd0c46d4d06e6cf3189086af7cdf25b0e7fd4c44039c07c1d23d0d31be04f446a05b636ddb136c05a5092d445dfa839ade4fb2d15a3f01a5bd290dd216c0aea4f3c1914b9801cab04b830941d78ddeee505f9b887f89ceab848dbd28bbb2afb6489e53039e83411f5202b4640f0df5a03bab088a72a33c2aef10e766b00d37a34b6437a123bf81a66baa8572d2bafe8c4296d2085dc48e1bd2148e4fde93e0fda28a6ed66e661795c85270f672252440d4f56a7dd7ad932dd5b0142979e13fed8d26193951ae27197f8d21e50ae1ca6b3efb08ead8b2a0039acd21edcb1b1d92076bd2c2eb1f374f9af5629458c004a69a8437f50887d28e7290743fd93ec2350c359446bcdbfcea14c432a255a0cab1985dc11df8b4d3e5944183809735002d97166e8a09c21baa117ad200b4a030ad1270d7020b65709bc419f998f19b2fcab89b61efab008fd9bdaf84629473cd927c5b365eb86a4109a8956bff5f1e0f127d0fe93a4476a3706d5e80311b6416cec89ee3983c532a001c2467f19de3cdf90cb2f72506f222a31084504a8ffb89f38aea67e6650ec318c9d72c9efc6f325efdf73e0cf21dd9f9fabddd0780da3641078870e0764d9537472200a90435cb5bc23fa67a9e99ce62cafc78bb8062baffe7de7f49c845fc063233e8c4b07adaeacbf7928424c1a098a40534a854996c47aa5b067cc9a21bf8c25a7f1afcf15c59b4d492fdbe2d93664664d083fdde8a18b5c562bac925170edebc54e5402b9fe5ef84cecd9d651d3338a71a8cb08667c608a8ac2329cc68220502fb6b61b90a2eecc467f2cb3cec50a336249e1de22e7aee54a6d2d52ae49518216d53ed6601ab9ec22f07cc245d5a992e45e7de84cef60fca54edd74b3876ae7a903f3510abb62a2b0bbfaca958d00a4968c4eb217dac48bf8452640897dfcc1e56670a3e9f7db41b3500e72fbf0f9bd218032cdb5d83be9880bd96c0c85e86b8e598b92f917fdf5b8b0e63b86de73afc8710b7fad60707cbca191edbc4be73b26228c8b80606631e7fa30849ec67b1b7a6bb7eaf071c819effef48b2dd72ac3354133c35960ed2193275e3e137e34a3351f23f2031314f1e5269ab525b68175a8e49643ccc173ecfffb369f13f979bffa15fc60a96dee0f86ea67f3e68b7015a94e6a7ce186e31da6b9843611b03176897532c655fa5b223b96f799dca5ee01775fedddf183aaf829b63aed114f9594bc3c2f3b8189a085fe028bba00af29b1daedd1ddfb1650d7e545db0f2f54af1817b44e066bdbd27022e17251d441ce903e159601beb3548aaaf3052f4e1558e5080eadad8d01cd8eb79ee6a293867a507d277213beddb93a8d3c4343a3136bc07e901fdcffe591dc3f3c8628eb8890ba1ee25f384f3e2b9fef0d00b407ed443c3fcf12351ab90f0cb05e4b1cc62b53edd56a32ab10d0514bfabf10c22abd8308a3ad4ee73769d9742f9a8c278197f064bdc55270b7cf370f599f0037ab426658f150eac1f3cb3f6bd18c7f965f871cb84c352daa0f562d5737c93681fd60cbc3503e87f1315c3ca3857353a5e59de5d9782934489bf137a4521789c0d0411c3b19a72dd67f7cd00113d6488c6dff3b6ae3004ee939d071ed72d7d8dd8d34399b5a95f6384a6ba0eb9a17e2a1915fb4ceceddcfeeb94aa828ef4f953116de8520ea2fe3c8e95da89ee7d845a368afa76fba46d51dc836edf08f34613c783d295eaefb0fbf032fca5e795aa0f6cb0dfb14c471f11a98629852983a072ba5ec2d27465d94671303ca23d5055d9a3204af2992a0630c3cf60ac26cbed1471dbfe8757e0827e8834cb9d947d42b2d58032901522f4047ff256f823515d60305f537c8d5b934ffe1284bf3a0fb8cbc73928d8c8b8dec6b326a0d275612111e5cda929713f4202e1bd7700d562c545459283401149401e1522e7ddfcad3a167241a411af89c2b476bb0f32cdafcdcaf7761b6c51fbffafa97f369d00c5a655c85e7bf2580ef60f85717eff8d7eacbcf590d59d2d9b512d7cf3d8957951e4df461c2c63e33f1a425d9147ce3cfd6e971e704effc70c80de54c9445c24512c566f30e4453abe982669768ccebf30afe61eba1fef44c80c90ad563f7bfa45469d05b6a1602c912785cf66ae2bb340a8bdb6d748c6b4cec6f532a779e7526da349baf8af9b728405de00e0a84c251535164dd880055ace02be6b63c7737159b17ce30b3d3a7a1720c403d90f1aecebb3eb19b96af46ab24f1843e1cc82af0b1af94a9b7cebd4badc2f7244166bd75a13ed739b0c867f1469f30fe6d137acc66fe7f11dc20d7be637b394b3b92ad6a470b22ff148f0ed04b1cd316a2c05cbbdb2477f1ddbaa8260a81feb5d75f4b6c8be0c4d3a2900b6aae89604e746f17c20e6cb93024d0aa1161b65433fbd10ecae8c4239247ac3e57684a301710c8cf0b49a7b9c3033ff9a3ae9e7d622ca569a89daf33662e693753eac2bc3709563fb3dbe87ba6153d599a42c90366764f91c796f5fb201038e4d088f131a7ae93d20ad93b92a9e295769b30a558a0c306764d6c7dad4b56eab3fe0d5e1626fbfb13f6c28fd9a206e6bf40acaf2f06809af091c691e2dc3bc89829928c94b2c5e389d8c5d6e4adc8cdf5a44f9c049808309d304e4bd19948e1516dbea9fffd2f03d36c46e84c9712363660293f227db8466b4ee79446824aed7306feab7a5eaacdc7b3305a011826ed64c8154afe0b529671483897981a7f6a36260265b458b2feb55d7d9a4d9f7639b3ff8adca537be81b5442662c5e16425e54e13431872b1db9be26c5fe84dd35294da72bfa5f11a3d93bbd7f92f2b79c85fa9ae993670cc0ca1c40dfa251b1553ea16c4d319c427023e2a8fab4188fff8171ead1a8840efdde4b0158b67bdf65e6cd684beda46148253a8e45b12a789ef163e9915f1ecf6955b8912d370ab8faa969d7073e58ee3d7fe1ee5246b7b910b333009b774930e303f54fb96fd5cf24e81ba91ff82ff9571278454a144593a241ad20392b67c267d577764e9fb6c82f019a1cbaea7fa71e16526bdbbc5c49767d3269c0fe55ef4ff5bf656b5c4fa55e28ee5034ee90b40599c82e1f1e5a7c76d8899b999890ac38d8722e7cd315fd93ca5d3e90999f5cf6074568c54c3fe67de3b0a9ecbcb025b294e2c329584a2024bd458b94c9e44155f35e2fd8f4f0ccce232efe755c658b166e96ed05feb0cd621fe5a3b9d5f0dc017692da4c2ddd7bb10be98a025219e233ec43c8748db6659aa0988c4f15e8411ee98dd74492daf6a24b5d520b4d5eb0ee39dad50ae1e25d78392b4dd06882e92603de93846399f04b70e71602caaeed5239bda0760da70b8ea9575f91d1dfad2a007d65af6c70d85d72f1abbc3a72193678bf0cff75b36fea0bf4b875c4389829ccac3f51225425736fe26ffd1c593e595e827a6975dccbb56b88fc5bb1665f9f5911298398200b2fe0c217197f1aefeda225269d6afae75bd11c825ce31813b60bdd57ec9668a413aaa647de906b90992dccb4ed8fbe624ae4e5439b1498348b67835b07927df8f8542d30423ab4911ed12763cfea775ea31aa582ad56118ef22af2206787a5a671c5800cffff6120c8574e6c7f26244116f104965456ce01fe872faaf5d2a3f9c4ee81cdbdd74005fbdd1052d6c96f101feff2894d6b5e028929f75968fc997ee273d315e0377542b34243be36d515ee2fecdd35479e0d1f1134e1b7548e9da78dff94290816dfdc8c7501d51b2a4bd5bf2bda3c99619cbb3e710605be29ed52604ef586189493a1eee25dd9765bda4fcedd46e9ad560b97be3a4cd5c1202fec7ee86c2374a4e14a6394a8cb98586744f44a8ae1104979720266e7703be2fd9d2809f256aec4a57fe92d822bf7a35e98a5adc660325e388aa6eb99a77149d835e07c4da641f104e82a4bcceeb85737dc20e7a5611ed3efb92ae60047822a66ee372cb53f1a3e03496765596ff47c853971cf0411a59e5c58270ebf14b9bf0ca124c69bf053047c8196e14b58033ff2c7b70a7a1697a21895f9590ce847c6963d334dee68e5b2f674702017fd5718c9fb9ec8168dead11476b9461d90eb1350c7fa1877e0876081400c55fd55440bf43747268ce43ef057fec6194c4667f521ee201d7de689f7118af4184710e7a087668b8c9cc6ee9b7db9a4cd75e13d0f4c26c0b6f349b45c445dd07bdbc3e2692cbe96d648fef453520b4ae0f958370831c4b6e6f6471b8262b0eac272e7e5ef51e8a91dc1671ae65dcf4b966cd34e4bc8d207881dc47c8b9d91e82866021d4d158ea06878a957a850a3413b745086d86366bde2febee139c3dc5c500d9db17c12c2bf54ae12223352b95544bc46055c2098e31717e2a1102ff585f3c2aca377225686090a3605eb3908e8193d53eb8037ea1ce53abd504b33366721bddcd3be253957d9d09cbff740e99f63407e84fdbf3bc01fd4158d4bf1dccd07b29cb60f5467b8feafcb36566280c83bfff228e705b926c9f349bb7ff653dbd66c2310d70540de13a6ca51e8f99ab4ec72af0d801f6ad95fa27dfe63de31fce78babb652fe7b139eeb3be8c17b5592b2322f527f10babe2a005114d430df814cb5148383def0f090238fa8b83ea122f1c73010d341b2379ea3dafcae874bb2a86fe22f299b97b04e71ca1a87235bcc35fe27234d3a94770c8bec4e39f2b337ea070da9ee1d58b147c40e085babc54244c0487faf193acbb1ab5dd6c7b23be6d770b3ea64f5c646aa784940d99bd5e11e9b33f67cac02d3d3af4b2809d36353b507f5aa225c58d1c14758903f055d1d67683f063aac5d650d18ebdac241a74ef9d234fa0936310ac43079b4e9a419ea8d1c6b5bc3b0782e53ef02d0b2d7f861149403311aafbdc3a0df8aebd415f0ace8bfb3e9a615398ecc7c8b7c475d6abacbe9c9c8d67cbd32efec8c4e12da9777197876bf0719f8948a7e739c690288aa8f08763a46b757e04a0f3f426bd2f6f8cd921d0aa471fe0d6d76ac87ba4232ba6a01aed19739cd3fd36492757a682c192889adf27b4f5c4da49726275ee5f3d6a7f8e0914f0bd06abf0a7f40a1453c9330423e15dbb3d33ea78fe0916b0b9688b52ba538d197c3578d19c5433497fed253abbeffb337fc4e636ef4d5dd6a84fe4721b8810c0a4d6a4c7d07f478ac149fc8068ece0e89193ad0802891541c61ae2a041abc18fc6cb2141f3a1e2c7b96ec0b40d8911ba21a4921a7d18ae3df290cad3abfe37e1a3782388af4ee09bbbf119e677f836905cba2fd5d30d61e0b7c", 0x1000, 0x8001}], 0x400824, &(0x7f0000000240)='/dev/vhost-vsock\x00') ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x13) [ 1231.366470] Bluetooth: Unknown HCI packet type 5e [ 1231.385311] Bluetooth: Unknown HCI packet type 43 [ 1231.397273] Bluetooth: Unknown HCI packet type 5e [ 1231.406261] Bluetooth: Unknown HCI packet type 50 [ 1231.433384] Bluetooth: Unknown HCI packet type 5e [ 1231.446059] Bluetooth: Unknown HCI packet type 40 12:30:14 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={@remote={[], 0x1}, 0x0, 'ipvlan0\x00'}) setsockopt$rose(r1, 0x104, 0x5, &(0x7f00000000c0)=0x10000, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) read$char_usb(r2, &(0x7f0000000080)=""/64, 0x40) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x109040, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0x4, 0x0, 0x10000, 0xfff}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1232.677641] Bluetooth: hci3 command 0x1003 tx timeout [ 1232.683269] Bluetooth: hci3 sending frame failed (-49) [ 1232.757606] Bluetooth: hci0 command 0x1001 tx timeout [ 1232.762989] Bluetooth: hci1 command 0x1001 tx timeout [ 1232.763020] Bluetooth: hci0 sending frame failed (-49) [ 1232.770029] Bluetooth: hci1 sending frame failed (-49) [ 1232.779137] Bluetooth: hci2 command 0x1001 tx timeout [ 1232.784814] Bluetooth: hci2 sending frame failed (-49) [ 1233.397611] Bluetooth: hci4 command 0x1003 tx timeout [ 1233.403829] Bluetooth: hci4 sending frame failed (-49) [ 1234.757427] Bluetooth: hci3 command 0x1001 tx timeout [ 1234.763326] Bluetooth: hci3 sending frame failed (-49) [ 1234.837351] Bluetooth: hci1 command 0x1009 tx timeout [ 1234.837355] Bluetooth: hci2 command 0x1009 tx timeout [ 1234.837380] Bluetooth: hci0 command 0x1009 tx timeout [ 1235.477267] Bluetooth: hci4 command 0x1001 tx timeout [ 1235.482932] Bluetooth: hci4 sending frame failed (-49) [ 1236.839592] Bluetooth: hci3 command 0x1009 tx timeout [ 1237.556978] Bluetooth: hci4 command 0x1009 tx timeout 12:30:21 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x100, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d12, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000180)={0x1949, 0x4, 0x1, 0x3, 0x64d4, 0x3}) 12:30:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:30:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) bind$isdn_base(r1, &(0x7f0000000100)={0x22, 0x80, 0x8, 0x7, 0x91}, 0x6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40400, 0x0) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8490}, 0x4) socket(0x10, 0x6, 0xb2ab) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1238.835488] Bluetooth: Unknown HCI packet type 5e [ 1238.845093] Bluetooth: Unknown HCI packet type 43 [ 1238.861033] Bluetooth: Unknown HCI packet type 5e [ 1238.871660] Bluetooth: Unknown HCI packet type 50 [ 1238.877566] Bluetooth: hci1 sending frame failed (-49) [ 1238.885748] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1238.886501] Bluetooth: Unknown HCI packet type 5e [ 1238.894736] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1238.914724] Bluetooth: Unknown HCI packet type 5e [ 1238.934048] Bluetooth: Unknown HCI packet type 40 12:30:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)="e6ae83dd8260c3b3e45b753976bb3401d94bd5e0517f087b1dbf6dbd9279a294f3c50b8426b7b917ffa68052b784db20032fceb99b2ff5358f", 0x39}, {&(0x7f0000000400)="e52b6a69439ecb0b62dbbb3bc6c1622f984855f110254172f0c89f6ebec89831dc5ca40f35fd6221773213bd71c5caf57048da7b225fa690a0ae87803411896723c5e06dda671d5d063ed8c0a9d8b5e32ed4df1fb6ac30d5c427fb8105b449a583d6af938481c6e0904a5787d21bbbd46e2c8932bdcdade4f09e403d94b64877cf97766a6f3d2f6489e55aaaa6ff1c", 0x8f}], 0x2, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000007c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:22 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6tnl0\x00', 0x10) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000400)={{0x1, @name="dc119ca91f7504d2cd79a6bb1960511f69b427fcf8e7a31cf8c4ff5cbda50c16"}, "5f6176d6e35094ffc7d76b736877a35add3f2e9ca66feaf4a513145921bb3729"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x1}], 0xc1, 0x0, &(0x7f0000000180)="ccb0a93221e0d4c70c4a328314b96d0eb29e400863289384fe04063cdf4c0cb806c129506e7d429f689d0918798df0b6bdf5d6fdae1321075762ac41a06a15bd83a32bfe05aa4201bec179641af5dbb2b2300a5dfef542cfda4ed4ab39c36147aff4fc8d201a11ecc27d59880f191663b722fff9a39dba289c4643ce402a597c91c45f22f02d64587ed7442fb816aff9f15228ff9588715a7f2d81bd8b96188259044b547973284fde440025ee0c024f38e67e1e3bc3d639f9489718b0060e7092"}) dup(r2) 12:30:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x4, 0x0, &(0x7f0000000300)=""/124, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x7, 0x2, 0x8004, 0x32bb, 0x0, 0x8, 0x2, 0x9}, &(0x7f0000000100)=0x20) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x248002, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x3, 0x0, 0x0, &(0x7f0000000140)=""/167, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) [ 1240.721635] Bluetooth: Unknown HCI packet type 5e [ 1240.734077] Bluetooth: Unknown HCI packet type 43 [ 1240.749299] Bluetooth: Unknown HCI packet type 5e [ 1240.755207] Bluetooth: Unknown HCI packet type 50 [ 1240.766445] Bluetooth: Unknown HCI packet type 5e [ 1240.771638] Bluetooth: Unknown HCI packet type 40 [ 1240.777546] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1240.846546] Bluetooth: hci0 command 0x1003 tx timeout [ 1240.852381] Bluetooth: hci0 sending frame failed (-49) [ 1240.916518] Bluetooth: hci2 command 0x1003 tx timeout [ 1240.916531] Bluetooth: hci1 command 0x1003 tx timeout [ 1240.927625] Bluetooth: hci2 sending frame failed (-49) [ 1240.933441] Bluetooth: hci1 sending frame failed (-49) 12:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1032) 12:30:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000300)={0x7, 0x5, 0x4, 0x1000, 0x800, {0x77359400}, {0x3, 0xc, 0x7c, 0x1, 0x8, 0xfb, "e016ef9c"}, 0x6, 0x1, @userptr=0x2c, 0xfffffff8, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r4, @ANYBLOB="010300000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1242.003026] Bluetooth: Unknown HCI packet type 5e [ 1242.003171] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1242.008340] Bluetooth: Unknown HCI packet type 43 [ 1242.027929] Bluetooth: Unknown HCI packet type 5e [ 1242.033742] Bluetooth: Unknown HCI packet type 50 [ 1242.051622] Bluetooth: Unknown HCI packet type 5e [ 1242.058237] Bluetooth: Unknown HCI packet type 40 [ 1242.756262] Bluetooth: hci3 command 0x1003 tx timeout [ 1242.761581] Bluetooth: hci3 sending frame failed (-49) 12:30:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, r1, 0x0, 0x102000004) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r4, 0x400}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1242.916294] Bluetooth: hci0 command 0x1001 tx timeout [ 1242.921613] Bluetooth: hci0 sending frame failed (-49) [ 1242.996247] Bluetooth: hci1 command 0x1001 tx timeout [ 1243.001581] Bluetooth: hci2 command 0x1001 tx timeout [ 1243.001608] Bluetooth: hci1 sending frame failed (-49) [ 1243.008554] Bluetooth: hci2 sending frame failed (-49) [ 1244.036003] Bluetooth: hci4 command 0x1003 tx timeout [ 1244.041362] Bluetooth: hci4 sending frame failed (-49) [ 1244.835926] Bluetooth: hci3 command 0x1001 tx timeout [ 1244.841375] Bluetooth: hci3 sending frame failed (-49) [ 1244.995920] Bluetooth: hci0 command 0x1009 tx timeout [ 1245.075895] Bluetooth: hci1 command 0x1009 tx timeout [ 1245.075924] Bluetooth: hci2 command 0x1009 tx timeout [ 1246.115815] Bluetooth: hci4 command 0x1001 tx timeout [ 1246.121125] Bluetooth: hci4 sending frame failed (-49) [ 1246.915732] Bluetooth: hci3 command 0x1009 tx timeout [ 1248.195534] Bluetooth: hci4 command 0x1009 tx timeout 12:30:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x200, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xe, 0x12, 0x6b, &(0x7f00000007c0)="b2ef427f53ac6debda91985c7027f82c9a4739945fe97a5358c95efc48ac9259cd71f9d3dfc5e36c8c18e10538a42ba353c74cbfb02aa718a20814b3fe5af91ccdded835289a8ba2ea5e168a00954a162da329cf3f367ac2595d6a7f4bf8aa29a8451c0bfc8d905580c22e7109a3a38c9e9eeb90851055503209f2fff9ff767f784b6ec4d6096184472e8d2af7011f35e7f8eef32bbe270429f87d6938ea9302ddc4bdb2b58b9cd699247986e9b48893f9b40dab2be30b56f132dcea15bccce3069a4a2e10df3a14f8498bf59797f6a701f8e5075fe116ec0b6621763d92694f41c1d5764d2a425d7ed0b4ca11cbe6e01444051c209d9ab3e999350b500f3582a8055f2e1a679b3fabb447b81c76cdb8326d9928df3000e4a54ffdf793fc82fe1f8a6b7148eda643d4502fc565386954779409eada5c8d46fd9ba55b18a556db60c28ea6fd18eb0541ad1557c52cf6f89a9dcc49233dc76fa22cb5dcb92969817c315cdc51567f613a2c27fe8d8349e35dccb71cf7a3a609627113f56ea8e85393bfbe52da4c8be1404f3a63ed2d4964225b2b9860207cec194e69a3fb79b8e122573445839a3d710f740df0ffa2c2cd441d729b58c84dd35d61b9f25ec6c479ef04d57cdf99d868493bf0c9ac5317288732c2a2472281c74a8a334990bd7cb6cb62e7520e7a30630bebf67ae26e8203c1608a6158dacdeff998246defa3e9ff9737efb3981b120eaf5bc764edbe4f53d940834dc9b10db4ec63969ef32b5ad664e688371b174bb183852312cf854a87415aa45fbbec9c2fd1bd10081cbfb15d89f9cf1d102bc313e18aa795ce32c9c2ad28514ca658023941158f19c658b4a9e8dc1c1ff69128a1003a882503b25603c8b5c6bbc5cba9d82b982970aa1fdc175557a097e2da10322144774b99994c3b1be07f6f7c81642dea550338bde64a1643fa915432ecc2674a2fd96a394590e5844b27737bfd5d97cf79f459e9aacc6b1260296f28e81ece968bd2c39502536217db945a8d35e90b723c3be9c823d39073f6f799aca8a6c9f5d7b52a4aaff363afba561311367e5a5c88552e64757160c87e123fedf5b06713721f0e217837e2b4a4e31a96a47103408b45dc20b9a155ee236f942c03c606fd77592e35e9d35ccf4aeee81832045717a4fb60a439d48b4917d0f18afe4a1aff868821d4029fc6a28f16efbbaadeacac1796f7a403b472c70d566cb44298adee88cdac8f9311e7178105fb50f676cdf1fe321b2186b0768e34270fa96c0f7d285b5e8ea9147354ab5e417bf36f210ecdc69f90f0f075acfeaa867d876786a5dbffacc864b4dfe4b40f44b591f95b6593ff0c9394a2c70c17e02778c9fb5f97c4f77881dd338e2937c97d2013cff1813fa981406b7e55e622d62e6ea71817295bac9f28171187f5eb9e8e57ba2995c0185f7bb0a4029015"}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=0x0) 12:30:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:30:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001540), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = socket$can_raw(0x1d, 0x3, 0x1) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1249.082966] Bluetooth: Unknown HCI packet type 5e [ 1249.088098] Bluetooth: Unknown HCI packet type 43 [ 1249.104350] Bluetooth: Unknown HCI packet type 5e [ 1249.106113] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1249.109596] Bluetooth: Unknown HCI packet type 5e [ 1249.125531] Bluetooth: Unknown HCI packet type 5e [ 1249.129745] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1249.130606] Bluetooth: Unknown HCI packet type 43 [ 1249.138334] Bluetooth: Unknown HCI packet type 50 [ 1249.147255] Bluetooth: Unknown HCI packet type 43 [ 1249.153044] Bluetooth: Unknown HCI packet type 5e [ 1249.160778] Bluetooth: Unknown HCI packet type 5e [ 1249.166523] Bluetooth: Unknown HCI packet type 50 [ 1249.169232] Bluetooth: Unknown HCI packet type 5e [ 1249.171566] Bluetooth: Unknown HCI packet type 40 [ 1249.183101] Bluetooth: Unknown HCI packet type 5e [ 1249.191742] Bluetooth: Unknown HCI packet type 40 [ 1249.201828] Bluetooth: Unknown HCI packet type 50 [ 1249.210747] Bluetooth: Unknown HCI packet type 5e [ 1249.219052] Bluetooth: Unknown HCI packet type 40 12:30:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYRESHEX=r2]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x40, 0x3, 0x5}}, 0x14) modify_ldt$write(0x1, &(0x7f0000000140)={0xa789, 0x20000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffe3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000500)={0x100, 0x7, 0x4, 0xfff, 0x1b, "f1264d3794286089d9ceb4d52c5b6f75b95159"}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f00000001c0)={0x9, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/247, 0xf7}], 0x2, &(0x7f00000017c0)=""/4096, 0x1000}, 0x10000) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0xffffffffffffffff) 12:30:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x1, 0xfffffff8}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1251.011749] Bluetooth: Unknown HCI packet type 5e [ 1251.016907] Bluetooth: Unknown HCI packet type 43 [ 1251.030503] Bluetooth: Unknown HCI packet type 5e [ 1251.037249] Bluetooth: Unknown HCI packet type 50 [ 1251.042779] Bluetooth: Unknown HCI packet type 5e [ 1251.049681] Bluetooth: Unknown HCI packet type 40 [ 1251.058431] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1251.165165] Bluetooth: hci1 command 0x1003 tx timeout [ 1251.170694] Bluetooth: hci1 sending frame failed (-49) [ 1251.176465] Bluetooth: hci2 command 0x1003 tx timeout [ 1251.181952] Bluetooth: hci2 sending frame failed (-49) [ 1251.187670] Bluetooth: hci0 command 0x1003 tx timeout [ 1251.193075] Bluetooth: hci0 sending frame failed (-49) 12:30:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) prctl$PR_GET_FP_MODE(0x2e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) ioctl$TIOCEXCL(r0, 0x540c) 12:30:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pwrite64(r0, &(0x7f0000000300)="1ba21ce0f8286fb78e5f84ea1cf76e86823888ce2e6f327291aa11499f78621ff976124bbd27b851ccc8df9da8354312d4d2fc9d83df3ab8f7dfe2f48584f1e31e48c31c2f81385080ad705ae4e4c51b3c6908de73ad20a65ef51a0448d8b5ccc00359825e057b67c1215f79abd256f55b7434e1e61c997f73746db597bfdc1fde82bd529b1a5eeba5", 0x89, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r2, &(0x7f0000000400), 0x0, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(r3, 0x5421, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) r5 = accept4$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x2) [ 1252.243038] Bluetooth: Unknown HCI packet type 5e [ 1252.243104] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1252.248114] Bluetooth: Unknown HCI packet type 43 [ 1252.269702] Bluetooth: Unknown HCI packet type 5e [ 1252.282559] Bluetooth: Unknown HCI packet type 50 12:30:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/87, 0x0, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/143, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1252.290665] Bluetooth: Unknown HCI packet type 5e [ 1252.297171] Bluetooth: Unknown HCI packet type 40 12:30:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(0xffffffffffffffff, r2, 0x0, 0x102000004) bind$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1252.565678] print_req_error: I/O error, dev loop0, sector 0 [ 1253.074904] Bluetooth: hci3 command 0x1003 tx timeout [ 1253.080252] Bluetooth: hci3 sending frame failed (-49) [ 1253.234807] Bluetooth: hci0 command 0x1001 tx timeout [ 1253.240101] Bluetooth: hci2 command 0x1001 tx timeout [ 1253.240149] Bluetooth: hci0 sending frame failed (-49) [ 1253.246903] Bluetooth: hci1 command 0x1001 tx timeout [ 1253.250761] Bluetooth: hci2 sending frame failed (-49) [ 1253.261345] Bluetooth: hci1 sending frame failed (-49) [ 1254.274680] Bluetooth: hci4 command 0x1003 tx timeout [ 1254.280010] Bluetooth: hci4 sending frame failed (-49) [ 1255.154872] Bluetooth: hci3 command 0x1001 tx timeout [ 1255.160205] Bluetooth: hci3 sending frame failed (-49) [ 1255.314525] Bluetooth: hci2 command 0x1009 tx timeout [ 1255.314614] Bluetooth: hci1 command 0x1009 tx timeout [ 1255.325326] Bluetooth: hci0 command 0x1009 tx timeout [ 1256.354508] Bluetooth: hci4 command 0x1001 tx timeout [ 1256.359845] Bluetooth: hci4 sending frame failed (-49) [ 1257.234593] Bluetooth: hci3 command 0x1009 tx timeout [ 1258.434201] Bluetooth: hci4 command 0x1009 tx timeout 12:30:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 12:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x802, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x3424, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x33ac, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x37, 0x1, "d1af81abba19ffabaca88bef71f63e4bb6e00da13176f3605fd74fbe3adb2cbc8aa15424608fee36c1463e0eb5dbc5e2295376"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0x78, 0x1, "1cf6738fdc0b6f59604032290a2358773eb114a13643071de8c970f70474927d0dafcf010a965b97fcaed884a860942fa891d067ad0967d5e512cd8da5ec409f4e1fd61c66ffa47edd97f876cb278393d293287c9345e4ca9b2145d90b89606e09edf03b825b392c104a3d0239eec97d83ede553"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_60GHZ={0x29, 0x2, "36dcae581af1acf11331a70852454f6326498f8ce6c551d2ea964a681167b381aa65acf445"}, @NL80211_BAND_2GHZ={0xea, 0x0, "24075c4ba97543283b396910d47edccb47ac736760dda49c818428232686abd536f954ef6a02075047e2af9e626dcc111928c636f7a57cfd1f08b24e7ab368b548596864f2aaf256529950f483427d6923ea70b83118f81db4bb9f563e2db351cb6831f3d0295690e21282add5328582dbc0e9962e9174725262629ca4b5320a2767049df95592db4c00fafef9a1c988ef82fde590bdc941d7d71c1b0eaf14299cb73ddb08ea02a7e803fa63956c879baf71543ce3ef8caa55750f1adb1499cff1e6ab5981048027388fb4fdf7010d5a6e8a11981c2875bce42f711f265fdc2702252c169ce6"}, @NL80211_BAND_5GHZ={0xb1, 0x1, "fb2d70fcb92d2f2478bb20e93f37ea60bb52df01d6066664a55c298561c442dee4bc733f7573387cf5b95a0456b5a097b31428dc4028f30123b91bec0a362b279baa2a9a7e039f3735fac0507f3e7370265b91009b51e5e09da9f8da31428e0f2cbbbe9f2bb650deb6ba5f2bf685d392e2525529cd2308a53e62f48d3b8d48ca7b133f31fdd451e573c84960ce5877e408bfe3577f6f0c5ea127c74c9daefeb84ea821b7e8a4acd7923ebd6dab"}, @NL80211_BAND_6GHZ={0xb3, 0x3, "f1120ce67367d23aaee7106d4b0ddac2ad5d35f57042b136bad2fc6b53cda21a45e1dcfb71ab4d257f19e6bc234be196591c30e5a7c146237751230978268adf6167879cba433337b5ef09fdad3690327d883a4177b47a4b4a9bebc9225fbb39530cc1740cdbecdb65245e9f2ec4b2029ab848a8c520c7e59a72d4675e938e299345ad8f89535f066403eba2a9384c545eb6ca981938ff687307fce31d3acc5133edc452035e7f8a4d364490455abc"}, @NL80211_BAND_6GHZ={0x6a, 0x3, "8a0355ed20029bf6a400a1e2a68802f953fae29a645f96a710be1e9dd5408a6883e3ff761164b06e5027e8752a52c4bbe87a1890427df6d952d4d1fd8045a503031d24e75450fc786cb75d691150099f8184951007fcd7660d1509d2dc83c4188c5fefef6a86"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6}}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x12]}, {0xc, 0x0, [0x11, 0x8, 0x1e, 0x5, 0x1a, 0x2, 0x2, 0x2]}, {0x8, 0x0, [0x3, 0x16, 0x8, 0x4]}, {0xa, 0x0, [0x19, 0x4, 0x6, 0xe, 0x4, 0xc]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x80, 0x1}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @broadcast}]}, 0x3424}, 0x1, 0x0, 0x0, 0x4804}, 0xc000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)={0x2, 0x0, [{0x100000, 0xbd, &(0x7f0000000140)=""/189}, {0x1, 0x4a, &(0x7f0000000200)=""/74}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) [ 1259.350788] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1259.350902] Bluetooth: Unknown HCI packet type 5e [ 1259.357812] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1259.367151] Bluetooth: Unknown HCI packet type 5e [ 1259.372501] Bluetooth: Unknown HCI packet type 43 [ 1259.379578] Bluetooth: Unknown HCI packet type 43 12:30:42 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getpeername$ax25(r1, &(0x7f0000000080)={{0x3, @bcast}, [@null, @netrom, @default, @bcast, @rose, @rose, @remote, @null]}, &(0x7f0000000140)=0x48) [ 1259.403647] Bluetooth: Unknown HCI packet type 5e [ 1259.409798] Bluetooth: Unknown HCI packet type 5e [ 1259.417570] Bluetooth: Unknown HCI packet type 5e [ 1259.423110] Bluetooth: Unknown HCI packet type 43 [ 1259.427232] Bluetooth: Unknown HCI packet type 50 [ 1259.431075] Bluetooth: Unknown HCI packet type 00 [ 1259.433081] Bluetooth: Unknown HCI packet type 50 [ 1259.461764] Bluetooth: Unknown HCI packet type 5e [ 1259.469464] Bluetooth: Unknown HCI packet type 5e [ 1259.477071] Bluetooth: Unknown HCI packet type 5e [ 1259.491863] Bluetooth: Unknown HCI packet type 50 [ 1259.499302] Bluetooth: Unknown HCI packet type 40 [ 1259.505863] Bluetooth: Unknown HCI packet type 40 [ 1259.518332] Bluetooth: Unknown HCI packet type 5e [ 1259.542424] Bluetooth: Unknown HCI packet type 40 12:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/102, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r1, 0xe000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)=r1) 12:30:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=0x0) [ 1261.393946] Bluetooth: hci0 command 0x1003 tx timeout [ 1261.399283] Bluetooth: hci1 command 0x1003 tx timeout [ 1261.399318] Bluetooth: hci0 sending frame failed (-49) [ 1261.407341] Bluetooth: hci1 sending frame failed (-49) [ 1261.473959] Bluetooth: hci2 command 0x1003 tx timeout [ 1261.479304] Bluetooth: hci2 sending frame failed (-49) 12:30:45 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) kcmp(0x0, r0, 0x1, r1, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x32) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000180)=""/4096) 12:30:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0xc0ce353441faeb8c, 0x800, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0x2c}, 0xa) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:45 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000002e80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="c768625d71ea8b1a0e407e0733a1efe304c2d8c579da96fb82fe7959eddecde7586933c27f7dcd7760bd73b7a52a777959ee006bb1d555b1a0ccb189b3", 0x3d}], 0x1, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x94a}], 0x48, 0x4000080}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="b3e7116ba52193db1e8d2ae4439e14a5473c6af5464f54d60b7e46c5b59a92ecef07b19912ac0985", 0x28}, {&(0x7f0000000240)="ecf988895bff681d74f9e669ca329487de3e801bd6c5cfad6863d336acf7d33f06ae96", 0x23}, {&(0x7f0000000280)="e4cb03453d46b3576317bf27002063c528ed52c4ac0d6c7a3df229b6e361b5312a635d66a1091db8ebc42523df121e0e9e2c38bc4dbd455ce19ab9f8b5df6468b87408f1", 0x44}, {&(0x7f0000000300)="bd4dfbea72a14bea9def5d57e3ef171e2ed24965d10df269e2fb130189c3bada09ee53ae8dcb2d70f28b6374361659afa7debf7bbb4b7902a35863c2f98e48df7b4a60ab2b470ff3d209e346c5357aecbd8e50a5398690c01d6a2335e4beb9e250562b3fc2a7f857bac494563482e4f14b3740b104cbc8d2b4572d6773a00934873f20350a6b1bffa2a451f831f459966118388da5601a61de4589c5b2c68c88c3b69e0a20884d447650b2c8", 0xac}, {&(0x7f00000003c0)="6cdc49a51f68206c2bd6580ab00a9d07798812332df8425a9527ac6ad5042262aaf432b85261aad3b34c0b61b180f98d19713cf925b4e9be9331cb63eea9c2ae6e34d050ccbbafe2d4e30b6b5678313ee8a0fe6a74442225d200c6721c1cf5389525874922d2bf539092505a4cbd80a23e6fd140a1", 0x75}, {&(0x7f0000000440)="b277b8c4ce895239024132b2afc98ab40cee8acafe7876f245b6f408a076a15574c6413dd72421473931e6477f815b6e8bc9cfd31e80b01a87a2a9433aacffc357287fc7951f6fd9c723cf5d5fe0b28bfd19938a0e30cb7e67f0c4912d8fd2b2203be819ade5411869f1fbf7c65f82e574eea30f02ce86a6f96313a2ece1a27ccba1", 0x82}, {&(0x7f0000000500)="ceacfdc443589dccb8c162b02af9b7499803f998b4b6c503a368492012e7c3afd19d792607b2f777cb0de8a1d292a1b12458f96e293bf86eecf496c3bbfea4745e8a7f4b659528f3ad3e44bdfc4e405cd4138de002bbaf8f4cd685a7a49074ce2aaedd36bbdf05190ba4b16ab6cbcab85963a88ff93c477123", 0x79}, {&(0x7f0000000580)="b97fa31ef9caec1c7b62fbf685d5e0b3dddb152b6f9370f1ee", 0x19}], 0x8, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0x9266eadf}, @iv={0x40, 0x117, 0x2, 0x27, "50ad01565506be2d3b492fda25cd04862dd0ba21cc460c7a2726b70e98ce495aeb0f15489e68a6"}, @iv={0x98, 0x117, 0x2, 0x80, "5158da4ae2b6767eeb2a0e237d887c08c0258a7a2646af404c7908d556799fab123b2d2093b352a6220d6e76b77dd1e9d43848726388b4b8db7271629935c5e89438888f4d1a6f986074b1191d75bf4febcc7df445d0f567cace6b3bfe773f4f3750dad1006527e702e2e60c8b46238bd2a67eef5a8661c89ece0756740845c3"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xbb, "0eae16a1814a7f692aa8db17b0b8015c00ae407e6c31286649ef0dfd5c653ad91621a0cedbbb0d9dc2b28fa91bf7a66e241a31231886e45e587487b0e04468127f41c9bfee1e02a4c13ed1148571af8cce15713bb88b1d5c4d92c5f1247c270685a057662413bbf28cd050a379755dd85dd473e337b0d63e1b9a8d8240cb51e05e180b0aa491dc8b1569264775de1b1107537b803717d0301a4f50b6eecf7d9b97b776cf3482675279fbd2277e7cfa3f8651f06a8553d0140dcbee"}, @iv={0x1018, 0x117, 0x2, 0x1000, "c98b19fd5b0804114fb21d78ce7812ffae32b0ffce80b74be5e50a6123f79c818c77e691ec35796844c3fb5ced4685c75bfb2e552659584c77526d284ea9414bd2f728b8be920437af559b9fd0580adeabadb5c5f8afa57be23420efac7e80fad91444c45e121ce6572f194066d80b44070c6cb7d3c527d42937d8bb207b9db1ba626dc98f8fad97d249f3816835ee25026560bf9e9ed27bff046070ce1eea0b19531d43e49be996c2d93c53abd096d6e6ded14f58b0c9cda2b42fd34173969c8e165800f36cae24cc51a016911357217f2fbc74447b9d1482ca916e3fb6221ea1c62bcadac8b5f366f781c851a70bf48eaad7e1e651f50287ed804ab5f4f4c5887567ad09fe03539c2b001ce1370344dc1dc8994eb3e34ef406299b63f887367c37afb8c0f30a32722b944aae9dff71d8051691a428629afcf716a17ffbb5fb7fd9cd182a5ea2cbb000062604c01ba4e507bd114df61a9385c9c433ff440923fc206d04b1c52c9ac0b32988ba7beabcf8515493fcaeedeee6bd57004349bf18cf4d2ff78a7943172faf98a159ee83f326c3a73121c97ac0dad44d93cae43171e0101477611fe852e529ad3b887fd7ec671a015dc251cc12fc0bc849510735d0affd00721e346bd76a6566be7c5c6a3d0bb2318a230bf3938325c628c67157c033ff708633329a9fb844096382c527d2ab70db9c059253d34fb48946b9752333fa134b2e470a64b0f514bdd0ee2f69519de549da9141afd992b7c68d9e220354243b36d4a3f345bfd90a6f50e3d8d7a247848a2a39f70bdb638d7be5009c6c7d0d6fbc8d61d9abc9ec76f2e8c9fe77b03b062bbd83afb272dfbdccf58adff7e52ffe05191a51086a46a24293ac1243b856ad203b856811127fcb144d7f57fc7633dee341c9751731b1e21a4547c8111b13fea35651e2c5bb699dd8e64b9a3a55eb4f7c66c425012a1675741eebd5c3dc1e96d60d27069bcb87051959b90879b000abde6070df372442154c2f225c4c3cdc1cb5d3384508950e4320873a1a0e259f787cc119d1a3c6dd76a72f5db4965a2594be0e2406ad99a418b4d8816cd14126c8b3c038ef2815ad8b0735174f4b0a12cc62a4de11d8076424e7ff4484cbf768f6e53d4740657b2b33cd57a1f6438284e1af7a4f4107c78a6b78af0606f77868734e64f2eeeb71d2e455cc8c0c90fa28e451a3de56db33b76dc1a8dcbdc30025a2b434bc86034e9edfd9ad2c8d23d403f89853ccfd9ffd716f3ea58b3348c0ef0565e12f909a833d1315c3ea7fc9d47b4a7087692c0f1329c7849940fdc391f4e016ceb5f4ae75bb70c3dda7663e1f5da961c95ddfb986f4dba97462f4f9bffd8c9b88d254a05c7fb18dd4d4a4c47201553fdb0e5ecd1ee199168f79e2741b8a0c143f4d7b5d3845a7e47a76be0e34e947a99d8a94927d9a2b0972138e25776a3a0c202e0d5992c352543d575959385b282676120501252176d5583d4c20fb07133f80d84ae8426ccbe3645bafc2d7aa9a8009483ad4e9a1f25b94c9f8b67781f567e3ade9e1c00c94cefa752ed8a2e8441054f746c23b255c2b0e41af408b0e731398ae4206d047753dafd8460f61e56f7d46756b609606646d77cf30e2480f39cc3c4611bd7907e1bf217e63d590447a2f9fd93a6bfe10b9f9166056fcd74438d7d16114f6fc8a1cb04d98b7adff971f9d9a7e67678d3287654dbd9f4c6e1d62c27b1a6549ff29366e5586a6ad4f6c1ec720f1e4661f2793fe0c2bd11af851e596085025907e00fbde5e578afd87192d6265221236c6d51d8d3015b014f98466ad6ec38cbea8f30f49f547d76b440d41473326cad9e098dcac0e45d1095ae43a8897554a29443b6da5f7b48989fc17bce677c6e1dff6868d531e7f69d5614f275b9adbeb00b15f4821b9486052dc0c40048cea5b8385d8c06d5067466fff6a9c0548441f5b6fc72d92425e8dba53577017f2aa86496bf52f758134a43e7857cbacc486dbe78bc9d4bb0e6e13b26729beb41b7d4ed948e47f90c62875db3e0393df228dc4ac3ee265858523f05124bc95dbb6283c48ae694bc58d0a5bb8d2a14b54592181b6056d0b3592dbe1734f67b5b68f78b963bb6e68dbfa88ce679d54d200f7b08c68a4333d57e88cf4a69643c16dff346039b94684951f5c1b1bf16730fb185ad088f23698fa359754cf71a3e52f0a4d7c12b2839c83ace9419669d0a8c91987c726589125b081b20a430baf241696f522680add51fd1eda29a513092bfc33f32319259d6b08c9dd8d9ebea8f9c4e62e6d699bdc69bb34486ed7bd161960329a43ed46d82dfdc4a9c07fcb279112174d46457de59c85cf8f7e88c16697f1ef3c92c8b637d894d030f67be812d8d5f4ff5bc4887e24688507248b345c91a262055e0ee5dcb37a05f40117c48213e8d66850ffd19b0e74c635647c5f97cf2e89f82f0c8f24a7fa9dd319bd9d421e92cac58118bd69da8305c2be29828933f1fda136326a9c2e8a595d5e5fab188471d9321c8a795d2c53b73f88cceace1b93ce142b5dc3d5f7d12dd7091ab31105cb797fc15dba7a9ce6b7d4e3c2edd465604a70967b3ce8f1f10a539791038898c9bafeeee64eec9032dc52cc0394f0452d67bc85a16906bcb055a9d7b0be406c911e462aeaee422b9b1d79f187222456678772ed155cab265e020cb4b3e5ff5d4c87fd73248522843b4396b31b6406af286861768a80eb8b943a59187ba07e4d0eb8d01c884f438af713390558cb106e72b0e0000c24d19fdeb1e55a019875601d8cbd88e4e7a64904e14c64008261875c2cf6c4bfc6fe2d51d354efb7d4d0afc1d80f429a01bf99292f4111911569eee318a6ac0de19125e9f119752553413d4f6f4c7a7e17ea2cf4b2ce399c623ff7a7ff9dde5b6ddfe2b277a891ac8880a9d1bb0a5cd9c70f9b84dc898fdcbcff665eecfb36c6cbc6b02ec29948322aa28bf4d904d352e9a4c4eb7ad9ba34e6d6888f7a4666921a8b4378bed1f96246565e4562c7f63ee8ed9cdc0c70c5c917ef3c84ebeece1c21873d61327148632a085461b404859f98f92ed24844a21e848ec877d44e24ccb5abd305ed4edabfca881c461d8ac98168d2e8aa6e64fe2c84cb7a8002dcea4126ba4b53d4a0d8c401c4d454a01d499be98e8cd42620bd1817b1d593b7cfaacebc14a40eada2cb2f2713749fa9723c41a56384fde051dcb11d6bc19efe6bd8f8d2da53695a26bdfaa4ed3fe2e2736b348b06faaaf016a5aa81e4e39f55ce5a605bca6532e9b3e6fe1f7627ce0f509daff67b53a9e8db24f14457ae33caea16ecfd6e093858f6472d1eda9130236e13f32fa64ab5f080c2cabb5d94889510363eee182f1e49d838664c6a4861c196d1dfef47dffbb8479de33162e92c5a8d25b914dfbfcab3168b78da1dbab504ac4c8997bd6df536153435378f699ed14b7fc2888aeb3925dfd5a6a61c578375c23572b946deaf58ba516fb010b58303a32c338825833e534514bd6cf05c99c72cc6d884515569cdc528fae9572c5cc78e33a64710ed8fe0dad4a31775fe5d902bf330f14050e7a561be2f36d73bdc0020fcbc2d30f7bf56f9cd7c306a7a796f1bf4273c5cd266a3607e880a125fefc2e2808f052ae4ac904a173d1fe1016f5cddb24107a5ce467f4db3685fa6d253c5d40f64ae23cd26fdd793f8c1f31987430c8518ab9697397a6a885c970dbdaad6cf7bf585548f3ccf65a5160bf9ad04d5108e4e291b0de1ed82759aa5441147ffa0f13ebed1fa57a349f42564db33a536b766edc9af649c5442f34777417ba6b03a73174f47eb2f8e7e485ed8c38442a2a59d69674d756612df14bb7c2facd1cadc5450fefdbe9c80511c98c50e56174bf9e1142024018fae180f2caca87448879549e75fc1b387db152952033db9e1604d2ecb9f76e235d383f85831e0ecd3abb4f8a9dcc4463d367f2089b8521d5867caa2658f15db662454255148abeb7c56595c1ae188b0a7077b247f4ddf67000d0c7e6a1e92fe0acd4e622feff575b93f07ac6f56abb47ce94b7cdb7bd3467cc60116b5c73320ae78d989b063839218f21b0558f2fffff15f37652c4ad6efa01e410407fb80ff7f52740f27faee9902d22f71ea188e4ef695d3809411cc1221979d4fe7b9127ae232c73b387d130efe904da4635bd3e8bc929b70122109719f15c42ea2be9afddbaf514803bc6d4c1a53d9e48c81966bbe3e4a466026c4916e689bbb4397def877e41d354dfaaf3ab1a471b3f6f3e0efb5a63991ea49665e79f5d41ee0a4cdb7e99d104b61e16cdc8b2ce010b7558baf0815a9299e7589636295e127b1efba739ef788eed1996dd521fb93fd2b8a12532eac38119242a544b2a81c32e16c37f17d6d2f760ed7793c2f8e40b2c57a0b21dfe5a1f17aa4ed5205e433389db0a69359dea77ab2b2b6af469cc3be43e6bff376a74556ba1bdefd0233e64341b5c565a251ddc0703fa9c5b2829fd10a32e02c90ca6ab22f08fc5ef6e08571788fe7d5cd43483cdf3be320d7f5a701fe0b873977bac6c0fc2c979a510a16654ff9f30c63271bf8071fdfb3486f90b9b3f74dd6cd41556753fd6971212ae1270da78f785941b4e5eba4380c900e5ad97a1591359cc1d84299282e5571680a5e7ca6577c43f89a80082bc50d0fb368ec6e2890fd4567e56e242466ae7f30ca497704cbf1c1e82a64a6ce225a2e3eea3125afae56f3ef1420b4dff085211adda71e508ca20247bb65bd3bb6edcc48f20492a31fbfcd939682794c905a9d7cbd0c523b5d41f562ddfa235a91c0febadcdc1461f6e4c9d8ff303305d00f17113f284d58c12517cbcd979e65065a535b900125ca666c6d1e765d0d4fa6aad3be0009ef9c31eafade2d99a1247db59dfd8cf4c8234364be18c024b7b38160e7d90b5dc9322c35b15143762480bfaf8d6d106e584ef9e56b9b8c4742dd0f7fd2897498b533f7cd2841517c6142966b44509ccc409bf5850d2cc148f6b8b75aa42e5e42938c8f736864fc11c0ac372ce6be0c6eb94f8f140fde68aca2129c6522d4e20aaa08266cad96b0e92b92708001581557cb0d708a300b2e8a8b6b5f91c3c9fa2ec904a8263a1025611b641aa12992cdd49bfe3f41483cd8a5ae249a30e2a066d2a95f5a095ddddff763e5281b877d8c7461ddea65579e8b7c70acbdf356dfe28eccced494dc51c7d0caa0dbf10baa0f6ab35facefd150dc60d943a9b9036f8e716d5dbbe3d99d948434868bd6391370c683fbbe10cf9cd0a73d8f76839ad03529a56eb79d42669373d66e62c8fdab974f438825a2dcf7a7fe92027dc1e273b152241db49c37495bfc87eca3c202715b7eca9560879793f480855da08c4bc9c2145b2870c3c85668a184dad98f504c2f5d4d1ac5062d2e24f93e57478837fc245c67ad5bf23b2ad66fcc82c5e4d4b38d9502f7dff3ae02fe04e6940391abe38022fe5a86c9cbe4f0192fc378f0a01da375435b3944e71353be8a4ab98b0934f0497bf37b8239e2bce1d07432a9e44a8cd5fb395da070424b041bca94a84c52c704782dceab4d8102324a9207eb324111083d7a25c884f0727cb0ba25fc0ce9522dba3f02af378cb59a9b90317501f57420148d1c88776f1f0ed0c5e12952f61fc201e03db372ad96f301ce50753e76ad4a8b9b5380764196c678a77e79da3cd3e5a704ad3c6eaa8e4663985dd01d7274d61c8a8a22baaea6684b2e967680037a4a1bfc805b66c42c96a503133e8ad8be8a389f8c2fdb887a2054063ac0685ba9f88f794f775871a54879fd"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}], 0x1250, 0x4010}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000018c0)="5f467d0048e247afc1bef4e093f68c2de6d2e61d1c1eff5f3601d2cea1a8e324146bc176a04a16a2aa990a078a60a18f5ff36dd9557dc65536de21a50a37202c76968c4b960061a99312e8b7ffb77c0c8e9da924cab52d6fda0ce5a160d9a9528ee0ca5c4f8fd9beee2cf9804aeb0f3264bf35c0131668c81d806f96796557", 0x7f}, {&(0x7f0000001940)="f9e168a7df6a81a0ec469451fe2906a0bfc2a754200579185f302fd23e12616754998a24e9a6874454f47f8d4a0a678a0d526040abe4e234d76e63bf4f32dbefd704d08af1c9fe46d90c50f7366b6a251b86ad0ec00163f9ef3cce956ffb518fb7ce376c00aaec80b41c2c6e006f374bf7bfe948a79a8f9b60fcca11e9c3f904ef9e0409c9c716d92a815c9b298004bde70a4c11a45c0be92fb8a8ea5e2eb1c1ab766d694d5cac51c7d9fcd0ccdd626bb24aae9c6e720958f5fd42b537105be2b952ae080b5b572ebd15530c3524130b991df77a8184a7ee98b282e3a8963b511599c4e758a2b235452a88732d68dcd89a5665", 0xf3}, {&(0x7f0000001a40)="39e1a87bba2da8f002d9f1dfa45ea23ec456dd0f06bcb15b824d88a12dba6ee3e3ae6f", 0x23}, {&(0x7f0000001a80)="54307499a7abf4e8662843f43d28b52045bac21b8d51", 0x16}, {&(0x7f0000001ac0)="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", 0x1000}], 0x5, &(0x7f0000002b40)=ANY=[@ANYBLOB="2000000000000000170100ee020000000c00000055d7fc35361f58dca5023115"], 0x20, 0x1}, {0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002b80)="f9290e26c997e209dca1e721194fae62e8e9967764e6ea132f584173b41585c3ab5689bbcb0efb55edc3c53fdfc42d8635c89fcdfd0f383f9ce271226062bb83cb1c893353c4fde35025c49ca6c48c592503cd541f02df4d7e5d4107a281a0b7f974e9461a7440e7289bf2d5aec5b3e1669f686156796ee7378780292f6b81fe6c33586f3c73b584622ebb25304652c4ba1d065d03b8fad2f072f2be2b3e6c2edb89c5d25ed8d57eff3d", 0xaa}, {&(0x7f0000002c40)="2868579fa78ea23632229951c0d191c7191546906db5bec64e6a370d8b770a27f4d4a8fde396de2e7f05d3c6df45065bd4b27e6da8fea1a090e66cef53913b0cbed430a39453402c120ef5a59772121c2766b1163a4e442071f0791a0875f4ab2e1351697352e808e345ceffe9ee720f82323157a66f8e50db9aa2de138a334b18ea59e5bb72d6c0c77f2e2eb4174930f6ea2b34a9b08bf92c13787e9879a9756731a34c3843f70c93008f3dce", 0xad}, {&(0x7f0000002d00)="524d856ae4967178a2f6cc2a8026b357bb450c960e1fa6f721ca057a0d51399c09ffd1da08a2cd505e123c59a3cb3bcde00677b0d3243d3ca7127871ff5d70c716879c1a93b182ee2b0daf6a4908416cebdd8a6de88b8488f6b9b1dddd6ef393a965", 0x62}, {&(0x7f0000002d80)}], 0x4, &(0x7f0000002e00)=[@iv={0x50, 0x117, 0x2, 0x38, "9ca63bbda7acbb59abc3f8c1bef2803f46fd808048bfa74c705064d665dc4786e52fb6f70f92d3add0e991e45bcf7f18d7f959572a4d0ebf"}], 0x50, 0x4000011}], 0x4, 0x24000010) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002f80)={r4, 0x3, 0x30, 0x7, 0x2}, &(0x7f0000002fc0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000003000)={r5, 0x49, 0xb7, "e5c0e79292bb0d02ab062a98a0cbe080cd6444ad1102822743fd2294c636c079b44dfe1428051f75bfa64a7d2a33bcb657558becc5ddd8143612dcee6328d883dcc77167be52c877ab256b1e1022fb9d5952b999e30154a04d0622085d92ecf3e5c04b82203f020b31738082342f55c45ed128cbcd409dd3b5c439748c1603ea69427910fc8a85786c1621c006785ab687869171d3c383909730aa9f920e8b3f48ec5ebd7341bba4bf0174375fc7677cfadf43d37ca016"}, 0xbf) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000002d80), 0x4) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) [ 1262.495943] Bluetooth: Unknown HCI packet type 5e [ 1262.501002] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1262.504509] Bluetooth: Unknown HCI packet type 43 [ 1262.518956] Bluetooth: Unknown HCI packet type 5e [ 1262.540422] Bluetooth: Unknown HCI packet type 50 [ 1262.546844] Bluetooth: Unknown HCI packet type 5e [ 1262.551804] Bluetooth: Unknown HCI packet type 40 [ 1262.619962] Bluetooth: Unknown HCI packet type 5e [ 1262.628587] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1262.643670] Bluetooth: Unknown HCI packet type 43 [ 1262.650300] Bluetooth: Unknown HCI packet type 5e [ 1262.657845] Bluetooth: Unknown HCI packet type 50 [ 1262.662701] Bluetooth: Unknown HCI packet type 5e [ 1262.670134] Bluetooth: Unknown HCI packet type 40 12:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1263.473606] Bluetooth: hci1 command 0x1001 tx timeout [ 1263.473731] Bluetooth: hci0 command 0x1001 tx timeout [ 1263.479092] Bluetooth: hci1 sending frame failed (-49) [ 1263.489657] Bluetooth: hci0 sending frame failed (-49) [ 1263.553572] Bluetooth: hci2 command 0x1001 tx timeout [ 1263.559044] Bluetooth: hci2 sending frame failed (-49) 12:30:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffff7, 0x101002) ioctl$FITHAW(r1, 0xc0045878) [ 1264.513529] Bluetooth: hci3 command 0x1003 tx timeout [ 1264.518934] Bluetooth: hci3 sending frame failed (-49) [ 1264.673398] Bluetooth: hci4 command 0x1003 tx timeout [ 1264.678730] Bluetooth: hci4 sending frame failed (-49) [ 1265.563491] Bluetooth: hci0 command 0x1009 tx timeout [ 1265.568787] Bluetooth: hci1 command 0x1009 tx timeout [ 1265.633300] Bluetooth: hci2 command 0x1009 tx timeout [ 1266.593285] Bluetooth: hci3 command 0x1001 tx timeout [ 1266.598599] Bluetooth: hci3 sending frame failed (-49) [ 1266.753181] Bluetooth: hci4 command 0x1001 tx timeout [ 1266.758833] Bluetooth: hci4 sending frame failed (-49) [ 1268.673120] Bluetooth: hci3 command 0x1009 tx timeout [ 1268.833005] Bluetooth: hci4 command 0x1009 tx timeout 12:30:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 12:30:52 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000140)={0x1, 0xb7}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x18) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0x5, 0x7f, 0x3}, 0xc) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000100)) [ 1269.572944] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1269.579242] Bluetooth: Unknown HCI packet type 5e [ 1269.590019] Bluetooth: Unknown HCI packet type 43 [ 1269.598707] Bluetooth: Unknown HCI packet type 00 [ 1269.598896] Bluetooth: Unknown HCI packet type 5e [ 1269.611480] Bluetooth: Unknown HCI packet type 43 [ 1269.620256] Bluetooth: Unknown HCI packet type 5e [ 1269.627548] Bluetooth: Unknown HCI packet type 5e [ 1269.631652] Bluetooth: Unknown HCI packet type 43 [ 1269.638823] Bluetooth: Unknown HCI packet type 18 [ 1269.644568] Bluetooth: Unknown HCI packet type 5e [ 1269.646798] Bluetooth: Unknown HCI packet type 50 [ 1269.650277] Bluetooth: Unknown HCI packet type 5e [ 1269.662921] Bluetooth: Unknown HCI packet type 50 [ 1269.669212] Bluetooth: Unknown HCI packet type 50 [ 1269.675671] Bluetooth: Unknown HCI packet type 5e [ 1269.677978] Bluetooth: Unknown HCI packet type 5e [ 1269.680702] Bluetooth: Unknown HCI packet type 5e [ 1269.694258] Bluetooth: Unknown HCI packet type 40 [ 1269.701110] Bluetooth: Unknown HCI packet type 40 [ 1269.704004] Bluetooth: Unknown HCI packet type 40 12:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x40000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0xffff8001}, 0x8) 12:30:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/144, 0x0, 0x6000}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400), &(0x7f0000a8a000)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x72, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, [0x7fff, 0xa, 0xffff, 0xffffffff, 0x10001, 0x3000000000000000, 0x7c7c, 0x10001, 0x6, 0x2, 0x1, 0x7, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xff00, 0x4, 0x80, 0x1ff}, &(0x7f0000000140)=0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000080)={0x2, {0x4222, 0x1, 0x20000, 0xfffffffd, 0x5, 0x5e}}) socket$kcm(0x29, 0x7, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) [ 1271.632614] Bluetooth: hci2 command 0x1003 tx timeout [ 1271.638007] Bluetooth: hci2 sending frame failed (-49) [ 1271.643513] Bluetooth: hci1 command 0x1003 tx timeout [ 1271.648851] Bluetooth: hci0 command 0x1003 tx timeout [ 1271.648903] Bluetooth: hci1 sending frame failed (-49) [ 1271.655348] Bluetooth: hci0 sending frame failed (-49) 12:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:55 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:30:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\xed@\xd3\xd6\x80\xf0t[\n\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, 0x0, 0x102000004) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x101, 0x40}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x20000f) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x32) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000280)=0x9, 0x4) [ 1272.766303] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1272.776589] Bluetooth: Unknown HCI packet type 5e [ 1272.788570] Bluetooth: Unknown HCI packet type 43 [ 1272.806979] Bluetooth: Unknown HCI packet type 5e [ 1272.812245] Bluetooth: Unknown HCI packet type 50 [ 1272.836381] Bluetooth: Unknown HCI packet type 5e [ 1272.847321] Bluetooth: Unknown HCI packet type 40 [ 1273.712333] Bluetooth: hci1 command 0x1001 tx timeout [ 1273.712432] Bluetooth: hci0 command 0x1001 tx timeout [ 1273.717638] Bluetooth: hci1 sending frame failed (-49) [ 1273.739584] Bluetooth: hci2 command 0x1001 tx timeout [ 1273.739615] Bluetooth: hci0 sending frame failed (-49) [ 1273.761627] Bluetooth: hci2 sending frame failed (-49) 12:30:56 executing program 3: socket$inet(0x2, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/86, 0x56}], 0x4}}, {{&(0x7f0000001900)=@nl, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000100)=""/114, 0x72}], 0x1}}], 0x2, 0x10002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1, 0xf) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x2, 0x10000018, 0x5, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x40000000011, r4, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r6, 0x400455c8, 0x4) [ 1274.832324] Bluetooth: hci3 command 0x1003 tx timeout [ 1274.837816] Bluetooth: hci3 sending frame failed (-49) [ 1275.792214] Bluetooth: hci2 command 0x1009 tx timeout [ 1275.797856] Bluetooth: hci0 command 0x1009 tx timeout [ 1275.804239] Bluetooth: hci1 command 0x1009 tx timeout [ 1276.912082] Bluetooth: hci3 command 0x1001 tx timeout [ 1276.917414] Bluetooth: hci3 sending frame failed (-49) [ 1278.991872] Bluetooth: hci3 command 0x1009 tx timeout 12:31:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 12:31:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="81c30434", @ANYRES16, @ANYBLOB="20002dbd7000fddbdf2505000000080005000300000008000500010000000500020053000000050002007f00000005000600200000006000038058000380540001803100020021776c616e312c6d696d655f7479706528a42e766d6e6574315c236d696d655f747970657365637572697479000000000c0002006e6c3830323131000800010008000000000400030004000100"], 0x9c}, 0x1, 0x0, 0x0, 0x60040004}, 0x40000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)={0x184, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9df8bee20f0b849f}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x184}}, 0x2080) write(r2, &(0x7f0000000340), 0x41395527) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000080)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:31:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb}) fcntl$getown(r1, 0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1279.778708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1279.809575] Bluetooth: Unknown HCI packet type 5e [ 1279.815262] Bluetooth: Unknown HCI packet type 43 [ 1279.823569] Bluetooth: Unknown HCI packet type 00 [ 1279.840453] Bluetooth: Unknown HCI packet type 5e [ 1279.849019] Bluetooth: Unknown HCI packet type 5e [ 1279.855332] Bluetooth: Unknown HCI packet type 43 [ 1279.857761] Bluetooth: Unknown HCI packet type 50 [ 1279.869240] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1279.877372] Bluetooth: Unknown HCI packet type 5e [ 1279.882634] Bluetooth: Unknown HCI packet type 5e [ 1279.882877] Bluetooth: Unknown HCI packet type 43 [ 1279.901111] Bluetooth: Unknown HCI packet type 50 [ 1279.902862] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1279.915888] Bluetooth: Unknown HCI packet type 5e [ 1279.920050] Bluetooth: Unknown HCI packet type 5e [ 1279.932554] Bluetooth: Unknown HCI packet type 40 12:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000280)='syz0\x00') shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/188) ioctl$KDADDIO(r0, 0x400455c8, 0x4) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000240)=0x6e, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x327, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x82, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000100)=0x30) [ 1279.936896] Bluetooth: Unknown HCI packet type 5e [ 1279.945988] Bluetooth: Unknown HCI packet type 40 [ 1279.967501] Bluetooth: Unknown HCI packet type 50 [ 1279.980154] audit: type=1800 audit(1590064262.741:262): pid=31588 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=98305 res=0 [ 1279.982577] Bluetooth: Unknown HCI packet type 5e [ 1280.011964] Bluetooth: Unknown HCI packet type 40 [ 1280.018691] audit: type=1800 audit(1590064262.771:263): pid=31588 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=131074 res=0 12:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000240)={0x0, @bt={0x4, 0x1ff, 0x0, 0x1, 0x4, 0x2, 0x6, 0x6, 0x3, 0x6e, 0x3, 0x0, 0x200, 0x4, 0x5, 0x10, {0x0, 0x6}, 0x40, 0x1f}}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000000140)={0x11, 0x1, r4, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1280.170203] Bluetooth: Unknown HCI packet type 5e [ 1280.176481] Bluetooth: Unknown HCI packet type 43 [ 1280.189192] Bluetooth: Unknown HCI packet type 5e [ 1280.194769] Bluetooth: Unknown HCI packet type 50 [ 1280.199718] Bluetooth: Unknown HCI packet type 5e [ 1280.207097] Bluetooth: Unknown HCI packet type 40 [ 1280.213024] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:31:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000180)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x3, 0x0, 0x0, &(0x7f0000000100)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/145, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)=0x0) [ 1281.871453] Bluetooth: hci1 command 0x1003 tx timeout [ 1281.876754] Bluetooth: hci0 command 0x1003 tx timeout [ 1281.876796] Bluetooth: hci1 sending frame failed (-49) [ 1281.883539] Bluetooth: hci0 sending frame failed (-49) [ 1281.951444] Bluetooth: hci2 command 0x1003 tx timeout [ 1281.957227] Bluetooth: hci2 sending frame failed (-49) [ 1282.191545] Bluetooth: hci4 command 0x1003 tx timeout [ 1282.196988] Bluetooth: hci4 sending frame failed (-49) 12:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) mq_getsetattr(r1, &(0x7f0000000100)={0xc98c, 0x9, 0x81, 0x7ff}, 0x0) 12:31:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) [ 1282.957476] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1282.964970] Bluetooth: Unknown HCI packet type 5e [ 1282.970688] Bluetooth: Unknown HCI packet type 43 [ 1282.977049] Bluetooth: Unknown HCI packet type 5e [ 1282.989244] Bluetooth: Unknown HCI packet type 50 [ 1282.995489] Bluetooth: Unknown HCI packet type 5e [ 1283.002219] Bluetooth: Unknown HCI packet type 40 12:31:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0xf, r0, 0x0, 0x0) 12:31:06 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) [ 1283.188994] audit: type=1800 audit(1590064265.951:264): pid=31627 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.0" name="bus" dev="sda1" ino=16069 res=0 12:31:06 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x28, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "79d45212128ed667ba2e02c8647a700b"}]}}}}}}}}, 0x0) [ 1283.951184] Bluetooth: hci0 command 0x1001 tx timeout [ 1283.957791] Bluetooth: hci0 sending frame failed (-49) [ 1283.963844] Bluetooth: hci1 command 0x1001 tx timeout [ 1283.969120] Bluetooth: hci1 sending frame failed (-49) [ 1284.031227] Bluetooth: hci2 command 0x1001 tx timeout [ 1284.036684] Bluetooth: hci2 sending frame failed (-49) [ 1284.271250] Bluetooth: hci4 command 0x1001 tx timeout [ 1284.276968] Bluetooth: hci4 sending frame failed (-49) [ 1285.001097] Bluetooth: hci3 command 0x1003 tx timeout [ 1285.006425] Bluetooth: hci3 sending frame failed (-49) [ 1286.030984] Bluetooth: hci0 command 0x1009 tx timeout [ 1286.030987] Bluetooth: hci1 command 0x1009 tx timeout [ 1286.111240] Bluetooth: hci2 command 0x1009 tx timeout [ 1286.351033] Bluetooth: hci4 command 0x1009 tx timeout [ 1287.080897] Bluetooth: hci3 command 0x1001 tx timeout [ 1287.086216] Bluetooth: hci3 sending frame failed (-49) [ 1289.150715] Bluetooth: hci3 command 0x1009 tx timeout 12:31:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000020603"], 0x44}}, 0x0) 12:31:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 12:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:12 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0xffff8001}, 0x8) [ 1290.022285] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1290.077740] Bluetooth: Unknown HCI packet type 5e [ 1290.078196] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1290.082808] Bluetooth: Unknown HCI packet type 43 [ 1290.115523] Bluetooth: Unknown HCI packet type 5e [ 1290.125024] Bluetooth: Unknown HCI packet type 50 [ 1290.138686] Bluetooth: Unknown HCI packet type 5e [ 1290.146260] Bluetooth: Unknown HCI packet type 40 [ 1290.168384] Bluetooth: Unknown HCI packet type 5e [ 1290.173855] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1290.179810] Bluetooth: Unknown HCI packet type 43 [ 1290.185466] Bluetooth: Unknown HCI packet type 5e [ 1290.191023] Bluetooth: Unknown HCI packet type 50 [ 1290.196057] Bluetooth: Unknown HCI packet type 5e [ 1290.201620] Bluetooth: Unknown HCI packet type 40 12:31:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1290.638772] Bluetooth: Unknown HCI packet type 5e [ 1290.644326] Bluetooth: Unknown HCI packet type 43 [ 1290.656592] Bluetooth: Unknown HCI packet type 5e [ 1290.661717] Bluetooth: Unknown HCI packet type 43 [ 1290.667331] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1290.675205] Bluetooth: Unknown HCI packet type 5e [ 1290.676211] Bluetooth: Unknown HCI packet type 5e [ 1290.691851] Bluetooth: Unknown HCI packet type 50 [ 1290.704133] Bluetooth: Unknown HCI packet type 5e [ 1290.713585] Bluetooth: Unknown HCI packet type 40 [ 1292.110280] Bluetooth: hci0 command 0x1003 tx timeout [ 1292.115590] Bluetooth: hci0 sending frame failed (-49) [ 1292.190354] Bluetooth: hci1 command 0x1003 tx timeout [ 1292.198469] Bluetooth: hci1 sending frame failed (-49) [ 1292.670210] Bluetooth: hci4 command 0x1003 tx timeout [ 1292.675528] Bluetooth: hci2 command 0x1003 tx timeout [ 1292.675567] Bluetooth: hci4 sending frame failed (-49) [ 1292.687073] Bluetooth: hci2 sending frame failed (-49) 12:31:15 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0xffff8001}, 0x8) 12:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="be000000649e7f0a72ba06c22cbb7284a914f40632d76f83685e456834475195148d7f3b4e1fcafffa9aa6f640c942300344403cfea3548ce2ad38d83e7ea67d30de2404aafc36e26e40c4ff2a6d723b17a408ba0ba0086fd1d4b45ce8b598bae47af990dfb87bb2c80f5aa1630bef8ba6d05e19996254a3af3fc454b47affdd1af072cf311d4880d921d68ce0ab1430cd1b5d4b8c7569b8348aa2606090840d33bc36ff1a8c5db57e152f0a4fd61e8bc2cb9a52adcebb5114efd236b0683bfc4ab21b6b8eb2653aa6f6a54d9149cb9e0acaeb41c300d72ef20ef4c93c3184351022498d8c847764637844f55cb82f983e90fe1f67f046503a93bd7fc20d433f5d2625e15dc38bddce43929ea72bc98ba3b41eb7b03d5f922b44b55bd7b0d9407234105a2f3a18c78b01af2803a59fef1cf411fe1156ac86d2d716dfa9aa080f7e709cd9c1c584c8510ccf333403"], &(0x7f0000000240)=0xc6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r2, 0x22, "a27b99884b578856a38f4fe44049d857fcecbe63d8affcf0149eb51859bf550076e3"}, &(0x7f00000002c0)=0x2a) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r3, 0xffffff95}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x32) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffff0001, 0x84000) [ 1293.239466] Bluetooth: Unknown HCI packet type 5e [ 1293.248607] Bluetooth: Unknown HCI packet type 43 [ 1293.256975] Bluetooth: Unknown HCI packet type 5e [ 1293.265877] Bluetooth: Unknown HCI packet type 50 [ 1293.272614] Bluetooth: Unknown HCI packet type 5e [ 1293.279306] Bluetooth: Unknown HCI packet type 40 12:31:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0xffff8001}, 0x8) [ 1294.190089] Bluetooth: hci0 command 0x1001 tx timeout [ 1294.190226] Bluetooth: hci0 sending frame failed (-49) [ 1294.270242] Bluetooth: hci1 command 0x1001 tx timeout [ 1294.275538] Bluetooth: hci1 sending frame failed (-49) [ 1294.750069] Bluetooth: hci2 command 0x1001 tx timeout [ 1294.755539] Bluetooth: hci4 command 0x1001 tx timeout [ 1294.755581] Bluetooth: hci2 sending frame failed (-49) [ 1294.762274] Bluetooth: hci4 sending frame failed (-49) 12:31:17 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1295.310026] Bluetooth: hci3 command 0x1003 tx timeout [ 1295.315435] Bluetooth: hci3 sending frame failed (-49) 12:31:18 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1296.269866] Bluetooth: hci0 command 0x1009 tx timeout [ 1296.349961] Bluetooth: hci1 command 0x1009 tx timeout 12:31:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1296.829861] Bluetooth: hci2 command 0x1009 tx timeout [ 1296.830073] Bluetooth: hci4 command 0x1009 tx timeout [ 1297.389738] Bluetooth: hci3 command 0x1001 tx timeout [ 1297.395622] Bluetooth: hci3 sending frame failed (-49) 12:31:20 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1299.469605] Bluetooth: hci3 command 0x1009 tx timeout 12:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 12:31:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1300.264403] Bluetooth: Unknown HCI packet type 5e [ 1300.264839] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1300.270061] Bluetooth: Unknown HCI packet type 43 [ 1300.304005] Bluetooth: Unknown HCI packet type 5e [ 1300.326599] Bluetooth: Unknown HCI packet type 50 [ 1300.363664] Bluetooth: Unknown HCI packet type 5e [ 1300.373394] Bluetooth: Unknown HCI packet type 40 12:31:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KDADDIO(r2, 0x400455c8, 0x10001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2ac000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x400, 0x3ff, 0x1360, 0xa6a, 0x25f1, 0x5}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) get_thread_area(&(0x7f0000000080)={0x200, 0x20000800, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r2 = dup2(r0, r1) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x5cac, 0xd1f4, 0x100000, 0x81, 0x7, 0x7}) 12:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1300.896565] Bluetooth: Unknown HCI packet type 5e [ 1300.904771] Bluetooth: Unknown HCI packet type 43 [ 1300.928291] Bluetooth: Unknown HCI packet type 5e [ 1300.933711] Bluetooth: Unknown HCI packet type 50 [ 1300.938765] Bluetooth: Unknown HCI packet type 5e [ 1302.269272] Bluetooth: hci0 command 0x1003 tx timeout [ 1302.274707] Bluetooth: hci0 sending frame failed (-49) [ 1302.909484] Bluetooth: hci1 command 0x1003 tx timeout [ 1302.914796] Bluetooth: hci1 sending frame failed (-49) 12:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) getdents(0xffffffffffffff9c, &(0x7f0000001240)=""/4101, 0x1005) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1000000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) write(r1, &(0x7f0000000100)="b70b0c19d0638a0f00e04f456a5536d143d8a3f762166b6c73b5d6007cc302ccd18a98b074f7545b", 0x28) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x882, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000001c0)={0x10b, 0x5}) ioctl$KDADDIO(r4, 0x400455c8, 0x100000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000900)={0x3, @bcast, r7}) 12:31:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/ptmx\x00', r1) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r2, r3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) vmsplice(r3, &(0x7f0000000040), 0x0, 0xd) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1101011) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000240)={{0x4, 0x0, 0x401, 0x3, '\x00', 0x1f}, 0x1, 0x400, 0x7, r5, 0x8, 0x20, 'syz0\x00', &(0x7f0000000180)=['/dev/ptmx\x00', '/dev/ptmx\x00', '%,(]\x00', '*wlan0mime_type\x00', 'ppp1[\x00', '/dev/ptmx\x00', '/dev/ptmx\x00', '\x00'], 0x44, [], [0x0, 0x6, 0x8, 0x1f37]}) [ 1303.460839] Bluetooth: Unknown HCI packet type 5e [ 1303.466366] Bluetooth: Unknown HCI packet type 43 [ 1303.466377] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1303.484150] Bluetooth: Unknown HCI packet type 5e [ 1303.500127] Bluetooth: Unknown HCI packet type 50 [ 1303.516761] Bluetooth: Unknown HCI packet type 5e [ 1303.528048] Bluetooth: Unknown HCI packet type 40 12:31:26 executing program 2: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="41a20f7e61d8ea2b6de708c94210a3996fd9052ee1ac2676ccaabd032f355dbc16943444f42c06fca228aada5b50ab1d3c", 0x31) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x3, 0x0, 0xe89, 0x200, 0xc, "a901f8ffffffffffff9c20bb11473ec50200"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x230c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x400, 0x6}, &(0x7f0000000280)=0x8) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x8, {0x7}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffffff8) 12:31:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) pipe(&(0x7f0000000200)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1304.349105] Bluetooth: hci0 command 0x1001 tx timeout [ 1304.355004] Bluetooth: hci0 sending frame failed (-49) [ 1304.989110] Bluetooth: hci1 command 0x1001 tx timeout [ 1304.995124] Bluetooth: hci1 sending frame failed (-49) [ 1305.469056] Bluetooth: hci2 command 0x1003 tx timeout [ 1305.474493] Bluetooth: hci2 sending frame failed (-49) [ 1306.428827] Bluetooth: hci0 command 0x1009 tx timeout [ 1307.068819] Bluetooth: hci1 command 0x1009 tx timeout [ 1307.548770] Bluetooth: hci2 command 0x1001 tx timeout [ 1307.554958] Bluetooth: hci2 sending frame failed (-49) [ 1309.638669] Bluetooth: hci2 command 0x1009 tx timeout 12:31:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:31:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) syz_init_net_socket$rose(0xb, 0x5, 0x0) 12:31:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x20, 0x2, 0x1}}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) [ 1310.499055] Bluetooth: Unknown HCI packet type 5e [ 1310.504101] Bluetooth: Unknown HCI packet type 43 [ 1310.516101] Bluetooth: Unknown HCI packet type 5e [ 1310.519092] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1310.525084] Bluetooth: Unknown HCI packet type 50 [ 1310.546694] Bluetooth: Unknown HCI packet type 5e [ 1310.592983] Bluetooth: Unknown HCI packet type 40 12:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x4, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:31:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) [ 1311.139406] Bluetooth: Unknown HCI packet type 5e [ 1311.144701] Bluetooth: Unknown HCI packet type 43 [ 1311.157081] Bluetooth: Unknown HCI packet type 5e [ 1311.175133] Bluetooth: Unknown HCI packet type 50 [ 1311.186976] Bluetooth: Unknown HCI packet type 5e [ 1311.193964] Bluetooth: Unknown HCI packet type 40 [ 1312.508224] Bluetooth: hci0 command 0x1003 tx timeout [ 1312.513717] Bluetooth: hci0 sending frame failed (-49) [ 1313.148130] Bluetooth: hci1 command 0x1003 tx timeout [ 1313.153660] Bluetooth: hci1 sending frame failed (-49) 12:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x16, 0x7, 0x2f, &(0x7f0000000100)="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"}) 12:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1313.713065] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1313.713835] Bluetooth: Unknown HCI packet type 5e [ 1313.740555] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1313.746515] Bluetooth: Unknown HCI packet type 5e [ 1313.761074] Bluetooth: Unknown HCI packet type 43 [ 1313.769728] Bluetooth: Unknown HCI packet type 5e [ 1313.774709] Bluetooth: Unknown HCI packet type 50 [ 1313.780148] Bluetooth: Unknown HCI packet type 5e [ 1313.785009] Bluetooth: Unknown HCI packet type 40 [ 1313.793307] Bluetooth: Unknown HCI packet type 43 [ 1313.811703] Bluetooth: Unknown HCI packet type 5e [ 1313.831036] Bluetooth: Unknown HCI packet type 50 [ 1313.850437] Bluetooth: Unknown HCI packet type 5e [ 1313.856060] Bluetooth: Unknown HCI packet type 40 [ 1314.587993] Bluetooth: hci0 command 0x1001 tx timeout [ 1314.593333] Bluetooth: hci0 sending frame failed (-49) [ 1315.227893] Bluetooth: hci1 command 0x1001 tx timeout [ 1315.233576] Bluetooth: hci1 sending frame failed (-49) [ 1315.787969] Bluetooth: hci3 command 0x1003 tx timeout [ 1315.793370] Bluetooth: hci2 command 0x1003 tx timeout [ 1315.793417] Bluetooth: hci3 sending frame failed (-49) [ 1315.800345] Bluetooth: hci2 sending frame failed (-49) [ 1316.667789] Bluetooth: hci0 command 0x1009 tx timeout [ 1317.318101] Bluetooth: hci1 command 0x1009 tx timeout [ 1317.867733] Bluetooth: hci2 command 0x1001 tx timeout [ 1317.873052] Bluetooth: hci2 sending frame failed (-49) [ 1317.878952] Bluetooth: hci3 command 0x1001 tx timeout [ 1317.884440] Bluetooth: hci3 sending frame failed (-49) [ 1319.947606] Bluetooth: hci3 command 0x1009 tx timeout [ 1319.958315] Bluetooth: hci2 command 0x1009 tx timeout 12:31:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:43 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000100)={0x2, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0x6, 0xdacf171c091cbefe}) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) 12:31:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1320.784919] Bluetooth: Unknown HCI packet type 5e [ 1320.785042] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1320.790010] Bluetooth: Unknown HCI packet type 43 [ 1320.808094] Bluetooth: Unknown HCI packet type 5e [ 1320.813435] Bluetooth: Unknown HCI packet type 50 [ 1320.829871] Bluetooth: Unknown HCI packet type 5e [ 1320.837056] Bluetooth: Unknown HCI packet type 43 [ 1320.860000] Bluetooth: Unknown HCI packet type 5e [ 1320.864287] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1320.866090] Bluetooth: Unknown HCI packet type 5e [ 1320.876977] Bluetooth: Unknown HCI packet type 50 [ 1320.881600] Bluetooth: Unknown HCI packet type 40 [ 1320.885557] Bluetooth: Unknown HCI packet type 5e [ 1320.899461] Bluetooth: Unknown HCI packet type 40 12:31:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:31:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) 12:31:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) [ 1321.376930] Bluetooth: Unknown HCI packet type 5e [ 1321.382725] Bluetooth: Unknown HCI packet type 43 [ 1321.390002] Bluetooth: Unknown HCI packet type 5e [ 1321.396647] Bluetooth: Unknown HCI packet type 50 [ 1321.414433] Bluetooth: Unknown HCI packet type 5e [ 1321.422362] Bluetooth: Unknown HCI packet type 40 [ 1322.827282] Bluetooth: hci0 command 0x1003 tx timeout [ 1322.832747] Bluetooth: hci0 sending frame failed (-49) [ 1322.907235] Bluetooth: hci4 command 0x1003 tx timeout [ 1322.912601] Bluetooth: hci4 sending frame failed (-49) [ 1323.387199] Bluetooth: hci1 command 0x1003 tx timeout [ 1323.392579] Bluetooth: hci1 sending frame failed (-49) 12:31:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x4000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) 12:31:46 executing program 3: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000040), &(0x7f0000000180)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) getsockname(r3, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000001c0)=0x80) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="d75d55fa8b40f251ce3142d3b772f0315c38322c251bc3775d5ade8d37826c085fb86ca238deb8fc76ffa0f793da07dd6d3a78b9b5de219e30293eea70b0cdb3e8199b56cbb356abc445e6551db0fa66bf368c1b73468ef531601bd1fbab65462ce26a26cf8faf8dfc161abdb27e27a95bbae4cfcc207224a2dcd5284a51d3", 0x7f}], 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) 12:31:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:31:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) [ 1324.128554] Bluetooth: Invalid header checksum [ 1324.133460] Bluetooth: Invalid header checksum 12:31:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) [ 1324.247522] Bluetooth: Invalid header checksum [ 1324.357268] Bluetooth: Invalid header checksum [ 1324.467326] Bluetooth: Invalid header checksum [ 1324.577308] Bluetooth: Invalid header checksum [ 1324.697347] Bluetooth: Invalid header checksum [ 1324.907144] Bluetooth: hci0 command 0x1001 tx timeout [ 1324.912482] Bluetooth: hci0 sending frame failed (-49) [ 1324.997102] Bluetooth: hci4 command 0x1001 tx timeout [ 1325.002488] Bluetooth: hci4 sending frame failed (-49) [ 1325.467068] Bluetooth: hci1 command 0x1001 tx timeout [ 1325.472376] Bluetooth: hci1 sending frame failed (-49) [ 1326.986898] Bluetooth: hci0 command 0x1009 tx timeout [ 1327.077022] Bluetooth: hci4 command 0x1009 tx timeout [ 1327.546896] Bluetooth: hci1 command 0x1009 tx timeout 12:31:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2080, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) [ 1330.973123] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1330.981001] Bluetooth: Unknown HCI packet type 5e [ 1330.986159] Bluetooth: Unknown HCI packet type 43 [ 1330.992026] Bluetooth: Unknown HCI packet type 5e [ 1330.997468] Bluetooth: Unknown HCI packet type 50 [ 1331.003649] Bluetooth: Unknown HCI packet type 5e [ 1331.008973] Bluetooth: Unknown HCI packet type 40 12:31:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:31:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x72, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r2, 0x1}, &(0x7f0000000240)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000100)="ac3713351a129d20b4e1b5cc7c5e829fec9e9c05801b996f3f11d9b6da186a5d4930695d17bf7a85409e1ab38f06cc07a7ff3ada14602c8ee3eef180b5e8e2756e488624e7bbf3e4b42eb89677480e8f9559b707cf0c808a1689f5568c6accb27b78ca00471cf081a742144f1765a29dda30aa9914aee8912efdd59d66c934abbb54d854b94e44bf33a82033c5c8b607aeecadbe495649279782ba69f22ad53cb476a8199b7c4861dc5b9aeffd36a9c6aec92526b7d9b1c70b48146784e20d3d39ae226f7489c5e48d2f67678b", 0xfe61) ioctl$VT_RELDISP(r3, 0x5605) 12:31:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:31:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6a0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000080)=0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000180)={0x3, @default, r5}) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000100)=""/30) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x9) fdatasync(r0) 12:31:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 12:31:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) [ 1331.601947] Bluetooth: Unknown HCI packet type 5e [ 1331.607739] Bluetooth: Data length is too large [ 1331.615175] Bluetooth: Unknown HCI packet type 40 [ 1331.628039] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1331.632601] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1331.634735] Bluetooth: Unknown HCI packet type 5e [ 1331.646004] Bluetooth: Unknown HCI packet type 5e [ 1331.658307] Bluetooth: Unknown HCI packet type 43 [ 1331.661468] Bluetooth: Unknown HCI packet type 43 [ 1331.663712] Bluetooth: Unknown HCI packet type 5e [ 1331.673563] Bluetooth: Unknown HCI packet type 50 [ 1331.679187] Bluetooth: Unknown HCI packet type 5e [ 1331.681570] Bluetooth: Unknown HCI packet type 5e [ 1331.684195] Bluetooth: Unknown HCI packet type 40 [ 1331.699110] Bluetooth: Unknown HCI packet type 50 [ 1331.715621] Bluetooth: Unknown HCI packet type 5e [ 1331.741560] Bluetooth: Unknown HCI packet type 40 12:31:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 12:31:54 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 12:31:54 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:31:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1332.986263] Bluetooth: hci0 command 0x1003 tx timeout [ 1332.991878] Bluetooth: hci0 sending frame failed (-49) [ 1333.626257] Bluetooth: hci1 command 0x1003 tx timeout [ 1333.631583] Bluetooth: hci1 sending frame failed (-49) [ 1333.706239] Bluetooth: hci3 command 0x1003 tx timeout [ 1333.711665] Bluetooth: hci3 sending frame failed (-49) [ 1333.717890] Bluetooth: hci2 command 0x1003 tx timeout [ 1333.723161] Bluetooth: hci2 sending frame failed (-49) [ 1335.066135] Bluetooth: hci0 command 0x1001 tx timeout [ 1335.071462] Bluetooth: hci0 sending frame failed (-49) [ 1335.706105] Bluetooth: hci1 command 0x1001 tx timeout [ 1335.711414] Bluetooth: hci1 sending frame failed (-49) [ 1335.786059] Bluetooth: hci3 command 0x1001 tx timeout [ 1335.791359] Bluetooth: hci3 sending frame failed (-49) [ 1335.796840] Bluetooth: hci2 command 0x1001 tx timeout [ 1335.802122] Bluetooth: hci2 sending frame failed (-49) [ 1337.145942] Bluetooth: hci0 command 0x1009 tx timeout [ 1337.785882] Bluetooth: hci1 command 0x1009 tx timeout [ 1337.865974] Bluetooth: hci2 command 0x1009 tx timeout [ 1337.871242] Bluetooth: hci3 command 0x1009 tx timeout 12:32:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:03 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1341.198858] Bluetooth: Unknown HCI packet type 5e [ 1341.199374] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1341.203833] Bluetooth: Unknown HCI packet type 43 [ 1341.227895] Bluetooth: Unknown HCI packet type 5e [ 1341.232855] Bluetooth: Unknown HCI packet type 50 [ 1341.260477] Bluetooth: Unknown HCI packet type 5e [ 1341.265378] Bluetooth: Unknown HCI packet type 40 12:32:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080)=0x101, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:04 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1341.878188] Bluetooth: Unknown HCI packet type 5e [ 1341.883276] Bluetooth: Unknown HCI packet type 43 [ 1341.892027] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1341.893514] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1341.904445] Bluetooth: Unknown HCI packet type 5e [ 1341.909561] Bluetooth: Unknown HCI packet type 43 12:32:04 executing program 0: r0 = syz_open_dev$loop(0x0, 0x0, 0x105084) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1341.924914] Bluetooth: Unknown HCI packet type 5e [ 1341.933482] Bluetooth: Unknown HCI packet type 5e [ 1341.951614] Bluetooth: Unknown HCI packet type 50 [ 1341.965529] Bluetooth: Unknown HCI packet type 5e [ 1341.967909] Bluetooth: Unknown HCI packet type 50 12:32:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1341.990543] Bluetooth: Unknown HCI packet type 40 [ 1341.998212] Bluetooth: Unknown HCI packet type 5e [ 1342.016969] Bluetooth: Unknown HCI packet type 40 12:32:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1343.235352] Bluetooth: hci0 command 0x1003 tx timeout [ 1343.240726] Bluetooth: hci0 sending frame failed (-49) [ 1343.945273] Bluetooth: hci1 command 0x1003 tx timeout [ 1343.945294] Bluetooth: hci2 command 0x1003 tx timeout [ 1343.950605] Bluetooth: hci1 sending frame failed (-49) [ 1343.965369] Bluetooth: hci2 sending frame failed (-49) [ 1344.105277] Bluetooth: hci3 command 0x1003 tx timeout [ 1344.110656] Bluetooth: hci3 sending frame failed (-49) [ 1345.305231] Bluetooth: hci0 command 0x1001 tx timeout [ 1345.310535] Bluetooth: hci0 sending frame failed (-49) [ 1346.025256] Bluetooth: hci2 command 0x1001 tx timeout [ 1346.030488] Bluetooth: hci1 command 0x1001 tx timeout [ 1346.030582] Bluetooth: hci2 sending frame failed (-49) [ 1346.042704] Bluetooth: hci1 sending frame failed (-49) [ 1346.185169] Bluetooth: hci3 command 0x1001 tx timeout [ 1346.190485] Bluetooth: hci3 sending frame failed (-49) [ 1347.385161] Bluetooth: hci0 command 0x1009 tx timeout [ 1348.115054] Bluetooth: hci1 command 0x1009 tx timeout [ 1348.120322] Bluetooth: hci2 command 0x1009 tx timeout [ 1348.264995] Bluetooth: hci3 command 0x1009 tx timeout 12:32:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, &(0x7f0000000080)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000080)=r4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4a01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11000004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x8032) [ 1351.478514] Bluetooth: Unknown HCI packet type 5e [ 1351.483479] Bluetooth: Unknown HCI packet type 43 [ 1351.499322] Bluetooth: Unknown HCI packet type 5e [ 1351.522323] Bluetooth: Unknown HCI packet type 50 [ 1351.531066] Bluetooth: Unknown HCI packet type 5e [ 1351.536534] Bluetooth: Unknown HCI packet type 40 12:32:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1352.129864] Bluetooth: Unknown HCI packet type 5e [ 1352.135804] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1352.145172] Bluetooth: Unknown HCI packet type 43 [ 1352.150159] Bluetooth: Unknown HCI packet type 5e [ 1352.174593] Bluetooth: Unknown HCI packet type 50 [ 1352.179469] Bluetooth: Unknown HCI packet type 5e [ 1352.184369] Bluetooth: Unknown HCI packet type 40 12:32:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:32:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200082, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x101, 0x6, 0x156, 0xf52, 0x2}}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x80000001, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x40, @empty}}}, 0x118) 12:32:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x7d1143, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl(r0, 0x6, &(0x7f0000000100)="2a3095ab1b6e35a99ba1e1b1da922e1e09754986724d59690d78f0cb506b020d98c24c5eece029ce8be3e263af3a8e9abace701ab96ea9e495968a28") pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000340)={0x7, 0x4, 0x4, 0x40, 0x10000, {0x0, 0xea60}, {0x4, 0x8, 0x7f, 0x9, 0x4, 0x4, "76a20442"}, 0x1, 0x1, @planes=&(0x7f0000000080)={0xfffffffb, 0x80, @mem_offset=0x1, 0xffff6317}, 0x0, 0x0, r2}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000300)={0x8ce37500, 0x3, 0x8cf, 0x5, 0x6042}) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000240)=0x4, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000280)={0x40}, 0x4) fchmodat(r5, &(0x7f0000000140)='./file0\x00', 0x100) 12:32:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1352.732978] Bluetooth: Unknown HCI packet type 5e [ 1352.739154] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1352.748666] Bluetooth: Unknown HCI packet type 43 [ 1352.770834] Bluetooth: Unknown HCI packet type 5e [ 1352.776159] Bluetooth: Unknown HCI packet type 5e 12:32:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) [ 1352.776506] Bluetooth: Unknown HCI packet type 50 [ 1352.781034] Bluetooth: Data length is too large [ 1352.781059] Bluetooth: Unknown HCI packet type 40 [ 1352.804669] Bluetooth: Unknown HCI packet type 5e [ 1352.810019] Bluetooth: Unknown HCI packet type 40 12:32:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) [ 1353.546852] Bluetooth: hci0 command 0x1003 tx timeout [ 1353.552361] Bluetooth: hci0 sending frame failed (-49) [ 1354.184572] Bluetooth: hci1 command 0x1003 tx timeout [ 1354.189960] Bluetooth: hci1 sending frame failed (-49) [ 1354.744312] Bluetooth: hci2 command 0x1003 tx timeout [ 1354.749721] Bluetooth: hci2 sending frame failed (-49) [ 1354.824349] Bluetooth: hci3 command 0x1003 tx timeout [ 1354.829966] Bluetooth: hci3 sending frame failed (-49) [ 1355.624300] Bluetooth: hci0 command 0x1001 tx timeout [ 1355.629668] Bluetooth: hci0 sending frame failed (-49) [ 1356.264492] Bluetooth: hci1 command 0x1001 tx timeout [ 1356.269801] Bluetooth: hci1 sending frame failed (-49) [ 1356.824312] Bluetooth: hci2 command 0x1001 tx timeout [ 1356.829688] Bluetooth: hci2 sending frame failed (-49) [ 1356.904262] Bluetooth: hci3 command 0x1001 tx timeout [ 1356.909598] Bluetooth: hci3 sending frame failed (-49) [ 1357.704211] Bluetooth: hci0 command 0x1009 tx timeout [ 1358.344159] Bluetooth: hci1 command 0x1009 tx timeout [ 1358.914278] Bluetooth: hci2 command 0x1009 tx timeout [ 1358.994110] Bluetooth: hci3 command 0x1009 tx timeout 12:32:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) 12:32:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40041800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x800, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000004) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$get_security(0x11, r3, &(0x7f0000000280)=""/234, 0xea) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000500)="2868ce0816df099469eb81000000000000000000480fefedddd87375805c972bad8ac97dcddc415a9dc00328f28f249a4e070a044711c7d00a2d12d976562d5bce62f7f3e00a640a5eebf4de81cc57a408186ff7ce5861820ea084ef160691ccb42274d71323e95d8ecf84a08668bd53a7e31905a4548e57b64aab715848113d8f7d7c22b45ac3032fc2460df866fb42e0e10ffe2d8614e29338d9a319b2966386d31a32366aa6b40aa310249f7ff14ac4aef111e5662e45188cbbfcffc4292fa34957e45713", 0xc6) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x12) [ 1361.682539] Bluetooth: Unknown HCI packet type 5e [ 1361.689098] Bluetooth: Unknown HCI packet type 43 [ 1361.697297] Bluetooth: Unknown HCI packet type 5e [ 1361.697454] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1361.702342] Bluetooth: Unknown HCI packet type 43 [ 1361.710415] Bluetooth: Unknown HCI packet type 12 [ 1361.721956] Bluetooth: Unknown HCI packet type 5e [ 1361.745551] Bluetooth: Unknown HCI packet type 5e [ 1361.756416] Bluetooth: Unknown HCI packet type 50 [ 1361.770028] Bluetooth: Unknown HCI packet type 5e [ 1361.776428] Bluetooth: Unknown HCI packet type 40 [ 1361.780518] Bluetooth: Unknown HCI packet type 50 [ 1361.796455] Bluetooth: Unknown HCI packet type 5e [ 1361.802101] Bluetooth: Unknown HCI packet type 40 12:32:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) [ 1362.309680] Bluetooth: hci1 sending frame failed (-49) [ 1362.310228] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:32:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 12:32:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fchmodat(0xffffffffffffffff, 0x0, 0x2) exit_group(0x0) syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', 0x0, 0x5, 0x5, &(0x7f0000000380)=[{&(0x7f0000000180)}, {0x0}, {0x0, 0x0, 0xfffffffffffffff7}, {&(0x7f00000001c0), 0x0, 0x3}, {0x0, 0x0, 0x3}], 0x80000, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000000000000000100000000000066bee17726588e2a1700000000000000a52aa37b3a626f6e6430000000"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={0x0}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x101, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) 12:32:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 12:32:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1363.703688] Bluetooth: hci4 command 0x1003 tx timeout [ 1363.703723] Bluetooth: hci0 command 0x1003 tx timeout [ 1363.709286] Bluetooth: hci4 sending frame failed (-49) [ 1363.721490] Bluetooth: hci0 sending frame failed (-49) [ 1364.343677] Bluetooth: hci1 command 0x1003 tx timeout [ 1364.349008] Bluetooth: hci1 sending frame failed (-49) [ 1365.783544] Bluetooth: hci0 command 0x1001 tx timeout [ 1365.789056] Bluetooth: hci4 command 0x1001 tx timeout [ 1365.789211] Bluetooth: hci0 sending frame failed (-49) [ 1365.801583] Bluetooth: hci4 sending frame failed (-49) [ 1366.423481] Bluetooth: hci1 command 0x1001 tx timeout [ 1366.428989] Bluetooth: hci1 sending frame failed (-49) [ 1367.873416] Bluetooth: hci4 command 0x1009 tx timeout [ 1367.878682] Bluetooth: hci0 command 0x1009 tx timeout [ 1368.503309] Bluetooth: hci1 command 0x1009 tx timeout 12:32:34 executing program 1: syz_read_part_table(0x8, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="7e234a58706bb87491bddab50ebf8be8ebcfe49a3b1bec14e7846861fdca5d2e2d82bc33b0518ffc7dc6fc39c9e1d761f0a2e03971371e1db23241c4d91025891ef73d3775449a1f1cbbc24eefe61f77aeaed05342b8b9a6289f664da329ae785c04c7f3e5fde76bdd39bc528942111722ef0a6f675ec81893a262807744a26e804a1c68b9ce8ab22e94a8f82226d11773c4bb0711df15eac3b6374b72957ec0f209ec3319816027203c42b0b87c60ff523a72b07a09700a812aee38c2d5b07031889b3bbe7107362c18a0a1f654549639", 0xd1, 0x7}, {&(0x7f0000000240)="c55ff55e0148d1035bc62692dd474f39cc0f74f46c1f37ec2e939bb3530f1404b5b4bc72e224f682386d2c18b596a00e535d88e7aa84e118196a1cb3fe4bf75abcd5fc2fcaeb9ab16a05ed0885187a9073e8aa6e82588ce8eec0d9fb379c8f40e52cb0be77dccc8adba911d4009651b3cef9fbe5e0e3eeb7608817d519d3a63627d4f73345e62f83bb2434870c75bf469104cfa75a2f9d6d08368fb788fe51099e14022a82", 0xa5, 0x6}]) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair(0x5, 0x1, 0x401, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r1, &(0x7f0000000300)=""/13, 0xd, 0x40000000, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:32:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1371.950632] Bluetooth: Unknown HCI packet type 5e [ 1371.956038] Bluetooth: Unknown HCI packet type 43 [ 1371.971159] Bluetooth: Unknown HCI packet type 5e [ 1371.977497] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1371.989750] Bluetooth: Unknown HCI packet type 50 [ 1372.008954] Bluetooth: Unknown HCI packet type 5e [ 1372.014454] Bluetooth: Unknown HCI packet type 40 12:32:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) dup2(r1, r2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)={0x401, 0x9, 0x9, 0x2ff, 0x16, "aa0e47c9320354ff"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="be000000649e7f0a72ba06c22cbb7284a914f40632d76f83685e456834475195148d7f3b4e1fcafffa9aa6f640c942300344403cfea3548ce2ad38d83e7ea67d30de2404aafc36e26e40c4ff2a6d723b17a408ba0ba0086fd1d4b45ce8b598bae47af990dfb87bb2c80f5aa1630bef8ba6d05e19996254a3af3fc454b47affdd1af072cf311d4880d921d68ce0ab1430cd1b5d4b8c7569b8348aa2606090840d33bc36ff1a8c5db57e152f0a4fd61e8bc2cb9a52adcebb5114efd236b0683bfc4ab21b6b8eb2653aa6f6a54d9149cb9e0acaeb41c300d72ef20ef4c93c3184351022498d8c847764637844f55cb82f983e90fe1f67f046503a93bd7fc20d433f5d2625e15dc38bddce43929ea72bc98ba3b41eb7b03d5f922b44b55bd7b0d9407234105a2f3a18c78b01af2803a59fef1cf411fe1156ac86d2d716dfa9aa080f7e709cd9c1c584c8510ccf333403"], &(0x7f0000000240)=0xc6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={r2, 0x22, "a27b99884b578856a38f4fe44049d857fcecbe63d8affcf0149eb51859bf550076e3"}, &(0x7f00000002c0)=0x2a) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r3, 0xffffff95}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x32) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xffffffffffff0001, 0x84000) 12:32:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1372.555806] Bluetooth: Unknown HCI packet type 5e [ 1372.560954] Bluetooth: Unknown HCI packet type 43 [ 1372.569703] Bluetooth: Unknown HCI packet type 5e [ 1372.590164] Bluetooth: Unknown HCI packet type 50 [ 1372.590808] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:32:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 1372.602229] Bluetooth: Unknown HCI packet type 5e [ 1372.605318] Bluetooth: Unknown HCI packet type 5e [ 1372.608277] Bluetooth: Unknown HCI packet type 43 [ 1372.617002] Bluetooth: Unknown HCI packet type 40 [ 1372.624995] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1372.639804] Bluetooth: Unknown HCI packet type 5e [ 1372.645975] Bluetooth: Unknown HCI packet type 5e [ 1372.651414] Bluetooth: Unknown HCI packet type 43 [ 1372.657414] Bluetooth: Unknown HCI packet type 5e [ 1372.659264] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1372.668375] Bluetooth: Unknown HCI packet type 50 [ 1372.670156] Bluetooth: Unknown HCI packet type 43 [ 1372.689525] Bluetooth: Unknown HCI packet type 5e [ 1372.691198] Bluetooth: Unknown HCI packet type 5e [ 1372.696896] Bluetooth: Unknown HCI packet type 5e 12:32:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 1372.715210] Bluetooth: Unknown HCI packet type 50 [ 1372.725646] Bluetooth: Unknown HCI packet type 50 [ 1372.731000] Bluetooth: Unknown HCI packet type 5e [ 1372.738074] Bluetooth: Unknown HCI packet type 5e [ 1372.740059] Bluetooth: Unknown HCI packet type 40 [ 1372.744821] Bluetooth: Unknown HCI packet type 40 [ 1372.762204] Bluetooth: Unknown HCI packet type 40 12:32:35 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 12:32:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1374.022808] Bluetooth: hci0 command 0x1003 tx timeout [ 1374.028146] Bluetooth: hci0 sending frame failed (-49) [ 1374.592730] Bluetooth: hci1 command 0x1003 tx timeout [ 1374.598127] Bluetooth: hci1 sending frame failed (-49) [ 1374.662719] Bluetooth: hci4 command 0x1003 tx timeout [ 1374.668312] Bluetooth: hci4 sending frame failed (-49) [ 1374.675213] Bluetooth: hci3 command 0x1003 tx timeout [ 1374.681081] Bluetooth: hci3 sending frame failed (-49) [ 1374.687570] Bluetooth: hci2 command 0x1003 tx timeout [ 1374.693675] Bluetooth: hci2 sending frame failed (-49) [ 1376.102680] Bluetooth: hci0 command 0x1001 tx timeout [ 1376.108359] Bluetooth: hci0 sending frame failed (-49) [ 1376.662660] Bluetooth: hci1 command 0x1001 tx timeout [ 1376.668455] Bluetooth: hci1 sending frame failed (-49) [ 1376.742658] Bluetooth: hci2 command 0x1001 tx timeout [ 1376.747984] Bluetooth: hci3 command 0x1001 tx timeout [ 1376.748062] Bluetooth: hci2 sending frame failed (-49) [ 1376.753635] Bluetooth: hci3 sending frame failed (-49) [ 1376.764649] Bluetooth: hci4 command 0x1001 tx timeout [ 1376.769938] Bluetooth: hci4 sending frame failed (-49) [ 1378.192476] Bluetooth: hci0 command 0x1009 tx timeout [ 1378.742510] Bluetooth: hci1 command 0x1009 tx timeout [ 1378.822432] Bluetooth: hci4 command 0x1009 tx timeout [ 1378.827946] Bluetooth: hci2 command 0x1009 tx timeout [ 1378.832510] Bluetooth: hci3 command 0x1009 tx timeout 12:32:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x72a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000180)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, 0x6, {0x4, 0x4, 0x529f40ac, 0x8}}, 0x20) 12:32:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socket$vsock_dgram(0x28, 0x2, 0x0) 12:32:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4080) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=0x0) 12:32:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x11) 12:32:45 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000f) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:32:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1382.853287] Bluetooth: Unknown HCI packet type 5e [ 1382.858767] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1382.858779] Bluetooth: Unknown HCI packet type 43 [ 1382.882158] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1382.888984] Bluetooth: Unknown HCI packet type 5e [ 1382.894142] Bluetooth: Unknown HCI packet type 43 12:32:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x30) [ 1382.909425] Bluetooth: Unknown HCI packet type 5e [ 1382.919111] Bluetooth: Unknown HCI packet type 5e [ 1382.938012] Bluetooth: Unknown HCI packet type 50 [ 1382.950550] Bluetooth: Unknown HCI packet type 50 12:32:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:45 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1382.977473] Bluetooth: Unknown HCI packet type 5e [ 1382.982726] Bluetooth: Unknown HCI packet type 5e [ 1382.987686] Bluetooth: Unknown HCI packet type 40 [ 1382.998339] Bluetooth: Unknown HCI packet type 40 [ 1384.901946] Bluetooth: hci1 command 0x1003 tx timeout [ 1384.907306] Bluetooth: hci0 command 0x1003 tx timeout [ 1384.907372] Bluetooth: hci1 sending frame failed (-49) [ 1384.913017] Bluetooth: hci0 sending frame failed (-49) [ 1386.981811] Bluetooth: hci1 command 0x1001 tx timeout [ 1386.987143] Bluetooth: hci1 sending frame failed (-49) [ 1386.993193] Bluetooth: hci0 command 0x1001 tx timeout [ 1386.998593] Bluetooth: hci0 sending frame failed (-49) [ 1389.061644] Bluetooth: hci1 command 0x1009 tx timeout [ 1389.072481] Bluetooth: hci0 command 0x1009 tx timeout 12:32:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='veth0_to_bond\x00', 0x1, 0x2, 0x20}) 12:32:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000240)={'nr0\x00'}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="f0cefa825983a5cd6c8f1447d5ff7ebe345c0d176815d28e0566eece52da82f077c3e6aa45d7d5", 0x27, 0x1}) 12:32:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x3, 0x4, 0xdbd, 0x6, "18f4b62f12c501dd422e5bf10795e25f49fe1c"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:32:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = dup2(r1, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000140)={r6, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x10, 0x7, 0x3, &(0x7f00000000c0)=[0x4, 0x9, 0x8, 0x6, 0x0, 0x6, 0x1], &(0x7f0000000100)=[0x4, 0x5, 0x7, 0x0, 0x1, 0xfff, 0x6, 0x0]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000040)={r5, 0x6}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000000)={r5, 0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000300)={r5, 0x2, &(0x7f0000000200)=[0xfff, 0x7], &(0x7f0000000240)=[0xc9e4, 0x13e3], 0x4, 0x9, 0x8, &(0x7f0000000280)=[0xffffffff, 0x5, 0xffff, 0x6, 0x8e58, 0x4, 0x9, 0x1ff, 0xa62], &(0x7f00000002c0)=[0x5, 0x2, 0x4, 0x2, 0x3, 0x0, 0x40, 0xfff, 0x200, 0x0]}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40004) 12:32:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1393.074894] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1393.081044] Bluetooth: Unknown HCI packet type 5e [ 1393.086269] Bluetooth: Unknown HCI packet type 43 [ 1393.095029] Bluetooth: Unknown HCI packet type 5e [ 1393.095340] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1393.107041] Bluetooth: Unknown HCI packet type 5e [ 1393.118894] Bluetooth: Unknown HCI packet type 5e [ 1393.124616] Bluetooth: Unknown HCI packet type 43 [ 1393.125267] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1393.134275] Bluetooth: Unknown HCI packet type 43 [ 1393.142529] Bluetooth: Unknown HCI packet type 50 [ 1393.150043] Bluetooth: Unknown HCI packet type 5e [ 1393.158581] Bluetooth: Unknown HCI packet type 5e [ 1393.169681] Bluetooth: Unknown HCI packet type 5e 12:32:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1393.177664] Bluetooth: Unknown HCI packet type 50 [ 1393.187040] Bluetooth: Unknown HCI packet type 50 [ 1393.195857] Bluetooth: Unknown HCI packet type 40 [ 1393.203048] Bluetooth: Unknown HCI packet type 5e [ 1393.210382] Bluetooth: Unknown HCI packet type 5e [ 1393.219250] Bluetooth: Unknown HCI packet type 40 12:32:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1393.229136] Bluetooth: Unknown HCI packet type 40 12:32:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:32:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1395.141172] Bluetooth: hci2 command 0x1003 tx timeout [ 1395.147905] Bluetooth: hci2 sending frame failed (-49) [ 1395.151273] Bluetooth: hci0 command 0x1003 tx timeout [ 1395.153730] Bluetooth: hci1 command 0x1003 tx timeout [ 1395.163901] Bluetooth: hci0 sending frame failed (-49) [ 1395.169519] Bluetooth: hci1 sending frame failed (-49) [ 1397.221105] Bluetooth: hci0 command 0x1001 tx timeout [ 1397.221110] Bluetooth: hci1 command 0x1001 tx timeout [ 1397.221186] Bluetooth: hci1 sending frame failed (-49) [ 1397.226493] Bluetooth: hci2 command 0x1001 tx timeout [ 1397.231803] Bluetooth: hci0 sending frame failed (-49) [ 1397.246693] Bluetooth: hci2 sending frame failed (-49) [ 1399.300950] Bluetooth: hci0 command 0x1009 tx timeout [ 1399.300967] Bluetooth: hci2 command 0x1009 tx timeout [ 1399.306241] Bluetooth: hci1 command 0x1009 tx timeout 12:33:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:33:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00\x00\xc3\x00@\x00\x00\x00\x00\x00\xfa\xa2=\xc5\x06\xf8\x8e\xc6\xb1\x02\xe1\xdfL\xee\xa3\x00\xcf4\xf9\xfc\xd0d\x1d\x95\xa2\a\x00\x00\x00e5 n\x13\xb4\t\x00\x00\x00\x00\x00\x00\x00/\x95\x8awM\xf1\x8b8\x95\xf0\x13rQ}p>[\x0ez\x91\x96\x8f\xae|\x99\x9b;x2\xbb\xf3 \x81\xac\xa6 8+u\xe5\x98\x90\x97\xd4_O\xf9=z\xe7\\\f\x9f\xed\xe1\x13yZ0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/161, 0xa1}], 0x3, &(0x7f0000000440)=""/198, 0xc6}, 0x7fff}, {{&(0x7f0000000540)=@ax25={{}, [@null, @rose, @default, @remote, @netrom, @netrom, @netrom, @null]}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/227, 0xe3}], 0x2}, 0x8001}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/81, 0x51}], 0x2, &(0x7f0000000980)=""/58, 0x3a}, 0x6}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/152, 0x98}], 0x2, &(0x7f0000000bc0)=""/162, 0xa2}, 0x56}], 0x4, 0x2, &(0x7f0000000d80)={0x77359400}) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000dc0)=""/215, &(0x7f0000000ec0)=0xd7) 12:33:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0xb00) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x2}) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x3ff, 0x0, 0x100, 0xa81, 0x0, 0xedf4, 0x5, 0x3f, 0x3ff, 0x9, 0x4}) sendto$l2tp(r1, &(0x7f0000000140)="1136504f513d586f5ee61ee2a844a3a1ba2b3df42c37b7315a5f009158991bae1d7302918cea74c2a72dc11e3897308306ebd024c7a37e493dc69f13685e0d54ef7883e93887f456a41b438f35e39199068c3fa21da636b3cdb3345e7e534cd5c75098aa", 0x64, 0x4000, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) 12:33:06 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x400001, 0x40) ioctl$KDMKTONE(r1, 0x4b30, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x401) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x32) 12:33:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1403.351378] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1403.352053] Bluetooth: Unknown HCI packet type 5e [ 1403.357336] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1403.362359] Bluetooth: Unknown HCI packet type 5e [ 1403.388820] Bluetooth: Unknown HCI packet type 5e [ 1403.390377] Bluetooth: Unknown HCI packet type 43 [ 1403.393960] Bluetooth: Unknown HCI packet type 43 [ 1403.399909] Bluetooth: Unknown HCI packet type 43 [ 1403.415915] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1403.420236] Bluetooth: Unknown HCI packet type 5e [ 1403.427878] Bluetooth: Unknown HCI packet type 5e [ 1403.439093] Bluetooth: hci3: Frame reassembly failed (-84) [ 1403.450500] Bluetooth: Unknown HCI packet type 5e [ 1403.451835] Bluetooth: Unknown HCI packet type 50 [ 1403.456939] Bluetooth: Unknown HCI packet type 50 [ 1403.468319] Bluetooth: Unknown HCI packet type 5e [ 1403.472831] Bluetooth: Unknown HCI packet type 50 [ 1403.479716] Bluetooth: Unknown HCI packet type 5e [ 1403.485472] Bluetooth: Unknown HCI packet type 40 [ 1403.499408] Bluetooth: Unknown HCI packet type 5e [ 1403.505924] Bluetooth: Unknown HCI packet type 40 [ 1403.513264] Bluetooth: Unknown HCI packet type 40 12:33:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x00)\xbf\b\xee\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x1, 0x3f, 0x1000, 0x39d28b15, 0x9, "02d257cca5428b6bb47fa5e6f7a5aad3455e71"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000000200)=[{&(0x7f0000000180)="9d66b5f3cb4bb84360885e53d4a2f037e34d0b660bc392242f879f76cb64806d13f9eca717eadab08da21197", 0x2c}], 0x1, 0x400000000081003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) [ 1404.204230] Bluetooth: Unknown HCI packet type 5e [ 1404.204589] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1404.209244] Bluetooth: Unknown HCI packet type 43 [ 1404.252493] Bluetooth: Unknown HCI packet type 5e [ 1404.260124] Bluetooth: Unknown HCI packet type 50 [ 1404.272587] Bluetooth: Unknown HCI packet type 5e [ 1404.277527] Bluetooth: Unknown HCI packet type 40 12:33:07 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02408000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x72, &(0x7f000059aff8)={r2}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x3c5, @private0, 0x5}}, 0x9, 0x401, 0x9, 0xfff, 0x2}, &(0x7f0000000040)=0x98) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) 12:33:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8947, &(0x7f0000000080)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1405.380403] Bluetooth: hci1 command 0x1003 tx timeout [ 1405.385760] Bluetooth: hci1 sending frame failed (-49) [ 1405.392280] Bluetooth: hci0 command 0x1003 tx timeout [ 1405.397579] Bluetooth: hci0 sending frame failed (-49) [ 1405.460436] Bluetooth: hci2 command 0x1003 tx timeout [ 1405.460449] Bluetooth: hci3 command 0x1003 tx timeout [ 1405.465736] Bluetooth: hci2 sending frame failed (-49) [ 1405.472444] Bluetooth: hci3 sending frame failed (-49) [ 1406.260335] Bluetooth: hci4 command 0x1003 tx timeout [ 1406.265659] Bluetooth: hci4 sending frame failed (-49) [ 1407.460245] Bluetooth: hci0 command 0x1001 tx timeout [ 1407.460321] Bluetooth: hci1 command 0x1001 tx timeout [ 1407.465600] Bluetooth: hci0 sending frame failed (-49) [ 1407.477106] Bluetooth: hci1 sending frame failed (-49) [ 1407.540348] Bluetooth: hci3 command 0x1001 tx timeout [ 1407.545681] Bluetooth: hci3 sending frame failed (-49) [ 1407.551306] Bluetooth: hci2 command 0x1001 tx timeout [ 1407.556581] Bluetooth: hci2 sending frame failed (-49) [ 1408.340313] Bluetooth: hci4 command 0x1001 tx timeout [ 1408.345618] Bluetooth: hci4 sending frame failed (-49) [ 1409.540176] Bluetooth: hci1 command 0x1009 tx timeout [ 1409.545465] Bluetooth: hci0 command 0x1009 tx timeout [ 1409.620120] Bluetooth: hci2 command 0x1009 tx timeout [ 1409.625356] Bluetooth: hci3 command 0x1009 tx timeout [ 1410.420053] Bluetooth: hci4 command 0x1009 tx timeout 12:33:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2042c2, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000180)={0x0, 0x5, 0x3d64, [], &(0x7f0000000140)=0x42}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x0, 0x8001, 0x7, 0x6, 0x12, "050e15bd599fe44e"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KDMKTONE(r1, 0x4b30, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1413.570921] Bluetooth: hci0: Frame reassembly failed (-84) [ 1413.581348] Bluetooth: Unknown HCI packet type 5e [ 1413.586455] Bluetooth: Unknown HCI packet type 43 [ 1413.596056] Bluetooth: Unknown HCI packet type 5e [ 1413.601851] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1413.602490] Bluetooth: Unknown HCI packet type 5e [ 1413.614717] Bluetooth: Unknown HCI packet type 5e [ 1413.615203] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1413.620147] Bluetooth: Unknown HCI packet type 43 [ 1413.626311] Bluetooth: Unknown HCI packet type 50 [ 1413.635992] Bluetooth: Unknown HCI packet type 43 [ 1413.641915] Bluetooth: Unknown HCI packet type 5e [ 1413.649307] vivid-003: ================= START STATUS ================= [ 1413.657265] Bluetooth: Unknown HCI packet type 5e [ 1413.662635] Bluetooth: Unknown HCI packet type 40 [ 1413.666627] Bluetooth: Unknown HCI packet type 5e [ 1413.667667] Bluetooth: Unknown HCI packet type 50 [ 1413.677876] vivid-003: Interlaced VBI Format: false [ 1413.687142] Bluetooth: Unknown HCI packet type 5e [ 1413.692656] vivid-003: ================== END STATUS ================== [ 1413.695437] Bluetooth: Unknown HCI packet type 50 [ 1413.701195] Bluetooth: Unknown HCI packet type 40 [ 1413.710549] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1413.720473] Bluetooth: Unknown HCI packet type 5e [ 1413.725946] Bluetooth: Unknown HCI packet type 40 12:33:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x9) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001e00)=@sack_info={r4, 0xffffffff, 0x5}, &(0x7f0000001e40)=0xc) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r5) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x202000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 12:33:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:33:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x20, 0x20100) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0xdc6c6000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r3 = msgget(0x2, 0x64c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/123) 12:33:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e23, @multicast2}}) [ 1415.610073] Bluetooth: Unknown HCI packet type 5e [ 1415.616132] Bluetooth: Unknown HCI packet type 43 [ 1415.619783] Bluetooth: hci1 command 0x1003 tx timeout [ 1415.623018] Bluetooth: hci3 command 0x1003 tx timeout [ 1415.626936] Bluetooth: hci0 command 0x1003 tx timeout [ 1415.636017] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1415.637663] Bluetooth: hci1 sending frame failed (-49) [ 1415.645524] Bluetooth: hci2 command 0x1003 tx timeout [ 1415.649339] Bluetooth: hci3 sending frame failed (-49) [ 1415.656159] Bluetooth: Unknown HCI packet type 5e [ 1415.668646] Bluetooth: Unknown HCI packet type 50 [ 1415.674275] Bluetooth: hci0 sending frame failed (-49) [ 1415.676203] Bluetooth: Unknown HCI packet type 5e [ 1415.679780] Bluetooth: hci2 sending frame failed (-49) [ 1415.686404] Bluetooth: Unknown HCI packet type 40 12:33:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000200)={0xee9, 0x7f, 0x1, 'queue0\x00', 0x4000009}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 12:33:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/autofs\x00', 0x418001, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4000841) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1417.619504] Bluetooth: hci4 command 0x1003 tx timeout [ 1417.624958] Bluetooth: hci4 sending frame failed (-49) [ 1417.699584] Bluetooth: hci2 command 0x1001 tx timeout [ 1417.704907] Bluetooth: hci2 sending frame failed (-49) [ 1417.710299] Bluetooth: hci0 command 0x1001 tx timeout [ 1417.715525] Bluetooth: hci3 command 0x1001 tx timeout [ 1417.715566] Bluetooth: hci0 sending frame failed (-49) [ 1417.721105] Bluetooth: hci3 sending frame failed (-49) [ 1417.731750] Bluetooth: hci1 command 0x1001 tx timeout [ 1417.737019] Bluetooth: hci1 sending frame failed (-49) [ 1419.699422] Bluetooth: hci4 command 0x1001 tx timeout [ 1419.704821] Bluetooth: hci4 sending frame failed (-49) [ 1419.779405] Bluetooth: hci3 command 0x1009 tx timeout [ 1419.779430] Bluetooth: hci1 command 0x1009 tx timeout [ 1419.784911] Bluetooth: hci2 command 0x1009 tx timeout [ 1419.790222] Bluetooth: hci0 command 0x1009 tx timeout [ 1421.779251] Bluetooth: hci4 command 0x1009 tx timeout 12:33:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x4) 12:33:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) getsockopt$inet_int(r1, 0x0, 0x10, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) [ 1423.793894] Bluetooth: Unknown HCI packet type 5e [ 1423.801610] Bluetooth: Unknown HCI packet type 43 [ 1423.821910] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:33:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_emit_ethernet(0x1bc, &(0x7f0000000240)={@broadcast, @dev={[], 0xd}, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@mpls_mc={0x8848, {[{0x2}, {0x675b}, {0xffe01}, {0x18000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x4}], @ipv4=@igmp={{0x29, 0x4, 0x0, 0x7, 0x192, 0x64, 0x0, 0x1, 0x2, 0x0, @multicast1, @private=0xa010102, {[@timestamp_addr={0x44, 0xc, 0xc7, 0x1, 0x0, [{@local}]}, @timestamp_prespec={0x44, 0x34, 0xb0, 0x3, 0x3, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xdbb}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xab35}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xc1, [@multicast1, @private=0xa010101, @private=0xa010101, @local, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x70, 0x1, 0xc}, @ssrr={0x89, 0x7, 0x7d, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0x9, [{@rand_addr=0x64010100, 0x8}]}, @ssrr={0x89, 0x13, 0x3d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast2]}]}}, {0x1e, 0x7, 0x0, @rand_addr=0x64010101, "40a0397d47583109ebd09a41b449aaa9564aa9db1fd849c479d424036c45d0e9a3e1776e175abfdf5c4ed9316ef77b43767ad3f2a48007482f80af056e5024de1eb6296360ff81f3987954181e874205ce03d85fb624008a2c6748087a0a663077258c9766b89920cdf9fe25c3e0275c0c3294fa07231de1f627f976380b16622fd968f32462f313048a0debff1aaa7d04df623cf601b96e65c837c0e3a7a78c0e78450bb3383c70c53c8366619ada1531c05a880697cb46349a756125bb397a263fa4e38507d860efd53b4e3b2e8282e8c6a42dc669a67595e76e3ae2935fde8a9490421e9c"}}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x62f, 0x67f, 0xc87, 0xdb6]}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FITHAW(r2, 0xc0045878) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1423.839786] Bluetooth: Unknown HCI packet type 5e [ 1423.844681] Bluetooth: Unknown HCI packet type 50 [ 1423.854900] Bluetooth: hci1: Frame reassembly failed (-84) [ 1423.864953] Bluetooth: Unknown HCI packet type 5e [ 1423.870562] Bluetooth: Unknown HCI packet type 40 [ 1423.886047] Bluetooth: Unknown HCI packet type 5e [ 1423.892576] Bluetooth: Unknown HCI packet type 43 [ 1423.897523] Bluetooth: Unknown HCI packet type 5e [ 1423.915627] Bluetooth: Unknown HCI packet type 5e [ 1423.921661] Bluetooth: Unknown HCI packet type 43 [ 1423.927601] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1423.936408] Bluetooth: Unknown HCI packet type 5e 12:33:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x400) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x2}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000002c0)={r4, r5, 0x3, 0x6a, &(0x7f0000000240)="2d9565fa394f624758cbbd23d0037f4836df338459831e4974cd3808d30b4914af8bbf5e715da4da266e8e06c41819b68edf4ec3591d3059f208f4005bb92cbbe5122fe5a9099f16c8e4d5d9c7ca8ad29162ee5461451faa52bcfd9579377d43c075d4892a26012ec1b3", 0x88, 0x4, 0x6870, 0x36, 0x3ff, 0x3, 0x6, 'syz1\x00'}) [ 1423.936511] Bluetooth: Unknown HCI packet type 50 [ 1423.942917] Bluetooth: Unknown HCI packet type 50 [ 1423.953971] Bluetooth: Unknown HCI packet type 5e [ 1423.963950] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1423.964069] Bluetooth: Unknown HCI packet type 40 [ 1423.975178] Bluetooth: Unknown HCI packet type 5e [ 1423.987110] Bluetooth: Unknown HCI packet type 40 12:33:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000140)) 12:33:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x72, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r6, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r6, 0xc5, "69eb8410944f7459a8cf802974db337dfca2b15383f72ba92c9322570832ce0563047625e58b1c96d3a2a9ceaba2ee806697de38ff93653b9c9a61dbccb478e09d21d611806d6e0d1bdec46f17fad7a79fd725294d18ae9eeb6327d30c5e36284d49877b9ca1d6552ea5403a4ba44998bc41bffcfcaf75d2b646df641d95b7e6442247f4f4b62a1024bb355c7364e038685ac9393f4bc3d7a1b0bcbe767a2a720c82408ef9e34dea761920daa0981f2287e5a0247f6b7f221d554d75fba5127917c6ab38db"}, &(0x7f0000000040)=0xcd) 12:33:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r1 = socket$inet(0x2, 0x1, 0x3) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) r4 = socket$inet(0x2, 0x4000000000000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x24, 0x200007fe, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105184) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x9, 0x1, 0x8, 0x4, 0x4, 0x101}, 0x9c) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) 12:33:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x420000) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000040), &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000000100000044000100"], 0x58}}, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r5, 0x5ce7af510fbe5452, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x91}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda59}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x400004d) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x189a01, 0x0) 12:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1425.672354] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1425.679478] Bluetooth: Unknown HCI packet type 5e [ 1425.684375] Bluetooth: Unknown HCI packet type 43 [ 1425.697689] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.704141] Bluetooth: Unknown HCI packet type 5e 12:33:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x440800) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) [ 1425.722023] Bluetooth: Unknown HCI packet type 50 [ 1425.726085] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.726931] Bluetooth: Unknown HCI packet type 5e [ 1425.726937] Bluetooth: Unknown HCI packet type 40 [ 1425.868916] Bluetooth: hci1 command 0x1003 tx timeout [ 1425.874404] Bluetooth: hci0 command 0x1003 tx timeout [ 1425.874449] Bluetooth: hci1 sending frame failed (-49) [ 1425.882649] Bluetooth: hci0 sending frame failed (-49) [ 1425.939119] Bluetooth: hci3 command 0x1003 tx timeout [ 1425.944551] Bluetooth: hci2 command 0x1003 tx timeout [ 1425.944594] Bluetooth: hci3 sending frame failed (-49) [ 1425.952949] Bluetooth: hci2 sending frame failed (-49) [ 1427.698925] Bluetooth: hci4 command 0x1003 tx timeout [ 1427.704572] Bluetooth: hci4 sending frame failed (-49) [ 1427.938797] Bluetooth: hci1 command 0x1001 tx timeout [ 1427.938809] Bluetooth: hci0 command 0x1001 tx timeout [ 1427.945259] Bluetooth: hci1 sending frame failed (-49) [ 1427.956389] Bluetooth: hci0 sending frame failed (-49) [ 1428.018735] Bluetooth: hci3 command 0x1001 tx timeout [ 1428.025290] Bluetooth: hci3 sending frame failed (-49) [ 1428.030786] Bluetooth: hci2 command 0x1001 tx timeout [ 1428.036059] Bluetooth: hci2 sending frame failed (-49) [ 1429.778703] Bluetooth: hci4 command 0x1001 tx timeout [ 1429.785024] Bluetooth: hci4 sending frame failed (-49) [ 1430.018644] Bluetooth: hci1 command 0x1009 tx timeout [ 1430.018671] Bluetooth: hci0 command 0x1009 tx timeout [ 1430.098706] Bluetooth: hci2 command 0x1009 tx timeout [ 1430.103987] Bluetooth: hci3 command 0x1009 tx timeout [ 1431.858720] Bluetooth: hci4 command 0x1009 tx timeout 12:33:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x6, 0x20}) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x10000, @mcast2, 0x3}, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x419}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @empty}, 0x4e4}], 0x74) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x40, 0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x1, 0xa000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', r4}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000240)={0x2, @capture={0x0, 0x0, {0x5, 0x7f}, 0x80000000, 0x9}}) 12:33:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) 12:33:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd0, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x4d, 0x7, 0x1, 0x0, "a2eefa934b9e7913b3c12b0cded6c8604d10b108cb9e9cb8b2425340c8374e4c950bae0a8bc4f518277315a1c9cc01e2b7989d86b64a2678099871e0d07f7eb5a30e5f73890b673953"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x80c5) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000100)={0x3, 0x7, 0x7ff, 0xfff7, 0x3, "514f96054de17163"}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) syncfs(r0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$KDADDIO(r0, 0x400455c8, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x6, 0x5, 0x4, 0x8000e008, 0x7fffffff, {0x0, 0x2710}, {0x1, 0x8, 0x0, 0x0, 0x1f, 0x2, "3baa0ed4"}, 0x9, 0x1, @offset=0x4, 0xffff, 0x0, r2}) ioctl$TIOCSETD(r3, 0x5423, 0xfffffffffffffffe) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1434.072635] Bluetooth: Unknown HCI packet type 5e [ 1434.078684] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1434.086501] Bluetooth: Unknown HCI packet type 43 [ 1434.106412] Bluetooth: Unknown HCI packet type 5e [ 1434.125551] Bluetooth: Unknown HCI packet type 50 [ 1434.143685] Bluetooth: Unknown HCI packet type 5e [ 1434.154825] Bluetooth: Unknown HCI packet type 40 [ 1434.171309] Bluetooth: Unknown HCI packet type 5e [ 1434.177043] Bluetooth: Unknown HCI packet type 43 [ 1434.192131] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1434.217459] Bluetooth: Unknown HCI packet type 5e [ 1434.225202] Bluetooth: Unknown HCI packet type 50 [ 1434.257822] Bluetooth: Unknown HCI packet type 5e [ 1434.283074] Bluetooth: Unknown HCI packet type 40 12:33:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 12:33:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000000)=""/172) 12:33:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000ffa000/0x4000)=nil}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x18) 12:33:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000001300)={{0xfe, 0x2}, {0x1, 0x3}, 0x7, 0x1, 0xff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000001200)={0x1, @win={{0xfff, 0x6, 0x4, 0x5}, 0x5, 0x3, &(0x7f0000000040)={{0x2, 0x1, 0x4, 0x5}, &(0x7f0000000000)={{0xff, 0xffffffff, 0x3, 0x7}}}, 0xe6fd, &(0x7f0000000200)="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", 0x1}}) [ 1435.079870] Bluetooth: Unknown HCI packet type 5e [ 1435.080063] Bluetooth: Unknown HCI packet type 18 [ 1435.086271] Bluetooth: Unknown HCI packet type 43 [ 1435.120114] Bluetooth: Unknown HCI packet type 5e [ 1435.136643] Bluetooth: Unknown HCI packet type 50 [ 1435.142635] Bluetooth: Unknown HCI packet type 5e [ 1435.151501] Bluetooth: Unknown HCI packet type 40 12:33:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x92084049}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x209, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}}, 0x40041) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r4 = epoll_create(0x8) fcntl$notify(r4, 0x402, 0x6) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(0xffffffffffffffff, r5, 0x0, 0x102000004) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x3, 0x8, 0x40004, 0x20000000000, r7}) fcntl$getflags(r0, 0x401) 12:33:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) fsetxattr$security_selinux(r2, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x3) [ 1436.004520] Bluetooth: Unknown HCI packet type 5e [ 1436.016378] audit: type=1400 audit(1590064418.794:265): avc: denied { relabelto } for pid=419 comm="syz-executor.3" name="UNIX" dev="sockfs" ino=97903 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:modules_dep_t:s0 tclass=unix_stream_socket permissive=1 [ 1436.016824] Bluetooth: Unknown HCI packet type 43 [ 1436.057077] Bluetooth: Unknown HCI packet type 5e [ 1436.063176] Bluetooth: Unknown HCI packet type 50 [ 1436.069217] Bluetooth: Unknown HCI packet type 5e [ 1436.074690] Bluetooth: Unknown HCI packet type 40 [ 1436.098433] Bluetooth: hci0 command 0x1003 tx timeout [ 1436.130028] Bluetooth: hci0 sending frame failed (-49) [ 1436.178447] Bluetooth: hci2 command 0x1003 tx timeout [ 1436.187515] Bluetooth: hci2 sending frame failed (-49) [ 1436.194879] Bluetooth: hci1 command 0x1003 tx timeout [ 1436.201939] Bluetooth: hci1 sending frame failed (-49) 12:33:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1437.138609] Bluetooth: hci3 command 0x1003 tx timeout [ 1437.148451] Bluetooth: hci3 sending frame failed (-49) [ 1438.018175] Bluetooth: hci4 command 0x1003 tx timeout [ 1438.024289] Bluetooth: hci4 sending frame failed (-49) [ 1438.178476] Bluetooth: hci0 command 0x1001 tx timeout [ 1438.184798] Bluetooth: hci0 sending frame failed (-49) [ 1438.258187] Bluetooth: hci1 command 0x1001 tx timeout [ 1438.264729] Bluetooth: hci1 sending frame failed (-49) [ 1438.272626] Bluetooth: hci2 command 0x1001 tx timeout [ 1438.278725] Bluetooth: hci2 sending frame failed (-49) [ 1439.218110] Bluetooth: hci3 command 0x1001 tx timeout [ 1439.223790] Bluetooth: hci3 sending frame failed (-49) [ 1440.098015] Bluetooth: hci4 command 0x1001 tx timeout [ 1440.103415] Bluetooth: hci4 sending frame failed (-49) [ 1440.258252] Bluetooth: hci0 command 0x1009 tx timeout [ 1440.337998] Bluetooth: hci2 command 0x1009 tx timeout [ 1440.343285] Bluetooth: hci1 command 0x1009 tx timeout [ 1441.297980] Bluetooth: hci3 command 0x1009 tx timeout [ 1442.177909] Bluetooth: hci4 command 0x1009 tx timeout 12:33:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4103, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040)) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r2, r4, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000140)) 12:33:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x410000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 12:33:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 1444.278744] Bluetooth: Unknown HCI packet type 5e [ 1444.284186] Bluetooth: Unknown HCI packet type 43 [ 1444.299951] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1444.300010] Bluetooth: Unknown HCI packet type 5e [ 1444.316472] Bluetooth: Unknown HCI packet type 5e 12:33:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x2}, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) accept$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@rose, @rose, @remote, @default, @bcast, @remote, @netrom, @null]}, &(0x7f0000000180)=0x48) [ 1444.326153] Bluetooth: Unknown HCI packet type 50 [ 1444.331979] Bluetooth: Unknown HCI packet type 43 [ 1444.337177] Bluetooth: Unknown HCI packet type 5e [ 1444.343547] Bluetooth: Unknown HCI packet type 5e [ 1444.349683] Bluetooth: Unknown HCI packet type 40 [ 1444.355424] Bluetooth: Unknown HCI packet type 50 12:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) [ 1444.381460] Bluetooth: Unknown HCI packet type 5e [ 1444.393785] Bluetooth: Unknown HCI packet type 40 [ 1444.427251] Bluetooth: Unknown HCI packet type 5e [ 1444.432775] Bluetooth: Unknown HCI packet type 43 [ 1444.439045] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1444.449030] Bluetooth: Unknown HCI packet type 5e [ 1444.458980] Bluetooth: Unknown HCI packet type 50 [ 1444.463950] Bluetooth: Unknown HCI packet type 5e 12:33:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x4, 0x1f, 0x1f, 0x4}, {0x56, 0x4, 0x7f, 0x8}]}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000100)) [ 1444.477890] Bluetooth: Unknown HCI packet type 40 12:33:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x280, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x85c, 0x3, 0xff, 0x2, 0x1, "78b981c898a3486731b4fbbd5f2a7781904321"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1445.504038] Bluetooth: Unknown HCI packet type 5e [ 1445.510710] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1445.517103] Bluetooth: Unknown HCI packet type 43 [ 1445.525270] Bluetooth: Unknown HCI packet type 5e [ 1445.533137] Bluetooth: Unknown HCI packet type 50 [ 1445.539493] Bluetooth: Unknown HCI packet type 5e [ 1445.545344] Bluetooth: Unknown HCI packet type 40 12:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r2, 0x3, 0x0, 0x8020003) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x1) lseek(r2, 0x0, 0x3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfff, 0x100000000, 0x3, 0x80000000, 0x6, 0xfff}, &(0x7f0000000040)={0x58, 0x10000, 0x5f2c9ca, 0x7, 0x8, 0x5, 0x1, 0x200}, &(0x7f0000000080)={0x3, 0x7997c89c, 0x835, 0x0, 0x20, 0x1, 0x100000001, 0x80}, &(0x7f0000000100), &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1446.337571] Bluetooth: hci1 command 0x1003 tx timeout [ 1446.343010] Bluetooth: hci1 sending frame failed (-49) [ 1446.347479] Bluetooth: hci0 command 0x1003 tx timeout [ 1446.353710] Bluetooth: hci0 sending frame failed (-49) [ 1446.497608] Bluetooth: hci2 command 0x1003 tx timeout [ 1446.503180] Bluetooth: hci2 sending frame failed (-49) [ 1447.547490] Bluetooth: hci3 command 0x1003 tx timeout [ 1447.554930] Bluetooth: hci3 sending frame failed (-49) [ 1448.417365] Bluetooth: hci0 command 0x1001 tx timeout [ 1448.422723] Bluetooth: hci1 command 0x1001 tx timeout [ 1448.422783] Bluetooth: hci0 sending frame failed (-49) [ 1448.429517] Bluetooth: hci1 sending frame failed (-49) [ 1448.577704] Bluetooth: hci2 command 0x1001 tx timeout [ 1448.583055] Bluetooth: hci2 sending frame failed (-49) [ 1449.617367] Bluetooth: hci3 command 0x1001 tx timeout [ 1449.623760] Bluetooth: hci3 sending frame failed (-49) [ 1450.497300] Bluetooth: hci0 command 0x1009 tx timeout [ 1450.497303] Bluetooth: hci1 command 0x1009 tx timeout [ 1450.657530] Bluetooth: hci2 command 0x1009 tx timeout [ 1451.697261] Bluetooth: hci3 command 0x1009 tx timeout 12:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x2b, 0x4, 0x0, {0x3, 0x400, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x348) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) 12:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'bridge_slave_0\x00', {}, 0x5}) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x2) [ 1454.491338] Bluetooth: Unknown HCI packet type 5e [ 1454.491345] Bluetooth: Unknown HCI packet type 43 [ 1454.491350] Bluetooth: Unknown HCI packet type 5e [ 1454.491354] Bluetooth: Unknown HCI packet type 50 [ 1454.491359] Bluetooth: Unknown HCI packet type 5e [ 1454.491364] Bluetooth: Unknown HCI packet type 40 12:33:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001f00)=[{}, {&(0x7f0000000040), 0x1}, {&(0x7f0000000080)}, {&(0x7f0000000100)=0x1, 0x1}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240)}, {&(0x7f0000000280)=0x2}, {&(0x7f00000002c0)=0x1}, {&(0x7f0000000300)=0x1, 0x1}, {&(0x7f0000000340)=0x2, 0x2}, {&(0x7f0000000380)}, {&(0x7f00000003c0), 0x2}, {&(0x7f0000000400)=0x1}, {&(0x7f0000000440)=0x1, 0x2}, {&(0x7f0000000480)=0x2, 0x1}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=0x1}, {&(0x7f0000000540)=0x1}, {&(0x7f0000000580)=0x2, 0x2}, {&(0x7f00000005c0), 0x1}, {&(0x7f0000000600)}, {&(0x7f0000000640)=0x2, 0x2}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=0x1, 0x1}, {&(0x7f0000000700), 0x1}, {&(0x7f0000000740)=0x1, 0x2}, {&(0x7f0000000780)=0x1}, {&(0x7f00000007c0)=0x1}, {&(0x7f0000000800)=0x2, 0x2}, {&(0x7f0000000840)=0x2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=0x2, 0x1}, {&(0x7f0000000900)}, {&(0x7f0000000940)=0x2, 0x1}, {&(0x7f0000000980), 0x1}, {&(0x7f00000009c0)=0x2}, {&(0x7f0000000a00)=0x1, 0x2}, {&(0x7f0000000a40)=0x1, 0x1}, {&(0x7f0000000a80)=0x2, 0x2}, {&(0x7f0000000ac0)=0x1, 0x2}, {&(0x7f0000000b00), 0x1}, {&(0x7f0000000b40)=0x1, 0x1}, {&(0x7f0000000b80)=0x2, 0x1}, {&(0x7f0000000bc0), 0x1}, {&(0x7f0000000c00)=0x2}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=0x2, 0x2}, {&(0x7f0000000cc0)=0x2}, {&(0x7f0000000d00)=0x1}, {&(0x7f0000000d40)=0x1}, {&(0x7f0000000d80)=0x1}, {&(0x7f0000000dc0)=0x2}, {&(0x7f0000000e00)=0x1, 0x2}, {&(0x7f0000000e40)=0x1, 0x2}, {&(0x7f0000000e80)=0x2, 0x1}, {&(0x7f0000000ec0), 0x2}, {&(0x7f0000000f00)=0x1, 0x1}, {&(0x7f0000000f40)}, {&(0x7f0000000f80)=0x1, 0x2}, {&(0x7f0000000fc0), 0x2}, {&(0x7f0000001000)=0x1, 0x2}, {&(0x7f0000001040), 0x1}, {&(0x7f0000001080)=0x1, 0x1}, {&(0x7f00000010c0)=0x1}, {&(0x7f0000001100), 0x2}, {&(0x7f0000001140)=0x2, 0x2}, {&(0x7f0000001180)=0x2}, {&(0x7f00000011c0)=0x1, 0x2}, {&(0x7f0000001200), 0x2}, {&(0x7f0000001240)=0x2, 0x2}, {&(0x7f0000001280)=0x2}, {&(0x7f00000012c0)}, {&(0x7f0000001300), 0x1}, {&(0x7f0000001340), 0x1}, {&(0x7f0000001380)=0x2, 0x1}, {&(0x7f00000013c0), 0x1}, {&(0x7f0000001400)=0x2}, {&(0x7f0000001440), 0x1}, {&(0x7f0000001480)=0x2, 0x2}, {&(0x7f00000014c0)=0x1}, {&(0x7f0000001500)=0x2, 0x1}, {&(0x7f0000001540)=0x2, 0x1}, {&(0x7f0000001580)=0x1, 0x1}, {&(0x7f00000015c0)=0x2, 0x1}, {&(0x7f0000001600)}, {&(0x7f0000001640)}, {&(0x7f0000001680), 0x1}, {&(0x7f00000016c0)=0x2}, {&(0x7f0000001700)=0x1}, {&(0x7f0000001740)=0x1, 0x1}, {&(0x7f0000001780), 0x1}, {&(0x7f00000017c0), 0x2}, {&(0x7f0000001800)=0x2, 0x2}, {&(0x7f0000001840)=0x2, 0x2}, {&(0x7f0000001880)}, {&(0x7f00000018c0)=0x2, 0x1}, {&(0x7f0000001900)}, {&(0x7f0000001940), 0x1}, {&(0x7f0000001980)=0x1}, {&(0x7f00000019c0)=0x1, 0x2}, {&(0x7f0000001a00)=0x2, 0x2}, {&(0x7f0000001a40)=0x2, 0x2}, {&(0x7f0000001a80)=0x2, 0x2}, {&(0x7f0000001ac0)=0x2}, {&(0x7f0000001b00)=0x2, 0x1}, {&(0x7f0000001b40)}, {&(0x7f0000001b80), 0x1}, {&(0x7f0000001bc0)=0x2}, {&(0x7f0000001c00)=0x1}, {&(0x7f0000001c40)=0x1, 0x2}, {&(0x7f0000001c80)=0x1, 0x1}, {&(0x7f0000001cc0)=0x1, 0x1}, {&(0x7f0000001d00)=0x2, 0x2}, {&(0x7f0000001d40)}, {&(0x7f0000001d80), 0x1}, {&(0x7f0000001dc0), 0x1}, {&(0x7f0000001e00)=0x2, 0x2}, {&(0x7f0000001e40), 0x2}, {&(0x7f0000001e80)=0x2, 0x2}, {&(0x7f0000001ec0)=0x2, 0x2}], 0xd, 0x78, &(0x7f0000002680)={0x77359400}, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:33:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:33:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r1, r1, 0x0, 0x5dc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r5, 0x1, 0x10, 0x7, 0x3e5}, &(0x7f0000000180)=0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1455.104692] Bluetooth: Unknown HCI packet type 5e [ 1455.105159] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1455.109988] Bluetooth: Unknown HCI packet type 43 [ 1455.136985] Bluetooth: Unknown HCI packet type 5e [ 1455.145847] Bluetooth: Unknown HCI packet type 5e [ 1455.147601] Bluetooth: Unknown HCI packet type 50 [ 1455.162292] Bluetooth: Unknown HCI packet type 5e [ 1455.183130] Bluetooth: Unknown HCI packet type 43 [ 1455.189848] Bluetooth: Unknown HCI packet type 5e [ 1455.193291] Bluetooth: Unknown HCI packet type 40 [ 1455.194771] Bluetooth: Unknown HCI packet type 50 [ 1455.211033] Bluetooth: Unknown HCI packet type 5e [ 1455.219445] Bluetooth: Unknown HCI packet type 40 [ 1455.262208] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:33:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000100)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:33:58 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000100), 0x80800) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='\xea\x00', 0x2) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x32) [ 1455.858594] Bluetooth: Unknown HCI packet type 5e [ 1455.863895] Bluetooth: Unknown HCI packet type 43 [ 1455.873501] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1455.890456] Bluetooth: Unknown HCI packet type 5e [ 1455.901266] Bluetooth: Unknown HCI packet type 50 [ 1455.906489] Bluetooth: Unknown HCI packet type 5e [ 1455.917311] Bluetooth: Unknown HCI packet type 40 12:33:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x501000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(r1, r2, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000002c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000000009) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2f) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x10}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x10, 0xfa00, {&(0x7f0000000440)}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000b4000000b400000008000000080000000000020700000000030000000000000a00008b32b250e2d4b80bc0e5dee0110000000000000600000d00000000070000002f89592c40ef010800000d0000000300000009000000050000000f00000004000000020000080300000006000000030000000000000006000004050000000900000004000000040000000b00000001000000080000000200000005000000020000000a00000006000000080000000800000003000000030000000000000003000000000800000000000000000000007e8b8433c8052bbfa4f5d3989bb79e154e7b6ec9e9ddb4297415755e23f4562f36c0837abf2d60d6a269110e1d000000000000000152507066dfec2a0097e0dc7dbaaf731f9d30ee89ee446187cf803ace205e00"/314], &(0x7f0000000140)=""/116, 0xd4, 0x74, 0x1}, 0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000280)={0x980000, 0x7, 0x3ff, r6, 0x0, &(0x7f0000000240)={0x9909d0, 0x9, [], @string=&(0x7f00000000c0)=0x7f}}) 12:33:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000000)=""/216) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1456.496842] Bluetooth: hci0 command 0x1003 tx timeout [ 1456.502404] Bluetooth: hci0 sending frame failed (-49) 12:33:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getdents64(r1, &(0x7f0000000100)=""/123, 0x7b) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1457.146764] Bluetooth: hci1 command 0x1003 tx timeout [ 1457.152244] Bluetooth: hci1 sending frame failed (-49) [ 1457.214876] Bluetooth: hci4 sending frame failed (-49) [ 1457.227208] Bluetooth: hci2 command 0x1003 tx timeout [ 1457.232708] Bluetooth: hci2 sending frame failed (-49) [ 1457.269569] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1457.936793] Bluetooth: hci3 command 0x1003 tx timeout [ 1457.945981] Bluetooth: hci3 sending frame failed (-49) [ 1458.576729] Bluetooth: hci0 command 0x1001 tx timeout [ 1458.582154] Bluetooth: hci0 sending frame failed (-49) [ 1459.216652] Bluetooth: hci1 command 0x1001 tx timeout [ 1459.222357] Bluetooth: hci1 sending frame failed (-49) [ 1459.296612] Bluetooth: hci2 command 0x1001 tx timeout [ 1459.301906] Bluetooth: hci2 sending frame failed (-49) [ 1459.308390] Bluetooth: hci4 command 0x1003 tx timeout [ 1459.313710] Bluetooth: hci4 sending frame failed (-49) [ 1460.016618] Bluetooth: hci3 command 0x1001 tx timeout [ 1460.022007] Bluetooth: hci3 sending frame failed (-49) [ 1460.656621] Bluetooth: hci0 command 0x1009 tx timeout [ 1461.296500] Bluetooth: hci1 command 0x1009 tx timeout [ 1461.376602] Bluetooth: hci4 command 0x1001 tx timeout [ 1461.381953] Bluetooth: hci4 sending frame failed (-49) [ 1461.387672] Bluetooth: hci2 command 0x1009 tx timeout [ 1462.096477] Bluetooth: hci3 command 0x1009 tx timeout [ 1463.457254] Bluetooth: hci4 command 0x1009 tx timeout 12:34:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1464.716048] Bluetooth: Unknown HCI packet type 5e [ 1464.722863] Bluetooth: Unknown HCI packet type 43 [ 1464.734962] Bluetooth: Unknown HCI packet type 5e [ 1464.744336] Bluetooth: Unknown HCI packet type 50 [ 1464.763126] Bluetooth: Unknown HCI packet type 5e [ 1464.769857] Bluetooth: Unknown HCI packet type 40 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x8) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x803, 0xff) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r5, r4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000140)={0x0, 0x9}) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000000)=0x12) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1465.685311] Bluetooth: Unknown HCI packet type 5e [ 1465.690436] Bluetooth: Unknown HCI packet type 43 [ 1465.707676] Bluetooth: Unknown HCI packet type 5e [ 1465.727460] Bluetooth: Unknown HCI packet type 50 [ 1465.766533] Bluetooth: Unknown HCI packet type 5e [ 1465.771414] Bluetooth: Unknown HCI packet type 40 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1466.736185] Bluetooth: hci0 command 0x1003 tx timeout [ 1466.741547] Bluetooth: hci0 sending frame failed (-49) 12:34:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400200, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1410, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000048}, 0x890) [ 1467.275870] Bluetooth: Unknown HCI packet type 5e [ 1467.282218] Bluetooth: Unknown HCI packet type 43 [ 1467.287322] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1467.300952] Bluetooth: Unknown HCI packet type 5e [ 1467.306857] Bluetooth: Unknown HCI packet type 50 [ 1467.311936] Bluetooth: Unknown HCI packet type 5e [ 1467.318520] Bluetooth: Unknown HCI packet type 40 [ 1467.696142] Bluetooth: hci1 command 0x1003 tx timeout [ 1467.701445] Bluetooth: hci1 sending frame failed (-49) [ 1468.816078] Bluetooth: hci0 command 0x1001 tx timeout [ 1468.821373] Bluetooth: hci0 sending frame failed (-49) [ 1469.306015] Bluetooth: hci2 command 0x1003 tx timeout [ 1469.311349] Bluetooth: hci2 sending frame failed (-49) [ 1469.785993] Bluetooth: hci1 command 0x1001 tx timeout [ 1469.791435] Bluetooth: hci1 sending frame failed (-49) [ 1470.895949] Bluetooth: hci0 command 0x1009 tx timeout [ 1471.376159] Bluetooth: hci2 command 0x1001 tx timeout [ 1471.381652] Bluetooth: hci2 sending frame failed (-49) [ 1471.855923] Bluetooth: hci1 command 0x1009 tx timeout [ 1473.455785] Bluetooth: hci2 command 0x1009 tx timeout 12:34:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:34:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x2e0003) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x8, 0x12) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000240)={0xfffffff7, 0x3, &(0x7f0000000040)=[0x0, 0x1f, 0x1], &(0x7f0000000080)=[0x1, 0x7, 0x0, 0x9c, 0x5, 0x1, 0x3, 0xff, 0xfff8], &(0x7f0000000100)=[0x1ff, 0x24, 0x7]}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000300)={r5}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x7, &(0x7f0000002000)) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) syz_open_dev$char_usb(0xc, 0xb4, 0x9) vmsplice(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000340)="1aab5e5f92c616ad1d2c5eb27a11e0f8a31715192bd37e03628f8746a6b5d29e70126774fbd5d72c7e7667fb94290eb9b1df8a851c4f6a9532e64421831a345e4a1f013c68a8f030cb6aa9084700e2fdf6b1ba3a778e8f2c14ae93dd4fd47c97d76648bbb4f3e7656c3bf09e468a957e912a7a3626f061b4ef3fa32a37b36e1bfe3ec88c10383ce5b58bedc277480c3713158e48faa107eb22664106b260f25dfd36082266c4322504bc3b203cae6ea48d061bcbbb165d9a7e67653bf84ceaf113aeca25979a778a498d49469ddec30f35cca09c9a5a14020448d3599c5bba657b574ab40a7e6b5232c00420b9bd198d23", 0xf1}, {&(0x7f0000000440)="ffc97ae8b137", 0x6}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="27ed4f0d49365c03263dd74a281e0b9bd506cb58088438c08176288a823b2d601da2cc507f8d4043a4fe3adec75dd6eaac4eac7e354eb4b8b95399afd6677ec82c9644305201a7", 0x47}], 0x5, 0x9) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000280)) 12:34:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1474.974530] Bluetooth: Unknown HCI packet type 5e [ 1474.980609] Bluetooth: Unknown HCI packet type 43 [ 1475.002184] Bluetooth: Unknown HCI packet type 5e [ 1475.032246] Bluetooth: Unknown HCI packet type 50 [ 1475.033828] Bluetooth: Unknown HCI packet type 5e [ 1475.043929] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1475.046283] Bluetooth: Unknown HCI packet type 5e [ 1475.058800] Bluetooth: Unknown HCI packet type 43 [ 1475.076286] Bluetooth: Unknown HCI packet type 40 [ 1475.080496] Bluetooth: Unknown HCI packet type 5e [ 1475.090999] Bluetooth: Unknown HCI packet type 50 [ 1475.102152] Bluetooth: Unknown HCI packet type 5e [ 1475.108174] Bluetooth: Unknown HCI packet type 40 12:34:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) recvmmsg(r0, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, &(0x7f00000012c0)=""/51, 0x33}, 0x6}, {{&(0x7f0000001300)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001380)=""/89, 0x59}, {&(0x7f0000001400)=""/105, 0x69}, {&(0x7f0000001480)=""/24, 0x18}, {&(0x7f00000014c0)=""/158, 0x9e}], 0x4}, 0x6}, {{&(0x7f00000015c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001640)=""/19, 0x13}, {&(0x7f0000001680)=""/112, 0x70}], 0x2, &(0x7f0000001740)=""/163, 0xa3}, 0xffffffff}, {{&(0x7f0000001800)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001880)=""/143, 0x8f}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/190, 0xbe}, {&(0x7f0000002a00)=""/37, 0x25}, {&(0x7f0000002a40)=""/22, 0x16}], 0x5}, 0x7f}, {{&(0x7f0000002b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/169, 0xa9}, {&(0x7f0000002c40)=""/217, 0xd9}], 0x2, &(0x7f0000002d80)=""/155, 0x9b}, 0x2}, {{&(0x7f0000002e40)=@nl=@proc, 0x80, &(0x7f0000004240)=[{&(0x7f0000002ec0)=""/57, 0x39}, {&(0x7f0000002f00)=""/173, 0xad}, {&(0x7f0000002fc0)}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/240, 0xf0}, {&(0x7f0000004100)=""/209, 0xd1}, {&(0x7f0000004200)=""/25, 0x19}], 0x7}, 0x3}, {{&(0x7f00000042c0)=@ipx, 0x80, &(0x7f00000057c0)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/243, 0xf3}, {&(0x7f0000005440)=""/132, 0x84}, {&(0x7f0000005500)=""/101, 0x65}, {&(0x7f0000005580)=""/204, 0xcc}, {&(0x7f0000005680)=""/171, 0xab}, {&(0x7f0000005740)=""/100, 0x64}], 0x7, &(0x7f0000005840)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000006840)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000069c0)=[{&(0x7f00000068c0)=""/220, 0xdc}], 0x1, &(0x7f0000006a00)=""/156, 0x9c}}, {{&(0x7f0000006ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006b40)=""/12, 0xc}], 0x1, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xffffffe0}, {{&(0x7f0000007bc0)=@ipx, 0x80, &(0x7f00000080c0)=[{&(0x7f0000007c40)=""/129, 0x81}, {&(0x7f0000007d00)=""/198, 0xc6}, {&(0x7f0000007e00)=""/53, 0x35}, {&(0x7f0000007e40)=""/30, 0x1e}, {&(0x7f0000007e80)=""/29, 0x1d}, {&(0x7f0000007ec0)}, {&(0x7f0000007f00)=""/151, 0x97}, {&(0x7f0000007fc0)=""/205, 0xcd}], 0x8, &(0x7f0000008140)=""/90, 0x5a}, 0x10000}], 0xa, 0x2000, &(0x7f0000008440)={0x0, 0x3938700}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000008480)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x32) 12:34:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000010) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb0}, 0x8c0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:34:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1476.255531] Bluetooth: hci1: Frame reassembly failed (-84) [ 1476.255754] Bluetooth: hci1: Frame reassembly failed (-84) [ 1476.263962] Bluetooth: hci1: Frame reassembly failed (-84) [ 1476.302188] Bluetooth: Unknown HCI packet type 5e [ 1476.303239] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1476.307324] Bluetooth: Unknown HCI packet type 43 [ 1476.324080] Bluetooth: Unknown HCI packet type 5e [ 1476.332212] Bluetooth: Unknown HCI packet type 50 [ 1476.350484] Bluetooth: Unknown HCI packet type 5e [ 1476.355602] Bluetooth: Unknown HCI packet type 40 [ 1476.975499] Bluetooth: hci0 command 0x1003 tx timeout [ 1476.981872] Bluetooth: hci0 sending frame failed (-49) 12:34:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000001540)={'macvtap0\x00', 0x5e}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001200)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001240)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001380)={0x7, 0x3ff, 0x2, 0x800, 0xc4, 0x5, 0x8, 0x7fff, r3}, 0x20) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x11c2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000014c0)={0xf4, 0x0, &(0x7f00000016c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fda={0x66646185, 0x7, 0x2, 0x4}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001640)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000001580)=""/164, 0xa4, 0x1, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x14}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000012c0)={@flat=@handle={0x73682a85, 0x2000, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x10}, @flat=@weak_binder={0x77622a85, 0x10b, 0x1}}, &(0x7f0000001340)={0x0, 0x18, 0x38}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @exit_looper], 0x2e, 0x0, &(0x7f0000001480)="910d07f438af7424fffb010c8aba030827a04f5bb604726058551e37f2f1eb37819d3d1aab3faf6def89490bbbdd"}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000001500)=0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1477.055500] Bluetooth: hci3 command 0x1003 tx timeout [ 1477.061161] Bluetooth: hci3 sending frame failed (-49) 12:34:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x9, 0x0, [@ipv4={[], [], @loopback}, @mcast2, @mcast2]}, 0x38) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1477.499856] Bluetooth: Unknown HCI packet type 5e [ 1477.504754] Bluetooth: Unknown HCI packet type 43 [ 1477.515612] Bluetooth: Unknown HCI packet type 5e [ 1477.530317] Bluetooth: Unknown HCI packet type 50 [ 1477.535866] Bluetooth: Unknown HCI packet type 5e [ 1477.541027] Bluetooth: Unknown HCI packet type 40 [ 1477.561861] Bluetooth: received HCILL_WAKE_UP_IND in state 2 12:34:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, 0x0, 0x0, r3) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000004) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac141443ac1e0101010000000600000064010101ac1414bbac14142bffffffff00000000ac1416aa"], 0x28) [ 1478.255402] Bluetooth: hci1 command 0x1003 tx timeout [ 1478.260703] Bluetooth: hci1 sending frame failed (-49) [ 1478.345527] Bluetooth: hci4 command 0x1003 tx timeout [ 1478.351108] Bluetooth: hci4 sending frame failed (-49) [ 1479.055375] Bluetooth: hci0 command 0x1001 tx timeout [ 1479.060966] Bluetooth: hci0 sending frame failed (-49) [ 1479.135363] Bluetooth: hci3 command 0x1001 tx timeout [ 1479.140804] Bluetooth: hci3 sending frame failed (-49) [ 1479.545355] Bluetooth: hci2 command 0x1003 tx timeout [ 1479.551688] Bluetooth: hci2 sending frame failed (-49) [ 1480.335340] Bluetooth: hci1 command 0x1001 tx timeout [ 1480.340637] Bluetooth: hci1 sending frame failed (-49) [ 1480.415267] Bluetooth: hci4 command 0x1001 tx timeout [ 1480.420752] Bluetooth: hci4 sending frame failed (-49) [ 1481.135300] Bluetooth: hci0 command 0x1009 tx timeout [ 1481.225306] Bluetooth: hci3 command 0x1009 tx timeout [ 1481.615441] Bluetooth: hci2 command 0x1001 tx timeout [ 1481.620761] Bluetooth: hci2 sending frame failed (-49) [ 1482.425238] Bluetooth: hci1 command 0x1009 tx timeout [ 1482.505229] Bluetooth: hci4 command 0x1009 tx timeout [ 1483.705106] Bluetooth: hci2 command 0x1009 tx timeout 12:34:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 12:34:27 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000240)="5873893fd7a0337a0d85c4de58815bde62da9cfd81164dae2c13c7efa08eabe247800700000000000000325d090000a47791e64ccf6df017577c00a7ef59c5c225004124b4b41ab044997e14d8b3ef49e08a3a5d3707a0d9f17b36eb1fd2930c6323e333ec53d3b94a75aec955e86c44b53a641b9369b667dcc5271b4d4e3f5e4e974c23f64c8d2058d13a301fc900321561e4cecfb9a01b1c98b47ada457df6ca65815ffd9430de899c7a9b6af5e72e58a27855860702824d7f9288a3c8d0c6908ffe5ba9c0000000000000", 0xfffffe16}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000200)="37f681e921b3", 0x6}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000004) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r7 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105185) r8 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140)) 12:34:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0xa8080, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)={[{0x2b, 'pids'}, {0x2d, 'io'}, {0x2d, 'io'}, {0x2b, 'io'}]}, 0x12) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="4a714b441a7ea6644f07da0ed2fa39c9fe2298dd7d6bea3f0275f25c0a9c5021423c1cafcceafee20c784df7868a566ae52aa098676f5105d0b9103678f6c207b4f2ac7562b45ea14a4b269c14b6b8840c", 0x51}, {&(0x7f0000000000)='3I', 0x2}, {&(0x7f0000000240)="ff7aa636f4cbd7e00b39c309f81bf755121ca864a5adb9325037aee992dc8512649ef48a2594f26857616bca8f78545655eceae3b6b269ec947f28d796685399fa163ffb52df1b3dd65a6500048758bb70da69d5d9b389e905faf808573fdeb21ab7154524b8fcb3751fef068560ad", 0x6f}, {&(0x7f00000002c0)="4b1bac330cb55995cca5e707679967f37c8054878d4c4b79cec2470f406b6a3b37d2fc5a362a5a80cc644b7e05964b22b422a5aa52e3d867c28a3e35fef4a6bf45d72e93bda169b5d231f000529f6f835cfc527f155526449c355d6d36608c77c25e77c9d1fac9e47eda4ed71829f9b16fd181638a09837fe158e93687132a73554064fc07ed6decb954b735ac15f3f8dd6c7f3e4c1662483e4a6a89964b49dc2cf3be02d9e1a73cc778ca02aae2d93eff13f434a0c2125aec030f418db6dab963901dcbf700f3cadbb4b5bfff4f218f466ab783c594b27c2cc316a86303b525de05ef713a095e687a2f537d6bcc47a94f066d29", 0xf4}, {&(0x7f00000001c0)="f71fdab87b6c248f63f829ef642291b592413558b2bcf73c530cc5eeb6e7a04f5832887c3fc14b0a666747cbeb616c66dc", 0x31}, {&(0x7f00000003c0)="67eebb494e1676b4f9f7badbb45c184dfc4d85e29a15ac6e452927b8c7560b79adc0300a802c59a430e10811323302801479a9699ae1e5489634c6ba65120493128c8a6f79196b9defb720e2c74875ab64afff26edefffa2fd440728690eccbc1ee44f298dc4fe4db5467838b10738fa1b85b4f002cad8a6493d6eaf3fc5aa34a98c0b3ea6e6c943df4415fe5608b176ac0f222fd0c48a695f1aca63abc15c54151147c611325a", 0xa7}, {&(0x7f0000000480)="e9ad692d8f12560a4a75bda4fc223c90b7fcb4b076460217637e5c5cd2d1c75145422172734a4ad37de9f00df5b4275ba870e0e1b1b63e8dd1c383ed1ebde2cc7af3215cd0aeac0912e42637c37758a27c1f7830c9f0cfd9bb624962ba26e72837c6ccdd7347ff235f95b323f0293de3fcb4d3bdb4572bae683cf8df3a646af9", 0x80}], 0x7, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0x12) [ 1485.205851] Bluetooth: Unknown HCI packet type 5e [ 1485.215743] Bluetooth: Unknown HCI packet type 43 [ 1485.241022] Bluetooth: Unknown HCI packet type 5e [ 1485.269894] Bluetooth: Unknown HCI packet type 50 [ 1485.276858] Bluetooth: Unknown HCI packet type 5e [ 1485.281796] Bluetooth: Unknown HCI packet type 40 [ 1485.294281] Bluetooth: Unknown HCI packet type 5e [ 1485.299368] Bluetooth: Unknown HCI packet type 43 [ 1485.314672] Bluetooth: Unknown HCI packet type 5e [ 1485.332156] Bluetooth: Unknown HCI packet type 50 [ 1485.347675] Bluetooth: Unknown HCI packet type 5e [ 1485.354178] Bluetooth: Unknown HCI packet type 40 12:34:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000000)=""/178) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r3, r4, 0x0, 0x102000004) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000240)=0xe) 12:34:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1486.503917] Bluetooth: hci1: Frame reassembly failed (-84) [ 1486.504100] Bluetooth: hci1: Frame reassembly failed (-84) 12:34:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000200)={0x2, 0x6, 0x1}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {r3, r4/1000+10000}}, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000140)) memfd_create(&(0x7f0000000340)='\x00', 0x2) [ 1487.215013] Bluetooth: hci0 command 0x1003 tx timeout [ 1487.221170] Bluetooth: hci0 sending frame failed (-49) [ 1487.297454] Bluetooth: hci3 command 0x1003 tx timeout [ 1487.303999] Bluetooth: hci3 sending frame failed (-49) 12:34:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000740)={@mcast1, 0x15, r5}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x7ff}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, "6cd013999d52210f4657be4a52d07387946852694a26"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000700)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4600}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1a4, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4266}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc84}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6838}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x22008800}, 0x20000015) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="68a0b5bca0ed47735f0caaed", 0xc}, {&(0x7f0000000100)="37c45d71601261b04ea4638fd4b0deb2b09135c4d323897cf9ee78dfc3b971c950e407189f5a6a6bbf2e14720d8bcec12493f3c93f0555256851ddbee5ebeebddae83c85af9f7983e4719ca2155108199c4d264eef4b2851327c013ee8f43db741f0548a51884e", 0x67}], 0x2, 0x8) 12:34:30 executing program 0: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4080000, 0x200000006}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.']) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x400000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x6c8, r2, &(0x7f0000000000)="23bf1f2197ac0116bbd24a76bdf094304c9fca906f3084f72b2122c37f220e398e7d636cf12b0a4b552f2698b060f6dc6703b46653e0ae2f86ca06528c8ef6ae8ba62bfb7b096be82c96eae459308cf3ead023d89c1947dcb15cb655c3fd2bf532a251977b9bf5d3a23b5a", 0x6b, 0x3ff, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xffff, r4, &(0x7f0000000200)="bca1bfcd1ca5dca984bdea59449e6f6c996808e5b3a2e58ec0767d28d03df3748f63ff68f064446c8221330d73addb35528f80a0b89d9543323a57f5ffa534045022cd15348a7124e71be6d76aa6454de56d5587d5be25d762ddfa38e731403caedce523a2ff2653e6a437247847bf1d41e3768ebf2cf13484d3c0710a2261b27c4f81066fb7fddcf76d5030046846664881852f3da4d660bcc737fec645efe2d3987332a69dad04646c9b56de509f49490dcae1b03bdba6d871e6de750b4d9986cfd1f0f62caf634e5c3a", 0xcb, 0x6, 0x0, 0x0, r5}]) [ 1488.014120] Bluetooth: Unknown HCI packet type 5e [ 1488.014489] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1488.019706] Bluetooth: Unknown HCI packet type 43 [ 1488.059496] Bluetooth: Unknown HCI packet type 5e [ 1488.090439] Bluetooth: Unknown HCI packet type 50 [ 1488.118285] Bluetooth: Unknown HCI packet type 5e [ 1488.134390] Bluetooth: Unknown HCI packet type 40 [ 1488.574733] Bluetooth: hci1 command 0x1003 tx timeout [ 1488.580137] Bluetooth: hci1 sending frame failed (-49) 12:34:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r5, r6, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) 12:34:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r5, 0x101, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000300)) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000000)={0x2b, 0x4, 0x0, {0x4, 0x8, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000140)) [ 1489.294665] Bluetooth: hci0 command 0x1001 tx timeout [ 1489.299973] Bluetooth: hci0 sending frame failed (-49) [ 1489.374840] Bluetooth: hci3 command 0x1001 tx timeout [ 1489.380568] Bluetooth: hci3 sending frame failed (-49) 12:34:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000004c0)='\x00\xff\x00\x00\x8c\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00{\xcad\x12\x15U\xec\x856\xa4wJW\xb6\xf4X\x1fE\xf8\x80\xdd\xfd\xaf\x80<&\x12|\xd7uE\x82V\xef\xd6\t\x0e\x05\x00\x00\x00\x00\x00\x00\x00\xb28CS\xe6\xe3\t\xd1I\"\f\xa6\v\xd8\x9f\xf70iX\xf7+\xdc\xe0K\xb7J\xeaT\xb5\xd2\x0f\x80\xd0\xf2\x95\xe5v\b\x8b2\xc7/%\xfe\t\xac|\xad\xfd\x80\xb1OW\xc5\xce\x0e\x19\x92\n\xfd@N\xdb\x10\xfd\xee\x1b\xef>vQ\xb3-\xbe\xe5\xcc\x04@P\xc3\xa3^GA\x99D\x86\xbc\xd5kx\xc9F\x1d\f\xe5?\xe8:\xce\xe3J|7p\xb8i\xdcQ4\xad?\x00\x04\x00y\xb0\xa0\x90q2\x97m\x00\x00\x00\x00\x00v\n\x8a\x90>\xc5mI\xee\xd8\xc5\x7f\xf1|\x11\xf4\xc3\xa9\x8b}\xf3\x90\xbfA\xde8\xf1\x82\x12\xd2\x15\xce\xcc\x95N\x82)\xf9 \x95}\\&\x04\xb8\x87Ek#\xa7\xd5JA\xb00\xea\xef\x0f\"\xe1L\xc6\x04\x89\xb2&\x9c?`ds\xfd\xde_\xa9\xf6\xb21\xb5F\xc5\x81\xad\xcc\xc9\xac6\xf5\xfc/s\xe5Z\xe9\xa9wvfg\xb2\xfe?,\xdd!%4)\xba \x1a\xe2g\x88~\xf7\xf3{\xb8\x82w\x11\x82\x1e\xd7s\xe8]\x9e\xf8\x8bVP\xa5\xcd5\xea2SR^\x7f]P\x17|\rX\x06\x92\x0fU\x15\xa1\x9e\xf5\x01\x9a\x06I\xb3\xfa\x93\xf7\xc6G(w\x13\xe8\xa0\x8ao\xbb\xd5\xe7W\x96\xeb\xdf\xe6\xef\xc0\xff[\xe6\x83\x8eA\x19a\xb5\x9c\xf8\x01Y\xe9mr\xf9\xdd!\x9d\xfa\xb5;1/\x84p\xd2p\t\xc1\x90\x16I\xeb\xcb\x13\xd0\xbd\xed>+\x15\xceW\xd4~N\xce+\x01\xdeu\xbf\x9b\x14\x8b\xd6\x1c\x89(\xc1~\xd5\xf9.p\xb1\x04\xb9@D\xdf\xa6b\x18\xf4\xe2\xb5\xc3\xa4Q\xf7\x06&zb\'\x9c\a\x05b\xa4\x83\xb69YtB\x95\xae\x1b\xf6j\xae\xc9J\xc23\xf9.\xb7`\x01-:d\x10\xb5o\xc6\x06\x00\x00\x00\xc2\x95\xb7', 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000000)={0x6, 0x2, @stop_pts=0x1}) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000004", @ANYRES16, @ANYBLOB="010300000000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00002bbd7000fedbdf250200000008002b000400000004f47f5d4e7c47c0ac5fbd698e18a222deb49116352eb2354772bbbe61e04b562da7e94a85df3b6b2aa05cd0f1d3f4f10931a73720dc6ec88feb3d278e4694b03ef3265c2b67e13dd4e8bb88f16fe5dc45db45ce0cda463cc07d7cd71ce93ef4bf76505e081cf3b32ed28bccc36ddf47092fa83ec0d9c3b4e3cc9b1de48737ded5a9d9928f6bf6619d2277595add6d889689845024c7e9a4f6614785e78d2a0824c233acb68369c1f1baba55083e"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000091) sendfile(r2, r5, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000200)) [ 1490.014645] Bluetooth: hci2 command 0x1003 tx timeout [ 1490.019960] Bluetooth: hci2 sending frame failed (-49) 12:34:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x5904, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000280)={0x1, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x1410c0, 0x0) r5 = getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x6) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x3, 0x10000001, 0x0, 0x5, 0x0, 0x7238, 0x0, 0x0, 0x45}, 0x0) sched_setattr(r6, &(0x7f0000000200)={0x38, 0x3, 0x10000020, 0x80000001, 0xbe5a, 0x0, 0x0, 0x800}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000140)) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000001c0)) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1490.555079] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1490.562459] Bluetooth: Unknown HCI packet type 5e [ 1490.573111] Bluetooth: Unknown HCI packet type 43 [ 1490.589756] Bluetooth: Unknown HCI packet type 5e [ 1490.595894] Bluetooth: Unknown HCI packet type 50 [ 1490.600903] Bluetooth: Unknown HCI packet type 5e [ 1490.606264] Bluetooth: Unknown HCI packet type 40 [ 1490.654684] Bluetooth: hci1 command 0x1001 tx timeout [ 1490.662284] Bluetooth: hci1 sending frame failed (-49) [ 1491.374607] Bluetooth: hci0 command 0x1009 tx timeout [ 1491.454649] Bluetooth: hci3 command 0x1009 tx timeout [ 1492.094536] Bluetooth: hci2 command 0x1001 tx timeout [ 1492.100030] Bluetooth: hci2 sending frame failed (-49) [ 1492.574559] Bluetooth: hci4 command 0x1003 tx timeout [ 1492.574656] Bluetooth: hci4 sending frame failed (-49) [ 1492.734544] Bluetooth: hci1 command 0x1009 tx timeout [ 1494.174504] Bluetooth: hci2 command 0x1009 tx timeout [ 1494.654423] Bluetooth: hci4 command 0x1001 tx timeout [ 1494.659958] Bluetooth: hci4 sending frame failed (-49) 12:34:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:34:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0xa8b40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file1', [{0x20, '#! '}, {0x20, '\'wlan0ppp0'}, {}, {0x20, 'vboxnet1^vmnet0&'}, {0x20, '}@\\Csecuritybdev'}, {0x20, 'cpuset,\xc6vboxnet1eth1vmnet1#m)'}, {0x20, '*!wlan0}.'}, {0x20, '/dev/ptmx\x00'}], 0xa, "6eeaf34c01bb138b0f6f65f3910b57af2d0be3f7784dbbf5374cff1d57bc9f64b34b7422176a09198300055ea246eef4689d4a4403ab92dc293cbb1c5196565913edd667bde5c5bf6cfd43532a233a6f52f2ff3bff1bffdd4d6040aa4f04d5aaa9f9810a9a3c75f52cacbbe903022954ea6e025ce4f1f207f4678a26130be9b5e2c044ce"}, 0xf4) r3 = accept4(r1, &(0x7f0000000140)=@ethernet={0x0, @local}, &(0x7f00000002c0)=0x80, 0x80800) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1495.453516] Bluetooth: Unknown HCI packet type 5e [ 1495.454873] Bluetooth: Unknown HCI packet type 5e [ 1495.459807] Bluetooth: Unknown HCI packet type 43 [ 1495.465053] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1495.471815] Bluetooth: Unknown HCI packet type 00 [ 1495.474838] Bluetooth: Unknown HCI packet type 43 [ 1495.495945] Bluetooth: Unknown HCI packet type 5e 12:34:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1495.497492] Bluetooth: Unknown HCI packet type 5e [ 1495.505608] Bluetooth: Unknown HCI packet type 50 [ 1495.519784] Bluetooth: Unknown HCI packet type 50 [ 1495.524150] Bluetooth: Unknown HCI packet type 5e [ 1495.527882] Bluetooth: Unknown HCI packet type 5e [ 1495.543741] Bluetooth: Unknown HCI packet type 40 [ 1495.546400] Bluetooth: Unknown HCI packet type 40 12:34:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:39 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/68) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080)) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x5, 0x8001, 0x7, 0x9, 0x6, 0xffffffff}, 0x1c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000240)) [ 1496.704069] Bluetooth: hci1: Frame reassembly failed (-84) [ 1496.710258] Bluetooth: hci1: Frame reassembly failed (-84) [ 1496.734491] Bluetooth: hci4 command 0x1009 tx timeout [ 1497.464336] Bluetooth: hci0 command 0x1003 tx timeout [ 1497.469771] Bluetooth: hci0 sending frame failed (-49) [ 1497.475403] Bluetooth: hci3 command 0x1003 tx timeout [ 1497.481042] Bluetooth: hci3 sending frame failed (-49) 12:34:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400002, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000200)) 12:34:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setregs(0xd, r2, 0x9ef1, &(0x7f0000000240)="66fa28e6283103da5f185d19861beab1933d5a167554cf4aa7067b3ce385c05f52ccbc559031904b079f3a33fe8411d3748cf00b3b9cd107df56b50dad5678e151ed25d139bd1e2a3b4eb98d1f6d0066e0a2dddc185d94e258d5511da223deed8957c00b125d9eb1b79f0a0040ea629117671a681f0cd85bbb9feb89e53080538c585e58fc367cbe") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) write(r3, &(0x7f0000000340), 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) fchdir(r0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) sendto$inet(r1, &(0x7f0000000200)="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", 0x1000, 0x8008, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1498.630097] Bluetooth: Unknown HCI packet type 5e [ 1498.631755] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1498.635775] Bluetooth: Unknown HCI packet type 43 [ 1498.652276] Bluetooth: Unknown HCI packet type 5e [ 1498.657862] Bluetooth: Unknown HCI packet type 50 [ 1498.662927] Bluetooth: Unknown HCI packet type 5e [ 1498.675017] Bluetooth: Unknown HCI packet type 40 [ 1498.734490] Bluetooth: hci1 command 0x1003 tx timeout [ 1498.740479] Bluetooth: hci1 sending frame failed (-49) 12:34:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x48800, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x40) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) r5 = socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_getnetconf={0x5c, 0x52, 0x18, 0x70bd2b, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @NETCONFA_RP_FILTER={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xffff}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x2}, @NETCONFA_PROXY_NEIGH={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x48000000) [ 1499.514059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.534231] Bluetooth: hci3 command 0x1001 tx timeout [ 1499.535563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1499.539984] Bluetooth: hci3 sending frame failed (-49) [ 1499.556369] Bluetooth: hci0 command 0x1001 tx timeout [ 1499.566223] Bluetooth: hci0 sending frame failed (-49) 12:34:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) connect(0xffffffffffffffff, &(0x7f0000001300)=@l2={0x1f, 0x7, @none, 0x6}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000664e19227e2085aee16ffd4fb2df75c15bd0cd141feeec7d76d1266624bfb90bf13d30", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x87fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001240)={0x0, 0x0, 0x1, 0xfffa, 0x8200, 0x1, 0x71, 0x5, {r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x81, 0x7, 0x8c1, 0xfff}}, &(0x7f0000000080)=0xb0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1015, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1500.664018] Bluetooth: hci2 command 0x1003 tx timeout [ 1500.669353] Bluetooth: hci2 sending frame failed (-49) [ 1500.814044] Bluetooth: hci1 command 0x1001 tx timeout [ 1500.819422] Bluetooth: hci1 sending frame failed (-49) 12:34:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 12:34:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0xff}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xfb, 0x9}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xc, 0x0, [0x11, 0xb, 0xd, 0xf, 0x1c, 0x5, 0x18, 0x1d]}, {0x9, 0x0, [0x6, 0x15, 0x1b, 0x15, 0xb]}, {0x5, 0x0, [0x17]}, {0x6, 0x0, [0x4, 0x2]}, {0x7, 0x0, [0x13, 0xd, 0x11]}, {0x5, 0x0, [0x12]}, {0xa, 0x0, [0x9, 0x9, 0xf, 0x10, 0x20, 0xa]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x90}}, 0x4048050) [ 1501.613964] Bluetooth: hci0 command 0x1009 tx timeout [ 1501.619349] Bluetooth: hci3 command 0x1009 tx timeout [ 1502.743944] Bluetooth: hci2 command 0x1001 tx timeout [ 1502.753995] Bluetooth: hci2 sending frame failed (-49) [ 1502.893978] Bluetooth: hci1 command 0x1009 tx timeout [ 1504.813898] Bluetooth: hci2 command 0x1009 tx timeout 12:34:48 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0xd494be4252418bf5, 0xf9, 0x40, @buffer={0x0, 0xf5, &(0x7f0000000100)=""/245}, &(0x7f0000000200)="63973229aeb6d321a6debb6e7965d31134c90a5f81369ed9a8ee8a346508ab42d53f0b3073d73d30e280dc42ed060810a9cf51ab0242541ca0753f7bcc64037299cc26ba6d90fbeeaef31c4abd1a830907c97be38619f0642dadcd1b4b3d07d0302b8b0f15a06f220a14f51c71165bbe02484269ef8cd8e00344692ca639f1469584b06dc11ff32c85cb9fc14eb20aeae1d60e33ebe7263f7e2d68b4edc2f3420cc5e9ebeadbc296aa01ebe1c80709c862363fcfb8139feb7970e438cba51c8e89fce33b5c8dfb68025093e7dfb053748edd540900675e65077a94276d93bb44277c576971257f347791cabe540d6bc519d3eb5e1516d0d9b7", &(0x7f0000000300)=""/237, 0xffffffff, 0x2, 0x2, &(0x7f0000000080)}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) 12:34:48 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005070040000000000000000000005ac2e92cfcfd3aa70d7cfc2ae9722018ba1194433c33ed1b354648014aeb8a6221fe89f96c2c006a28ad21b06f663efdc26ebad4f205fee5b02da595c5938648aad57ebdc6438684d5d515ceccbca35a64c2c3b253da6404a007345d0594e2dd69985b590c1a655e9762521f2fa882ba14d17dce953038202356e1", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x68}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004080) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50000000}, 0x40480d1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="04000000040600000900000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=r5], 0x80}}, 0x40860) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) 12:34:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1505.698987] Bluetooth: Unknown HCI packet type 5e [ 1505.700062] Bluetooth: Unknown HCI packet type 00 [ 1505.706998] Bluetooth: Unknown HCI packet type 43 [ 1505.740259] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1505.746432] Bluetooth: Unknown HCI packet type 5e [ 1505.766046] Bluetooth: Unknown HCI packet type 5e [ 1505.767460] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1505.771110] Bluetooth: Unknown HCI packet type 43 [ 1505.810114] Bluetooth: Unknown HCI packet type 50 [ 1505.821061] Bluetooth: Unknown HCI packet type 5e [ 1505.833423] Bluetooth: Unknown HCI packet type 5e [ 1505.839699] Bluetooth: Unknown HCI packet type 50 [ 1505.845459] Bluetooth: Unknown HCI packet type 40 [ 1505.850714] Bluetooth: Unknown HCI packet type 5e [ 1505.857365] Bluetooth: Unknown HCI packet type 40 12:34:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:34:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)={0x2, 0x5, 0x4, 0x8, 0x2, {r4, r5/1000+60000}, {0x1, 0xc, 0x7, 0x3f, 0x3, 0x3, "9541f9dc"}, 0x2, 0x3, @planes=&(0x7f0000000240)={0xac, 0x6, @mem_offset=0x1, 0x470}, 0x7, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="ff0f00af55706da2c5c400", @ANYRES16=r7, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4080000, 0x200000006}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000003c0)="84cff71cf6728284bfd939681d6fe2e4cc615154aefd5c3a9badfbc4bb4ec7b632e327aea26eddf55afa4fe6b34fdbce34691c5624cc5de84d212bd277183c947f097b11e0e5da0f6c5d520161920c8a4c", 0x51, 0x0, 0x0, 0x0, r3}]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000080)="b92095524866a4cced0ee874c6a61ba9b107de6ab33abde0f59730374e188fe769e91a42bcb655377f1b7a713b5e0a150c4a8fa0585c585531d3", 0x3a, 0x101, 0x0, 0x1, r9}, &(0x7f0000000140)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "cbba24edd127b6f898719f9210b156f777ff62a6"}, 0x15, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1506.954993] Bluetooth: Unknown HCI packet type 5e [ 1506.965938] Bluetooth: Unknown HCI packet type 43 [ 1506.972433] Bluetooth: Unknown HCI packet type 5e [ 1506.979102] Bluetooth: Unknown HCI packet type 50 [ 1506.987206] Bluetooth: Unknown HCI packet type 5e [ 1506.992248] Bluetooth: Unknown HCI packet type 40 [ 1507.012956] Bluetooth: Unknown HCI packet type 5e [ 1507.013599] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1507.018397] Bluetooth: Unknown HCI packet type 43 [ 1507.031030] Bluetooth: Unknown HCI packet type 5e [ 1507.040594] Bluetooth: Unknown HCI packet type 50 [ 1507.045812] Bluetooth: Unknown HCI packet type 5e [ 1507.050817] Bluetooth: Unknown HCI packet type 40 [ 1507.773601] Bluetooth: hci3 command 0x1003 tx timeout [ 1507.779178] Bluetooth: hci3 sending frame failed (-49) [ 1507.785015] Bluetooth: hci0 command 0x1003 tx timeout [ 1507.790354] Bluetooth: hci0 sending frame failed (-49) 12:34:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:34:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:34:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00%\x8c\x00\x00\x80\x00\x00\x13\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000200)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x10000) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 1508.901716] Bluetooth: Unknown HCI packet type 5e [ 1508.913036] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1508.921584] Bluetooth: Unknown HCI packet type 43 [ 1508.936527] Bluetooth: Unknown HCI packet type 5e [ 1508.946599] Bluetooth: Unknown HCI packet type 50 12:34:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x72, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x90, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x7fffffff, @mcast1, 0x311}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x2, @local, 0x9}, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x1}, @in6={0xa, 0x1, 0x3, @private2={0xfc, 0x2, [], 0x1}, 0x7f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}]}, &(0x7f0000000080)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000000340)={0x10000, 0x2, &(0x7f0000000100)=[0x4, 0x7], &(0x7f00000002c0)=[0x8, 0x1, 0x8, 0x6, 0x7, 0x7, 0x2, 0xee9c, 0x20, 0x1], &(0x7f0000000300)=[0x20, 0x1, 0x3, 0x7ff]}) [ 1508.951738] Bluetooth: Unknown HCI packet type 5e [ 1508.958253] Bluetooth: Unknown HCI packet type 40 [ 1508.973668] Bluetooth: hci1 command 0x1003 tx timeout [ 1508.983301] Bluetooth: hci1 sending frame failed (-49) [ 1509.053540] Bluetooth: hci4 command 0x1003 tx timeout [ 1509.059261] Bluetooth: hci4 sending frame failed (-49) 12:34:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4ea3, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f0000000300)='\x01\x00\x00\x00\x8c\b\x00\x00\x00\xa8\x98\xa4\a\xb8\xf2\x00\x0e\x00\x00\x00\x00!F!\xcdQ\x87H~\xdd\x1dVj\xfb\xe3\xe07\xaf\xd7\xab\x82\xf4\x05\xa2G\xd3\x93\x7f;\xbb\xd5\xaf\xab\xa5Y\xc1\x948P\xd1)\x8cV\x99\xcfzl\xd3\au\xa6\xd2\xa2\x89`\x1a\xd2\xb0\xf2YK\xa3\x7f!s\xe0{ &-M\xcf\x1c\x99\xd1*\xdd\x1a\xbe\x067ws\xa4J\xea\x06\xc5\xb2b[&:\x01\x7f\xae\xacrS\xca\xa5\xea+\xf4\x86T(\xebUnv\x1f\xcau\xb8$]\xfd\xb5\x02\xac', 0x6) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)) fcntl$lock(r5, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x7, &(0x7f0000002000)) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x9feb, 0xffffffffffffffff}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0xfefb2650dd31c9bf, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r7, 0xd9f72000) 12:34:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00\x00\x00\x00\x8c\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9f\xb5\xf6\x8c\xfdz\xaex$\x8c-\x01\xe1Q\xcfI\xd3\xe4p\x80\x9a\xbeL\x00\xd4\x011\x9b\xf6#\x8bz\x0f\xa9x', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) clock_settime(0x1, &(0x7f0000000040)={0x0, 0x989680}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20000804) [ 1509.853597] Bluetooth: hci3 command 0x1001 tx timeout [ 1509.853886] Bluetooth: hci0 command 0x1001 tx timeout [ 1509.860728] Bluetooth: hci3 sending frame failed (-49) [ 1509.870198] Bluetooth: hci0 sending frame failed (-49) [ 1510.973591] Bluetooth: hci2 command 0x1003 tx timeout [ 1510.979304] Bluetooth: hci2 sending frame failed (-49) [ 1511.063507] Bluetooth: hci1 command 0x1001 tx timeout [ 1511.068801] Bluetooth: hci1 sending frame failed (-49) [ 1511.133378] Bluetooth: hci4 command 0x1001 tx timeout [ 1511.138743] Bluetooth: hci4 sending frame failed (-49) [ 1511.933377] Bluetooth: hci0 command 0x1009 tx timeout [ 1511.939818] Bluetooth: hci3 command 0x1009 tx timeout [ 1513.053535] Bluetooth: hci2 command 0x1001 tx timeout [ 1513.058856] Bluetooth: hci2 sending frame failed (-49) [ 1513.133326] Bluetooth: hci1 command 0x1009 tx timeout [ 1513.213294] Bluetooth: hci4 command 0x1009 tx timeout [ 1515.133256] Bluetooth: hci2 command 0x1009 tx timeout 12:34:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 12:34:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) 12:34:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0xa000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x3}}, 0x10) [ 1515.939453] Bluetooth: Unknown HCI packet type 5e [ 1515.951775] Bluetooth: Unknown HCI packet type 00 [ 1515.956856] Bluetooth: Unknown HCI packet type 43 [ 1515.978857] Bluetooth: Unknown HCI packet type 5e [ 1515.995089] Bluetooth: Unknown HCI packet type 50 [ 1516.000856] Bluetooth: Unknown HCI packet type 5e [ 1516.019364] Bluetooth: Unknown HCI packet type 40 [ 1516.133414] Bluetooth: Invalid header checksum [ 1516.138185] Bluetooth: Invalid header checksum [ 1516.244214] Bluetooth: Invalid header checksum [ 1516.353444] Bluetooth: Invalid header checksum [ 1516.463336] Bluetooth: Invalid header checksum [ 1516.583321] Bluetooth: Invalid header checksum [ 1516.693282] Bluetooth: Invalid header checksum 12:34:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) 12:35:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x5904, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000280)={0x1, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x1410c0, 0x0) r5 = getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x6) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x3, 0x10000001, 0x0, 0x5, 0x0, 0x7238, 0x0, 0x0, 0x45}, 0x0) sched_setattr(r6, &(0x7f0000000200)={0x38, 0x3, 0x10000020, 0x80000001, 0xbe5a, 0x0, 0x0, 0x800}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000140)) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000001c0)) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:35:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:35:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x10010000000004) syz_open_pts(r0, 0x6000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/26}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) [ 1517.263684] Bluetooth: hci1 sending frame failed (-49) [ 1517.380932] Bluetooth: Unknown HCI packet type 5e [ 1517.391921] Bluetooth: Unknown HCI packet type 43 [ 1517.394172] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1517.402467] Bluetooth: Unknown HCI packet type 5e [ 1517.408277] Bluetooth: Unknown HCI packet type 50 [ 1517.417129] Bluetooth: Unknown HCI packet type 5e [ 1517.421984] Bluetooth: Unknown HCI packet type 40 [ 1518.023053] Bluetooth: hci0 command 0x1003 tx timeout [ 1518.028566] Bluetooth: hci0 sending frame failed (-49) 12:35:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x206000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000140)) 12:35:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x72, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="02e57bdeb115ff0100", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7fffffff, @remote, 0xff}}, [0x7fff, 0x9aba, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x100000000002, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={r3, 0x2, 0x9, 0x6ca9, 0x5, 0x0, 0xff, 0xd7c, {r5, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x3, 0x1, 0x8, 0x9, 0x80000000}}, &(0x7f0000000080)=0xb0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:35:01 executing program 0: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@null) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x400000, 0x200) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)=""/39) [ 1519.151686] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1519.164318] Bluetooth: Unknown HCI packet type 5e [ 1519.171140] Bluetooth: Unknown HCI packet type 43 [ 1519.194461] Bluetooth: Unknown HCI packet type 5e [ 1519.208709] Bluetooth: Unknown HCI packet type 50 [ 1519.220460] Bluetooth: Unknown HCI packet type 5e [ 1519.230394] Bluetooth: Unknown HCI packet type 40 [ 1519.293072] Bluetooth: hci1 command 0x1003 tx timeout [ 1519.299022] Bluetooth: hci1 sending frame failed (-49) [ 1519.452825] Bluetooth: hci3 command 0x1003 tx timeout [ 1519.458163] Bluetooth: hci3 sending frame failed (-49) 12:35:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x8}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x500, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0, 0x1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000200)={0x2, 0x9}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000100)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) 12:35:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x13, 0x7, 0x2, {{0x6, ':nodev'}, 0x7}}, 0x13) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) [ 1520.092839] Bluetooth: hci0 command 0x1001 tx timeout [ 1520.107036] Bluetooth: hci0 sending frame failed (-49) [ 1521.212758] Bluetooth: hci2 command 0x1003 tx timeout [ 1521.218079] Bluetooth: hci2 sending frame failed (-49) [ 1521.372904] Bluetooth: hci1 command 0x1001 tx timeout [ 1521.378431] Bluetooth: hci1 sending frame failed (-49) [ 1521.532711] Bluetooth: hci3 command 0x1001 tx timeout [ 1521.538158] Bluetooth: hci3 sending frame failed (-49) [ 1522.172681] Bluetooth: hci0 command 0x1009 tx timeout [ 1523.292703] Bluetooth: hci2 command 0x1001 tx timeout [ 1523.298146] Bluetooth: hci2 sending frame failed (-49) [ 1523.452861] Bluetooth: hci1 command 0x1009 tx timeout [ 1523.622680] Bluetooth: hci3 command 0x1009 tx timeout [ 1525.372637] Bluetooth: hci2 command 0x1009 tx timeout 12:35:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x8000, 0x200) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000240)="c155e75f2d473996b8677020596a242d7afc2d5ca5bf4f36f0c7e17936594e36d19e7785a3512899f60c51b71ff05a5b3da55c89e1ef3b2afdc874833bfb3d47b2e7a898b5097cfd759ddec0af21a580fbe965a72a0d0ec2c1ad1dccc09fbf463cabfcae53df819c0531b0192d9f017131ac1247fa6295bd8f9f437448ac67c2fb6d9588b4e922634ef8f5cb78677b7fd4abf0029ffd0b790c916e2792887d0ef967e52602e6f6908f799e1ce77273093326218d00ff7c001d984fd533e6422e6daf20ceae76970ac99b29376cd7", 0xce) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r6 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r4, r5, 0x0, 0x102000004) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000000)) 12:35:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x102000004) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x72, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @empty}}, [0x7fff, 0x2, 0x8, 0x200, 0x10001, 0x3000000000000000, 0x7c7c, 0x0, 0x6, 0x2, 0x7fffffff, 0x2, 0x2, 0x1, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={r5, 0x3}, &(0x7f00000001c0)=0x8) fsetxattr$security_selinux(r2, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x3) 12:35:08 executing program 1: ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$P9_RATTACH(r1, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x2, 0x2, 0x1}}, 0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x42}, 0x16, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r4, 0x400455c8, 0x3) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x32) recvmmsg(r4, &(0x7f00000016c0)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/158, 0x9e}], 0x4, &(0x7f0000001400)=""/48, 0x30}, 0x900000}, {{&(0x7f0000001440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/166, 0xa6}, {&(0x7f0000001580)=""/25, 0x19}, {&(0x7f00000015c0)=""/79, 0x4f}], 0x3, &(0x7f0000001680)=""/13, 0xd}, 0x4}], 0x2, 0x20000, &(0x7f0000001740)={0x77359400}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001780)={0xb7a2, 0x0, 0x10001, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r5, 0x40106437, &(0x7f00000017c0)={r6, 0x6}) [ 1526.157807] Bluetooth: Unknown HCI packet type 5e [ 1526.162956] Bluetooth: Unknown HCI packet type 43 [ 1526.175882] Bluetooth: Unknown HCI packet type 5e [ 1526.186987] Bluetooth: Unknown HCI packet type 50 [ 1526.205376] Bluetooth: Unknown HCI packet type 5e [ 1526.217883] Bluetooth: Unknown HCI packet type 40 12:35:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x32) [ 1527.416881] Bluetooth: Unknown HCI packet type 5e [ 1527.423370] Bluetooth: Unknown HCI packet type 43 [ 1527.428813] Bluetooth: Unknown HCI packet type 5e [ 1527.436899] Bluetooth: Unknown HCI packet type 50 [ 1527.441880] Bluetooth: Unknown HCI packet type 5e [ 1527.452091] Bluetooth: Unknown HCI packet type 40 12:35:10 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 12:35:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x9feb, 0x2}) r3 = fcntl$dupfd(r2, 0x406, r0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) timerfd_gettime(r1, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 12:35:10 executing program 0: r0 = socket$kcm(0x29, 0x3a69bc933feade83, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e22, @multicast1}}) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000200)=""/240, &(0x7f0000000040)=0xf0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000940)={0x0, 0x7fff, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x990971, 0x100, [], @ptr=0x80000000}}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000980)={{0x21, @empty, 0x4e22, 0x4, 'wrr\x00', 0x2, 0x8, 0x3b}, {@empty, 0x4e21, 0x3, 0x5, 0xffffffe0, 0x2}}, 0x44) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x20044871) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={&(0x7f0000000300)=@ipx={0x4, 0x0, 0x7, "1aee7f14f8fa", 0x7f}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="aea63ac836e77d9e1791f317d3d42b3d79da3faaaf601b20cb19f82de951e3e4eb1a163aee6b520dd69403a008fee50390a20c6693029b1a3a6c027d2dfed42ab04f1fea3e56b230ec40b253b5dced109c3c324ddb8f207ec38687462662ac0cde162295da2451216ef27ea48bc3b41bedc84fe53d57d54121f15ae0c514def36329d17cc1f6ae31c0e08a562c231b469b89a6346066ddf5e1892b27525f39cbf6ff931a20c09d00352c720cfe05d35d6602e6e0588068ccd4fef167893f74feec150a5784223a5e56f4764c245a7eb6f9ee950b6767847f24570b3e", 0xdc}, {&(0x7f0000000480)="9fcc891a12aa2cabb8f69ab3e1348a815f8a46ee69f575878e04b4c406e9446d4977f85aa37fbb5aaa09f90d8bbe1732b4d3735ab28cc1f64873b0045bec6de9153ebdd55cd9e2357b518084b501f5ade1a3c14ac59560dbcd25a2f9d94dcd5cea72a7346f8ee9bd5243776a6d228de97b82d97319ac2497f850197489290180d225a94a58302c24dd51a59df771cd263dc05ad571a665f68ed101136fd4630cc13d21a306ac14fcbe571e378a38618d1aac16d918aacb11ec31c7165d1bdcfbf94b11846c25e96d9b06a74e28ee2bdfde057d272ffec61ffb", 0xd9}, {&(0x7f0000000580)="311db1e61a08261a59c5450e009e9e412d345d1d36308c1e53344b7148c43eaf56270e15c244154b228091c0e9f5c8ce7135d55a0b69ed573c7f7b7cd4846feac677a678c5d81bb589d300dbd02f1dbfe46cf49d2e15fc21ba1d704759392f8dc2c69116e87e69cfde459ea0edcde9c1daa00a15", 0x74}, {&(0x7f0000000600)="cee567fdc5d1315f2f66822454b0eadf8d3df93f597b39af901d96cbe84a6a869f2f0235e5937236a13f16cf699721bda2a9012ac3af8a4430485d543efaad6453f9b94b4cf0f649d3874854b21158d695c3dcf973cc23d5a11b6eba669d644a873608472f362b599b65880d8b3e6acb00186f5cfbfe2de31bcc3909ed98357e5e5ffc456731218eee748a9b38bef4271201534fe88eedf02b00f5d2cdd3e2570c57b09b8630f2f97f06421250805f0209e049e37c31294e94dc794355b04bea4aac895e", 0xc4}], 0x4, &(0x7f0000000700)=[{0x90, 0x114, 0xfffff52f, "b201f77ce8cb4b04dfc8befb0d093cccb0ce20854824e1f389431f54a5dd57ce9e4eaf7cb21d45480fd714743646ca1dc445d928a52b79aae20a9fd6781213b6bc6ce54063f00384def7d84982b280ce5d2ffeb67a6204156043c4291feb5cdfee8d80c15f5648843d0a7c6f2e6bf77236608ea01cb6476a7db782c1"}, {0x90, 0x10c, 0x2, "f63655d2a39c2a24b7c6996e1cafeee9cba4d84498b9161fc69a73ae95c7bdf271880d18dee5ad3c06554c17a26d44cdbadb124180d68f8c2023b8d6bf856042b0d8f819ca98b8674adeba8f015fff6302930bf4865eb86cac5add4f2983b767d02dfc96381ab3ab5ad0aef93fabb0b9753ca1c2d0577095f6f98e49c2"}, {0x18, 0x6, 0x0, "3f1c18ed39"}, {0x28, 0x10f, 0xffff0000, "3c6b4e0f4ebaa641172416627289f04ea092ddfe06a3c133"}, {0x28, 0xff, 0x7, "8d134b5e7b868413cf61db55f48ee83a2c56ab"}], 0x188}, 0x20) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000140)) [ 1528.066883] Bluetooth: Unknown HCI packet type 5e [ 1528.073601] Bluetooth: Unknown HCI packet type 43 [ 1528.080551] Bluetooth: Unknown HCI packet type 5e [ 1528.085929] Bluetooth: Unknown HCI packet type 50 [ 1528.096751] Bluetooth: Unknown HCI packet type 5e [ 1528.103741] Bluetooth: Unknown HCI packet type 40 [ 1528.110945] Bluetooth: Unknown HCI packet type 5e [ 1528.123217] FAULT_INJECTION: forcing a failure. [ 1528.123217] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.137888] kasan: CONFIG_KASAN_INLINE enabled [ 1528.145032] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1528.155441] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1528.161302] CPU: 1 PID: 1190 Comm: syz-executor.3 Not tainted 4.14.181-syzkaller #0 [ 1528.169115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.172381] Bluetooth: hci0 command 0x1003 tx timeout [ 1528.178648] Call Trace: [ 1528.186440] dump_stack+0x1b2/0x283 [ 1528.189683] Bluetooth: hci0 sending frame failed (-49) [ 1528.190167] should_fail.cold+0x10a/0x154 [ 1528.190184] should_failslab+0xd6/0x130 [ 1528.203957] kmem_cache_alloc_node+0x54/0x400 [ 1528.209295] __alloc_skb+0x9a/0x4c0 [ 1528.212923] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1528.213021] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1528.221855] Modules linked in: [ 1528.227610] ? __ldsem_down_read_nested+0xc6/0x5d0 [ 1528.230806] ? HARDIRQ_verbose+0x10/0x10 [ 1528.230852] ll_recv+0x3d6/0x1040 [ 1528.235725] CPU: 0 PID: 10242 Comm: kworker/u4:14 Not tainted 4.14.181-syzkaller #0 [ 1528.239781] hci_uart_tty_receive+0x1ec/0x4c0 [ 1528.243199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.251143] ? hci_uart_send_frame+0x3f0/0x3f0 [ 1528.255768] Workqueue: events_unbound flush_to_ldisc [ 1528.265081] tty_ioctl+0xd5f/0x1220 [ 1528.269637] task: ffff88804b9a2300 task.stack: ffff88804bd18000 [ 1528.275151] ? tty_vhangup+0x30/0x30 [ 1528.278754] RIP: 0010:skb_put+0x29/0x170 [ 1528.285286] ? check_preemption_disabled+0x35/0x240 [ 1528.289244] RSP: 0018:ffff88804bd1fb98 EFLAGS: 00010202 [ 1528.293297] ? tty_vhangup+0x30/0x30 [ 1528.304833] do_vfs_ioctl+0x75a/0xfe0 [ 1528.308769] RAX: dffffc0000000000 RBX: ffff8880a684d980 RCX: ffff88809a11aa40 [ 1528.312640] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1528.320123] RDX: 000000000000001a RSI: 0000000000000004 RDI: 00000000000000d0 [ 1528.326697] ? ioctl_preallocate+0x1a0/0x1a0 [ 1528.334219] RBP: 0000000000000000 R08: 000000000000179b R09: ffffffff89e60618 [ 1528.339765] ? security_file_ioctl+0x76/0xb0 [ 1528.346992] R10: ffff88804b9a2c28 R11: ffff88804b9a2300 R12: 0000000000000004 [ 1528.351410] ? security_file_ioctl+0x83/0xb0 [ 1528.359194] R13: ffff8880a684d990 R14: 0000000000000005 R15: ffff8880a115b261 [ 1528.363589] SyS_ioctl+0x7f/0xb0 [ 1528.371283] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 1528.374730] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1528.383210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1528.387481] do_syscall_64+0x1d5/0x640 [ 1528.393445] CR2: 000055d1e36d028e CR3: 000000008d2bb000 CR4: 00000000001406f0 [ 1528.397428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1528.405501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1528.411277] RIP: 0033:0x45ca29 [ 1528.421561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1528.421569] Call Trace: [ 1528.425107] RSP: 002b:00007f7a2e653c78 EFLAGS: 00000246 [ 1528.432914] ll_recv+0x4f5/0x1040 [ 1528.435585] ORIG_RAX: 0000000000000010 [ 1528.442579] hci_uart_tty_receive+0x1ec/0x4c0 [ 1528.447457] RAX: ffffffffffffffda RBX: 00000000004ef100 RCX: 000000000045ca29 [ 1528.451870] ? hci_uart_send_frame+0x3f0/0x3f0 [ 1528.457871] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1528.465686] tty_ldisc_receive_buf+0x12e/0x170 [ 1528.473330] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1528.473339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1528.480875] tty_port_default_receive_buf+0x6e/0xa0 [ 1528.486244] R13: 000000000000058b R14: 00000000004c8412 R15: 00007f7a2e6546d4 [ 1528.494729] flush_to_ldisc+0x1dd/0x3f0 [ 1528.503127] Bluetooth: Can't allocate mem for new packet [ 1528.507263] process_one_work+0x7c0/0x14c0 [ 1528.507277] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1528.507282] ? worker_thread+0x163/0x1080 [ 1528.507294] worker_thread+0x5d7/0x1080 [ 1528.545620] ? process_one_work+0x14c0/0x14c0 [ 1528.550459] kthread+0x30d/0x420 [ 1528.553815] ? kthread_create_on_node+0xd0/0xd0 [ 1528.558910] ret_from_fork+0x24/0x30 [ 1528.562646] Code: 00 00 41 55 41 54 41 89 f4 55 48 89 fd 53 e8 bf 2a 61 fc 48 8d bd d0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 01 00 00 48 8d bd c8 00 00 00 4c 8b ad d0 [ 1528.581922] RIP: skb_put+0x29/0x170 RSP: ffff88804bd1fb98 [ 1528.591529] ---[ end trace d3d833d4afa811cc ]--- [ 1528.596847] Kernel panic - not syncing: Fatal exception [ 1528.603059] Kernel Offset: disabled [ 1528.606689] Rebooting in 86400 seconds..