x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8, 0xcf70, 0x2, 0x1000, 0x0, 0x2, 0x35a1c31f, 0x5, 0xff, 0xff, 0x4, 0x800, 0xf3, 0xffff}, 0x18, [0x0, 0x0, 0x0]}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 384.069600][T12097] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:00:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:52 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x100) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000140)={0x7, 0xf8, 0x53}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000180)={0x0, r4, 0xfffffffffffffff9, 0x9, 0x3f, 0x7}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:52 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r5, 0x402, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8, 0xcf70, 0x2, 0x1000, 0x0, 0x2, 0x35a1c31f, 0x5, 0xff, 0xff, 0x4, 0x800, 0xf3, 0xffff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:52 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:52 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x100) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000000140)={0x7, 0xf8, 0x53}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000180)={0x0, r4, 0xfffffffffffffff9, 0x9, 0x3f, 0x7}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:52 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async, rerun: 32) fcntl$notify(r5, 0x402, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8, 0xcf70, 0x2, 0x1000, 0x0, 0x2, 0x35a1c31f, 0x5, 0xff, 0xff, 0x4, 0x800, 0xf3, 0xffff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:52 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_mount_image$adfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x5, 0x5, &(0x7f0000001540)=[{&(0x7f0000000240)="5d49d10aba47ee6f98835a29f9d177bca8833d8cd17ad2bf40744cebfeb8491763b1a8c1664c41d7af4c784fd065fa0ec7005f2bc6c69cc37ee37cdcb323bad566e80ca96fdb1330314b9cb55fcfbba571dcdb045b043331c157f58b0d6a11eb5e7ae9cdf2277141298cc8742b31f2fcf978ff131421cda3aad9cddaeb67abce502561279b16877004edc789b1e535fd40b49d324c1561dc21476eb5cb7bc82e4950881c04da0162242b98d25efeb940badce85dcad9e318a9239b7dbba91077134f5c971dcd429346bfe32078afecdfe9d93c34", 0xd4, 0x98}, {&(0x7f0000000180)="88ebe7a34bada33552f4ea13f5dd1ecbbf30da893a8116890a216acf55f8fcc8f915a584341175887a2678b40140941c3cf920bc2d3ff048eced5a45ae0c9160a63cf5baa4a158a5666e65a4df03f83fe93556dbb3af1342c03d1ac00795d6268107f33a00faaaca", 0x68, 0x1a55}, {&(0x7f00000003c0)="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", 0x1000, 0x6b2}, {&(0x7f00000013c0)="3352224ead77dfb4ba578c126e46aab7513725e7a3116028d2facd7762dd051b89064177cb10108b4aca522252e9bb2de89cbeb07cb08e89c7bdc5db674453b9a0f059a12b30e49d6083a6524d9c7f7c065728a7fde8a127d63329e0062b", 0x5e, 0x6}, {&(0x7f0000001440)="5fd81a1fa7985991f80b63075542ab619e81f301594285f3eb35635fb0b58dbccb1823e86823aa6ef9de5e2ecb500d12e7fac6561c052bb985564ca60ccecf43dbccbd16fc73ccfebfc56fd8fbfe3d3fd2f0fdb2df1472ad428b31ad776ceac66b2fdadb781526cdd3034a86518d4f7811bcce4387b2f81ef17334fe54feb967c678ce596168574e58717710a75634eff9b9ce655b964d7583912acc71cc7b306085de8d85d3e92180e2301d52ce52b692f7c48824afc7c6efb5e0006654081700664357", 0xc4, 0x10001}], 0x40, &(0x7f00000015c0)={[{'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'#-'}, {','}, {']'}, {':'}, {'-'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x66, 0x32, 0x0, 0x66, 0x63, 0x66], 0x2d, [0x65, 0x30, 0x31, 0x32], 0x2d, [0x61, 0x37, 0x62, 0x7], 0x2d, [0x63, 0x31, 0x37, 0x50], 0x2d, [0x34, 0x35, 0x37, 0x66, 0x61, 0x62, 0x34]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '^+!(}&${*'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '+J%-$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x70d2dafb9c4c1ce6, 0x61, 0x63, 0x35, 0x62, 0x34, 0x63], 0x2d, [0x65, 0x9, 0x38, 0x34], 0x2d, [0x38, 0x37, 0x39, 0x65], 0x2d, [0x98, 0x38, 0x64, 0x64], 0x2d, [0x61, 0x33, 0x0, 0x37, 0x51, 0x35, 0x63, 0x32]}}}]}) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) r11 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r11, &(0x7f00000001c0)='0', 0x1) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r11, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r12}}, 0x3) syz_io_uring_submit(r6, r3, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r8, &(0x7f0000001700)={0x800, 0x0, 0x12}, &(0x7f0000001740)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r12}}, 0x7f) 04:00:52 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:52 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 384.536315][T12121] loop4: detected capacity change from 0 to 256 [ 384.577137][T12121] ADFS-fs (loop4): unrecognised mount option "/dev/ptmx" or missing value 04:00:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:00:53 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) 04:00:53 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = syz_mount_image$adfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x5, 0x5, &(0x7f0000001540)=[{&(0x7f0000000240)="5d49d10aba47ee6f98835a29f9d177bca8833d8cd17ad2bf40744cebfeb8491763b1a8c1664c41d7af4c784fd065fa0ec7005f2bc6c69cc37ee37cdcb323bad566e80ca96fdb1330314b9cb55fcfbba571dcdb045b043331c157f58b0d6a11eb5e7ae9cdf2277141298cc8742b31f2fcf978ff131421cda3aad9cddaeb67abce502561279b16877004edc789b1e535fd40b49d324c1561dc21476eb5cb7bc82e4950881c04da0162242b98d25efeb940badce85dcad9e318a9239b7dbba91077134f5c971dcd429346bfe32078afecdfe9d93c34", 0xd4, 0x98}, {&(0x7f0000000180)="88ebe7a34bada33552f4ea13f5dd1ecbbf30da893a8116890a216acf55f8fcc8f915a584341175887a2678b40140941c3cf920bc2d3ff048eced5a45ae0c9160a63cf5baa4a158a5666e65a4df03f83fe93556dbb3af1342c03d1ac00795d6268107f33a00faaaca", 0x68, 0x1a55}, {&(0x7f00000003c0)="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", 0x1000, 0x6b2}, {&(0x7f00000013c0)="3352224ead77dfb4ba578c126e46aab7513725e7a3116028d2facd7762dd051b89064177cb10108b4aca522252e9bb2de89cbeb07cb08e89c7bdc5db674453b9a0f059a12b30e49d6083a6524d9c7f7c065728a7fde8a127d63329e0062b", 0x5e, 0x6}, {&(0x7f0000001440)="5fd81a1fa7985991f80b63075542ab619e81f301594285f3eb35635fb0b58dbccb1823e86823aa6ef9de5e2ecb500d12e7fac6561c052bb985564ca60ccecf43dbccbd16fc73ccfebfc56fd8fbfe3d3fd2f0fdb2df1472ad428b31ad776ceac66b2fdadb781526cdd3034a86518d4f7811bcce4387b2f81ef17334fe54feb967c678ce596168574e58717710a75634eff9b9ce655b964d7583912acc71cc7b306085de8d85d3e92180e2301d52ce52b692f7c48824afc7c6efb5e0006654081700664357", 0xc4, 0x10001}], 0x40, &(0x7f00000015c0)={[{'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'#-'}, {','}, {']'}, {':'}, {'-'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x66, 0x32, 0x0, 0x66, 0x63, 0x66], 0x2d, [0x65, 0x30, 0x31, 0x32], 0x2d, [0x61, 0x37, 0x62, 0x7], 0x2d, [0x63, 0x31, 0x37, 0x50], 0x2d, [0x34, 0x35, 0x37, 0x66, 0x61, 0x62, 0x34]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '^+!(}&${*'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '+J%-$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x70d2dafb9c4c1ce6, 0x61, 0x63, 0x35, 0x62, 0x34, 0x63], 0x2d, [0x65, 0x9, 0x38, 0x34], 0x2d, [0x38, 0x37, 0x39, 0x65], 0x2d, [0x98, 0x38, 0x64, 0x64], 0x2d, [0x61, 0x33, 0x0, 0x37, 0x51, 0x35, 0x63, 0x32]}}}]}) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) (async) r11 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r11, &(0x7f00000001c0)='0', 0x1) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r11, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r12}}, 0x3) (async) syz_io_uring_submit(r6, r3, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r8, &(0x7f0000001700)={0x800, 0x0, 0x12}, &(0x7f0000001740)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r12}}, 0x7f) 04:00:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 385.336537][T12144] loop4: detected capacity change from 0 to 256 04:00:53 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) 04:00:53 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) [ 385.370163][T12144] ADFS-fs (loop4): unrecognised mount option "/dev/ptmx" or missing value 04:00:53 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) 04:00:53 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) 04:00:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:00:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:54 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000100), 0x1) 04:00:54 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) io_uring_enter(r0, 0x3b5b, 0xa89, 0x2, &(0x7f0000000100)={[0x17e8]}, 0x8) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x4ab9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@qipcrtr, 0x0, 0xc0000, 0x1}, 0x9) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = syz_mount_image$adfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x5, 0x5, &(0x7f0000001540)=[{&(0x7f0000000240)="5d49d10aba47ee6f98835a29f9d177bca8833d8cd17ad2bf40744cebfeb8491763b1a8c1664c41d7af4c784fd065fa0ec7005f2bc6c69cc37ee37cdcb323bad566e80ca96fdb1330314b9cb55fcfbba571dcdb045b043331c157f58b0d6a11eb5e7ae9cdf2277141298cc8742b31f2fcf978ff131421cda3aad9cddaeb67abce502561279b16877004edc789b1e535fd40b49d324c1561dc21476eb5cb7bc82e4950881c04da0162242b98d25efeb940badce85dcad9e318a9239b7dbba91077134f5c971dcd429346bfe32078afecdfe9d93c34", 0xd4, 0x98}, {&(0x7f0000000180)="88ebe7a34bada33552f4ea13f5dd1ecbbf30da893a8116890a216acf55f8fcc8f915a584341175887a2678b40140941c3cf920bc2d3ff048eced5a45ae0c9160a63cf5baa4a158a5666e65a4df03f83fe93556dbb3af1342c03d1ac00795d6268107f33a00faaaca", 0x68, 0x1a55}, {&(0x7f00000003c0)="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", 0x1000, 0x6b2}, {&(0x7f00000013c0)="3352224ead77dfb4ba578c126e46aab7513725e7a3116028d2facd7762dd051b89064177cb10108b4aca522252e9bb2de89cbeb07cb08e89c7bdc5db674453b9a0f059a12b30e49d6083a6524d9c7f7c065728a7fde8a127d63329e0062b", 0x5e, 0x6}, {&(0x7f0000001440)="5fd81a1fa7985991f80b63075542ab619e81f301594285f3eb35635fb0b58dbccb1823e86823aa6ef9de5e2ecb500d12e7fac6561c052bb985564ca60ccecf43dbccbd16fc73ccfebfc56fd8fbfe3d3fd2f0fdb2df1472ad428b31ad776ceac66b2fdadb781526cdd3034a86518d4f7811bcce4387b2f81ef17334fe54feb967c678ce596168574e58717710a75634eff9b9ce655b964d7583912acc71cc7b306085de8d85d3e92180e2301d52ce52b692f7c48824afc7c6efb5e0006654081700664357", 0xc4, 0x10001}], 0x40, &(0x7f00000015c0)={[{'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {'#-'}, {','}, {']'}, {':'}, {'-'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x66, 0x32, 0x0, 0x66, 0x63, 0x66], 0x2d, [0x65, 0x30, 0x31, 0x32], 0x2d, [0x61, 0x37, 0x62, 0x7], 0x2d, [0x63, 0x31, 0x37, 0x50], 0x2d, [0x34, 0x35, 0x37, 0x66, 0x61, 0x62, 0x34]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '^+!(}&${*'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, '+J%-$'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x70d2dafb9c4c1ce6, 0x61, 0x63, 0x35, 0x62, 0x34, 0x63], 0x2d, [0x65, 0x9, 0x38, 0x34], 0x2d, [0x38, 0x37, 0x39, 0x65], 0x2d, [0x98, 0x38, 0x64, 0x64], 0x2d, [0x61, 0x33, 0x0, 0x37, 0x51, 0x35, 0x63, 0x32]}}}]}) (rerun: 64) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) r11 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$6lowpan_enable(r11, &(0x7f00000001c0)='0', 0x1) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r11, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r12}}, 0x3) (async, rerun: 32) syz_io_uring_submit(r6, r3, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r8, &(0x7f0000001700)={0x800, 0x0, 0x12}, &(0x7f0000001740)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r12}}, 0x7f) (rerun: 32) 04:00:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:54 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) io_uring_enter(r0, 0x3b5b, 0xa89, 0x2, &(0x7f0000000100)={[0x17e8]}, 0x8) (async, rerun: 32) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x4ab9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@qipcrtr, 0x0, 0xc0000, 0x1}, 0x9) (async, rerun: 32) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:54 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 386.322356][T12173] loop4: detected capacity change from 0 to 256 [ 386.375391][T12173] ADFS-fs (loop4): unrecognised mount option "/dev/ptmx" or missing value [ 386.437319][T12173] loop4: detected capacity change from 0 to 256 04:00:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 386.484550][T12173] ADFS-fs (loop4): unrecognised mount option "/dev/ptmx" or missing value [ 386.546027][ T3642] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:00:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:00:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:00:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:55 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) io_uring_enter(r0, 0x3b5b, 0xa89, 0x2, &(0x7f0000000100)={[0x17e8]}, 0x8) (async) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x4ab9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, &(0x7f0000000180)=@qipcrtr, 0x0, 0xc0000, 0x1}, 0x9) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:55 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:55 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:55 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:00:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:00:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:00:56 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r7, 0x402, 0x0) (async) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) (async) 04:00:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:00:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:00:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:00:57 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:57 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:00:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x10080) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) (async) 04:00:57 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 389.273706][T12284] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:00:57 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:57 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:57 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:57 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:00:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:00:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:00:58 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x2, 0x110, r0, 0x8000000) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r6) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) (async) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="bb1f4cbb005417cfeaf5199c239a", 0xe, 0x4801, 0x1, {0x0, r9}}, 0xfffffc00) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:00:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:00:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:00:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 390.154384][T12333] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:00:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_complete(r6) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000080)=0x8, 0x4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x4000}, 0x0, {0x0, r8}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 390.290162][T12341] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:00:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:00:58 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x4dba, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x200a4}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x74ee, &(0x7f0000000140)={0x0, 0x87ca, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0xfffffff7, 0xa, 0x1, {0x0, 0x0, r9}}, 0x9da) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) io_uring_enter(r0, 0x4611, 0xf18e, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) 04:00:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_complete(r6) (async) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000080)=0x8, 0x4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x4000}, 0x0, {0x0, r8}}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_complete(r6) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000080)=0x8, 0x4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x4000}, 0x0, {0x0, r8}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:00:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:59 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_complete(r6) (async, rerun: 64) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000080)=0x8, 0x4) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x4000}, 0x0, {0x0, r8}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) [ 391.020737][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 391.021506][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 391.039066][ T3649] Bluetooth: hci7: sending frame failed (-49) [ 391.047309][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:00:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:00:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:59 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) syz_io_uring_setup(0x4dba, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x200a4}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x74ee, &(0x7f0000000140)={0x0, 0x87ca, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0xfffffff7, 0xa, 0x1, {0x0, 0x0, r9}}, 0x9da) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) io_uring_enter(r0, 0x4611, 0xf18e, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) 04:00:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:00:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) syz_open_pts(r5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, &(0x7f0000000140)=""/126, 0x7e, 0x9e82ddff4550686f}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:00:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:00:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:00:59 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x4dba, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x200a4}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x74ee, &(0x7f0000000140)={0x0, 0x87ca, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0xfffffff7, 0xa, 0x1, {0x0, 0x0, r9}}, 0x9da) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) io_uring_enter(r0, 0x4611, 0xf18e, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) syz_io_uring_setup(0x4dba, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x200a4}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x74ee, &(0x7f0000000140)={0x0, 0x87ca, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r9, 0x400455c8, 0x4) (async) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0xfffffff7, 0xa, 0x1, {0x0, 0x0, r9}}, 0x9da) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) io_uring_enter(r0, 0x4611, 0xf18e, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) (async) [ 391.957472][T10189] Bluetooth: hci6: Frame reassembly failed (-84) [ 391.994015][ T9890] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) syz_open_pts(r5, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, &(0x7f0000000140)=""/126, 0x7e, 0x9e82ddff4550686f}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xab}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x10080) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x3439a000) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x19) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000080)={0x6, 0x80, 0x7fff, 0x8}) 04:01:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:01:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) syz_open_pts(r5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, &(0x7f0000000140)=""/126, 0x7e, 0x9e82ddff4550686f}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r5, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x4, &(0x7f0000000140)=""/126, 0x7e, 0x9e82ddff4550686f}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:01:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:01:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) [ 393.978213][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 393.978220][ T7234] Bluetooth: hci6: command 0x1003 tx timeout 04:01:02 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:01:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r6, 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:02 executing program 3: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_setup(0x4dba, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x200a4}, &(0x7f0000eec000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x74ee, &(0x7f0000000140)={0x0, 0x87ca, 0x2, 0x0, 0x255, 0x0, r0}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) syz_io_uring_submit(r5, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0xfffffff7, 0xa, 0x1, {0x0, 0x0, r9}}, 0x9da) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) io_uring_enter(r0, 0x4611, 0xf18e, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) 04:01:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) [ 394.058171][ T6] Bluetooth: hci7: command 0x1003 tx timeout [ 394.058328][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:01:02 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:02 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:02 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r6, 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r6, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r6, 0x402, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 394.275504][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 394.276402][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 394.338706][ T3659] Bluetooth: hci7: sending frame failed (-49) 04:01:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:02 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 394.339202][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:02 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:01:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r6, 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r6, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r6, 0x402, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 394.783066][T12507] ptm ptm0: ldisc open failed (-12), clearing slot 0 04:01:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:01:03 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000001740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001400), 0x0, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5}, @generic={0x80, 0xf, 0x1, 0x6, 0x200}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0xa, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x3, 0x8}, 0x10, r6, r7, 0x0, &(0x7f0000001680)=[0x1]}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x4, 0x10, "4c7f8a13e0240ffa8ea9d7415067a9dbbf535d"}) 04:01:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:03 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x3ff, 0x5a, @mcast1, @remote, 0x8, 0x8, 0x6, 0x9d9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x608, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x81) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x4, 0x10, "4c7f8a13e0240ffa8ea9d7415067a9dbbf535d"}) (rerun: 32) 04:01:03 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) r3 = syz_open_pts(r2, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000001740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001400), 0x0, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5}, @generic={0x80, 0xf, 0x1, 0x6, 0x200}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0xa, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x3, 0x8}, 0x10, r6, r7, 0x0, &(0x7f0000001680)=[0x1]}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:03 executing program 3: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000001740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001400), 0x0, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5}, @generic={0x80, 0xf, 0x1, 0x6, 0x200}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0xa, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x3, 0x8}, 0x10, r6, r7, 0x0, &(0x7f0000001680)=[0x1]}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:01:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x4, 0x10, "4c7f8a13e0240ffa8ea9d7415067a9dbbf535d"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x6, 0x6, 0x3, 0x4, 0x10, "4c7f8a13e0240ffa8ea9d7415067a9dbbf535d"}) (async) 04:01:03 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) r3 = syz_open_pts(r2, 0x0) (async, rerun: 32) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000001740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000001400), 0x0, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) (async, rerun: 32) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/asound/seq/clients\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x0, 0x40}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6}, @alu={0x4, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5}, @generic={0x80, 0xf, 0x1, 0x6, 0x200}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0xa, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x3, 0x8}, 0x10, r6, r7, 0x0, &(0x7f0000001680)=[0x1]}, 0x80) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:01:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) 04:01:04 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_pts(r8, 0x68102) 04:01:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) [ 396.136825][ T7201] Bluetooth: hci6: Frame reassembly failed (-84) [ 396.136851][ T7201] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 396.136869][ T7201] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40), 0x0, 0x0) [ 396.136886][ T7201] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 04:01:04 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x679e}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0xf31, 0xfdae, 0x0, &(0x7f0000000140)={[0x7fff]}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x400, 0x0, 0x7, 0x5, 0x1, {0x0, r8}}, 0x3) 04:01:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:01:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:01:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_pts(r8, 0x68102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_open_pts(r8, 0x68102) (async) 04:01:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:06 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x679e}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0xf31, 0xfdae, 0x0, &(0x7f0000000140)={[0x7fff]}, 0x8) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x4) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x6) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) (async) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x400, 0x0, 0x7, 0x5, 0x1, {0x0, r8}}, 0x3) 04:01:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:01:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:01:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) [ 398.138226][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:06 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x679e}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0xf31, 0xfdae, 0x0, &(0x7f0000000140)={[0x7fff]}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x6) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x400, 0x0, 0x7, 0x5, 0x1, {0x0, r8}}, 0x3) 04:01:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 398.308094][ T9893] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:06 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_pts(r8, 0x68102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_open_pts(r8, 0x68102) (async) 04:01:08 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:08 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x28f1, &(0x7f0000000140)={0x0, 0x51c4, 0x20, 0x1, 0x7e}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x402c}, 0x0, {0x0, r7}}, 0xfa4) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_pts(r8, 0x68102) 04:01:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) 04:01:08 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 400.378331][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:08 executing program 0: io_setup(0x5, &(0x7f0000000100)=0x0) io_getevents(r0, 0x6, 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x989680}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x5c90, &(0x7f0000000240)={0x0, 0xd5b2, 0x10, 0x1, 0x1a4, 0x0, r1}, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r8, 0x0) io_submit(r0, 0x3, &(0x7f0000000700)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0xc6, 0xffffffffffffffff, &(0x7f0000000440)="7f1b6502af4f3cfbe7a7d71239f297be806dcd245505", 0x16, 0x5, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f00000004c0)="9dd754db3be1c649356c3cdf8305706df06efdd31da0fc93436a07d63cf1eb197139b8284a15b67092597ae371f9af64e9071d3aa584785a3f653c18a28918d55004c66fb150155a3fa3239818bea1758a90ce4c689691aa12577d24713bb98b02c0d47f9f76f9518d717632baf412af9f6d27c1eab9ca14da420153793febb707a3d61444b9b7c2b4b769fc5c238e49431b631c1656a09c61adffaa9918203b2032255bbc8cc994c29ed480fe6a2f7c6590ef71172e8335e3180a2379a5073542445cfffef2601be05cb235a272473b2316", 0xd2, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x4, r7, &(0x7f0000000600)="da89daa962072298d1bc0fff2752cf38948a1b29f7f935a7edf36bf4f863c718f29a1010af1cd34f783250e4399cfff75cacdf4654761442180ab1ae9c593ea11b4f96f60f472d4159b1d28883aaac89eeb5f314af0d443d34287c455f91b926718e2a26ad6f5259e080574f593272af8b618cea5c6425718b59f10bc97d41dc2b5ce30de9ba", 0x86, 0x9, 0x0, 0x2, r8}]) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd_index=0x7, 0x46a, 0x0, 0x0, 0x10, 0x1, {0x2}}, 0xee) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_open_pts(r3, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000400)={0x7590, 0x0, 0x0, 0x43, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:08 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:08 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 400.533734][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 400.534829][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 400.555916][ T8] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:08 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 400.654587][ T49] Bluetooth: hci6: sending frame failed (-49) [ 400.655630][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 400.891043][T12671] ptm ptm7: ldisc open failed (-12), clearing slot 7 04:01:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:10 executing program 5: ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000100)={0x6}) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:10 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 402.618297][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:01:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:10 executing program 5: ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000100)={0x6}) (async) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:10 executing program 0: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x7) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0xfffffffc, 0x3, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r6, 0x0) syz_io_uring_setup(0x1aa5, &(0x7f0000000100)={0x0, 0x35be, 0x10, 0x0, 0xf7, 0x0, r6}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:01:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:10 executing program 5: ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000100)={0x6}) (async, rerun: 64) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:11 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:11 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 402.963822][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 402.963916][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 402.964096][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 402.964162][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 402.964226][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 402.964289][ T56] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:11 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:11 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x80) fcntl$addseals(r0, 0x409, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 405.018316][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 405.018607][ T3686] Bluetooth: hci6: command tx timeout 04:01:13 executing program 0: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x7) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0xfffffffc, 0x3, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r6, 0x0) syz_io_uring_setup(0x1aa5, &(0x7f0000000100)={0x0, 0x35be, 0x10, 0x0, 0xf7, 0x0, r6}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:01:13 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x80) fcntl$addseals(r0, 0x409, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:13 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x80) fcntl$addseals(r0, 0x409, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:13 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_io_uring_setup(0x3813, &(0x7f0000000100)={0x0, 0xec01, 0x0, 0x0, 0x223}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index=0x6, 0x2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/107, 0x6b}], 0x3, 0x2}, 0xffff0001) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd_index=0x1, 0x3, 0x6, 0x1, 0xa, 0x0, {0x3}}, 0x800) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x5, 0x80) fcntl$addseals(r0, 0x409, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:13 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_io_uring_setup(0x3813, &(0x7f0000000100)={0x0, 0xec01, 0x0, 0x0, 0x223}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index=0x6, 0x2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/107, 0x6b}], 0x3, 0x2}, 0xffff0001) (async, rerun: 32) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd_index=0x1, 0x3, 0x6, 0x1, 0xa, 0x0, {0x3}}, 0x800) (rerun: 32) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:13 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:13 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 405.354769][ T7222] Bluetooth: hci6: Frame reassembly failed (-84) [ 407.418248][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 407.418466][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:15 executing program 0: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x7) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0xfffffffc, 0x3, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r6, 0x0) syz_io_uring_setup(0x1aa5, &(0x7f0000000100)={0x0, 0x35be, 0x10, 0x0, 0xf7, 0x0, r6}, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 04:01:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:15 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4250}, 0x1, {0x0, r8}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:15 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_io_uring_setup(0x3813, &(0x7f0000000100)={0x0, 0xec01, 0x0, 0x0, 0x223}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index=0x6, 0x2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/107, 0x6b}], 0x3, 0x2}, 0xffff0001) (async) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x6000, @fd_index=0x1, 0x3, 0x6, 0x1, 0xa, 0x0, {0x3}}, 0x800) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:15 executing program 5: r0 = syz_io_uring_setup(0x799, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3349, &(0x7f0000000240)={0x0, 0x9fac, 0x0, 0x1, 0x13f, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r9, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, r9, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x10, 0x2000, 0x1, {0x0, r10}}, 0x7fff) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:16 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:16 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 409.658192][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 409.658295][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4250}, 0x1, {0x0, r8}}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r9, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4250}, 0x1, {0x0, r8}}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:01:17 executing program 5: r0 = syz_io_uring_setup(0x799, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x3349, &(0x7f0000000240)={0x0, 0x9fac, 0x0, 0x1, 0x13f, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r9, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, r9, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x10, 0x2000, 0x1, {0x0, r10}}, 0x7fff) (async) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:17 executing program 3: r0 = syz_io_uring_setup(0x799, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3349, &(0x7f0000000240)={0x0, 0x9fac, 0x0, 0x1, 0x13f, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r9, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, r9, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x10, 0x2000, 0x1, {0x0, r10}}, 0x7fff) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:17 executing program 5: r0 = syz_io_uring_setup(0x799, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3349, &(0x7f0000000240)={0x0, 0x9fac, 0x0, 0x1, 0x13f, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r9, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x3, 0x0, r9, &(0x7f0000000300), &(0x7f0000000400)='./file0\x00', 0x10, 0x2000, 0x1, {0x0, r10}}, 0x7fff) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12344, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f00000001c0)='0', 0x1) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r7, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r8}}, 0x3) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r9, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x4250}, 0x1, {0x0, r8}}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:18 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 409.961952][T12738] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:20 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r0, 0x0, &(0x7f0000000080)='./file0\x00', 0xd0, 0x1, 0x23456, {0x0, r8}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:20 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80200, 0x20) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, r1, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) ioctl$TCXONC(r9, 0x540a, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0xff, 0x6, @local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x6, 0x3f, 0x4, 0x402, r7, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r0, 0x0, &(0x7f0000000080)='./file0\x00', 0xd0, 0x1, 0x23456, {0x0, r8}}, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x40, 0x100, 0x9, 0x7, 0x11, "b904c2c34078b779e29b3d1af43d5e5a29cfbb"}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 411.978244][ T27] Bluetooth: hci6: command 0x1003 tx timeout [ 411.978493][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x40, 0x100, 0x9, 0x7, 0x11, "b904c2c34078b779e29b3d1af43d5e5a29cfbb"}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 32) 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80200, 0x20) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, r1, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) ioctl$TCXONC(r9, 0x540a, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0xff, 0x6, @local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x6, 0x3f, 0x4, 0x402, r7, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80200, 0x20) (async) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, r1, 0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r9, 0x400455c8, 0x4) (async) ioctl$TCXONC(r9, 0x540a, 0x2) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0xff, 0x6, @local}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x6, 0x3f, 0x4, 0x402, r7, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) (async) 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 412.153272][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 412.154324][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x40, 0x100, 0x9, 0x7, 0x11, "b904c2c34078b779e29b3d1af43d5e5a29cfbb"}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x40, 0x100, 0x9, 0x7, 0x11, "b904c2c34078b779e29b3d1af43d5e5a29cfbb"}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) [ 412.390970][T12736] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x5be1, &(0x7f0000000140)={0x0, 0x252c, 0x2, 0x1, 0x18e, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x100000000, &(0x7f00000002c0)=[{&(0x7f0000000280)="81ea5b8a48dba3f6d74d70a8e02b80bf9fdcc88230b559", 0x17}], 0x1, 0x12, 0x0, {0x1}}, 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000100)={0xd, 0x5}) fcntl$setpipe(r0, 0x407, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:21 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x5be1, &(0x7f0000000140)={0x0, 0x252c, 0x2, 0x1, 0x18e, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x100000000, &(0x7f00000002c0)=[{&(0x7f0000000280)="81ea5b8a48dba3f6d74d70a8e02b80bf9fdcc88230b559", 0x17}], 0x1, 0x12, 0x0, {0x1}}, 0x9) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000100)={0xd, 0x5}) fcntl$setpipe(r0, 0x407, 0x0) (async, rerun: 64) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 64) 04:01:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80200, 0x20) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = dup3(0xffffffffffffffff, r1, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r9, 0x400455c8, 0x4) ioctl$TCXONC(r9, 0x540a, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0xff, 0x6, @local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x6, 0x3f, 0x4, 0x402, r7, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80200, 0x20) (async) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) dup3(0xffffffffffffffff, r1, 0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r9, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r9, 0x400455c8, 0x4) (async) ioctl$TCXONC(r9, 0x540a, 0x2) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0xff, 0x6, @local}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x6, 0x3f, 0x4, 0x402, r7, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) (async) 04:01:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:22 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x5be1, &(0x7f0000000140)={0x0, 0x252c, 0x2, 0x1, 0x18e, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x100000000, &(0x7f00000002c0)=[{&(0x7f0000000280)="81ea5b8a48dba3f6d74d70a8e02b80bf9fdcc88230b559", 0x17}], 0x1, 0x12, 0x0, {0x1}}, 0x9) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000100)={0xd, 0x5}) (async) fcntl$setpipe(r0, 0x407, 0x0) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:22 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:22 executing program 3: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x5be1, &(0x7f0000000140)={0x0, 0x252c, 0x2, 0x1, 0x18e, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x5, 0x6000, @fd_index=0x2, 0x100000000, &(0x7f00000002c0)=[{&(0x7f0000000280)="81ea5b8a48dba3f6d74d70a8e02b80bf9fdcc88230b559", 0x17}], 0x1, 0x12, 0x0, {0x1}}, 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000100)={0xd, 0x5}) fcntl$setpipe(r0, 0x407, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r7 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="78f8fa2561b9ad4bfa8db16445775e4b", 0x10, 0x2}, {&(0x7f00000001c0)="e934c471dae81d902ce4395128ce88198f209ea40845e931d6088ca856a69677be1a99a27e74705f10a82260", 0x2c, 0x4}, {&(0x7f0000000240)="d488b51bc97bc682a354712e35fd240aea7e6307e280e06cd279256599010085ad9bce290352ce200dd3c50868069d0495eb709b781bfe91cc10add8a5709e71d52614508133771bea5756b82190014767faa5857edae7292bd2a2795a00360230348c55c405b37e5772670fa83b68e2d922fce526e09b4a85660f0caebe5afdedd723ddfc4f4e555086547925773e6a58dd0d89d515cfe375b6a0af9c654b030cef6b627de8b362d9f3a29ef185d42284060f392c8509b62dcb45e5f19c3d728d8343f2841e8ffa2689168ccf6f2d019a7c42626bfdcf6c68e83832c5c688943f04c88861a2f4003b5707c1fa5f99a4ebfa450e", 0xf4, 0xfa}], 0x20, &(0x7f0000000440)={[{@gid={'gid', 0x3d, 0xee01}}, {@map_acorn}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@cruft}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ptmx\x00'}}]}) ppoll(&(0x7f0000000500)=[{r6}, {r7, 0x80}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x5]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 414.458160][ T7234] Bluetooth: hci6: command 0x1003 tx timeout [ 414.458331][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:22 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000000000000d2d889d9fd5500"}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 414.664245][T12739] Bluetooth: hci6: Frame reassembly failed (-84) [ 414.726430][T12948] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:01:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:24 executing program 0: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000000000000d2d889d9fd5500"}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:24 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000000000000d2d889d9fd5500"}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000000000000d2d889d9fd5500"}) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) r8 = syz_open_pts(r7, 0x3f9300) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 416.698103][ T7234] Bluetooth: hci6: command 0x1003 tx timeout [ 416.714767][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) r8 = syz_open_pts(r7, 0x3f9300) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:24 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) r8 = syz_open_pts(r7, 0x3f9300) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 416.855165][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 416.856243][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:24 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000000000000d2d889d9fd5500"}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 416.910939][T12974] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 416.920749][ T7222] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) r8 = syz_open_pts(r7, 0x3f9300) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:25 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5000000}}) [ 417.006248][T12739] Bluetooth: hci8: Frame reassembly failed (-84) 04:01:25 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:25 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5000000}}) [ 418.938096][ T7234] Bluetooth: hci7: command 0x1003 tx timeout [ 418.938270][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 419.018101][ T3686] Bluetooth: hci8: command 0x1003 tx timeout [ 419.018241][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:01:27 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:27 executing program 5: syncfs(0xffffffffffffffff) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:27 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:27 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) (async, rerun: 64) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (rerun: 64) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:27 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:27 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:27 executing program 5: syncfs(0xffffffffffffffff) (async) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 419.199890][ T7222] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 419.341104][ T49] Bluetooth: hci7: sending frame failed (-49) [ 419.342139][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:27 executing program 5: syncfs(0xffffffffffffffff) r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x5000000}}) [ 419.427094][T12739] Bluetooth: hci8: Frame reassembly failed (-84) 04:01:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:27 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 420.225739][ T3656] Bluetooth: hci7: sending frame failed (-49) [ 420.226669][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) (async) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:29 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE, 0x3) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd, 0x5}) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x3c31, &(0x7f0000000140)={0x0, 0xa7cc, 0x8, 0x3, 0x357, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x100) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x2, 0x7, 0xd1, 0x7, "29253f6481cc7bb958ba018edbe981b9ac9a81"}) 04:01:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 421.178234][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 421.178273][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 421.240324][T10190] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.240401][T10190] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.240589][T10190] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.240698][T10190] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.241711][T10190] Bluetooth: hci6: Frame reassembly failed (-84) [ 421.241780][T10190] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE, 0x3) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd, 0x5}) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x3c31, &(0x7f0000000140)={0x0, 0xa7cc, 0x8, 0x3, 0x357, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x100) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x2, 0x7, 0xd1, 0x7, "29253f6481cc7bb958ba018edbe981b9ac9a81"}) 04:01:29 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r11, 0x450e, 0xaf2b, 0x7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:29 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE, 0x3) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd, 0x5}) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x3c31, &(0x7f0000000140)={0x0, 0xa7cc, 0x8, 0x3, 0x357, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x100) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x2, 0x7, 0xd1, 0x7, "29253f6481cc7bb958ba018edbe981b9ac9a81"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) (async) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @empty, 0x3}, 0x10) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE, 0x3) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd, 0x5}) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) syz_io_uring_setup(0x3c31, &(0x7f0000000140)={0x0, 0xa7cc, 0x8, 0x3, 0x357, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x100) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x2, 0x7, 0xd1, 0x7, "29253f6481cc7bb958ba018edbe981b9ac9a81"}) (async) [ 421.498259][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:01:29 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:29 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:29 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x5000000}}) [ 421.745458][ T49] Bluetooth: hci7: sending frame failed (-49) [ 421.746156][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x95a, 0x1, 0x2, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:31 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) bind$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @empty, 0x3}, 0x10) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE, 0x3) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd, 0x5}) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) syz_io_uring_setup(0x3c31, &(0x7f0000000140)={0x0, 0xa7cc, 0x8, 0x3, 0x357, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x100) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x6, 0x2, 0x7, 0xd1, 0x7, "29253f6481cc7bb958ba018edbe981b9ac9a81"}) 04:01:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 423.258275][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 423.258530][ T3686] Bluetooth: hci6: command tx timeout 04:01:31 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="bc32284dc195d75d625bb5c381431f2a8dbe99a2ede3c0313340f01ed8dd59c5663ee1f31147a9f90ed1e6e8ffab4a90d217d72e48046dae7d4c06074d01608dc9192b237db61cf76d27c086fb6fdef24b96552d8abe33493a93147420cd5c5358e3986822d68e111d95cab9"], &(0x7f0000187ff8)='.', 0x0, 0x801030, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x500, 0x0) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x5000000}}) [ 423.375150][T13107] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 423.393784][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x95a, 0x1, 0x2, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x95a, 0x1, 0x2, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 423.393866][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) [ 423.393932][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) [ 423.393995][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x5000000}}) [ 423.394058][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) [ 423.394119][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) [ 423.451058][ T49] Bluetooth: hci7: sending frame failed (-49) 04:01:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x95a, 0x1, 0x2, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 423.451762][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x95a, 0x1, 0x2, 0x24}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:31 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 04:01:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:31 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="bc32284dc195d75d625bb5c381431f2a8dbe99a2ede3c0313340f01ed8dd59c5663ee1f31147a9f90ed1e6e8ffab4a90d217d72e48046dae7d4c06074d01608dc9192b237db61cf76d27c086fb6fdef24b96552d8abe33493a93147420cd5c5358e3986822d68e111d95cab9"], &(0x7f0000187ff8)='.', 0x0, 0x801030, 0x0) (async) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x500, 0x0) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:31 executing program 0: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="bc32284dc195d75d625bb5c381431f2a8dbe99a2ede3c0313340f01ed8dd59c5663ee1f31147a9f90ed1e6e8ffab4a90d217d72e48046dae7d4c06074d01608dc9192b237db61cf76d27c086fb6fdef24b96552d8abe33493a93147420cd5c5358e3986822d68e111d95cab9"], &(0x7f0000187ff8)='.', 0x0, 0x801030, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x500, 0x0) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:31 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 04:01:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:33 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 04:01:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = signalfd(r0, &(0x7f0000000080)={[0x20]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) 04:01:33 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="bc32284dc195d75d625bb5c381431f2a8dbe99a2ede3c0313340f01ed8dd59c5663ee1f31147a9f90ed1e6e8ffab4a90d217d72e48046dae7d4c06074d01608dc9192b237db61cf76d27c086fb6fdef24b96552d8abe33493a93147420cd5c5358e3986822d68e111d95cab9"], &(0x7f0000187ff8)='.', 0x0, 0x801030, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x500, 0x0) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) (async) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) (async) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="bc32284dc195d75d625bb5c381431f2a8dbe99a2ede3c0313340f01ed8dd59c5663ee1f31147a9f90ed1e6e8ffab4a90d217d72e48046dae7d4c06074d01608dc9192b237db61cf76d27c086fb6fdef24b96552d8abe33493a93147420cd5c5358e3986822d68e111d95cab9"], &(0x7f0000187ff8)='.', 0x0, 0x801030, 0x0) (async) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') (async) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x500, 0x0) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 425.418081][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 425.418252][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = signalfd(r0, &(0x7f0000000080)={[0x20]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r5, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) signalfd(r0, &(0x7f0000000080)={[0x20]}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) (async) 04:01:33 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x5000000}}) [ 425.721583][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 425.722529][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:34 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd}) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r7 = signalfd(r0, &(0x7f0000000080)={[0x20]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) 04:01:34 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:34 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:34 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffd}) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d308000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25010000000e000a002f6465762f70746d780000000c000200eb0e0000000000000c00030010070000000000000c000300000000000000000005000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x55f2, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0xb0e, &(0x7f0000000180)={0x0, 0x6c17, 0x20, 0x2, 0xa9, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xffff7e4e) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x20205, 0x40) 04:01:34 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x5000000}}) [ 426.632790][ T3712] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:34 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0xf4) dup3(r5, r6, 0x80000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d308000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25010000000e000a002f6465762f70746d780000000c000200eb0e0000000000000c00030010070000000000000c000300000000000000000005000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x55f2, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0xb0e, &(0x7f0000000180)={0x0, 0x6c17, 0x20, 0x2, 0xa9, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xffff7e4e) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x20205, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d308000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25010000000e000a002f6465762f70746d780000000c000200eb0e0000000000000c00030010070000000000000c000300000000000000000005000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000100) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) syz_io_uring_setup(0x55f2, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000003c0)) (async) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x0) (async) syz_io_uring_setup(0xb0e, &(0x7f0000000180)={0x0, 0x6c17, 0x20, 0x2, 0xa9, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xffff7e4e) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000400)='./file0\x00', 0x20205, 0x40) (async) 04:01:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:36 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:36 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r5, 0x402, 0x0) (async) r6 = fsmount(0xffffffffffffffff, 0x0, 0xf4) dup3(r5, r6, 0x80000) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:36 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000d308000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25010000000e000a002f6465762f70746d780000000c000200eb0e0000000000000c00030010070000000000000c000300000000000000000005000a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x4000100) (async, rerun: 32) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) syz_io_uring_setup(0x55f2, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x0) (async, rerun: 64) syz_io_uring_setup(0xb0e, &(0x7f0000000180)={0x0, 0x6c17, 0x20, 0x2, 0xa9, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000440)=0x0) (rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xffff7e4e) (async, rerun: 64) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000400)='./file0\x00', 0x20205, 0x40) [ 428.698164][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:36 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r5, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r5, 0x402, 0x0) (async) r6 = fsmount(0xffffffffffffffff, 0x0, 0xf4) dup3(r5, r6, 0x80000) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 428.857507][T12738] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5000000}}) [ 428.931358][ T49] Bluetooth: hci7: sending frame failed (-49) [ 428.932189][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:37 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5000000}}) 04:01:37 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r5, &(0x7f0000000140)="da3af3c887aaf7742f5363e12b71bee3f087a8f85cf1aa7b805e14a8a0bd1c98afd6191c0e3fdaefda47d020cbec50eab6f9133b77dd285391a4b1a44e6856ca0dc7243f92c531a28a7dd73afc1618bd792a7607a9555d93131f75681edc08b894ca7c911e04d265bf6b9ee63a618d71391c326df869867957d37fb1c58e54e65835165d3ff2198ebc52361f558374ebb4d3523b03eb7b13d39089673a7290c7decb6df92b5fd3eb77d57b62ae30f3707172c1f55bea9acaa7", 0xb9, 0x4000040, &(0x7f0000000240)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @broadcast}, 0x14) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7ff, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:37 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5000000}}) 04:01:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:37 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5000000}}) [ 429.778376][ T3712] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:38 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:38 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async, rerun: 32) r4 = syz_open_pts(r3, 0x0) (rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8001) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (rerun: 64) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r5, &(0x7f0000000140)="da3af3c887aaf7742f5363e12b71bee3f087a8f85cf1aa7b805e14a8a0bd1c98afd6191c0e3fdaefda47d020cbec50eab6f9133b77dd285391a4b1a44e6856ca0dc7243f92c531a28a7dd73afc1618bd792a7607a9555d93131f75681edc08b894ca7c911e04d265bf6b9ee63a618d71391c326df869867957d37fb1c58e54e65835165d3ff2198ebc52361f558374ebb4d3523b03eb7b13d39089673a7290c7decb6df92b5fd3eb77d57b62ae30f3707172c1f55bea9acaa7", 0xb9, 0x4000040, &(0x7f0000000240)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @broadcast}, 0x14) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7ff, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:38 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5000000}}) 04:01:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5000000}}) 04:01:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5000000}}) [ 430.858121][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 430.858154][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080)) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:39 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x5000000}}) 04:01:39 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r5, &(0x7f0000000140)="da3af3c887aaf7742f5363e12b71bee3f087a8f85cf1aa7b805e14a8a0bd1c98afd6191c0e3fdaefda47d020cbec50eab6f9133b77dd285391a4b1a44e6856ca0dc7243f92c531a28a7dd73afc1618bd792a7607a9555d93131f75681edc08b894ca7c911e04d265bf6b9ee63a618d71391c326df869867957d37fb1c58e54e65835165d3ff2198ebc52361f558374ebb4d3523b03eb7b13d39089673a7290c7decb6df92b5fd3eb77d57b62ae30f3707172c1f55bea9acaa7", 0xb9, 0x4000040, &(0x7f0000000240)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @broadcast}, 0x14) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7ff, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 431.033600][T12738] Bluetooth: hci6: Frame reassembly failed (-84) [ 431.187682][T13301] ptm ptm8: ldisc open failed (-12), clearing slot 8 04:01:39 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:39 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) [ 431.818301][ T3686] Bluetooth: hci7: command 0x1003 tx timeout [ 431.818371][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 431.914251][T12737] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:41 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:41 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_open_pts(r3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x6, 0x1, {0x0, 0x0, r4}}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:41 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x5000000}}) 04:01:41 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000080)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:01:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r10, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) [ 433.098094][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 433.115115][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:41 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x5000000}}) [ 433.217027][ T49] Bluetooth: hci6: sending frame failed (-49) [ 433.218558][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:41 executing program 4: mmap(&(0x7f0000ee9000/0x3000)=nil, 0x3000, 0x1000002, 0x1c0111, 0xffffffffffffffff, 0xbcec000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, 0x7}) r5 = syz_open_pts(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) syz_open_pts(r6, 0x50003) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020}, 0x2020) io_uring_enter(r7, 0x7624, 0x6b50, 0x0, &(0x7f0000000080)={[0x9]}, 0x8) pkey_mprotect(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000240)=""/211) 04:01:41 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_open_pts(r3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x6, 0x1, {0x0, 0x0, r4}}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x6, 0x1, {0x0, 0x0, r4}}, 0x80) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:41 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r4 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x0, 0x350, 0x3f0, 0x350, 0x350, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x2, 0x1, 0x4, 0x3, 0x6], 0x0, 0x4}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6f, 0x1, @rand_addr=0x64010101, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x21, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x0, 0x6, [0x30, 0x12, 0x1a, 0x38, 0x30, 0xb, 0x1c, 0x3d, 0x25, 0x38, 0x30, 0x12, 0x2d, 0x9, 0x40, 0x3], 0x0, 0xdd28, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, 0xffffffff, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_to_bond\x00', {}, {}, 0x5e, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x2}}, @common=@unspec=@realm={{0x30}, {0x7c1, 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0xa, 0x4, 0x0, 0x5], 0x6, 0x4}, {0x1, [0x3, 0x6, 0x3, 0x1, 0x3, 0x1], 0x2, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0xc}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x2, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1c64"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:41 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x5000000}}) [ 433.453465][ T49] Bluetooth: hci6: sending frame failed (-49) [ 433.454527][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:42 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_open_pts(r3, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x6, 0x1, {0x0, 0x0, r4}}, 0x80) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 433.978337][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 433.980494][ T3686] Bluetooth: hci7: command tx timeout 04:01:42 executing program 4: mmap(&(0x7f0000ee9000/0x3000)=nil, 0x3000, 0x1000002, 0x1c0111, 0xffffffffffffffff, 0xbcec000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, 0x7}) r5 = syz_open_pts(r4, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) syz_open_pts(r6, 0x50003) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020}, 0x2020) io_uring_enter(r7, 0x7624, 0x6b50, 0x0, &(0x7f0000000080)={[0x9]}, 0x8) (async) pkey_mprotect(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000240)=""/211) 04:01:42 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x0, 0x5000000}}) 04:01:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:42 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r4 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x0, 0x350, 0x3f0, 0x350, 0x350, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x2, 0x1, 0x4, 0x3, 0x6], 0x0, 0x4}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6f, 0x1, @rand_addr=0x64010101, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x21, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x0, 0x6, [0x30, 0x12, 0x1a, 0x38, 0x30, 0xb, 0x1c, 0x3d, 0x25, 0x38, 0x30, 0x12, 0x2d, 0x9, 0x40, 0x3], 0x0, 0xdd28, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, 0xffffffff, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_to_bond\x00', {}, {}, 0x5e, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x2}}, @common=@unspec=@realm={{0x30}, {0x7c1, 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0xa, 0x4, 0x0, 0x5], 0x6, 0x4}, {0x1, [0x3, 0x6, 0x3, 0x1, 0x3, 0x1], 0x2, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0xc}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x2, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1c64"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:42 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 434.107872][ T9893] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:42 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x0, 0x5000000}}) 04:01:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:42 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) r3 = syz_open_pts(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:42 executing program 4: mmap(&(0x7f0000ee9000/0x3000)=nil, 0x3000, 0x1000002, 0x1c0111, 0xffffffffffffffff, 0xbcec000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x0, 0x7}) r5 = syz_open_pts(r4, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) syz_open_pts(r6, 0x50003) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020}, 0x2020) (async) io_uring_enter(r7, 0x7624, 0x6b50, 0x0, &(0x7f0000000080)={[0x9]}, 0x8) (async) pkey_mprotect(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000240)=""/211) 04:01:42 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x5000000}}) 04:01:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:44 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r4 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x0, 0x350, 0x3f0, 0x350, 0x350, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x2, 0x1, 0x4, 0x3, 0x6], 0x0, 0x4}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6f, 0x1, @rand_addr=0x64010101, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x21, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x0, 0x6, [0x30, 0x12, 0x1a, 0x38, 0x30, 0xb, 0x1c, 0x3d, 0x25, 0x38, 0x30, 0x12, 0x2d, 0x9, 0x40, 0x3], 0x0, 0xdd28, 0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, 0xffffffff, 0xffffffff, 'veth0_to_hsr\x00', 'veth0_to_bond\x00', {}, {}, 0x5e, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2, 0x2}}, @common=@unspec=@realm={{0x30}, {0x7c1, 0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0xa, 0x4, 0x0, 0x5], 0x6, 0x4}, {0x1, [0x3, 0x6, 0x3, 0x1, 0x3, 0x1], 0x2, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'bond_slave_1\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0xc}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x2, @broadcast, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1c64"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:44 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5000000}}) 04:01:44 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r2, 0x0) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) (async) io_uring_enter(r4, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:44 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0xa}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x16}) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7b79, &(0x7f0000000480)={0x0, 0x6126, 0x28, 0x3fffd, 0x3ce, 0x0, r1}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x7ff, 0x800}, 0x6) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 436.138244][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:44 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x5000000}}) 04:01:44 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0xbd12, 0x6c684a47, 0xfffffff9, 0x82b, 0x15, "876e304bdb6c9ae06a734d9b4bf1e65063e999"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:44 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0xa}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x16}) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) syz_io_uring_setup(0x7b79, &(0x7f0000000480)={0x0, 0x6126, 0x28, 0x3fffd, 0x3ce, 0x0, r1}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x7ff, 0x800}, 0x6) (async) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:44 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x5000000}}) 04:01:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x2669c2, 0x0) r6 = syz_open_pts(r5, 0x10001) syz_io_uring_setup(0x8b, &(0x7f0000000080)={0x0, 0xc858, 0x4, 0xfffffffd}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000eeb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'veth0_virt_wifi\x00', {0x4}}) r11 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r11, &(0x7f00000001c0)='0', 0x1) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r11, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r12}}, 0x3) syz_io_uring_submit(r7, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x2, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000240)="6c07f71cf623e1eafcf9f4128543f2639d96e08517c3fb9efc6f956a8d3b65288695757c93c0b7cdbef5d1651cfe9ff8241dcfc154f9140e1b603b206c8b8a66412889a66bdb8c506bc53c356e2cb57d03ecf1431fd5234207e41254b74e1ebb6cdaaf3b090720e6a7a85f4525970d526d140def8379316b85c3f0abc9b3e209301a5a4525b41f0e38e61766a3fa40f3add4d4b38d34987854b8f5e965fc8a6c01e6549c4c9e6cc7b31fce761c85db4c33ecd365ea8c8b983c415ee0cf915b8956e933e3dd1f4adaba4f984443338fe587a3156ecb1f77440aa2d820c937160b32ef7f219bb5731ee0cc5400c1e6bf4dad2e83", 0xf3}, {&(0x7f0000000140)="4c43e2a2e77d3c9fddea5d17f4d838366e2d89234d25c86d7eb4a9de3a304994e81b5d6e24e90b20b9c9a1041f934df641fb882035ffb5c8eb4a3fa154633d4bd8f3194455930dccba0e81fcc6c74656a33a970b1c09584a18f8ef9468a684c0f35ce3fe48f4c6fc94540ab116b981e56852", 0x72}], 0x2, 0x1, 0x0, {0x1, r12}}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 436.400242][T12737] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:46 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:46 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0xbd12, 0x6c684a47, 0xfffffff9, 0x82b, 0x15, "876e304bdb6c9ae06a734d9b4bf1e65063e999"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0xe) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0xbd12, 0x6c684a47, 0xfffffff9, 0x82b, 0x15, "876e304bdb6c9ae06a734d9b4bf1e65063e999"}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:46 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x5000000}}) 04:01:46 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0xa}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x16}) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7b79, &(0x7f0000000480)={0x0, 0x6126, 0x28, 0x3fffd, 0x3ce, 0x0, r1}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000440)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x7ff, 0x800}, 0x6) (async) r7 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 438.458246][ T6] Bluetooth: hci6: command 0x1003 tx timeout [ 438.458244][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:46 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x5000000}}) 04:01:46 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0xbd12, 0x6c684a47, 0xfffffff9, 0x82b, 0x15, "876e304bdb6c9ae06a734d9b4bf1e65063e999"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:46 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="ca6c3e99d04b2b59d7c589445f77cbe0c876321dc75bfd38b632b121087389e5d60ca40342fa96be6c03aea2a09efa65e01e17ee0043daed4290d3ad1636928ed6aef2037cedcfdc101e208cde1d7bf02724034e649863dd00ce5d29f1a70acfb7d02a7a8575c51cc3363cc181fd3cc3118038d5", 0x74}, {&(0x7f00000003c0)="b6f5bf9b4c538397b63c6c690556e1f7f0de68a7f0cb94f2ac2c1d9a1ae4162c2a581674ba2171b4526323258bd1f39bd45339636781cbaaf3515e1b9c60fb612f04dde1030e4d09094a8d4a252c1ddb0131caf1d558640a67c98244d49b9da38ef89392cba1ad4eb342f0850be2251bfb0d47b984a4ccce3e915b0a163484cadeba082b2001973b9112b67d1967482cca4d379721948fdfc6f6bf71bb8ac5b6d95fe0243c724da2ae30c626113b5926315ca6ae227ef5aa5286fb88b20530ab43ed59005d113c0962b111cdacfd80fa1caaa9e030c36fd7ef4a91728b78", 0xde}, {&(0x7f0000000080)="037b99c802cd56842d154d48b3", 0xd}, {&(0x7f00000002c0)="8df41a721eb8cd160abaddd3eda468fc31450dce1850897b1a66d9bb98a4cb292b50bd721704ed3c3ce2c65a40fe6c8252c5b4a0af999e4fe4779328bd8287ef74b75f338f1c52dbde65ef6d0bb3e320500715bb6fe1961c486801c95427f36c5944d7b8fe8d8aa9cd49c01104c4fa3bce65", 0x72}, {&(0x7f00000004c0)="d957d9889ed4eed107a95873192761849fad80c2d63229a4fa10e13e80cf7070d4576d9ed54d4e8f12bd0b950f57342de1b4c11ce84565595022e2d21a1935f44661ea130eb7ed27f4b5", 0x4a}], 0x5, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0xc000080) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000008f40)={'a', ' *:* ', 'r\x00'}, 0x8) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{&(0x7f0000000600)=@caif=@dbg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/227, 0xe3}], 0x4, &(0x7f0000000940)=""/42, 0x2a}, 0x3}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/157, 0x9d}], 0x0, &(0x7f0000001d00)=""/189, 0xbd}}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/146, 0x92}, {&(0x7f00000020c0)=""/254, 0xfe}, {&(0x7f00000021c0)}], 0x5, &(0x7f0000002280)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)=""/82, 0x52}, {&(0x7f0000002400)=""/43, 0x2b}], 0x2, &(0x7f0000002480)=""/231, 0xe7}, 0x2}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/235, 0xeb}, {&(0x7f0000002700)=""/9, 0x9}, {&(0x7f0000002740)=""/222, 0xe3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/171, 0xab}], 0x6, &(0x7f0000003a80)=""/129, 0x81}, 0x7}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/43, 0x2b}, {&(0x7f0000003b80)=""/68, 0x44}, {&(0x7f0000003c00)=""/55, 0x37}], 0x3, &(0x7f0000003c80)=""/252, 0xfc}, 0x5}, {{&(0x7f0000003d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/184, 0xb8}, {&(0x7f0000003ec0)=""/50, 0x32}], 0x2, &(0x7f0000003f40)=""/212, 0xd4}, 0x7}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004040)=""/28, 0x1c}, {&(0x7f0000004080)=""/99, 0x63}], 0x2, &(0x7f0000004140)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005140)=@caif, 0x80, &(0x7f00000064c0)=[{&(0x7f00000051c0)=""/232, 0xe8}, {&(0x7f0000006840)=""/105, 0x65}, {&(0x7f0000005340)=""/235, 0xeb}, {&(0x7f0000005440)=""/103, 0x67}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006540)=""/173, 0xad}, 0x100}, {{&(0x7f0000006600)=@hci, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006680)=""/130, 0x82}, {&(0x7f0000006740)=""/151, 0x97}, {&(0x7f0000006800)=""/45, 0x2d}, {&(0x7f0000006840)}, {&(0x7f0000006880)}], 0x5, &(0x7f0000006940)=""/247, 0xf7}, 0x4}], 0xa, 0x0, &(0x7f0000006cc0)={0x0, 0x3938700}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) writev(r5, &(0x7f0000008ec0)=[{&(0x7f0000006d00)="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", 0x1000}, {&(0x7f00000021c0)="4f4c5af275c9cef93ec4d467487154eb083bc1ea4576d0ae2d58789f60b0d0d29a0fa9a17c11ed5b52bc1d3d515d80", 0x2f}, {&(0x7f0000007d00)="99df9858b169134bba44c0cbd614e203f8b2fbc873ecbb5835875d5f6b5feef3f78d5a0e511df00712076f3aad300ec5c9dc6d8f0071a1d3e5e0b5736362c19527cb24488621e2bbe296e8288213918d6f275be632b0287b12db93d8d4de1b3e6cf54d17f9f86e9bf9bf97fd3c629dc80621252436d23fe6025d75da0945cbd752dd5829837a2f95ef4986d664ee7db50c82e8f09149e6c7028336be0d861dbcd025aaac76b8da7c05b9395d0c6737f956d8f68f8562d2917238935b3637ce6ef2a776ee4d5b6e2c100166956d8c8df077018075a93b357cda0815f42e5406a3668edac0d17e685cacd49d299b209aeabaf4fdf432a734184dc9662bc2259cbc79e0359d0733e690459f1586e1d89ee81c41176c0869db95181bed83ed8733312c1e38cc89de003ffb3e13ce49df2f4a1249f16da5ffa484265ffdedf7be0fe2ece6901377be8206ff47e5a2bd4136017c71ec73d4faf88e36e216ef5a5ede59754dfb51e0679643b620b44a1bdf997b965b4b1397589beb0074ee4ee111843bf5e3ccd63bb6c7eb23ec7bb81567b86bbd519485b90491629174adb3a85a7d246df586f4677e26645e02088f57343e436e3597b27e0be9816ff9741faf4909b7a5df29f978d7f4687bee01624c06c21a366f2b5885b6164628f2e2e21792e0915c527df3ce057ea7b6d34e5b2a8a19b597d8fc893362363348f1a8cb8cbf64c4fea83c96afbec81808bde9f7b4f4724e86aabcc43d87a6b5b3debc0a77175af5089c41f23522c692a6dd2850b33dd48e24a1e706c5c7a3d5a743af67b9521bf03558bfc21cd2571c24870fcebf91ceb88368f87e6ec97a9f4351a56554acbfd0e015c99ddce845b2d3f7aeec033c62d70c70166f3d9bbfcbcb147f20aa0ad29109f06a9c318860adf26faf9b7fefd74d186373cc48dc8aaccbd85fde1bd7fcdf37e2991ba79bbf74f9799d30c73ae7ec4cc8dcb8a48ff9383ff1dbdd6d7372aa38bb4c91aaeda6e34106f6b1824c1210d9ca045fcbb8bef7c6f0c90ba818de14f78e98afd3b44b0590aec947d19548ed1345420e3db5cd802bec925ce24847e9db418573410ede3bed824eb433c4b8bb9df438c2f982503a519b18202f836265f5fc990920abb4b7b7197429960407d2f68812eb2e6a9ea09abbd257a5b9e03a1cff61b8852e2350aa446d4b88543cd6e4334cf26a50eba5e68ab2d2f35c4d4898b805ffb15559c03f59d7863df294dc11f881d207b77d5ecec07b9b74376e8ef5443ca04e3edbba09dee2c900d954e5dafa5d0f9bd50c860cf05ca65a8fd2c334a976ea8bcae389f4b07a1d2051d9785123566e159f2af6560f68f78fa6935d3a481abc1f3bd3b059f43cf7bc07ef080683cfe4ea45d8a6572f55d8c2068707f3a5a13f1693a3e2e342a9de7261839c658b1451b36417dd7a3e6271a14eb9b5e39939a98d64192b83347cea90208bb51f72f4037e2a904e3561a2fdfe3d7c5e9ac6eeb09aeeeacc2952fe6527f19d99d421541fbf36f2dda99afc8cbc77956424747ce0f1ac125573e917fce1be6f77131988951abc616c415210f90bed183a7f21cafbb13269f363d08266c666abd4f2557d4287580b0d9ffb634f9d97e89d7853eab6f5cd4a233bf6102ed848c59230dc4b0267f11382feb9469c1b1cc98a3d9abd79e2f3f2310d1cbe1c382847552b2c27e5b3056a27da9916cfc9df21ba8d1bc133565b52fded05fc6c33f17d9fcd51b75858df069ec4d914e6018f98f8f87020006c4af3ca1607cbd4c79954a06b6672ea1ca0406fbb4320c4b66f41ba7effa7bced72d81056176e29ab893b057ebf51dd39869d591d5f11ea5e03cac4716b049ff0250ed1542c122449104d55299f25b96858e5b1bcf25ea77d050695276dd027d30b3c828b72e1ce220464a9a96783ba95be2d3e420645f94529a74ab9988dcaa4f9f74eee900744bec4a8b62fb7e3c37d026dba8f7bf1b1e929cba1d08c5f9eee3c0fc2271325fa53a569df268a3e1821946de5de0d4db5e7b983e2919295d1308a41bdc66b05cff158f2aebd898d27cace99d9bcbfeeb2798670e00e302bd93a0dc6aa80b22053c25ebb33b20fedc9ebd3ba20bd69a170a3a17f72e40af10596349a107ca7a215c0567573f3567fbcd678d000bb72ad26649a5c8849e151feb4002a3420356040168fe792ded46dbc5b18692f20bf0efdcf3fe6764d997c71180d37f64d5956cef14d0cd048414feee5c9cb6501aa04d52bd11841fbcbde3b4d0b3bc9f366d1d00801a26c203cbf838cebe8b6c1eee4831ddbba4842e311101eafeab073bef0d619d0dec6bdae9c0cf534472cb0918d05813a22427c1d677db268ce960d8ee118a387c2a0c225ab1fd4e119b95c23a0e171e90a8e54a26b2fc434e9e1cff50a2f73573096fc1927b08d92f78310d76510bc0a9371cf87853e5934c1fca93f26b419245a63358b73b331451a65a6e401bdebaafb33869cc5e29635f6f516ce9779b86934af4f300d58f7aab698c9c344be3189e0b20db0d062b0c9aadd1c7a8fe64eabef88b570c704031f2704ce36052920384975aea008c418ad1556341c2b42ee4ddeb4c705f1d5501fabfccf6240585e8a4605406841bc38d894e16ccc7fcc6e807283a86eb5fbdc8d7af60d142b884049bb206bc8f8acf664fc3fce3018900d58e1390894c04b97bb08080f85a84ed9e3955032c14d8d3103059c59c2b5d716cf8f4ce1a1d7d0d6981a8b896b355e1ea91cea0d934c7f2a1164a42c3ef2c2e6d692b3f5d75d01eef1732be815ee4f581ba1ea2f89e3cbaa84e0e513171b23d464c0c328b24b0341c6ee51789af010dee4c52bef952a62ef41084179cbde5563558a21bec4b4e776041bd50364847f333c4bc541e5013ee339687d04ce92351723379e3c9bd79b3049a2679d0b2c086dbe8cfeb9e1490212c9c9a7b6ee89c787db6cfb859c69f397d2cdd3bfd58ccee46ebfc3beb90b8709eb2f28a4727700afd3fd3a5bc025183408d94f541af2e366cb08bb65f96c6afb06c29a2c6d55411728db9af5d98454c45f941cfedc2de7cff3cf2fd28406d958ceb2566266539a9ce5b4dd9182af3256fc6807475d98e1a92f118b17c0dd24db11620ef25b3c3d5fc0153d26cc17d96b13c8259310c10f9ea01ed59606e77bb0d9a2e6e9d8eb072037e25e98cb96d800f1b19176a11d9d5df7a73ce09030fd6c0f5dfbdf59b39497a08588509bb4fe4408fa646519ac503e6de3dec429f4791c60e6eaca0d93f8d664d248df69968ed0dbbc785469df4e40aa950626c2da31cff2464ba6c3c0462dc722c28a2c947b472c2f6f8cb8ac7572830ff2984b7fff298ec8e4a2574f4538181e0ff3cc120332bf83f8ebe831a98a90860bea2c23d5e2dfe6f6c9e401418f5653be2b2dfe7089220b90d13197757a619d8a3afd9d9d01dab6c939291f1c34aea79635c35957f903cb82b9a2bfb224e2eaf546d33ee70beaded5d4c62907611bb3b9f9ccbcbab256086f221de37c861be181051f790e3d67529655aba0ce6880da266957517f37b9e1b26b9227c4ebb587151fe659c7db068e0a532c79346ced4389deb8600696869be76614b8d13db48a921b9d1adf10a8ad26a257dc9226d121d9b6212ae26b8f8bceffb95deb13784e02d2c3354013b1c0d08f708db3b3006dbeb971c51bf8be43bfe697d39e2af3f31257b48f84bc4f6ea83b6a0d10cafca4cdb74c32f6044463cb4826d7828184de60f5f40af63c9a3d88c77e1e48cdc12ec2a6c2c8541f84468301f6ed6e001b540d9f752f103a53cac17f5bf81f50e65d2226a3f13570cfad769fc6f8038bf4716650404b6242282b6ff431a26e86221d46b56bec73f0e43a33f0c6a98fd36ad619b26537b8c074f134dc775ffba462b6d75b8a733e6dd2845073839370c237b0adab7031a94de9104318bf2cc4aa9f931897ce18b0c4440dd568ec0e22637d785b49bcdd3c18f8948d42a351189252f1b15f337686f3d8ce403764677a3345a6b8e09d9cdbbb0d7575a7eac17d23f5d6e7ce689c3532c5423771ad0debaa5a3d4e4fe96f312b55ba2218992b6b3eaf7b43ad0cb3d38cb6b4d3c1e7bb4c7daddb69f7acc64e56ea2e2ed9db1eade654ccbdc98b83dad1f91292f2a6cd5ff262c8548580f4984666d0ed46c23c1a3622ddde3a33f1773d69c3567a2cd06aa25fd9f56da5a31ac339b350ceee0b301ba904643262437e22c521175826da2cfe0c2d0873d941ce53d7da0417f10839e527280246b0d5c0dacb05c26574ecd95c42ecf0d5f8287518249bbd7a92a0c71e69cee57105c72bad196bc9e5d77151a79494d9ebd6b6249aa21ae19c91f36f3e1637712806768f932067b7aa261fd73373d4f6d1d941b4ed466e24ecd732cffa0d6c100f321cd4949cbfe107cfafac33aa0af6cd272f783bc0d09664eae179d8eee31b06aff005b8c63c2137d06b681fc94297e0c8ebc37c3add562b9d7ae11d9e87918a218e31dee1b82ee836c7312535579f81ffcb978c92c9a2027f5a805f602182c64a9cec578a25b7841a60670d29343592c9b7adc7ab11fec1873c9a67472d9042a09ba85e2705fb76a5718db4f90af9593d5980185f4de995776ea7ee2dcfd4ca3b2d6153995bdcfb045f08543a34c77875c10f13a58d841d5e943dc0b9651294c62e9844c69b3a8372962cbc8fd01e26bc670953d88960fb8846f873c4db4a45d74aa708d5d60aa84621c6da1530e9d75fbe36048454442f0a21c33ae94a2f814417af867196e2a77f47f406aabb188041dc6abda5e0d7a034935a4cc6c3a2c4e6d7f3bd49963882720d44f751492dd7e4ec09fd4d547fc488e8fdbb107aa2ca564ede9b4a7b14bb9218ad27c356672f27fd4a3e54575f18a9b4ea27fc1d25071d34fe5dcec93b500f6a04da9dae706c357cc84211ad3e50af859f17896ce241469d44647b7fd3e67cd3ba4843b0243c08eff1928d56ded6945358e281b7d384dd172a7a2bf23f8f63d6610ab7825455bfd474c82486a19e381f962b32186efb69ecfe79d6fb07b1edc9379d99afd3b738e0f1d2f71669298fa3b2d6c1f403816a3a8acf75f0e286d5b54405a1cc4e2487a69d7fe3d9edfcb07f07ed0217769aac1f98020947bab81ce47e0626da2028a9b930d3212f11754847655ed5902c1d486c8984296fc5af12863aeee1a0ae797b0a7296d72a32ca76e14b5b2ec271334e747f296404fea5e3601c7190074b7b0c0a3c240a6e67eced6213bb94d4669a4cfb92e7fe355e2ec856e79432f2ea4c379570bf2d652d26318943f3beb9b5205d3b348e7e32e40fbc18a4685a204daa2d091a7f42d2aa71605ef058cfd53b46cb3acdd34abb3e159dc6798e392138d35074a4bc44cef4bfe9e336c12c39489ff2ab2bffeedb0bbcff9f2cbf5f68ab37b317b3a98ad5bc8fed88317fca2af17353e03f19d7f28d0e9b1d58ace0ba4d40daeb53ea1d5e8659f57da472d476978a51e9f937dac0d5f25cb9d34121ca90ec5bbc333d8f8e65194d59a4376b396fe65642fef76e5cb3840b7403f52ff3b7e88551c0620d8a6a4ef50afafeca2ce586c32313476ce2d278ec3cbc608c189ad0f18478047ea93309c7a79a06bcbf889093bb91aebbec16e734e269be76ac54a876b7b937c7d6d693c222a2ae57d5b7d1242b53ba5566e79f337681943ceb91990d663882e2fef76df8bad3b4e2fceba4f90ba564fa568d3d890e85b4af370462431579212aaad4e7ca88ee75ab5e2956074ed172867f1e042aeebed36f9ca6", 0x1000}, {&(0x7f0000008d00)="ee3cac2c2cba419eb7b52c41a9f1d5f87b2f285ebb3963a7d0742fef66fa634472cc6fb5c82161f3ffda63b33f2b5805657edc5ceee93056885bf429cc565ec6b11dbe7c5f0d11f2e4065a90c6f9d959350939973f53e284f73de63ef0a7c74714f50dd8854227bd4ac5e9327521230f203552f01140033a0f9ccb18506d2d60a3f6215adf83f8f32abf7802b246ef8a86824c39624fed45aec1e1dce7324ac38fb2ddcc615f2e9a413e4ea2c99d14ff3be3a68d85e819fc1184", 0xba}, {&(0x7f00000052c0)="33db97c22ae488305d817ed2b057ad1edf0e8c909d87e1a3dbce142b63bc2e78f7ae3530b0d362427b9f9dc9198916d1515dd5fc775789d99c3eb21c216796ab60ec780dffd7b4a54f8e6de17c8d", 0x4e}, {&(0x7f0000008dc0)="b95048", 0x3}, {&(0x7f0000008e00)="3be8d2e60611d679ecd6fbef77bd01d3cf1b975400a0496a3532343017bd87adcb66e8da8239fb9c87909ffcc1a94dd11cd8cc6717b4953dc9be028ac5a0f9c9385eac3eb2446e06c879108c03c0dff6262ddb1403c167d8b244870661ebe79be6205f7f692a7f3773500c77fa3d94d84a06bea8ace41262a2a15626977db7f64d3b3dcb354c8908ee0e0323c81611b152", 0x91}], 0x7) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:46 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x5000000}}) [ 438.662482][T10190] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:46 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x515, &(0x7f0000000100)={0x0, 0x9086, 0x8, 0x1, 0x3c3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) syz_open_pts(0xffffffffffffffff, 0x840) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x888, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x100) 04:01:46 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x2000008, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0xa, 0x8000000000000001, 0x0, 0xffff, 0x0, 0x1}, 0x1) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000100)) [ 439.661581][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.661631][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 04:01:48 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r6, 0x0) r7 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r8 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r7, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=""/27, 0x1b}, 0x0, 0x141}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r1, 0xffffffffffffffff, 0x0) 04:01:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:48 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x5000000}}) 04:01:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="ca6c3e99d04b2b59d7c589445f77cbe0c876321dc75bfd38b632b121087389e5d60ca40342fa96be6c03aea2a09efa65e01e17ee0043daed4290d3ad1636928ed6aef2037cedcfdc101e208cde1d7bf02724034e649863dd00ce5d29f1a70acfb7d02a7a8575c51cc3363cc181fd3cc3118038d5", 0x74}, {&(0x7f00000003c0)="b6f5bf9b4c538397b63c6c690556e1f7f0de68a7f0cb94f2ac2c1d9a1ae4162c2a581674ba2171b4526323258bd1f39bd45339636781cbaaf3515e1b9c60fb612f04dde1030e4d09094a8d4a252c1ddb0131caf1d558640a67c98244d49b9da38ef89392cba1ad4eb342f0850be2251bfb0d47b984a4ccce3e915b0a163484cadeba082b2001973b9112b67d1967482cca4d379721948fdfc6f6bf71bb8ac5b6d95fe0243c724da2ae30c626113b5926315ca6ae227ef5aa5286fb88b20530ab43ed59005d113c0962b111cdacfd80fa1caaa9e030c36fd7ef4a91728b78", 0xde}, {&(0x7f0000000080)="037b99c802cd56842d154d48b3", 0xd}, {&(0x7f00000002c0)="8df41a721eb8cd160abaddd3eda468fc31450dce1850897b1a66d9bb98a4cb292b50bd721704ed3c3ce2c65a40fe6c8252c5b4a0af999e4fe4779328bd8287ef74b75f338f1c52dbde65ef6d0bb3e320500715bb6fe1961c486801c95427f36c5944d7b8fe8d8aa9cd49c01104c4fa3bce65", 0x72}, {&(0x7f00000004c0)="d957d9889ed4eed107a95873192761849fad80c2d63229a4fa10e13e80cf7070d4576d9ed54d4e8f12bd0b950f57342de1b4c11ce84565595022e2d21a1935f44661ea130eb7ed27f4b5", 0x4a}], 0x5, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0xc000080) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000008f40)={'a', ' *:* ', 'r\x00'}, 0x8) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{&(0x7f0000000600)=@caif=@dbg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/227, 0xe3}], 0x4, &(0x7f0000000940)=""/42, 0x2a}, 0x3}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/157, 0x9d}], 0x0, &(0x7f0000001d00)=""/189, 0xbd}}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/146, 0x92}, {&(0x7f00000020c0)=""/254, 0xfe}, {&(0x7f00000021c0)}], 0x5, &(0x7f0000002280)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)=""/82, 0x52}, {&(0x7f0000002400)=""/43, 0x2b}], 0x2, &(0x7f0000002480)=""/231, 0xe7}, 0x2}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/235, 0xeb}, {&(0x7f0000002700)=""/9, 0x9}, {&(0x7f0000002740)=""/222, 0xe3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/171, 0xab}], 0x6, &(0x7f0000003a80)=""/129, 0x81}, 0x7}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/43, 0x2b}, {&(0x7f0000003b80)=""/68, 0x44}, {&(0x7f0000003c00)=""/55, 0x37}], 0x3, &(0x7f0000003c80)=""/252, 0xfc}, 0x5}, {{&(0x7f0000003d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/184, 0xb8}, {&(0x7f0000003ec0)=""/50, 0x32}], 0x2, &(0x7f0000003f40)=""/212, 0xd4}, 0x7}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004040)=""/28, 0x1c}, {&(0x7f0000004080)=""/99, 0x63}], 0x2, &(0x7f0000004140)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005140)=@caif, 0x80, &(0x7f00000064c0)=[{&(0x7f00000051c0)=""/232, 0xe8}, {&(0x7f0000006840)=""/105, 0x65}, {&(0x7f0000005340)=""/235, 0xeb}, {&(0x7f0000005440)=""/103, 0x67}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006540)=""/173, 0xad}, 0x100}, {{&(0x7f0000006600)=@hci, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006680)=""/130, 0x82}, {&(0x7f0000006740)=""/151, 0x97}, {&(0x7f0000006800)=""/45, 0x2d}, {&(0x7f0000006840)}, {&(0x7f0000006880)}], 0x5, &(0x7f0000006940)=""/247, 0xf7}, 0x4}], 0xa, 0x0, &(0x7f0000006cc0)={0x0, 0x3938700}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) writev(r5, &(0x7f0000008ec0)=[{&(0x7f0000006d00)="88f7c93346e27bdee521716f6ecae2fe1e5361941890fb249fab60c25079c7502e003ef9ea7774677a66de525af98e3cb69a2fc1438199de555dba5d2b171ddef83b3b546014afb7dac12f7a618194ed7dd943ff09a9aff5c489dccd194ccd01eb655be0e84227bf0e773dd6ee5b5c093aea67a82f2ad280a9dc918f15607e079d571504c2fd8d6afb8a4a763b8ceda6b9cf1b63652513d07693556db7ff601e6b305d5633d2371011cd84c7d53c5d9b06c03011f30cdfb9480f7912367d701fb80b8d3a4cf1d836c84146b45b3422f6c7c8f968a6db4075fdd77dd415eaf33561d46c85be76fa7b640ba09387e94c2076f102867b2686d816827da2a388afb8b0766b72eb5e83c7e919b96ba9be9982b9ee773a322b9749021dd6686a4187258e64a61f3116f34212e052d76efd0a6a88c7dac82306fc0f9666837f6ea31e2c98c708e8af2723f46680a091016cbfef6bb9347b210e33aa180ed6d32a03f9392d92fc29a8a74dd2a481a9aa517b21cde1d313c8f29eabc1f163513c488068160838be1152c3eebdb08e1fd89ff0dd1f7af0ead3304dc20151c2820a979b15ab789a20f6fc502fbfd95608393f86a6b7ab33c81602d87ad4924f1714fab4268a9097eb6ca638d3f5f097266d0eec5614950e34ec77d275ce5980fa4bb18d3692dd9c11cca198ece45c5fdb9914e34e0ed84825a8a08620c635d7b9e984c9ab3497895683bd6625d54024f400d7f5db5c7ca0e805719a89f01ecc6d44362c6c39199df5a4f9e5533d9d3238b07a61228c21a44ec4ac0ea5b29416557e18f965a338e1614d8dde343926dfbae94b543a7a61166c0681630185c1ab35aa1e7f0c48e735ec7a5e9ded18cb897d459d0d01188d8f2715b9a3cbec7d0444f92319cc50cd1fcdfe3f67052627d0b5ab35d7bd1fb037fa0292eba1431a6aec4af0bccfd55ab5444be8df059dc3813ce48c2b899384bb992aa0ac46f448b62421850c87921c0613b0582a98884ccf25066f57be6074f83f1b9778b97cd181263ccd8df3f46cab13f7ea053c7058a4f635d79f34ef61f8ff76f2b5686378b2cc92997402b93f359f597ad7963194ba9f8f25e165b1f5c89b4a909c1f6ee5b9362b7d481494680adb34f749d051316580c8795922340212059c803a5a50151a074e9a6e9783618d2a0d3ba6890abd34a9dc686419dc943a67dd7313b64bbca3815d72fb0debf1cc885865052aea9f7b17de68b701c6375e6f1fa6f6e7f036a1f1e7872532907c33ae592cade5ddcdd0dcb3f62d835417a8e7f0043c769c8cab50234f530355e6b920aa29b5e008c3bbfceeb6b0ac3b8f8f3166591b891dab9a5567e88664b62581e541d1ed7eea75f260769da7da686630cf064e04eb89ec9d0b6e87d86ec698330a91df8535690bf15ac52daaac6de4567f4344ac068e33dbae8ed1ed4bac8982effcc7227442b981ec0b19402caeec074ca131f5ac2880accf9a444c6bf648e0354182639210050b274517d35caaa29df753076c182ad12cb03255afebffd013dea7346c1eb7aff1b41b31e97c6fcc8735ca935b6dbee2771d2ea61399b166ebbe244499e9f66fb0a359534d58898bdad1f9f2eef649b60cc04d0ad5f11a632c036904f93485226f516c49aab25334cbf85a67d25f7af3224ef4ac5cd1bb3579f575ce39769d7b46959c7889ce646c53bfa20e2b3ba1b4f8651a6dc3f993707c0a9003473454a628dff274e99ef2464d969ee49cdafbefbaeb838f69f7a888332f0e6e542a135aa148404544f71efe93359c7c80c850d4f73b4b81fc80072328a167224a49ca106fc03bb95a80d06723ac90a80d16bdf8dda37118a0d249b400b8a4ccc97ef8f8a6b23ef102ace0ee87fcccba3be064922b48f5d20ac8c855b694e15843dd70cec86187d1899f4cf8d089d15c9ccf976a7c844e9034a2bba56be0b0a22a8d01798107430f0cc48e7901364ec16407ceb0a5dc21a168e2c094670ec943c33f28ae37d439a72d0af32c69c983a35f4a49a02abdecdae12e13e05ed83401f0dd1daf9dfeb659c63865f59c56698985843241fda407978574bf30f4ab24a73815da1dcbd7ced26e8930f1e09bb086eb376bf698106618a77a1b25f4a6c24bca7aa8cccc6de2b112be0f517024334be4f0b6beaac59894489addd71e3d5f525c898c0cd0e6f1fb2d370f96548ffb83ac67f56465d7a8c11e11a6514c647d7d27f88caf58534118f209397a840707a9b7536a96031439165fc94513f819dc51f0a4eb55edf0759f7f78ac1fd5f9d98d5fd2104c7d5633751c3528cee8cd50f3d0de891856889d8ebde28fc2f20d12a54e530dad481b4b907b020d6faf42b8b153740ddad8ebf4f5fd12855d8bba15355bed11545f692ae8922ddb060b10fdefc216fa3a5445efd55751fa9b16286c8f6eafbf94cdcba5caf2789e51b3c09b03727cf3e3e556f755f00f009902ee9d129d82cce6dd19e2a4c489ec5cf449a0aabb705ada48055a11cbfaaee61e4f0d94aa456eca1bc01a3e82cef38847e5f26dc1826cfd54463e2162ac063097c04b8a8dfe3d8471eb54b5f4c1a88ba0e49342b8010d1d44584c92601058f3e7eb491a5823e7469adce3ab109b926da992755bd3caae0cdf44597e0e7ec7d84995965c1a4179e39038727120879bd5c03d1c23d729e2800db8108ef6ec9d4c7b78755e0a8ed666bbc7a03e6107978f7b97d9db24474bb460870d4d3c5cf0956c7bfdf492b8073823cdbdffbdc5683bf26c125912ccbcdab6e73bb488de25ac90dc6c9abf5a8176bfa2d6237812f7657bc6cb961c7028419c11dbb18e80f29f870282ff0a412d99bf06f75f38b0a367a8cb316152c53103bb16c00faeb8b5562577ed00f40510849834df3b3fdfdb0dbf5250fd71c7f40bc8d11ae176e8c490dfb06e78f1f3c369a25cdec39622ddfbdcbb6884a0681b095b40bec23e24b38827516b7e7a24f7a62eab70f30c7b364c99aa36149400efb3b47d8df6691fec0391dddd5a4c8a8958d277d9a218eb56e616a9e8f2e6a64d49ca8234a0a9301eef64bcc0c88acc8e4858b5792e9f9c3eeab0f8f69d56963d2fbafce093489a811b978240902f8edd4fc89a9d6d178170e9ae48cded997d0df429986d3d776ae43d34ccf9712c23193930e95c57eab0ad0e79e1d03d794873d7fe5c31940607d5e9728d6c19ea2a1d705de7a157b39cefa1e240b4d674171c0584b4fbf572bd0e2e21be018d4e631a906ce5ff533c8abfc0662367b016ee4065ca880a378d397af2362be2bfac315cc1d76e9b0c5a143a78517bb3e1f4e4d7a8c099b1ced296bce0e97ace06076c4ef8233de4824c2b81a7d1c8fc26efd5ff3fab88bc3ceebb62549ca63fe15902cb0a74cebb10c45ca833e8844a9fdcb987de9f10983b4f1e1ceda7623376f1232abf351e37296151bcbfd4f8ff79ca98ead2a0a448d93ff78f25d6fa134fc03edcd80b9da7f02fda082aae0cde135bdd9bbc932218abebde5aba7e44a4e72f12619d2c9b0a8dc4133fa57a51efd19a0ea326f14177524488fc2886ef3fdacb50af2e9f9f9a929b9d9750804b69906135df7ef76a35ddb3a4315b1cdf35468e7b503fd242b3b9badaf9019a3418145a0a3ed077a899873262364f9dd2bd270a9865ff07a1ab824a849ef6b801c2fe2fd572f8d3b21f2a8c4cb3c17ad37abe22217e97afb7f9e97f76fd65ac1bdb21cb3970090fe44c933a0181a71fbfc8f02bff5997748bc3fb1bcac821a7eda4b1a94d0e93dc8eb031f989ec88e457fc3c92a023293a7dd32e5e2d19f9a90fe6d3de0d2d86fff3e1764d14d9e3103f76799ec13f187d11985555754429d00d0ea750aff19155999311101bdd99088b672a9de5356d346cc5309742c5706366378b8d7c5c2b20603cb4bee202a4613b197a9d2857fcdc6b6f17ee8272ad217c8c9570097f6a2b7f33e32c1cb92ed3c0dc981f3f84a81895d84c5f238ddfa3eacdcec49b6f79d8407f2a239f172dcd94a5443773446fb9d4008338df70af316d0f366f7d6f635b3835b2891f6e1183251bac294d45d0e0740ad3c67cee95022fa9eed63f27034babac6ba78da41f24ada92a85e6c9ddef0f37891ef9c2e8ca876fdfdf6c64241f7ec2513495bcfe4c89ac51e2060fe502789b0a4533013d039838f1216a48e3c3ec4ca6c51b0d03737815ee402d0551c3e4762da1cfbcabab0c66654f9d01eaa0394d8610b7cae1d00fef67aa1bb9665f11aa586db94ec61e522a44e425c3d57dcda8144fb42f6cd296dc29afb83b9149588a9e057aa1d79c61b4e31388fbf7a02545af0f7ea849a834cc4cd34de28b07d37062be3447673bb1d43775bafc18ca3141c32bb9dd0c2448d1fce126399c15e2ce443d6345917ebd654053db9a35b03026440b3508f79e7048db861fac0e03f6cbd0502170ee5dedb67ce108cb3d3a1652bd77f8d80b7537753769267ff945fe646745a08e3f533cc20335c3b64185889769ec544960ba88ae7a77446b6cc6cb010cd5d38b75000f88dc2655ffe29821a22757f9f57c107d565b139f01f89bbdd6cb1cc380ba1e4f99e127b03715351077b12e2377dc6a74fd9265a935757664356850d9d972ce74c198b5b9af95f51042a3e25a41331d1a8fbde4074ffd5350fc074169add87cb96abb36dc3f3a852aced8b2df5eb21713db53a552a07808397a9a2554a87956b7dc1cfbc5de38259be4817d9bce4ff3a2dc721dab2730859061d906f02a41735cd35f783d5159fd51978c264007a7cc98380369aad776a0204715c77ee32a742b06b9e40689d88e36d9f8ed094f44af3985d5bc66b1e4d31262b1e105d87cf542063ad2d9a0573ac52988075cce5cd3f881f97779327015850ccf495d047acecabe1ef8e6a8c6a5fb7e8a2c43e50f9a1bbbb2296b25e057a3f569a4458ff8acba6c2d9a3aa24ca348287d59c0e2a468c87a1ec7f18e26246d9a96abf10b4164da53ddfecacd55f439b56afd0cd825fb7bc5a49fc59fb10d901a88d7e49744cb560cb0272dea13ea9ff7c1224f6d215092a8abe83c2d021ffc5770a76f8b0abf7e792af0a73d41b255bf8b52f0357889451e8637b42b3e49cff4523acc62eca21ee6c097e080a4fd2ea4b18d355dfdd84f858218b4cf9bb187f09c06c817a408817c4b8b64a2789be5cf579470c78c5e4077da07c79191abff98972c35718af58371fb8fb87e7c1514d68d6bbf11fcc5c73fe7600b75b63a080a66eb4dee4d193939d5d512afe2a03cca17055254a3eb16a6453da4f5abbd70ccceac9d3242fc50989dbbf5a960f6aa606c617d50042f21f1d6531a34e84a08b06e1ee8ff35e12accafe17e3213aebcd686ebf551c6ca1254ca216a369321f5468b3e8982d8348358ebfa9fa837d3b0b87181cd60a8c222b11f4f282586d0c06b1384a3098b71ea74cf5c1f51631397ad86941e4cf67ebd10ded3261db4a5e7be10642b6204ec4aded440e74a214e8b73d6ac7bff800732dbcbc7e7ded4f5f935e51a3b0ed9b7420abb5f57ef55c6805fa37c647b2fb7e4d4219e2cddaab11680f5ab3ce91d433a5d729fe6ffb62d90801633fb85642dd1f58ea6b7e8030c77eddc7e960084589826b825b2657208d19431a7f3f4bae6513ca27fac895002e8529196e97cc9cef1d08a4bc77d84e29768bad8fbe1e17c822554036cda7c73585c42723af94646355cc4aff4716eae7390b7cbec44d32e6223442913ee4898ba8c20e3ef6f209189314db1ca31dc8f9f8072cf23991cf4f03582571f7fffdbc81a5cb710c5", 0x1000}, {&(0x7f00000021c0)="4f4c5af275c9cef93ec4d467487154eb083bc1ea4576d0ae2d58789f60b0d0d29a0fa9a17c11ed5b52bc1d3d515d80", 0x2f}, {&(0x7f0000007d00)="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", 0x1000}, {&(0x7f0000008d00)="ee3cac2c2cba419eb7b52c41a9f1d5f87b2f285ebb3963a7d0742fef66fa634472cc6fb5c82161f3ffda63b33f2b5805657edc5ceee93056885bf429cc565ec6b11dbe7c5f0d11f2e4065a90c6f9d959350939973f53e284f73de63ef0a7c74714f50dd8854227bd4ac5e9327521230f203552f01140033a0f9ccb18506d2d60a3f6215adf83f8f32abf7802b246ef8a86824c39624fed45aec1e1dce7324ac38fb2ddcc615f2e9a413e4ea2c99d14ff3be3a68d85e819fc1184", 0xba}, {&(0x7f00000052c0)="33db97c22ae488305d817ed2b057ad1edf0e8c909d87e1a3dbce142b63bc2e78f7ae3530b0d362427b9f9dc9198916d1515dd5fc775789d99c3eb21c216796ab60ec780dffd7b4a54f8e6de17c8d", 0x4e}, {&(0x7f0000008dc0)="b95048", 0x3}, {&(0x7f0000008e00)="3be8d2e60611d679ecd6fbef77bd01d3cf1b975400a0496a3532343017bd87adcb66e8da8239fb9c87909ffcc1a94dd11cd8cc6717b4953dc9be028ac5a0f9c9385eac3eb2446e06c879108c03c0dff6262ddb1403c167d8b244870661ebe79be6205f7f692a7f3773500c77fa3d94d84a06bea8ace41262a2a15626977db7f64d3b3dcb354c8908ee0e0323c81611b152", 0x91}], 0x7) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="ca6c3e99d04b2b59d7c589445f77cbe0c876321dc75bfd38b632b121087389e5d60ca40342fa96be6c03aea2a09efa65e01e17ee0043daed4290d3ad1636928ed6aef2037cedcfdc101e208cde1d7bf02724034e649863dd00ce5d29f1a70acfb7d02a7a8575c51cc3363cc181fd3cc3118038d5", 0x74}, {&(0x7f00000003c0)="b6f5bf9b4c538397b63c6c690556e1f7f0de68a7f0cb94f2ac2c1d9a1ae4162c2a581674ba2171b4526323258bd1f39bd45339636781cbaaf3515e1b9c60fb612f04dde1030e4d09094a8d4a252c1ddb0131caf1d558640a67c98244d49b9da38ef89392cba1ad4eb342f0850be2251bfb0d47b984a4ccce3e915b0a163484cadeba082b2001973b9112b67d1967482cca4d379721948fdfc6f6bf71bb8ac5b6d95fe0243c724da2ae30c626113b5926315ca6ae227ef5aa5286fb88b20530ab43ed59005d113c0962b111cdacfd80fa1caaa9e030c36fd7ef4a91728b78", 0xde}, {&(0x7f0000000080)="037b99c802cd56842d154d48b3", 0xd}, {&(0x7f00000002c0)="8df41a721eb8cd160abaddd3eda468fc31450dce1850897b1a66d9bb98a4cb292b50bd721704ed3c3ce2c65a40fe6c8252c5b4a0af999e4fe4779328bd8287ef74b75f338f1c52dbde65ef6d0bb3e320500715bb6fe1961c486801c95427f36c5944d7b8fe8d8aa9cd49c01104c4fa3bce65", 0x72}, {&(0x7f00000004c0)="d957d9889ed4eed107a95873192761849fad80c2d63229a4fa10e13e80cf7070d4576d9ed54d4e8f12bd0b950f57342de1b4c11ce84565595022e2d21a1935f44661ea130eb7ed27f4b5", 0x4a}], 0x5, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0xc000080) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000008f40)={'a', ' *:* ', 'r\x00'}, 0x8) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r5, 0x0) (async) recvmmsg(r0, &(0x7f0000006a40)=[{{&(0x7f0000000600)=@caif=@dbg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/227, 0xe3}], 0x4, &(0x7f0000000940)=""/42, 0x2a}, 0x3}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/157, 0x9d}], 0x0, &(0x7f0000001d00)=""/189, 0xbd}}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/146, 0x92}, {&(0x7f00000020c0)=""/254, 0xfe}, {&(0x7f00000021c0)}], 0x5, &(0x7f0000002280)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)=""/82, 0x52}, {&(0x7f0000002400)=""/43, 0x2b}], 0x2, &(0x7f0000002480)=""/231, 0xe7}, 0x2}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/235, 0xeb}, {&(0x7f0000002700)=""/9, 0x9}, {&(0x7f0000002740)=""/222, 0xe3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/171, 0xab}], 0x6, &(0x7f0000003a80)=""/129, 0x81}, 0x7}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/43, 0x2b}, {&(0x7f0000003b80)=""/68, 0x44}, {&(0x7f0000003c00)=""/55, 0x37}], 0x3, &(0x7f0000003c80)=""/252, 0xfc}, 0x5}, {{&(0x7f0000003d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/184, 0xb8}, {&(0x7f0000003ec0)=""/50, 0x32}], 0x2, &(0x7f0000003f40)=""/212, 0xd4}, 0x7}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004040)=""/28, 0x1c}, {&(0x7f0000004080)=""/99, 0x63}], 0x2, &(0x7f0000004140)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005140)=@caif, 0x80, &(0x7f00000064c0)=[{&(0x7f00000051c0)=""/232, 0xe8}, {&(0x7f0000006840)=""/105, 0x65}, {&(0x7f0000005340)=""/235, 0xeb}, {&(0x7f0000005440)=""/103, 0x67}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006540)=""/173, 0xad}, 0x100}, {{&(0x7f0000006600)=@hci, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006680)=""/130, 0x82}, {&(0x7f0000006740)=""/151, 0x97}, {&(0x7f0000006800)=""/45, 0x2d}, {&(0x7f0000006840)}, {&(0x7f0000006880)}], 0x5, &(0x7f0000006940)=""/247, 0xf7}, 0x4}], 0xa, 0x0, &(0x7f0000006cc0)={0x0, 0x3938700}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) writev(r5, &(0x7f0000008ec0)=[{&(0x7f0000006d00)="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", 0x1000}, {&(0x7f00000021c0)="4f4c5af275c9cef93ec4d467487154eb083bc1ea4576d0ae2d58789f60b0d0d29a0fa9a17c11ed5b52bc1d3d515d80", 0x2f}, {&(0x7f0000007d00)="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", 0x1000}, {&(0x7f0000008d00)="ee3cac2c2cba419eb7b52c41a9f1d5f87b2f285ebb3963a7d0742fef66fa634472cc6fb5c82161f3ffda63b33f2b5805657edc5ceee93056885bf429cc565ec6b11dbe7c5f0d11f2e4065a90c6f9d959350939973f53e284f73de63ef0a7c74714f50dd8854227bd4ac5e9327521230f203552f01140033a0f9ccb18506d2d60a3f6215adf83f8f32abf7802b246ef8a86824c39624fed45aec1e1dce7324ac38fb2ddcc615f2e9a413e4ea2c99d14ff3be3a68d85e819fc1184", 0xba}, {&(0x7f00000052c0)="33db97c22ae488305d817ed2b057ad1edf0e8c909d87e1a3dbce142b63bc2e78f7ae3530b0d362427b9f9dc9198916d1515dd5fc775789d99c3eb21c216796ab60ec780dffd7b4a54f8e6de17c8d", 0x4e}, {&(0x7f0000008dc0)="b95048", 0x3}, {&(0x7f0000008e00)="3be8d2e60611d679ecd6fbef77bd01d3cf1b975400a0496a3532343017bd87adcb66e8da8239fb9c87909ffcc1a94dd11cd8cc6717b4953dc9be028ac5a0f9c9385eac3eb2446e06c879108c03c0dff6262ddb1403c167d8b244870661ebe79be6205f7f692a7f3773500c77fa3d94d84a06bea8ace41262a2a15626977db7f64d3b3dcb354c8908ee0e0323c81611b152", 0x91}], 0x7) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 04:01:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 440.698094][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 440.698231][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:48 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x0, 0x5000000}}) 04:01:48 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x5000000}}) 04:01:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x4, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="ca6c3e99d04b2b59d7c589445f77cbe0c876321dc75bfd38b632b121087389e5d60ca40342fa96be6c03aea2a09efa65e01e17ee0043daed4290d3ad1636928ed6aef2037cedcfdc101e208cde1d7bf02724034e649863dd00ce5d29f1a70acfb7d02a7a8575c51cc3363cc181fd3cc3118038d5", 0x74}, {&(0x7f00000003c0)="b6f5bf9b4c538397b63c6c690556e1f7f0de68a7f0cb94f2ac2c1d9a1ae4162c2a581674ba2171b4526323258bd1f39bd45339636781cbaaf3515e1b9c60fb612f04dde1030e4d09094a8d4a252c1ddb0131caf1d558640a67c98244d49b9da38ef89392cba1ad4eb342f0850be2251bfb0d47b984a4ccce3e915b0a163484cadeba082b2001973b9112b67d1967482cca4d379721948fdfc6f6bf71bb8ac5b6d95fe0243c724da2ae30c626113b5926315ca6ae227ef5aa5286fb88b20530ab43ed59005d113c0962b111cdacfd80fa1caaa9e030c36fd7ef4a91728b78", 0xde}, {&(0x7f0000000080)="037b99c802cd56842d154d48b3", 0xd}, {&(0x7f00000002c0)="8df41a721eb8cd160abaddd3eda468fc31450dce1850897b1a66d9bb98a4cb292b50bd721704ed3c3ce2c65a40fe6c8252c5b4a0af999e4fe4779328bd8287ef74b75f338f1c52dbde65ef6d0bb3e320500715bb6fe1961c486801c95427f36c5944d7b8fe8d8aa9cd49c01104c4fa3bce65", 0x72}, {&(0x7f00000004c0)="d957d9889ed4eed107a95873192761849fad80c2d63229a4fa10e13e80cf7070d4576d9ed54d4e8f12bd0b950f57342de1b4c11ce84565595022e2d21a1935f44661ea130eb7ed27f4b5", 0x4a}], 0x5, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0xc000080) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000008f40)={'a', ' *:* ', 'r\x00'}, 0x8) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{&(0x7f0000000600)=@caif=@dbg, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/110, 0x6e}, {&(0x7f0000000800)=""/227, 0xe3}], 0x4, &(0x7f0000000940)=""/42, 0x2a}, 0x3}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/64, 0x40}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/176, 0xb0}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/157, 0x9d}], 0x0, &(0x7f0000001d00)=""/189, 0xbd}}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/218, 0xda}, {&(0x7f0000002000)=""/146, 0x92}, {&(0x7f00000020c0)=""/254, 0xfe}, {&(0x7f00000021c0)}], 0x5, &(0x7f0000002280)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)=""/82, 0x52}, {&(0x7f0000002400)=""/43, 0x2b}], 0x2, &(0x7f0000002480)=""/231, 0xe7}, 0x2}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/235, 0xeb}, {&(0x7f0000002700)=""/9, 0x9}, {&(0x7f0000002740)=""/222, 0xe3}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/200, 0xc8}, {&(0x7f0000003940)=""/171, 0xab}], 0x6, &(0x7f0000003a80)=""/129, 0x81}, 0x7}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000003b40)=""/43, 0x2b}, {&(0x7f0000003b80)=""/68, 0x44}, {&(0x7f0000003c00)=""/55, 0x37}], 0x3, &(0x7f0000003c80)=""/252, 0xfc}, 0x5}, {{&(0x7f0000003d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/184, 0xb8}, {&(0x7f0000003ec0)=""/50, 0x32}], 0x2, &(0x7f0000003f40)=""/212, 0xd4}, 0x7}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004040)=""/28, 0x1c}, {&(0x7f0000004080)=""/99, 0x63}], 0x2, &(0x7f0000004140)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005140)=@caif, 0x80, &(0x7f00000064c0)=[{&(0x7f00000051c0)=""/232, 0xe8}, {&(0x7f0000006840)=""/105, 0x65}, {&(0x7f0000005340)=""/235, 0xeb}, {&(0x7f0000005440)=""/103, 0x67}, {&(0x7f00000054c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006540)=""/173, 0xad}, 0x100}, {{&(0x7f0000006600)=@hci, 0x80, &(0x7f00000068c0)=[{&(0x7f0000006680)=""/130, 0x82}, {&(0x7f0000006740)=""/151, 0x97}, {&(0x7f0000006800)=""/45, 0x2d}, {&(0x7f0000006840)}, {&(0x7f0000006880)}], 0x5, &(0x7f0000006940)=""/247, 0xf7}, 0x4}], 0xa, 0x0, &(0x7f0000006cc0)={0x0, 0x3938700}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) writev(r5, &(0x7f0000008ec0)=[{&(0x7f0000006d00)="88f7c93346e27bdee521716f6ecae2fe1e5361941890fb249fab60c25079c7502e003ef9ea7774677a66de525af98e3cb69a2fc1438199de555dba5d2b171ddef83b3b546014afb7dac12f7a618194ed7dd943ff09a9aff5c489dccd194ccd01eb655be0e84227bf0e773dd6ee5b5c093aea67a82f2ad280a9dc918f15607e079d571504c2fd8d6afb8a4a763b8ceda6b9cf1b63652513d07693556db7ff601e6b305d5633d2371011cd84c7d53c5d9b06c03011f30cdfb9480f7912367d701fb80b8d3a4cf1d836c84146b45b3422f6c7c8f968a6db4075fdd77dd415eaf33561d46c85be76fa7b640ba09387e94c2076f102867b2686d816827da2a388afb8b0766b72eb5e83c7e919b96ba9be9982b9ee773a322b9749021dd6686a4187258e64a61f3116f34212e052d76efd0a6a88c7dac82306fc0f9666837f6ea31e2c98c708e8af2723f46680a091016cbfef6bb9347b210e33aa180ed6d32a03f9392d92fc29a8a74dd2a481a9aa517b21cde1d313c8f29eabc1f163513c488068160838be1152c3eebdb08e1fd89ff0dd1f7af0ead3304dc20151c2820a979b15ab789a20f6fc502fbfd95608393f86a6b7ab33c81602d87ad4924f1714fab4268a9097eb6ca638d3f5f097266d0eec5614950e34ec77d275ce5980fa4bb18d3692dd9c11cca198ece45c5fdb9914e34e0ed84825a8a08620c635d7b9e984c9ab3497895683bd6625d54024f400d7f5db5c7ca0e805719a89f01ecc6d44362c6c39199df5a4f9e5533d9d3238b07a61228c21a44ec4ac0ea5b29416557e18f965a338e1614d8dde343926dfbae94b543a7a61166c0681630185c1ab35aa1e7f0c48e735ec7a5e9ded18cb897d459d0d01188d8f2715b9a3cbec7d0444f92319cc50cd1fcdfe3f67052627d0b5ab35d7bd1fb037fa0292eba1431a6aec4af0bccfd55ab5444be8df059dc3813ce48c2b899384bb992aa0ac46f448b62421850c87921c0613b0582a98884ccf25066f57be6074f83f1b9778b97cd181263ccd8df3f46cab13f7ea053c7058a4f635d79f34ef61f8ff76f2b5686378b2cc92997402b93f359f597ad7963194ba9f8f25e165b1f5c89b4a909c1f6ee5b9362b7d481494680adb34f749d051316580c8795922340212059c803a5a50151a074e9a6e9783618d2a0d3ba6890abd34a9dc686419dc943a67dd7313b64bbca3815d72fb0debf1cc885865052aea9f7b17de68b701c6375e6f1fa6f6e7f036a1f1e7872532907c33ae592cade5ddcdd0dcb3f62d835417a8e7f0043c769c8cab50234f530355e6b920aa29b5e008c3bbfceeb6b0ac3b8f8f3166591b891dab9a5567e88664b62581e541d1ed7eea75f260769da7da686630cf064e04eb89ec9d0b6e87d86ec698330a91df8535690bf15ac52daaac6de4567f4344ac068e33dbae8ed1ed4bac8982effcc7227442b981ec0b19402caeec074ca131f5ac2880accf9a444c6bf648e0354182639210050b274517d35caaa29df753076c182ad12cb03255afebffd013dea7346c1eb7aff1b41b31e97c6fcc8735ca935b6dbee2771d2ea61399b166ebbe244499e9f66fb0a359534d58898bdad1f9f2eef649b60cc04d0ad5f11a632c036904f93485226f516c49aab25334cbf85a67d25f7af3224ef4ac5cd1bb3579f575ce39769d7b46959c7889ce646c53bfa20e2b3ba1b4f8651a6dc3f993707c0a9003473454a628dff274e99ef2464d969ee49cdafbefbaeb838f69f7a888332f0e6e542a135aa148404544f71efe93359c7c80c850d4f73b4b81fc80072328a167224a49ca106fc03bb95a80d06723ac90a80d16bdf8dda37118a0d249b400b8a4ccc97ef8f8a6b23ef102ace0ee87fcccba3be064922b48f5d20ac8c855b694e15843dd70cec86187d1899f4cf8d089d15c9ccf976a7c844e9034a2bba56be0b0a22a8d01798107430f0cc48e7901364ec16407ceb0a5dc21a168e2c094670ec943c33f28ae37d439a72d0af32c69c983a35f4a49a02abdecdae12e13e05ed83401f0dd1daf9dfeb659c63865f59c56698985843241fda407978574bf30f4ab24a73815da1dcbd7ced26e8930f1e09bb086eb376bf698106618a77a1b25f4a6c24bca7aa8cccc6de2b112be0f517024334be4f0b6beaac59894489addd71e3d5f525c898c0cd0e6f1fb2d370f96548ffb83ac67f56465d7a8c11e11a6514c647d7d27f88caf58534118f209397a840707a9b7536a96031439165fc94513f819dc51f0a4eb55edf0759f7f78ac1fd5f9d98d5fd2104c7d5633751c3528cee8cd50f3d0de891856889d8ebde28fc2f20d12a54e530dad481b4b907b020d6faf42b8b153740ddad8ebf4f5fd12855d8bba15355bed11545f692ae8922ddb060b10fdefc216fa3a5445efd55751fa9b16286c8f6eafbf94cdcba5caf2789e51b3c09b03727cf3e3e556f755f00f009902ee9d129d82cce6dd19e2a4c489ec5cf449a0aabb705ada48055a11cbfaaee61e4f0d94aa456eca1bc01a3e82cef38847e5f26dc1826cfd54463e2162ac063097c04b8a8dfe3d8471eb54b5f4c1a88ba0e49342b8010d1d44584c92601058f3e7eb491a5823e7469adce3ab109b926da992755bd3caae0cdf44597e0e7ec7d84995965c1a4179e39038727120879bd5c03d1c23d729e2800db8108ef6ec9d4c7b78755e0a8ed666bbc7a03e6107978f7b97d9db24474bb460870d4d3c5cf0956c7bfdf492b8073823cdbdffbdc5683bf26c125912ccbcdab6e73bb488de25ac90dc6c9abf5a8176bfa2d6237812f7657bc6cb961c7028419c11dbb18e80f29f870282ff0a412d99bf06f75f38b0a367a8cb316152c53103bb16c00faeb8b5562577ed00f40510849834df3b3fdfdb0dbf5250fd71c7f40bc8d11ae176e8c490dfb06e78f1f3c369a25cdec39622ddfbdcbb6884a0681b095b40bec23e24b38827516b7e7a24f7a62eab70f30c7b364c99aa36149400efb3b47d8df6691fec0391dddd5a4c8a8958d277d9a218eb56e616a9e8f2e6a64d49ca8234a0a9301eef64bcc0c88acc8e4858b5792e9f9c3eeab0f8f69d56963d2fbafce093489a811b978240902f8edd4fc89a9d6d178170e9ae48cded997d0df429986d3d776ae43d34ccf9712c23193930e95c57eab0ad0e79e1d03d794873d7fe5c31940607d5e9728d6c19ea2a1d705de7a157b39cefa1e240b4d674171c0584b4fbf572bd0e2e21be018d4e631a906ce5ff533c8abfc0662367b016ee4065ca880a378d397af2362be2bfac315cc1d76e9b0c5a143a78517bb3e1f4e4d7a8c099b1ced296bce0e97ace06076c4ef8233de4824c2b81a7d1c8fc26efd5ff3fab88bc3ceebb62549ca63fe15902cb0a74cebb10c45ca833e8844a9fdcb987de9f10983b4f1e1ceda7623376f1232abf351e37296151bcbfd4f8ff79ca98ead2a0a448d93ff78f25d6fa134fc03edcd80b9da7f02fda082aae0cde135bdd9bbc932218abebde5aba7e44a4e72f12619d2c9b0a8dc4133fa57a51efd19a0ea326f14177524488fc2886ef3fdacb50af2e9f9f9a929b9d9750804b69906135df7ef76a35ddb3a4315b1cdf35468e7b503fd242b3b9badaf9019a3418145a0a3ed077a899873262364f9dd2bd270a9865ff07a1ab824a849ef6b801c2fe2fd572f8d3b21f2a8c4cb3c17ad37abe22217e97afb7f9e97f76fd65ac1bdb21cb3970090fe44c933a0181a71fbfc8f02bff5997748bc3fb1bcac821a7eda4b1a94d0e93dc8eb031f989ec88e457fc3c92a023293a7dd32e5e2d19f9a90fe6d3de0d2d86fff3e1764d14d9e3103f76799ec13f187d11985555754429d00d0ea750aff19155999311101bdd99088b672a9de5356d346cc5309742c5706366378b8d7c5c2b20603cb4bee202a4613b197a9d2857fcdc6b6f17ee8272ad217c8c9570097f6a2b7f33e32c1cb92ed3c0dc981f3f84a81895d84c5f238ddfa3eacdcec49b6f79d8407f2a239f172dcd94a5443773446fb9d4008338df70af316d0f366f7d6f635b3835b2891f6e1183251bac294d45d0e0740ad3c67cee95022fa9eed63f27034babac6ba78da41f24ada92a85e6c9ddef0f37891ef9c2e8ca876fdfdf6c64241f7ec2513495bcfe4c89ac51e2060fe502789b0a4533013d039838f1216a48e3c3ec4ca6c51b0d03737815ee402d0551c3e4762da1cfbcabab0c66654f9d01eaa0394d8610b7cae1d00fef67aa1bb9665f11aa586db94ec61e522a44e425c3d57dcda8144fb42f6cd296dc29afb83b9149588a9e057aa1d79c61b4e31388fbf7a02545af0f7ea849a834cc4cd34de28b07d37062be3447673bb1d43775bafc18ca3141c32bb9dd0c2448d1fce126399c15e2ce443d6345917ebd654053db9a35b03026440b3508f79e7048db861fac0e03f6cbd0502170ee5dedb67ce108cb3d3a1652bd77f8d80b7537753769267ff945fe646745a08e3f533cc20335c3b64185889769ec544960ba88ae7a77446b6cc6cb010cd5d38b75000f88dc2655ffe29821a22757f9f57c107d565b139f01f89bbdd6cb1cc380ba1e4f99e127b03715351077b12e2377dc6a74fd9265a935757664356850d9d972ce74c198b5b9af95f51042a3e25a41331d1a8fbde4074ffd5350fc074169add87cb96abb36dc3f3a852aced8b2df5eb21713db53a552a07808397a9a2554a87956b7dc1cfbc5de38259be4817d9bce4ff3a2dc721dab2730859061d906f02a41735cd35f783d5159fd51978c264007a7cc98380369aad776a0204715c77ee32a742b06b9e40689d88e36d9f8ed094f44af3985d5bc66b1e4d31262b1e105d87cf542063ad2d9a0573ac52988075cce5cd3f881f97779327015850ccf495d047acecabe1ef8e6a8c6a5fb7e8a2c43e50f9a1bbbb2296b25e057a3f569a4458ff8acba6c2d9a3aa24ca348287d59c0e2a468c87a1ec7f18e26246d9a96abf10b4164da53ddfecacd55f439b56afd0cd825fb7bc5a49fc59fb10d901a88d7e49744cb560cb0272dea13ea9ff7c1224f6d215092a8abe83c2d021ffc5770a76f8b0abf7e792af0a73d41b255bf8b52f0357889451e8637b42b3e49cff4523acc62eca21ee6c097e080a4fd2ea4b18d355dfdd84f858218b4cf9bb187f09c06c817a408817c4b8b64a2789be5cf579470c78c5e4077da07c79191abff98972c35718af58371fb8fb87e7c1514d68d6bbf11fcc5c73fe7600b75b63a080a66eb4dee4d193939d5d512afe2a03cca17055254a3eb16a6453da4f5abbd70ccceac9d3242fc50989dbbf5a960f6aa606c617d50042f21f1d6531a34e84a08b06e1ee8ff35e12accafe17e3213aebcd686ebf551c6ca1254ca216a369321f5468b3e8982d8348358ebfa9fa837d3b0b87181cd60a8c222b11f4f282586d0c06b1384a3098b71ea74cf5c1f51631397ad86941e4cf67ebd10ded3261db4a5e7be10642b6204ec4aded440e74a214e8b73d6ac7bff800732dbcbc7e7ded4f5f935e51a3b0ed9b7420abb5f57ef55c6805fa37c647b2fb7e4d4219e2cddaab11680f5ab3ce91d433a5d729fe6ffb62d90801633fb85642dd1f58ea6b7e8030c77eddc7e960084589826b825b2657208d19431a7f3f4bae6513ca27fac895002e8529196e97cc9cef1d08a4bc77d84e29768bad8fbe1e17c822554036cda7c73585c42723af94646355cc4aff4716eae7390b7cbec44d32e6223442913ee4898ba8c20e3ef6f209189314db1ca31dc8f9f8072cf23991cf4f03582571f7fffdbc81a5cb710c5", 0x1000}, {&(0x7f00000021c0)="4f4c5af275c9cef93ec4d467487154eb083bc1ea4576d0ae2d58789f60b0d0d29a0fa9a17c11ed5b52bc1d3d515d80", 0x2f}, {&(0x7f0000007d00)="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", 0x1000}, {&(0x7f0000008d00)="ee3cac2c2cba419eb7b52c41a9f1d5f87b2f285ebb3963a7d0742fef66fa634472cc6fb5c82161f3ffda63b33f2b5805657edc5ceee93056885bf429cc565ec6b11dbe7c5f0d11f2e4065a90c6f9d959350939973f53e284f73de63ef0a7c74714f50dd8854227bd4ac5e9327521230f203552f01140033a0f9ccb18506d2d60a3f6215adf83f8f32abf7802b246ef8a86824c39624fed45aec1e1dce7324ac38fb2ddcc615f2e9a413e4ea2c99d14ff3be3a68d85e819fc1184", 0xba}, {&(0x7f00000052c0)="33db97c22ae488305d817ed2b057ad1edf0e8c909d87e1a3dbce142b63bc2e78f7ae3530b0d362427b9f9dc9198916d1515dd5fc775789d99c3eb21c216796ab60ec780dffd7b4a54f8e6de17c8d", 0x4e}, {&(0x7f0000008dc0)="b95048", 0x3}, {&(0x7f0000008e00)="3be8d2e60611d679ecd6fbef77bd01d3cf1b975400a0496a3532343017bd87adcb66e8da8239fb9c87909ffcc1a94dd11cd8cc6717b4953dc9be028ac5a0f9c9385eac3eb2446e06c879108c03c0dff6262ddb1403c167d8b244870661ebe79be6205f7f692a7f3773500c77fa3d94d84a06bea8ace41262a2a15626977db7f64d3b3dcb354c8908ee0e0323c81611b152", 0x91}], 0x7) (async, rerun: 64) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) [ 440.899557][T12737] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:49 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x5000000}}) 04:01:49 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x2000008, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0xa, 0x8000000000000001, 0x0, 0xffff, 0x0, 0x1}, 0x1) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000100)) [ 441.018505][ T6] Bluetooth: hci7: command 0x1003 tx timeout [ 441.018589][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:01:49 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x6227}, 0x0, {0x0, r5}}, 0x2) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 441.197721][ T49] Bluetooth: hci7: sending frame failed (-49) [ 441.198412][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:01:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) r6 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r6, 0x8000000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:51 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x5000000}}) 04:01:51 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x2000008, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0xa, 0x8000000000000001, 0x0, 0xffff, 0x0, 0x1}, 0x1) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCL_SETVESABLANK(r5, 0x541c, &(0x7f0000000100)) 04:01:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x6227}, 0x0, {0x0, r5}}, 0x2) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 442.938134][ T6] Bluetooth: hci6: command 0x1003 tx timeout [ 442.938373][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:01:51 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x6227}, 0x0, {0x0, r5}}, 0x2) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x6227}, 0x0, {0x0, r5}}, 0x2) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 443.119605][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 443.120609][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:51 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5000000}}) [ 443.123512][T10190] Bluetooth: hci7: Frame reassembly failed (-84) 04:01:51 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:51 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5000000}}) 04:01:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 443.463260][T12739] Bluetooth: hci6: Frame reassembly failed (-84) [ 443.502540][ T3656] Bluetooth: hci8: sending frame failed (-49) [ 443.503630][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:01:51 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:51 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5000000}}) [ 443.925884][ T42] Bluetooth: hci8: Frame reassembly failed (-84) 04:01:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5000000}}) 04:01:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) r6 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r6, 0x8000000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 445.178250][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 445.179699][ T27] Bluetooth: hci7: command tx timeout 04:01:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5000000}}) 04:01:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) r6 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r6, 0x8000000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:53 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:53 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:53 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5000000}}) 04:01:53 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5000000}}) [ 445.498164][ T6] Bluetooth: hci6: command 0x1003 tx timeout [ 445.498333][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 445.724745][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 445.725812][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:54 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) r6 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r7 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r6, 0x8000000) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x5000000}}) 04:01:54 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) (async) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:01:54 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) (async, rerun: 32) syz_open_pts(r1, 0x0) (rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async, rerun: 32) fcntl$notify(r2, 0x402, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) (async) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async, rerun: 32) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) (async, rerun: 32) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 32) [ 445.978102][ T14] Bluetooth: hci8: command 0x1003 tx timeout [ 445.978257][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:01:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x5000000}}) [ 446.079099][ T42] Bluetooth: hci6: Frame reassembly failed (-84) [ 446.100078][ T3659] Bluetooth: hci8: sending frame failed (-49) 04:01:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 446.101083][ T3656] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:01:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x5000000}}) [ 446.205757][T13571] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 446.208865][T12739] Bluetooth: hci9: Frame reassembly failed (-84) 04:01:54 executing program 5: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r1, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r2, 0x402, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) (async) openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:01:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) io_uring_enter(r7, 0x4dfe, 0x1a48, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$KDADDIO(r6, 0x400455c8, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x4, 0x1, 0x1ff, 0xef, 0x19, "93cd2ffe1a2255a14858ab6d2ff908ae6ed801"}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x9db, 0x7, 0x7, 0x3f, 0xa, "517e19dae718b5322b6a4ef576079587195ca0"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x5000000}}) [ 448.138929][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 448.138958][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 448.140893][ T3689] Bluetooth: hci7: command tx timeout [ 448.140992][ T3689] Bluetooth: hci6: command tx timeout 04:01:56 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x0, 0x5000000}}) 04:01:56 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:56 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x27c02, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_io_uring_setup(0x3c74, &(0x7f0000000100)={0x0, 0x62ac, 0x8, 0x0, 0xbb, 0x0, r0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) io_uring_enter(r3, 0x7791, 0xfb0a, 0x1, &(0x7f0000000280)={[0xfff]}, 0x8) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x20) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) syz_io_uring_submit(r4, r1, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x1, {0x0, r9}}, 0x610a) syz_open_pts(r2, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:56 executing program 0: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 448.218583][ T3656] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 448.219866][ T6] Bluetooth: hci9: command tx timeout 04:01:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x0, 0x5000000}}) 04:01:56 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) dup3(r2, r0, 0x80000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f00000001c0)='0', 0x1) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r10, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r11}}, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r7, 0x6, &(0x7f0000001480)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x6, 0x0, {0x0, r11}}, 0x10000) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x6) [ 448.373975][ T48] Bluetooth: hci6: Frame reassembly failed (-84) 04:01:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x5000000}}) 04:01:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x5000000}}) 04:01:56 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:56 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x5000000}}) 04:01:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:58 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:01:58 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x27c02, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) r3 = syz_io_uring_setup(0x3c74, &(0x7f0000000100)={0x0, 0x62ac, 0x8, 0x0, 0xbb, 0x0, r0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) io_uring_enter(r3, 0x7791, 0xfb0a, 0x1, &(0x7f0000000280)={[0xfff]}, 0x8) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x20) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) (async) syz_io_uring_submit(r4, r1, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x1, {0x0, r9}}, 0x610a) (async, rerun: 64) syz_open_pts(r2, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 64) 04:01:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x5000000}}) 04:01:58 executing program 0: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) dup3(r2, r0, 0x80000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r7, 0x402, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f00000001c0)='0', 0x1) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r10, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r11}}, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r7, 0x6, &(0x7f0000001480)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x6, 0x0, {0x0, r11}}, 0x10000) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) dup3(r2, r0, 0x80000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r5, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r7, 0x402, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r8) (async) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r10, &(0x7f00000001c0)='0', 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r10, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r11}}, 0x3) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r7, 0x6, &(0x7f0000001480)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x6, 0x0, {0x0, r11}}, 0x10000) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$KDADDIO(r6, 0x4b34, 0x6) (async) [ 450.378167][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 450.378249][ T27] Bluetooth: hci6: command 0x1003 tx timeout 04:01:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x5000000}}) 04:01:58 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r5, 0x0) syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:58 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x27c02, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async, rerun: 64) r3 = syz_io_uring_setup(0x3c74, &(0x7f0000000100)={0x0, 0x62ac, 0x8, 0x0, 0xbb, 0x0, r0}, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) (rerun: 64) io_uring_enter(r3, 0x7791, 0xfb0a, 0x1, &(0x7f0000000280)={[0xfff]}, 0x8) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x20) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f00000001c0)='0', 0x1) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r8, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r9}}, 0x3) (async) syz_io_uring_submit(r4, r1, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, r5, 0x2, 0x0, 0x1, {0x0, r9}}, 0x610a) (async) syz_open_pts(r2, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:01:58 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x5000000}}) [ 450.611299][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 450.612280][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:58 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) dup3(r2, r0, 0x80000) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r7, 0x402, 0x0) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f00000001c0)='0', 0x1) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r10, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r11}}, 0x3) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r7, 0x6, &(0x7f0000001480)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x6, 0x6, 0x0, {0x0, r11}}, 0x10000) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x6) 04:01:59 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x5000000}}) 04:01:59 executing program 2: r0 = syz_io_uring_setup(0x792, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1800001, 0x80010, r3, 0x10000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:59 executing program 5: r0 = syz_io_uring_setup(0x78c, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, 0x2d3}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:59 executing program 0: syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r5, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1, r6}}, 0x3) r7 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_io_uring_setup(0x32bc, &(0x7f0000000100)={0x0, 0x0, 0x10, 0xfffffffe, 0x0, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r9, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x3, 0x0, 0x2, 0x1, 0x1}, 0x3ff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) syz_open_pts(r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x5000000}}) 04:01:59 executing program 5: r0 = syz_io_uring_setup(0x78c, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, 0x2d3}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:01:59 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x0, 0x5000000}}) [ 451.594565][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 451.595640][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:01:59 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x400, 0x1b}) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') read$watch_queue(r6, &(0x7f0000000040)=""/198, 0xc6) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000140)={0x9, 0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x5, 0x2, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 04:01:59 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x5000000}}) 04:02:00 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r2, 0x0) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:00 executing program 5: r0 = syz_io_uring_setup(0x78c, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, 0x2d3}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x5000000}}) 04:02:00 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x5000000}}) 04:02:00 executing program 5: r0 = syz_io_uring_setup(0x2791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="da2f003112"]) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 452.551922][ T11] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 452.705966][ T11] Bluetooth: hci7: Frame reassembly failed (-84) 04:02:00 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x400, 0x1b}) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') read$watch_queue(r6, &(0x7f0000000040)=""/198, 0xc6) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000140)={0x9, 0x3, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x5, 0x2, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5000000}}) 04:02:00 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:02 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r2, 0x0) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5000000}}) 04:02:02 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x400, 0x1b}) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') read$watch_queue(r6, &(0x7f0000000040)=""/198, 0xc6) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000140)={0x9, 0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x5, 0x2, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x53}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x400, 0x1b}) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x15) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') (async) read$watch_queue(r6, &(0x7f0000000040)=""/198, 0xc6) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000140)={0x9, 0x3, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x5, 0x2, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 04:02:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 454.618467][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 454.628333][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r3, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r3, 0x0) r4 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r4, 0x8000000) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:02 executing program 5: r0 = syz_io_uring_setup(0x2791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="da2f003112"]) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x2791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4) (async) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="da2f003112"]) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r7, 0x400455c8, 0x4) (async) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000100)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:02:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5000000}}) [ 454.771428][ T49] Bluetooth: hci6: sending frame failed (-49) [ 454.772414][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r2, 0x0) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 454.778538][ T3686] Bluetooth: hci7: command 0x1003 tx timeout [ 454.790439][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:02:02 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5000000}}) 04:02:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5000000}}) [ 455.112379][ T3656] Bluetooth: hci6: sending frame failed (-49) [ 455.113274][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5000000}}) 04:02:03 executing program 5: r0 = syz_io_uring_setup(0x2791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4) (async) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="da2f003112"]) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) (async) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000100)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = syz_mount_image$befs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0xa, &(0x7f0000000880)=[{&(0x7f0000000180)="8f191b2e05814f0b611363b9606d3a67d8b0f93ae6ad09a1b47a9576c61c7b61dfda0a3e68f419b2eb9e8bce961d14aaf9399bf3e9def5bb65896f2e961dc35a2706f83b2151088dde3e04b4d027b82a14", 0x51, 0x2}, {&(0x7f0000000240)="b3a70f1b8f1933ceb2f909f4a5e99caedae964e7ae21324ed3ab496421ee11e9ae25ed956c41f417f1f926f9dde55a9b6eb07d9c73479d7056e7994eb7aa22c44650", 0x42, 0x2}, {&(0x7f00000003c0)="4018751f44a11f9dab972e9967efe48218d060c85d328c607d84ae169dbddc0df3bf7286c714fbd354f879921c74f3cd96fbf5a1858ccb0dfc3f3c3992038ef55fb4918560528065486219644e5b3a19e555837a9dc72512977560cf3386fd3dfa8ddb68a739fcbc6c47d7d25d42deb9117f5ad907393be24df51983023e8651e94479b3fbc78cd3fae7e1650ff01690a600027e4e7af09a0f9e9e65a8083e1a7e27e58a", 0xa4, 0x69b}, {&(0x7f0000000480)="ea5d98802684fb62f64e959247fd91dd1b67cb381942baaf2eb230ec7c86565b50bfe89dd9f898eee09a3bce410abdaf66fada0f798ce5d47ebbbbd7137d9d5884ed63efb576aaac59c7866ea4c633b577f812f8a51461fedf529c821e74468cb01cd46030b83f86091fc6e0ac6b3f0096c0cc61594a446a41584403ac6cd3a64ea8e677b96ba4ad9d2e071f237c21df88905ecd75e9b98e1f06413bf5be458a8c1f85340349b4879bc40a51f5b5b1682ecdc22c3c7954d8e4c49408140ad9ea63ba6782cdd5c80a089ea08616db49b83a1f3245c2bc714580b497e5402cfacdb9e1a00391949ce508b98f2e32", 0xed, 0x10001}, {&(0x7f0000000580)="dd583bbc59ce8d46093bc25c24e0e3f6186118b57a766afc04bfdf4f3becb19c548a7cb101b0a9f5015efe1783407c32532868b9cf66ab82f24c72d7b29fc3a718618d079286d95a0fa1dbc410f413aa6c75c3ca392044474114bb1cdf156ae8f197fbb4e7a5c57259975b6da20dc3571263434093faac9dae8e795b6215dd55d5a2db34e4092bc85a8c714f696c15c57b395554ef7d329918aec8be3fa10c719650fe490bdf84bc96c3be4fde77f81b2d94db526557aabf2c4db82fcd37fb5348ebd425475c38ea5da496ea479e23f599", 0xd1, 0x2}, {&(0x7f00000002c0)="1fb1c7b6f75679da0895eac4de5d96191832503c86d01a27e747483d527cf4d41fd32f88c219953288f2e61c4a501ba89281ff51a6a92d6e566ea57e4e54cf2e5c798f", 0x43, 0xeb8}, {&(0x7f0000000680)="d522c14d3c5a469e9961ba478ba38ec65ffff6c92cf83fe54f00c7b92f2d1bb43cb4b6481091e363037db3a241f69251271731253e0217dff64337d99e6d856d605b76acb4632ffe18b45f3befe3538d4a4979ecc30436b2c339db2705", 0x5d, 0x6}, {&(0x7f0000000700)="7633f30adf3943ffefd6edc4827670b24a36860af26c2978e5a2aa50b7110fc791b0377132b5212f56821c42aac5cf7a834bef4b3bb762d71d0c7d2b732eefe7751f05b8fdd5032d68b492cef4f4ec2808a3295e3b57b6a8f86e3904ed397e66f5aff358165eddcd3245ad4387f2e57cb9953911d8cde49e9011a0d5684394", 0x7f, 0x4111}, {&(0x7f0000000780)="7b3d7981e055a1105d44e92d1e68d569e7ab478a42e25de3393663f2f368d97f9114a85bfb75a8d729861381bdcba67d03fde80e7af7e536f626c6f9c6f004594dcb13236dcbe2e9eb271ea73bed5a847f9a314fabf5a5772e7ac57404d6272df2ff863ae7d7c673b074437f3a0566fc90795f048ffaf36fed22024d3503b60d7a2e7a7b615c1d01698065e191d806a707377acc15fc4a0d59", 0x99, 0x2}, {&(0x7f0000000840)="2352176e1af131540ed2c4f38d12cb8c17481a17f7916a95eddce24bb9ddc4262e306fc16c07289b8524ad7e135feae1823e566e03d9fd17f063309bad", 0x3d, 0x9}], 0x903408, &(0x7f0000000980)={[{'\x00'}, {'{'}, {'#'}, {'\x00'}], [{@pcr={'pcr', 0x3d, 0xd}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$[(!$/@\',$,$'}}, {@obj_user={'obj_user', 0x3d, '.(@(%'}}]}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000a00), &(0x7f0000000a40), 0x2, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:03 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 455.681736][ T9893] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:03 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r2, 0x0) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x5000000}}) 04:02:03 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x5000000}}) [ 455.805950][ T9891] Bluetooth: hci7: Frame reassembly failed (-84) [ 455.819310][T13815] loop4: detected capacity change from 0 to 264192 04:02:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async, rerun: 64) r5 = syz_open_pts(r4, 0x0) (rerun: 64) r6 = syz_mount_image$befs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0xa, &(0x7f0000000880)=[{&(0x7f0000000180)="8f191b2e05814f0b611363b9606d3a67d8b0f93ae6ad09a1b47a9576c61c7b61dfda0a3e68f419b2eb9e8bce961d14aaf9399bf3e9def5bb65896f2e961dc35a2706f83b2151088dde3e04b4d027b82a14", 0x51, 0x2}, {&(0x7f0000000240)="b3a70f1b8f1933ceb2f909f4a5e99caedae964e7ae21324ed3ab496421ee11e9ae25ed956c41f417f1f926f9dde55a9b6eb07d9c73479d7056e7994eb7aa22c44650", 0x42, 0x2}, {&(0x7f00000003c0)="4018751f44a11f9dab972e9967efe48218d060c85d328c607d84ae169dbddc0df3bf7286c714fbd354f879921c74f3cd96fbf5a1858ccb0dfc3f3c3992038ef55fb4918560528065486219644e5b3a19e555837a9dc72512977560cf3386fd3dfa8ddb68a739fcbc6c47d7d25d42deb9117f5ad907393be24df51983023e8651e94479b3fbc78cd3fae7e1650ff01690a600027e4e7af09a0f9e9e65a8083e1a7e27e58a", 0xa4, 0x69b}, {&(0x7f0000000480)="ea5d98802684fb62f64e959247fd91dd1b67cb381942baaf2eb230ec7c86565b50bfe89dd9f898eee09a3bce410abdaf66fada0f798ce5d47ebbbbd7137d9d5884ed63efb576aaac59c7866ea4c633b577f812f8a51461fedf529c821e74468cb01cd46030b83f86091fc6e0ac6b3f0096c0cc61594a446a41584403ac6cd3a64ea8e677b96ba4ad9d2e071f237c21df88905ecd75e9b98e1f06413bf5be458a8c1f85340349b4879bc40a51f5b5b1682ecdc22c3c7954d8e4c49408140ad9ea63ba6782cdd5c80a089ea08616db49b83a1f3245c2bc714580b497e5402cfacdb9e1a00391949ce508b98f2e32", 0xed, 0x10001}, {&(0x7f0000000580)="dd583bbc59ce8d46093bc25c24e0e3f6186118b57a766afc04bfdf4f3becb19c548a7cb101b0a9f5015efe1783407c32532868b9cf66ab82f24c72d7b29fc3a718618d079286d95a0fa1dbc410f413aa6c75c3ca392044474114bb1cdf156ae8f197fbb4e7a5c57259975b6da20dc3571263434093faac9dae8e795b6215dd55d5a2db34e4092bc85a8c714f696c15c57b395554ef7d329918aec8be3fa10c719650fe490bdf84bc96c3be4fde77f81b2d94db526557aabf2c4db82fcd37fb5348ebd425475c38ea5da496ea479e23f599", 0xd1, 0x2}, {&(0x7f00000002c0)="1fb1c7b6f75679da0895eac4de5d96191832503c86d01a27e747483d527cf4d41fd32f88c219953288f2e61c4a501ba89281ff51a6a92d6e566ea57e4e54cf2e5c798f", 0x43, 0xeb8}, {&(0x7f0000000680)="d522c14d3c5a469e9961ba478ba38ec65ffff6c92cf83fe54f00c7b92f2d1bb43cb4b6481091e363037db3a241f69251271731253e0217dff64337d99e6d856d605b76acb4632ffe18b45f3befe3538d4a4979ecc30436b2c339db2705", 0x5d, 0x6}, {&(0x7f0000000700)="7633f30adf3943ffefd6edc4827670b24a36860af26c2978e5a2aa50b7110fc791b0377132b5212f56821c42aac5cf7a834bef4b3bb762d71d0c7d2b732eefe7751f05b8fdd5032d68b492cef4f4ec2808a3295e3b57b6a8f86e3904ed397e66f5aff358165eddcd3245ad4387f2e57cb9953911d8cde49e9011a0d5684394", 0x7f, 0x4111}, {&(0x7f0000000780)="7b3d7981e055a1105d44e92d1e68d569e7ab478a42e25de3393663f2f368d97f9114a85bfb75a8d729861381bdcba67d03fde80e7af7e536f626c6f9c6f004594dcb13236dcbe2e9eb271ea73bed5a847f9a314fabf5a5772e7ac57404d6272df2ff863ae7d7c673b074437f3a0566fc90795f048ffaf36fed22024d3503b60d7a2e7a7b615c1d01698065e191d806a707377acc15fc4a0d59", 0x99, 0x2}, {&(0x7f0000000840)="2352176e1af131540ed2c4f38d12cb8c17481a17f7916a95eddce24bb9ddc4262e306fc16c07289b8524ad7e135feae1823e566e03d9fd17f063309bad", 0x3d, 0x9}], 0x903408, &(0x7f0000000980)={[{'\x00'}, {'{'}, {'#'}, {'\x00'}], [{@pcr={'pcr', 0x3d, 0xd}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$[(!$/@\',$,$'}}, {@obj_user={'obj_user', 0x3d, '.(@(%'}}]}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000a00), &(0x7f0000000a40), 0x2, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 455.904163][ T3659] Bluetooth: hci8: sending frame failed (-49) [ 455.905103][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:02:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x5000000}}) 04:02:04 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x5000000}}) [ 456.240835][T13829] loop4: detected capacity change from 0 to 264192 04:02:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:04 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) r6 = syz_mount_image$befs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffc, 0xa, &(0x7f0000000880)=[{&(0x7f0000000180)="8f191b2e05814f0b611363b9606d3a67d8b0f93ae6ad09a1b47a9576c61c7b61dfda0a3e68f419b2eb9e8bce961d14aaf9399bf3e9def5bb65896f2e961dc35a2706f83b2151088dde3e04b4d027b82a14", 0x51, 0x2}, {&(0x7f0000000240)="b3a70f1b8f1933ceb2f909f4a5e99caedae964e7ae21324ed3ab496421ee11e9ae25ed956c41f417f1f926f9dde55a9b6eb07d9c73479d7056e7994eb7aa22c44650", 0x42, 0x2}, {&(0x7f00000003c0)="4018751f44a11f9dab972e9967efe48218d060c85d328c607d84ae169dbddc0df3bf7286c714fbd354f879921c74f3cd96fbf5a1858ccb0dfc3f3c3992038ef55fb4918560528065486219644e5b3a19e555837a9dc72512977560cf3386fd3dfa8ddb68a739fcbc6c47d7d25d42deb9117f5ad907393be24df51983023e8651e94479b3fbc78cd3fae7e1650ff01690a600027e4e7af09a0f9e9e65a8083e1a7e27e58a", 0xa4, 0x69b}, {&(0x7f0000000480)="ea5d98802684fb62f64e959247fd91dd1b67cb381942baaf2eb230ec7c86565b50bfe89dd9f898eee09a3bce410abdaf66fada0f798ce5d47ebbbbd7137d9d5884ed63efb576aaac59c7866ea4c633b577f812f8a51461fedf529c821e74468cb01cd46030b83f86091fc6e0ac6b3f0096c0cc61594a446a41584403ac6cd3a64ea8e677b96ba4ad9d2e071f237c21df88905ecd75e9b98e1f06413bf5be458a8c1f85340349b4879bc40a51f5b5b1682ecdc22c3c7954d8e4c49408140ad9ea63ba6782cdd5c80a089ea08616db49b83a1f3245c2bc714580b497e5402cfacdb9e1a00391949ce508b98f2e32", 0xed, 0x10001}, {&(0x7f0000000580)="dd583bbc59ce8d46093bc25c24e0e3f6186118b57a766afc04bfdf4f3becb19c548a7cb101b0a9f5015efe1783407c32532868b9cf66ab82f24c72d7b29fc3a718618d079286d95a0fa1dbc410f413aa6c75c3ca392044474114bb1cdf156ae8f197fbb4e7a5c57259975b6da20dc3571263434093faac9dae8e795b6215dd55d5a2db34e4092bc85a8c714f696c15c57b395554ef7d329918aec8be3fa10c719650fe490bdf84bc96c3be4fde77f81b2d94db526557aabf2c4db82fcd37fb5348ebd425475c38ea5da496ea479e23f599", 0xd1, 0x2}, {&(0x7f00000002c0)="1fb1c7b6f75679da0895eac4de5d96191832503c86d01a27e747483d527cf4d41fd32f88c219953288f2e61c4a501ba89281ff51a6a92d6e566ea57e4e54cf2e5c798f", 0x43, 0xeb8}, {&(0x7f0000000680)="d522c14d3c5a469e9961ba478ba38ec65ffff6c92cf83fe54f00c7b92f2d1bb43cb4b6481091e363037db3a241f69251271731253e0217dff64337d99e6d856d605b76acb4632ffe18b45f3befe3538d4a4979ecc30436b2c339db2705", 0x5d, 0x6}, {&(0x7f0000000700)="7633f30adf3943ffefd6edc4827670b24a36860af26c2978e5a2aa50b7110fc791b0377132b5212f56821c42aac5cf7a834bef4b3bb762d71d0c7d2b732eefe7751f05b8fdd5032d68b492cef4f4ec2808a3295e3b57b6a8f86e3904ed397e66f5aff358165eddcd3245ad4387f2e57cb9953911d8cde49e9011a0d5684394", 0x7f, 0x4111}, {&(0x7f0000000780)="7b3d7981e055a1105d44e92d1e68d569e7ab478a42e25de3393663f2f368d97f9114a85bfb75a8d729861381bdcba67d03fde80e7af7e536f626c6f9c6f004594dcb13236dcbe2e9eb271ea73bed5a847f9a314fabf5a5772e7ac57404d6272df2ff863ae7d7c673b074437f3a0566fc90795f048ffaf36fed22024d3503b60d7a2e7a7b615c1d01698065e191d806a707377acc15fc4a0d59", 0x99, 0x2}, {&(0x7f0000000840)="2352176e1af131540ed2c4f38d12cb8c17481a17f7916a95eddce24bb9ddc4262e306fc16c07289b8524ad7e135feae1823e566e03d9fd17f063309bad", 0x3d, 0x9}], 0x903408, &(0x7f0000000980)={[{'\x00'}, {'{'}, {'#'}, {'\x00'}], [{@pcr={'pcr', 0x3d, 0xd}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$[(!$/@\',$,$'}}, {@obj_user={'obj_user', 0x3d, '.(@(%'}}]}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000a00), &(0x7f0000000a40), 0x2, 0x3) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 456.475394][T13838] loop4: detected capacity change from 0 to 264192 04:02:05 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r4, &(0x7f0000000100)=@random={'system.', ']\x00'}, &(0x7f0000000140)=""/144, 0x90) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:05 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb94, 0x5000000}}) [ 457.738153][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 457.748588][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:05 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:05 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:05 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a20927f386eb720dbc55a5"}) 04:02:05 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r2, 0x0) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:05 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) fgetxattr(r4, &(0x7f0000000100)=@random={'system.', ']\x00'}, &(0x7f0000000140)=""/144, 0x90) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:05 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b, 0x5000000}}) [ 457.818263][ T3656] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 457.819723][ T3685] Bluetooth: hci7: command tx timeout 04:02:05 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x5000000}}) 04:02:05 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a20927f386eb720dbc55a5"}) 04:02:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 457.953516][T13853] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 457.991524][T11503] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x5000000}}) 04:02:06 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a20927f386eb720dbc55a5"}) 04:02:06 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r4, &(0x7f0000000100)=@random={'system.', ']\x00'}, &(0x7f0000000140)=""/144, 0x90) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) fgetxattr(r4, &(0x7f0000000100)=@random={'system.', ']\x00'}, &(0x7f0000000140)=""/144, 0x90) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) [ 458.281212][T13879] ptm ptm4: ldisc open failed (-12), clearing slot 4 04:02:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:06 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x5000000}}) 04:02:06 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 458.863475][ T42] Bluetooth: hci7: Frame reassembly failed (-84) 04:02:08 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:08 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xffa7, 0x2, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x13, r0, 0x10000000) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r9, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1}}, 0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r10, 0x0) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000180)="49c9b57f37", 0x5, 0x62, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2f1, r9, &(0x7f00000003c0)="494fa950481184c174f9588c97a0217ea247b47fb047773f7b22ef828c228fd3e0bee1e0f3d5874d828e7f0fee86ed341366ff558277f7f729977ab7e83d9fb47e7e170bf365179255d173185a0c3e0f14df72aef64379193709d3f48967069c3da8ffac0c5c9831a3f0cfe6691ffa9eee2aa93b2d55c55458ffccc3cc99bccbe5c22c5c2c5735ad7f1bd2aaf5d1c58709f31cf46cfe20585c14603c7e2d218f53c0ae2c24c933c352bc4ddb1644f3eae47e46765f3174c0763fce07301db9fc03368691f44152ae0ec1b260b3802ac509990c1dc833e32b", 0xd8, 0x7fffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffe, 0xffffffffffffffff, &(0x7f0000000640)="b90e4660838eace4fecb55e5f147809a7ac58d08125209fd8eb062e64bc4e65c590400de10db860c51b4401b277b45cb18b72219578055249a1ef69349723996230bbcf7f86fefb223c4460dc8bcf68f01df47ce147978a665d0", 0x5a, 0x9, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="e8fa0886e9a1bfec9fe7d2e631fdac2d11831cc19e3c0e0448ec353a334ed4a16130a0202c01092e7e99287497b9954797eb6de3c8c1e38d77ba6de76154ec7c1771df649d9496e4c3771d8133789f6518adaf53e8fe3e7fca426139c57799c504cbb0ce6e0701ba515ca1a22e1b246636a79e003181692fd91c7fde13c876473e4975785d3cb80bc564158781a9b1fcd66f8d7895f2322273d19f3cb0bcfdfb8fd0be763e8e042862a638797b7fc2bf7c", 0xb1, 0x2, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000700)="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", 0x1000, 0x8000000000000000, 0x0, 0x1, r10}]) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}}, 0x2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:08 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x5000000}}) 04:02:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 460.058225][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:08 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x5000000}}) 04:02:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:08 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) (async, rerun: 64) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 04:02:08 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xffa7, 0x2, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x13, r0, 0x10000000) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r9, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1}}, 0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r10, 0x0) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000180)="49c9b57f37", 0x5, 0x62, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2f1, r9, &(0x7f00000003c0)="494fa950481184c174f9588c97a0217ea247b47fb047773f7b22ef828c228fd3e0bee1e0f3d5874d828e7f0fee86ed341366ff558277f7f729977ab7e83d9fb47e7e170bf365179255d173185a0c3e0f14df72aef64379193709d3f48967069c3da8ffac0c5c9831a3f0cfe6691ffa9eee2aa93b2d55c55458ffccc3cc99bccbe5c22c5c2c5735ad7f1bd2aaf5d1c58709f31cf46cfe20585c14603c7e2d218f53c0ae2c24c933c352bc4ddb1644f3eae47e46765f3174c0763fce07301db9fc03368691f44152ae0ec1b260b3802ac509990c1dc833e32b", 0xd8, 0x7fffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffe, 0xffffffffffffffff, &(0x7f0000000640)="b90e4660838eace4fecb55e5f147809a7ac58d08125209fd8eb062e64bc4e65c590400de10db860c51b4401b277b45cb18b72219578055249a1ef69349723996230bbcf7f86fefb223c4460dc8bcf68f01df47ce147978a665d0", 0x5a, 0x9, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="e8fa0886e9a1bfec9fe7d2e631fdac2d11831cc19e3c0e0448ec353a334ed4a16130a0202c01092e7e99287497b9954797eb6de3c8c1e38d77ba6de76154ec7c1771df649d9496e4c3771d8133789f6518adaf53e8fe3e7fca426139c57799c504cbb0ce6e0701ba515ca1a22e1b246636a79e003181692fd91c7fde13c876473e4975785d3cb80bc564158781a9b1fcd66f8d7895f2322273d19f3cb0bcfdfb8fd0be763e8e042862a638797b7fc2bf7c", 0xb1, 0x2, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000700)="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", 0x1000, 0x8000000000000000, 0x0, 0x1, r10}]) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}}, 0x2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xffa7, 0x2, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x13, r0, 0x10000000) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r7) (async) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r9, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1}}, 0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r10, 0x0) (async) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000180)="49c9b57f37", 0x5, 0x62, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2f1, r9, &(0x7f00000003c0)="494fa950481184c174f9588c97a0217ea247b47fb047773f7b22ef828c228fd3e0bee1e0f3d5874d828e7f0fee86ed341366ff558277f7f729977ab7e83d9fb47e7e170bf365179255d173185a0c3e0f14df72aef64379193709d3f48967069c3da8ffac0c5c9831a3f0cfe6691ffa9eee2aa93b2d55c55458ffccc3cc99bccbe5c22c5c2c5735ad7f1bd2aaf5d1c58709f31cf46cfe20585c14603c7e2d218f53c0ae2c24c933c352bc4ddb1644f3eae47e46765f3174c0763fce07301db9fc03368691f44152ae0ec1b260b3802ac509990c1dc833e32b", 0xd8, 0x7fffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffe, 0xffffffffffffffff, &(0x7f0000000640)="b90e4660838eace4fecb55e5f147809a7ac58d08125209fd8eb062e64bc4e65c590400de10db860c51b4401b277b45cb18b72219578055249a1ef69349723996230bbcf7f86fefb223c4460dc8bcf68f01df47ce147978a665d0", 0x5a, 0x9, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="e8fa0886e9a1bfec9fe7d2e631fdac2d11831cc19e3c0e0448ec353a334ed4a16130a0202c01092e7e99287497b9954797eb6de3c8c1e38d77ba6de76154ec7c1771df649d9496e4c3771d8133789f6518adaf53e8fe3e7fca426139c57799c504cbb0ce6e0701ba515ca1a22e1b246636a79e003181692fd91c7fde13c876473e4975785d3cb80bc564158781a9b1fcd66f8d7895f2322273d19f3cb0bcfdfb8fd0be763e8e042862a638797b7fc2bf7c", 0xb1, 0x2, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000700)="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", 0x1000, 0x8000000000000000, 0x0, 0x1, r10}]) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}}, 0x2) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) [ 460.315123][T11503] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:09 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:09 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x5000000}}) 04:02:09 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xffa7, 0x2, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x13, r0, 0x10000000) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r9, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1}}, 0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r10, 0x0) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000180)="49c9b57f37", 0x5, 0x62, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2f1, r9, &(0x7f00000003c0)="494fa950481184c174f9588c97a0217ea247b47fb047773f7b22ef828c228fd3e0bee1e0f3d5874d828e7f0fee86ed341366ff558277f7f729977ab7e83d9fb47e7e170bf365179255d173185a0c3e0f14df72aef64379193709d3f48967069c3da8ffac0c5c9831a3f0cfe6691ffa9eee2aa93b2d55c55458ffccc3cc99bccbe5c22c5c2c5735ad7f1bd2aaf5d1c58709f31cf46cfe20585c14603c7e2d218f53c0ae2c24c933c352bc4ddb1644f3eae47e46765f3174c0763fce07301db9fc03368691f44152ae0ec1b260b3802ac509990c1dc833e32b", 0xd8, 0x7fffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffe, 0xffffffffffffffff, &(0x7f0000000640)="b90e4660838eace4fecb55e5f147809a7ac58d08125209fd8eb062e64bc4e65c590400de10db860c51b4401b277b45cb18b72219578055249a1ef69349723996230bbcf7f86fefb223c4460dc8bcf68f01df47ce147978a665d0", 0x5a, 0x9, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="e8fa0886e9a1bfec9fe7d2e631fdac2d11831cc19e3c0e0448ec353a334ed4a16130a0202c01092e7e99287497b9954797eb6de3c8c1e38d77ba6de76154ec7c1771df649d9496e4c3771d8133789f6518adaf53e8fe3e7fca426139c57799c504cbb0ce6e0701ba515ca1a22e1b246636a79e003181692fd91c7fde13c876473e4975785d3cb80bc564158781a9b1fcd66f8d7895f2322273d19f3cb0bcfdfb8fd0be763e8e042862a638797b7fc2bf7c", 0xb1, 0x2, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000700)="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", 0x1000, 0x8000000000000000, 0x0, 0x1, r10}]) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}}, 0x2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 460.938074][ T3686] Bluetooth: hci7: command 0x1003 tx timeout [ 460.954745][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 461.062916][ T49] Bluetooth: hci7: sending frame failed (-49) [ 461.063991][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:02:10 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:10 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xffa7, 0x2, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x8000000) (async) r6 = mmap$IORING_OFF_SQES(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x4, 0x13, r0, 0x10000000) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f00000001c0)='0', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd=r9, 0x6, 0x0, 0x6, 0x0, 0x0, {0x1}}, 0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r10, 0x0) (async, rerun: 64) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000000180)="49c9b57f37", 0x5, 0x62, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x2f1, r9, &(0x7f00000003c0)="494fa950481184c174f9588c97a0217ea247b47fb047773f7b22ef828c228fd3e0bee1e0f3d5874d828e7f0fee86ed341366ff558277f7f729977ab7e83d9fb47e7e170bf365179255d173185a0c3e0f14df72aef64379193709d3f48967069c3da8ffac0c5c9831a3f0cfe6691ffa9eee2aa93b2d55c55458ffccc3cc99bccbe5c22c5c2c5735ad7f1bd2aaf5d1c58709f31cf46cfe20585c14603c7e2d218f53c0ae2c24c933c352bc4ddb1644f3eae47e46765f3174c0763fce07301db9fc03368691f44152ae0ec1b260b3802ac509990c1dc833e32b", 0xd8, 0x7fffffffffffffff}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xffe, 0xffffffffffffffff, &(0x7f0000000640)="b90e4660838eace4fecb55e5f147809a7ac58d08125209fd8eb062e64bc4e65c590400de10db860c51b4401b277b45cb18b72219578055249a1ef69349723996230bbcf7f86fefb223c4460dc8bcf68f01df47ce147978a665d0", 0x5a, 0x9, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="e8fa0886e9a1bfec9fe7d2e631fdac2d11831cc19e3c0e0448ec353a334ed4a16130a0202c01092e7e99287497b9954797eb6de3c8c1e38d77ba6de76154ec7c1771df649d9496e4c3771d8133789f6518adaf53e8fe3e7fca426139c57799c504cbb0ce6e0701ba515ca1a22e1b246636a79e003181692fd91c7fde13c876473e4975785d3cb80bc564158781a9b1fcd66f8d7895f2322273d19f3cb0bcfdfb8fd0be763e8e042862a638797b7fc2bf7c", 0xb1, 0x2, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r3, &(0x7f0000000700)="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", 0x1000, 0x8000000000000000, 0x0, 0x1, r10}]) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x80000000}}, 0x2) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000080)=0x1, 0x0, 0x4) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async, rerun: 32) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x5000000}}) 04:02:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:10 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 462.378121][ T3686] Bluetooth: hci6: command 0x1003 tx timeout [ 462.378301][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x5000000}}) 04:02:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:10 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:10 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x940b0000, 0x5000000}}) [ 462.566049][ T42] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) [ 462.655105][ T9888] Bluetooth: hci7: Frame reassembly failed (-84) 04:02:10 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 462.707227][T12739] Bluetooth: hci8: Frame reassembly failed (-84) 04:02:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:12 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x5000000}}) 04:02:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) (async) 04:02:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:12 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x5000000}}) [ 464.618280][ T3656] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x100010, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 464.698349][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 464.698487][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 464.739142][T13975] ptm ptm4: ldisc open failed (-12), clearing slot 4 04:02:12 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) (async) [ 464.778356][ T3686] Bluetooth: hci8: command 0x1003 tx timeout [ 464.788319][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:02:12 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x5000000}}) 04:02:12 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async, rerun: 64) r4 = syz_open_pts(r3, 0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) (async, rerun: 64) ioctl$TCFLSH(r5, 0x540b, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:12 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 464.833980][ T9891] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:12 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}) [ 465.003190][ T3656] Bluetooth: hci7: sending frame failed (-49) [ 465.004150][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 465.006510][T14000] ptm ptm3: ldisc open failed (-12), clearing slot 3 04:02:14 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:14 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:14 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) r7 = syz_io_uring_complete(r3) ioctl$NBD_SET_SOCK(r7, 0xab00, r0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x6, 0x2, 0x3, 0x45, 0x17, "e2bfe5e7c5e9cd3abef5654867da3d7ae14261"}) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:14 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}) 04:02:14 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4) (async) ioctl$TCFLSH(r5, 0x540b, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:02:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 466.858094][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 466.858200][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:14 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000002}}) 04:02:14 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0xb91c, 0x5ff, 0x35, 0x80000001, 0x10, "f07a0f27550ae65a8615d35f79d604dc3e2a2a"}) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000100)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000003}}) [ 466.991310][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 466.992282][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 467.042650][ T3656] Bluetooth: hci8: sending frame failed (-49) [ 467.043711][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:02:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:15 executing program 5: r0 = syz_io_uring_setup(0x4b2b, &(0x7f0000000340)={0x0, 0xdfff, 0x10, 0x1, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3718, &(0x7f0000000240)={0x0, 0xa637, 0x2, 0x3, 0x26d}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r9, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r9, 0x402, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f00000002c0)="646e3d93df378fb4fa76210258f0436fb337cb087aaed4d8991892aa8bd26a1ab0d47458830eff6abf2c75cd254fb814359635d4de2d30c78611f7e32f2019ce9302", 0x42, 0x44000, 0x1}, 0x2) r10 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:15 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000004}}) 04:02:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000080)) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:15 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fremovexattr(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="62747266ff2e2f6465762f70746d7800"]) 04:02:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) r7 = syz_io_uring_complete(r3) ioctl$NBD_SET_SOCK(r7, 0xab00, r0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x6, 0x2, 0x3, 0x45, 0x17, "e2bfe5e7c5e9cd3abef5654867da3d7ae14261"}) (async) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000005}}) 04:02:17 executing program 5: r0 = syz_io_uring_setup(0x4b2b, &(0x7f0000000340)={0x0, 0xdfff, 0x10, 0x1, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3718, &(0x7f0000000240)={0x0, 0xa637, 0x2, 0x3, 0x26d}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) ioctl$SIOCGIFMTU(r9, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r9, 0x402, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f00000002c0)="646e3d93df378fb4fa76210258f0436fb337cb087aaed4d8991892aa8bd26a1ab0d47458830eff6abf2c75cd254fb814359635d4de2d30c78611f7e32f2019ce9302", 0x42, 0x44000, 0x1}, 0x2) (async, rerun: 64) r10 = syz_open_pts(r3, 0x0) (rerun: 64) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 32) 04:02:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x100100, 0x0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x9e4, 0x20, 0x0, 0x2000000, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:17 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x100100, 0x0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0x9e4, 0x20, 0x0, 0x2000000, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 469.018168][ T3686] Bluetooth: hci7: command 0x1003 tx timeout [ 469.018166][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:02:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000006}}) [ 469.133922][ T3649] Bluetooth: hci6: sending frame failed (-49) [ 469.134993][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) r7 = syz_io_uring_complete(r3) ioctl$NBD_SET_SOCK(r7, 0xab00, r0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x6, 0x2, 0x3, 0x45, 0x17, "e2bfe5e7c5e9cd3abef5654867da3d7ae14261"}) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000007}}) 04:02:17 executing program 5: r0 = syz_io_uring_setup(0x4b2b, &(0x7f0000000340)={0x0, 0xdfff, 0x10, 0x1, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3718, &(0x7f0000000240)={0x0, 0xa637, 0x2, 0x3, 0x26d}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r9, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async, rerun: 64) fcntl$notify(r9, 0x402, 0x0) (rerun: 64) syz_io_uring_submit(r6, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r9, 0x0, &(0x7f00000002c0)="646e3d93df378fb4fa76210258f0436fb337cb087aaed4d8991892aa8bd26a1ab0d47458830eff6abf2c75cd254fb814359635d4de2d30c78611f7e32f2019ce9302", 0x42, 0x44000, 0x1}, 0x2) r10 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000300}}) 04:02:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000500}}) 04:02:17 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:17 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000600}}) 04:02:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:18 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000700}}) [ 470.010292][ T3656] Bluetooth: hci7: sending frame failed (-49) [ 470.011049][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:02:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:19 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000b94}}) 04:02:19 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:19 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:19 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 471.418225][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 471.418328][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:19 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000ee8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="0f07d20b0f1866290f01b300802667650fc769ce3e0f01c50f33d17eaf66662e650f1b040fc76f2b", 0x28}], 0x1, 0x4, &(0x7f0000000180), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x78e, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000f73000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b9d60b00000f322e0f01cb0f01c90f20d86635200000000f22d8f30fa7d8660f3881a30100baf80c66b829595d8d66efbafc0cb004ee660f10d16766c7442400e4e732356766c7442402000000006766c744240600000000670f011c24660f3880ac0040", 0x65}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:19 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500940b}}) 04:02:19 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:19 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 471.559675][ T49] Bluetooth: hci6: sending frame failed (-49) [ 471.560623][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:19 executing program 2: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x6, 0x6, 0x40, 0x20, 0x15, "dff2ee314fdd26ba"}) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:19 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500ff00}}) 04:02:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 471.758555][ T49] Bluetooth: hci6: sending frame failed (-49) [ 471.759862][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:19 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0xff, 0x0, 0x10001, 0x7, 0x0, "f501611545916702c9190074836f1bb88514cb"}) syz_io_uring_setup(0x459, &(0x7f0000000140)={0x0, 0x9dc9, 0x1, 0x1, 0xd6, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:19 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}) 04:02:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}) 04:02:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0xff, 0x0, 0x10001, 0x7, 0x0, "f501611545916702c9190074836f1bb88514cb"}) (async) syz_io_uring_setup(0x459, &(0x7f0000000140)={0x0, 0x9dc9, 0x1, 0x1, 0xd6, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:20 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:20 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000ee8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="0f07d20b0f1866290f01b300802667650fc769ce3e0f01c50f33d17eaf66662e650f1b040fc76f2b", 0x28}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x78e, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[], 0x208e24b) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000f73000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b9d60b00000f322e0f01cb0f01c90f20d86635200000000f22d8f30fa7d8660f3881a30100baf80c66b829595d8d66efbafc0cb004ee660f10d16766c7442400e4e732356766c7442402000000006766c744240600000000670f011c24660f3880ac0040", 0x65}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:02:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x5) ioctl$KDFONTOP_COPY(r6, 0x4b72, &(0x7f0000000140)={0x3, 0x0, 0x1a, 0x16, 0x99, &(0x7f00000003c0)}) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:20 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0xff, 0x0, 0x10001, 0x7, 0x0, "f501611545916702c9190074836f1bb88514cb"}) syz_io_uring_setup(0x459, &(0x7f0000000140)={0x0, 0x9dc9, 0x1, 0x1, 0xd6, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x2}}) 04:02:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:20 executing program 5: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) 04:02:20 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x3}}) 04:02:20 executing program 5: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) (async) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) (async) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) (async) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) (async) [ 472.648144][T14186] loop5: detected capacity change from 0 to 12 04:02:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 472.860967][T14193] loop5: detected capacity change from 0 to 12 04:02:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x4}}) 04:02:21 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000ee8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="0f07d20b0f1866290f01b300802667650fc769ce3e0f01c50f33d17eaf66662e650f1b040fc76f2b", 0x28}], 0x1, 0x4, &(0x7f0000000180), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x78e, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x4}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000f73000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000240)="66b9d60b00000f322e0f01cb0f01c90f20d86635200000000f22d8f30fa7d8660f3881a30100baf80c66b829595d8d66efbafc0cb004ee660f10d16766c7442400e4e732356766c7442402000000006766c744240600000000670f011c24660f3880ac0040", 0x65}], 0x1, 0x0, &(0x7f00000001c0), 0x0) (async) r6 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:21 executing program 5: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) (async) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) (async) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) (async) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) (async) 04:02:21 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:21 executing program 2: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) 04:02:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x5}}) 04:02:21 executing program 2: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) [ 473.385117][T14213] loop5: detected capacity change from 0 to 12 [ 473.478522][T14227] ptm ptm2: ldisc open failed (-12), clearing slot 2 04:02:21 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x6}}) 04:02:21 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x1c9800) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x0, 0x100010, r3, 0xe1e23000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x13) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:21 executing program 2: r0 = syz_io_uring_setup(0x6b2b, &(0x7f0000000140)={0x0, 0xf84a, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000300)) r5 = syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="5a1a79a07eefa95f6bdc", 0xa}, {&(0x7f0000000480)="c5aaa7749dc83f9c85706c721ebb95649718ca607421f16e19dcb216506000107c4d805a374e0ce80aeb68cdcb35912dc3e9c15c95dd26622b789bcc447ed2b0246ea0319ff2ce85f0f97207b793440fd6d327049fb6dd22b3ad6a50fac8ec7893b00069a556c4582dab9fbb80003dda10ce5dea7f9dcd7d281ff1ee9fbd327a9415bb6e35f63ae5c218a50a200d7e", 0x8f, 0xcd1}, {&(0x7f0000000540)="7bb30fee01ae5806b47c534a338570423e0fc78b7eb4aa59a929919277ff4d5d155e4cac296bdb25cedf2c2a7cf1e7bf2316220965ceff7e9534fd8c7cdfc16b3431921470ba9825d551171dfe5c3cf1a017cd681a22c5b89ae24bdca082332efbd7b5fd880b797af5c0491d981ef76201726c412972623f7dd513", 0x7b, 0x745}, {&(0x7f00000005c0)="32ae57831433a709094ad55252f44b095da1b9bc47bca9438d14002352e0a377d339e5ab75e810a6e08c4e0ac2f15ba094419d2ef86be7c6e36bbe11f93b9084a007349ff02b63b0f6689054ea3c8cee500c0ee0feedcdf11732cd071a6c98c589aaeecc6222eb63c1c32c0e6a737254ba64e953567d62cd91617fb969d8130ecda35c787ccb31185d3fe9482239aa1a5a47093e3628f5238bdde273e1a4a97184ff95aa9c1728481ed07cbc839c5adfb15cf1d386695c42717383b087077d2f360287a2b9a6081402aef9a3a713772a77", 0xd1, 0x7}, {&(0x7f00000006c0)="dee14c6e8fe0da891551f8775d5e8400dbea6f79a94fec1bd1f56e46f4d561696cecd69d7750399a8328b1063427c5c08a539ae7d2f9bd1ff6b1d16fde762b3993445d8c50f9ee36effb8a73fecbdcb1b59bd243698df0dca1f16b4340c6ee898f9589ebb9e6ccccd8b685d163d8a0e0858f2307438266adaf3f366bcbb8bb8bd7d1e7d7a9319c52", 0x88}, {&(0x7f0000000780)="0440241ad8f3833964fa1bd8b2b5247e8140e8255886053fb7d38d140ec2f7af02c05fe670b2dbe0cba112b2334ca4cfd0cf3b619df68c89a5e346c09cef36929b7a4f360f1e81", 0x47, 0x7}], 0x3228042, &(0x7f00000008c0)={[{@map_off}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@hide}, {@mode={'mode', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0xc}}, {@seclabel}, {@context={'context', 0x3d, 'system_u'}}]}) openat(r5, &(0x7f0000000940)='./file0\x00', 0x42, 0x60) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, 0x100800, 0x1}, 0x1) io_uring_enter(r0, 0x5ab7, 0x2ad1, 0x2, &(0x7f0000000380)={[0x8]}, 0x8) 04:02:21 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async) r3 = syz_open_pts(r2, 0x1c9800) (async, rerun: 64) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x0, 0x100010, r3, 0xe1e23000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x13) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x7}}) 04:02:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:22 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) (async, rerun: 64) r3 = syz_open_pts(r2, 0x1c9800) (rerun: 64) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000eea000/0x1000)=nil, 0x1000, 0x0, 0x100010, r3, 0xe1e23000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x13) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) dup(r2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8602, 0x0) io_uring_enter(r6, 0x138c, 0xb2e8, 0x2, &(0x7f0000000140)={[0xffffffff]}, 0x8) r7 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) ioctl$FICLONE(r0, 0x40049409, r5) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:22 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x300}}) 04:02:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x500}}) 04:02:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:22 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) dup(r2) (async, rerun: 64) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8602, 0x0) (rerun: 64) io_uring_enter(r6, 0x138c, 0xb2e8, 0x2, &(0x7f0000000140)={[0xffffffff]}, 0x8) (async, rerun: 64) r7 = syz_open_pts(r5, 0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) ioctl$FICLONE(r0, 0x40049409, r5) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:22 executing program 5: r0 = syz_io_uring_setup(0x31fd, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) read(r0, &(0x7f0000000100)=""/129, 0x81) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8, 0x7fffffff, {0x0, r8}, 0x453, 0x2, 0x0, {0x0, 0x0, r1}}, 0x40) fcntl$notify(r7, 0x402, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0, 0x4488d8da627e3ab1, {0x0, r10}}, 0x3f) 04:02:22 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x600}}) [ 474.676779][T14282] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:02:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:23 executing program 5: r0 = syz_io_uring_setup(0x31fd, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) (async) r2 = syz_open_pts(r1, 0x0) read(r0, &(0x7f0000000100)=""/129, 0x81) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (rerun: 32) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) (async) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) r9 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8, 0x7fffffff, {0x0, r8}, 0x453, 0x2, 0x0, {0x0, 0x0, r1}}, 0x40) fcntl$notify(r7, 0x402, 0x0) (async) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0, 0x4488d8da627e3ab1, {0x0, r10}}, 0x3f) 04:02:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) dup(r2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8602, 0x0) io_uring_enter(r6, 0x138c, 0xb2e8, 0x2, &(0x7f0000000140)={[0xffffffff]}, 0x8) (async) r7 = syz_open_pts(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) (async) ioctl$FICLONE(r0, 0x40049409, r5) (async, rerun: 32) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:23 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x700}}) 04:02:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:23 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0xb94}}) 04:02:23 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x940b}}) [ 475.380932][T14303] ptm ptm1: ldisc open failed (-12), clearing slot 1 04:02:23 executing program 4: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:02:23 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0xff00}}) 04:02:23 executing program 5: r0 = syz_io_uring_setup(0x31fd, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) read(r0, &(0x7f0000000100)=""/129, 0x81) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8, 0x7fffffff, {0x0, r8}, 0x453, 0x2, 0x0, {0x0, 0x0, r1}}, 0x40) fcntl$notify(r7, 0x402, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0, 0x4488d8da627e3ab1, {0x0, r10}}, 0x3f) syz_io_uring_setup(0x31fd, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r1, 0x0) (async) read(r0, &(0x7f0000000100)=""/129, 0x81) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) (async) ioctl$SIOCGIFMTU(r7, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(0x0, r9, &(0x7f0000000500)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r8, 0x7fffffff, {0x0, r8}, 0x453, 0x2, 0x0, {0x0, 0x0, r1}}, 0x40) (async) fcntl$notify(r7, 0x402, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x0, 0x4488d8da627e3ab1, {0x0, r10}}, 0x3f) (async) 04:02:23 executing program 4: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) [ 475.674643][T14321] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 475.795259][T14329] ptm ptm0: ldisc open failed (-12), clearing slot 0 04:02:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x1000000}}) 04:02:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0x200, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x39, 0x0}, [0x0, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000], 'veth0_to_bond\x00', 'wg1\x00', {0xff}, {}, 0x2, 0x81, 0x5, 0x78}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x5, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'macvtap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x6c, 0x9, 0x1, 0x21}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0xd1, {0xfffffffffffffffa}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:24 executing program 4: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:02:24 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) fallocate(r3, 0x4, 0x9, 0x3) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x3, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r5 = syz_io_uring_setup(0x444e, &(0x7f0000000100)={0x0, 0x2629, 0x10, 0x2, 0x1e}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0x80, 0x4000}, 0x2) r7 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r5, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r6, &(0x7f0000000500)={0x90000000}}, 0x1) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000440)={0x3, 0x9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x2}}, 0x800) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x9, 0x50, r8, 0x10000000) 04:02:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x2000000}}) 04:02:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x3000000}}) 04:02:24 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x2f96, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x3d2, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) r6 = syz_open_pts(r5, 0x0) syz_io_uring_setup(0x61cc, &(0x7f0000000140)={0x0, 0x78cc, 0xf, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xa408}}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x4000000}}) [ 476.446219][ T7222] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:24 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x5000000}}) 04:02:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:25 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x6000000}}) 04:02:25 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x940b}}) 04:02:25 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) fallocate(r3, 0x4, 0x9, 0x3) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x3, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) r5 = syz_io_uring_setup(0x444e, &(0x7f0000000100)={0x0, 0x2629, 0x10, 0x2, 0x1e}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0x80, 0x4000}, 0x2) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r5, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r6, &(0x7f0000000500)={0x90000000}}, 0x1) (async) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000440)={0x3, 0x9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x2}}, 0x800) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x9, 0x50, r8, 0x10000000) 04:02:25 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x7000000}}) 04:02:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) r2 = syz_io_uring_setup(0x2f96, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x3d2, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) syz_io_uring_setup(0x61cc, &(0x7f0000000140)={0x0, 0x78cc, 0xf, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xa408}}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:26 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) fallocate(r3, 0x4, 0x9, 0x3) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x3, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async, rerun: 64) r5 = syz_io_uring_setup(0x444e, &(0x7f0000000100)={0x0, 0x2629, 0x10, 0x2, 0x1e}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async, rerun: 64) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r6, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', 0x80, 0x4000}, 0x2) (async) r7 = mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r5, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r6, &(0x7f0000000500)={0x90000000}}, 0x1) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000440)={0x3, 0x9}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x2}}, 0x800) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x9, 0x50, r8, 0x10000000) 04:02:26 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x940b0000}}) 04:02:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 478.458298][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 478.458608][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:26 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0xfdfdffff}}) 04:02:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x460021, 0x0) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xb92a, 0x8, 0x0, 0x23d, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x980) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x4, &(0x7f0000000600)=""/166, 0xa6}, 0x0, 0x40010142, 0x1, {0x3}}, 0x4) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 478.662678][T11503] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:26 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0xff000000}}) 04:02:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) (async) r2 = syz_io_uring_setup(0x2f96, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, 0x3d2, 0x0, r1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)) (async) r6 = syz_open_pts(r5, 0x0) (async) syz_io_uring_setup(0x61cc, &(0x7f0000000140)={0x0, 0x78cc, 0xf, 0x1, 0x2f4, 0x0, r2}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xa408}}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:26 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x460021, 0x0) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xb92a, 0x8, 0x0, 0x23d, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x980) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x4, &(0x7f0000000600)=""/166, 0xa6}, 0x0, 0x40010142, 0x1, {0x3}}, 0x4) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:26 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0xfffffdfd}}) 04:02:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) [ 479.320515][ T3656] Bluetooth: hci7: sending frame failed (-49) [ 479.320985][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:02:28 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:28 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1, 0x3}, 0x10) r1 = io_uring_setup(0x18d5, &(0x7f00000001c0)={0x0, 0x3f51, 0x48}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000dbf7895082bcd246ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000"]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x9, [0x10000, 0xb863, 0x12000, 0xde06, 0x67d6, 0x0, 0x8, 0x1, 0xffffffff]}}) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x26a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r4, 0x402, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x9, 0x0, 0x3, 0x2}, 0x6) 04:02:28 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x460021, 0x0) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xb92a, 0x8, 0x0, 0x23d, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) syz_open_pts(r4, 0x980) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x4, &(0x7f0000000600)=""/166, 0xa6}, 0x0, 0x40010142, 0x1, {0x3}}, 0x4) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x460021, 0x0) (async) syz_io_uring_setup(0x791, &(0x7f0000000340)={0x0, 0xb92a, 0x8, 0x0, 0x23d, 0x0, r0}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x980) (async) syz_open_pts(r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000040)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r6, r3, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/221, 0xdd}], 0x4, &(0x7f0000000600)=""/166, 0xa6}, 0x0, 0x40010142, 0x1, {0x3}}, 0x4) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) 04:02:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) (async) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) (async) close_range(r1, 0xffffffffffffffff, 0x0) [ 480.708230][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 480.709727][ T7066] Bluetooth: hci6: command tx timeout 04:02:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 480.811130][ T49] Bluetooth: hci6: sending frame failed (-49) [ 480.812019][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:28 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x9, 0x7fffffff, 0x7, 0x5, 0x7, "bd3c89634e27af7de8f66548f1007e25eb4199"}) 04:02:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r4, 0x0) (async) creat(&(0x7f0000000180)='./file0\x00', 0x1) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r7, 0x400455c8, 0x4) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 04:02:28 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1, 0x3}, 0x10) (async) r1 = io_uring_setup(0x18d5, &(0x7f00000001c0)={0x0, 0x3f51, 0x48}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000dbf7895082bcd246ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000"]}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x9, [0x10000, 0xb863, 0x12000, 0xde06, 0x67d6, 0x0, 0x8, 0x1, 0xffffffff]}}) (async, rerun: 32) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x26a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r4, 0x402, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x9, 0x0, 0x3, 0x2}, 0x6) 04:02:29 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x9, 0x7fffffff, 0x7, 0x5, 0x7, "bd3c89634e27af7de8f66548f1007e25eb4199"}) [ 481.077097][ T7222] Bluetooth: hci6: Frame reassembly failed (-84) [ 481.104680][ T3656] Bluetooth: hci7: sending frame failed (-49) 04:02:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 481.105447][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 04:02:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1, 0x3}, 0x10) r1 = io_uring_setup(0x18d5, &(0x7f00000001c0)={0x0, 0x3f51, 0x48}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000dbf7895082bcd246ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000"]}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x9, [0x10000, 0xb863, 0x12000, 0xde06, 0x67d6, 0x0, 0x8, 0x1, 0xffffffff]}}) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x26a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r4, 0x402, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x9, 0x0, 0x3, 0x2}, 0x6) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1, 0x3}, 0x10) (async) io_uring_setup(0x18d5, &(0x7f00000001c0)={0x0, 0x3f51, 0x48}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xc, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000dbf7895082bcd246ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000"]}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x9, [0x10000, 0xb863, 0x12000, 0xde06, 0x67d6, 0x0, 0x8, 0x1, 0xffffffff]}}) (async) syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x26a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r4, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r4, 0x402, 0x0) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x9, 0x0, 0x3, 0x2}, 0x6) (async) 04:02:31 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0x9, 0x7fffffff, 0x7, 0x5, 0x7, "bd3c89634e27af7de8f66548f1007e25eb4199"}) 04:02:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0x1e5}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r9}}, 0x8001) syz_io_uring_setup(0x35d3, &(0x7f0000000240)={0x0, 0x2ea2, 0x20, 0x0, 0x41, 0x0, r6}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r11, 0x0) syz_io_uring_submit(r2, r10, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r11, &(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x200, 0x0, 0x1, {0x0, r9}}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r6, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 483.098217][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 483.266722][ T9891] Bluetooth: hci6: Frame reassembly failed (-84) 04:02:31 executing program 5: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) syz_open_pts(r4, 0x10800) syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5ce8, 0x1, 0x8}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x5}, 0x8) 04:02:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) (async, rerun: 64) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0x1e5}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r9}}, 0x8001) syz_io_uring_setup(0x35d3, &(0x7f0000000240)={0x0, 0x2ea2, 0x20, 0x0, 0x41, 0x0, r6}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r11, 0x0) syz_io_uring_submit(r2, r10, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r11, &(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x200, 0x0, 0x1, {0x0, r9}}, 0x9) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r6, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:31 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5ce8, 0x1, 0x8}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000080)={r4}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x5}, 0x8) [ 483.593998][ T3656] Bluetooth: hci7: sending frame failed (-49) [ 483.594943][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 483.654942][ T3656] Bluetooth: hci8: sending frame failed (-49) [ 483.655793][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 04:02:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:33 executing program 5: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) (async) syz_open_pts(r4, 0x10800) syz_open_pts(r3, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) (async) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) (async) r6 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x800000, 0x0, 0x0, 0x1e5}, &(0x7f000089a000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x20, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r9}}, 0x8001) (async) syz_io_uring_setup(0x35d3, &(0x7f0000000240)={0x0, 0x2ea2, 0x20, 0x0, 0x41, 0x0, r6}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f00000002c0)=0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r11, 0x0) syz_io_uring_submit(r2, r10, &(0x7f00000004c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r11, &(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x200, 0x0, 0x1, {0x0, r9}}, 0x9) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) io_uring_enter(r6, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5ce8, 0x1, 0x8}, 0x10) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000080)={r4}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4, 0x5}, 0x8) 04:02:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 485.338203][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:02:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = fsmount(r0, 0x0, 0xf0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x3, 0x7, 0x8, 0x1000, 0xb, "6d7a98721abab872973077d25ca165db1b9816"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 485.506092][ T49] Bluetooth: hci6: sending frame failed (-49) [ 485.506522][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 485.532503][ T9892] Bluetooth: hci8: Frame reassembly failed (-84) [ 485.552233][T12736] Bluetooth: hci7: Frame reassembly failed (-84) 04:02:33 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:02:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) (async) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) r6 = fsmount(r0, 0x0, 0xf0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x3, 0x7, 0x8, 0x1000, 0xb, "6d7a98721abab872973077d25ca165db1b9816"}) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:35 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) (async) r6 = fsmount(r0, 0x0, 0xf0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x3, 0x7, 0x8, 0x1000, 0xb, "6d7a98721abab872973077d25ca165db1b9816"}) (async) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:35 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 487.578147][ T3685] Bluetooth: hci7: command 0x1003 tx timeout [ 487.588183][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 487.589719][ T3649] Bluetooth: hci8: Opcode 0x1003 failed: -110 04:02:35 executing program 5: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) (async) syz_open_pts(r4, 0x10800) (async) syz_open_pts(r3, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:35 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:35 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) [ 487.590614][ T3689] Bluetooth: hci8: command tx timeout [ 487.590680][ T3689] Bluetooth: hci6: command tx timeout 04:02:35 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r3, 0x402, 0x0) ftruncate(r3, 0x7fff) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) tkill(0x0, 0x12) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0xfffffffe) r6 = syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="8c4c01537982eed050342d23be5bab4eefb3f67ca5a7d4c90d2e68a68f20434756c078a5f28a35401fbd1a46ea5083607fdf5c0c19e1c2ebe780affdcc03ec1a818ec8d470bd2df0f959e66a4484c6a25521fb441092c65c841ba88f6a2ac8502eea15538db2a32618cb60fa73a6013870874a34d60f236144d19b26633fba65e767f9cef52ad05baa2a117a055538f0688e8d83126c2998661e2cd85c98d8ac3cf2335fdfb75889af6f7be4bd9be7440179c23dda7b0ddeefb05feeb4c06d581859b927c3ef6e5c7485a54520aa563a0973593e0f564f8a9510d5184444331a679feee42ec201a07b98271b52d31d2c32c070faa62e5efb32c7cee7a9eaaa0ff4045c475182e305b7b100d72133be6d6809d1379b69200e6a68d2b38045b7839c857384e1bb4c717ff291f3fd7221845b5f263ba76749885d192413c7af8db9a828b5167a816a379e40628e96c3c202a55951fafc770a69d53801f1142ab558d2fcee375d60634690d27eec0027da080b0592fb6568df43e68fc1f1a40e4614cb028feffcdc14d085a68a9aab3d98cbef018f6b2d745e2bcfb070950674727114a7f9e481902f0196450be243e8bfb0b3d2e0e99308da35b89380508d1f6e02cdd06672e169e18403875208291f7b48b9dc78ad14d188973a4bbc194f5f6076d77235d9ef2eedb3e501662b4e7fae43422c8819025a57347f159b26e3f7febeda7875b9c37a44ad2387ebd0f0d36d37644a91b5307e0e4e6a8b00ce50b50cabadb68b0977cbb2eb8234969f7803e0ad27ae024ccc411364f0c916a30b72c22df435b2748ae472420ee1ec8431f7309fb7ae2475221ad8b9d928fe1cbd1c734f4ea7acca7ceb475b9d035cc04dbf78a40cc97993de32297175f9790e0c446e30c984aa84869aa8fe0000d5ac42276ec5f4280fa9d0bec8fc5135a4569e98571a59b7d5ff295a645784b61ab51acc16c89310eb0a7748edb31c3ed5760d0b39ed9bc9266d9b372ef300198df3f78e58df8a17043c8205ca26569eadb648e48563b0b3aa6dd7e52d32c14bc6c16e874fc90464f5474618c754d111dac3c3262ceb36768b68d05be307a4fbf959c2ca3cff379db55034d158345d8275a0905e2c86901d7154a59fda82d40fd02179a6ef161e06f59a60c75647fb584ddae3ab1e474c1593300ecee18efd17e46877289ef4ed642f58a3e9dfa509ddc9966edb0724a413f576f7051f8f6bd9ff20507b89dc591fde48339df9b2c370b7dd060442152a7f4d5a4e2ba4a96307ec77802ec8ca8fefbf52eccf23061824139d5ccfe117eeaa3e892b3bf6663db3c33a1a619afd73abb2d27633c33a9086a82edfd025e9c48147496bdb8e7e869a2ad59de71445f22dc58bd57a7b1482c20a31013da323e11a07001997d550cde03859f3e0b074653f1ed7e13510fce232e1cd36e1f86470fe4976d8751a5e99ddf31dac83d6dfbd165f1f70ab909c9a244b877930cd09d09e1097b916565bbbb08b9fbf0ca6e66208cb86262d3715cd91291f80d91cc78854e0e4c94e7a3b4962839b5a92ef6173d52e958a650361a4983ec86075e7796d631ef3d3e897032cf4adba6adb126b6f35c926f40654891b6ba74fd55c263792e4295613e5887ce65a0f2fe0e6b269c42dcc1a9b6290947279abf8e9425bbcff41644a365f1131e804a844958c6f98c5121f61a303f4cf8f3bd080578eb0e8a420752fbdbe8f613eec46f5ee587531b33e15267b954c0477ffa937190c18dec99db24b267d797b15586e4d597003974cf0c3d7bfe19327857237d7f14bfa0a2c3a3f4732468d94b2fde8fb994da98c745b08c1bfc529369d6e530028e57071a8e484fa569f9f90b527174316d10f5720d4db929c843dacf96966d3844470569a0c76a26b5360f860945397a6d0a2212c7e9c26fd90a24c4c232647c1867d25d7ff3dfff06e6da75c9df200939c751f1723b352c52b1cf486a2953e189661a389e08a6ec5cf882999eb8c20f6c572453e887e891d692d84d43335f3dafe2efe7e585edae87df08dac57e22220883749202f9a073416051b0eb19b17209cb113acbb881767c2935fa98e5b20fce16a0a088369a8ccb77052d1f5c94cfa316d9fb101986452203eaf0b64762966e1d6a8ce89ef9f1b498391a029f6ca1c3a88f2418a7aef12b648d1da48ac51388c486eb5df0db67bf6811d1b5b2bc7ccbf366e0dbca4739c4d44afd1c844f1e83d2a639e6d6f5974d1b32252c0591981b9f5f17227d5f52972d40a8d32c35ab434b9d596b8e458d77b50432b426189799f34121f76f4759c17ef3c294040d2cb97653b3c361eaeab810a07cca8256b3160a545bd27bb6d681b86d8a51142554bbf7dc4ac5466b09cfce456bac20b0dfa138dfa991e6c47d798a576e658ce8f86c95fa2d3adeee93febdf9426ea1f42980802a5ac3e236defcc1a3110bc6c05f23308204976e17d1dbc4cafcb50de317d2218fdee31d97c8e543457ace124a933ac9a32cd7d1b34c6e2b5b129b65d606cc29ed6ea32d426fe2c7a6c96496d8c578bd24d0461eb1df30785d70dabc904e0e974ed8f2a0eca740a57bf0a6150191f41f0eaac23e22008e851bcae7aff5efd001bf40151b996d7ed4dc87bc00db28a855041e236ff95d7bd99597cc409b4a5ae3fe610d500179e65100340143efbd6222ba96e2737b43bc54e8caa7d4169b83b090e1fc030754d4b11bf2fe3ec3b3d40b8c51a98b957f2a6c880410be5c699bb1617d022f6d204fcf545ea0e5ab2dd9c34b978364569d87ae4f19a0da08f1503ef37a111addf57ac933c3218ebb2de0e271ac96091e8990cc0a0d4a5fa859c54d79101d3e4a74ca6e5e59b5871d4f7ef6757856dbbf7e6bcd8098ae2d4ffa861aa198a2b5704b2b76f61080bd87de9a40bbe06853a083d0448891d31608e28099f7e088d7953e086672f6669ccc5e64af37c70f8d3da82e55d29b4d3ae4b4a8de1a2eb4587344047985d2025a46540d4a9e97df0f0d4df5b7fedf2718b29ec127792cc5c25124b1f8e74a229164241ee1df4c61d8b7c0d20822b5e6cdb0aba0d913965139ad3017f752054ef6e29a6e39fa77c8f1aa547006d648088fd6df532322aedf08de3cac6b056b2046599fb5390acd0b57ace4d553f21874b97d35212af532f6dabe180c7b60d32dbdf6b277b3f2b6dbfbf586061b45fe458841c138453e44184cefa041fe465b216fa4544191883e6688481a330fca0a8a6656ce784ea0175f1b5938f8c33bf6259715ac808037ec7781497f0914c954c284e7186ec4ab8fd29f22ad5573558458a3753c23129e8f4ea0a970f2d35327f449a49e8ff48e2ae4975622fb63c0a0ad97de1f7e5c0ae1f077a4e16f5f8c2137e861128deaa931c5217ef015ac715375ffee2b5bf607bf3b87a1819d1f79b206c2ef62cb5dbac1fd4e8008765df8c8daf86fb4baaf73e5c4833a3bc533b249a544d6b2ac1d7a0f93525f19394c9e8258d3a87f246741560ec8565a064202d1abcb90b483a3aa082d0cc18335e598035c5466ef67dbb1e7a6621e6a7cf54608a734497a730895eec9e350da37121e343d194c25dcb496e7dfbdcc0a0cc9f257198dd94005a31e9a5dd3a897d9975e6ae025842081b3d6237ba5b8e0d737dcdcc02e9875eb83fa49074576c4483cd7eae37db2d7fad0613198f128b3695f80afd400fd3a899c32bbcd991563df512d08af11892385056cd4f69405b1e07bfc7ecded82543a2ff4ada770b2c05855701ceecfb6fb6339db118565a55f349e4e54797ee27eb553d68096d0b5b9f81005d04ec32144120324ca4f3af6ae5e48e94603bfad1892c4de383e47d74ea55b05c4a3fba8d3fd3ab5591e909044c1382bb5ab0b7279a69d8407286ffd1852fd8c35731fefaf9662e00bd0e4dda39b689b7ec11d0017b87b72131153a23651defa84ff89ceb7a46d805ed06447c0e10d5a16c403e89f48ff6375e0bdfa7875122522ad632d8e89106019e1fac88debdbafd3246d5aa54b86e6dd0e39cdc56c380b0a9ab6e10029de3ac6450ccb7cdf8e2b2d73253eeb1d3924898e78916ab1afbaa20f88554edc01ca993415b35873995ba77ef5dff162351cbbf05fccfe851c621205e39a12d4621c7c3ee0ffbbe511ba32a1c5e825c00ec9bda0b802fac29a1296f7eebb058153d325313041a88d5b480a29f351a138902e0951955de2022ef986edd1df1b749db6deafd329369e317c4dad050e26cea66c7a7a9d90a5f1428ba1b58936de6fae5ccf8ec9f19a37ccaf83085282bb0d4124ed5a60ed44018431667720c1bab73c5136a64b9f777a14189fd9d64c6ad52e7d13b13f7d711d8f9fb2fa6c831d069a55724e4707f0ba77e3d0ee3e17a12223289d26b38e0e6383df0c379b4cb2810d6e9d3f2c944abaa240b23ed4315418cfcd04b9a5d7029efdc25836bf5b1bafb420f4475a729e34b406d43fd8c86ae1eaac187cecad9cefd1f44bcd032661b548589861a930943651f932409e598596debb13b1b5b537f8bd0c9db0549dd2f6214052aed97b6c5a5339f697f5293491b40f90ce46a410f9ba63e72ba316e6b69565249d67574e5e0e9db7747026094b794b5e4f62a3719c1e4e5b1d6400616099b7f1d02fecc5343f96f520a7f7fc22462ee3903483e9aa4dacfe5629a694be220b7418410f4b9ceada45162439648f95649f7e7d8a34c28fd8bc9b72aa49a58a778bb441744ea939354abe7ce629ba9a917dd23b5f5aee36bd66f0ddedbe14123f0971f4571966ff02a01937a3052df3207ff0e152f619a537404bfd9be5c1a92ead68f166b81ff914866c2f5ea41b132a01b231c2e7a069d6a4475d67417b51f49e13356a99689fb528b927b871f8ac1566c23f6e9cdc415c83e921ae8363d1a500208d3284c623ea7fc2ff4fab1c1abacecb30343d1c1505497efd33f5466c5d43b6819f27aa5551d2ed0ba4891bd35165746a65dc5ac02093ab1e830a7b57e57a4f4f2e88934640f010f589c0702a4768b9e32aaf6f56d69ee3dbad7940057b5023d1ed0134e247d6f1b7dadf34ec2b6d197633116a8671b816f54fbdf246641472a7b428763ecd75b1a9a968e011f4f21954e7758134eafac3f54b45c8175a2047d3c587279dc9b5b97388eb0f38ff896a5f3868ada86579c0eae26a318f39d6cb8058cd0a32450116986861043eccdfdce6728437bfac1ef2ff4c553e60856858ba327d6f944ac4d26efe897493ef1b419133ce1d47abecb405da398f67495483667a293f1cf39b682a75c75320d65ea5f79fc182888c113f1e0aff5f3d1ef2193dde78e112f93522475825efe274ca20541e8ef9aea12ed6137d69d1746bb30ea50e9c3e53f27131f49429d9267ba73ff4772745afe40144bec87ff1b07ce632254f8502994d7e840d104f3d5fa639a6c7f2e6bb98d9737a189e8174aa10c8d470b4912ff84df6384cfe8b274d94a38716295036c499dae9c21b0a02a803d511f61a2ba5283a0b92cbe17d8bf6fafa54cbbd7fc4d49c1fdf6018470d1abd17da69aad54377ed8b9e0a5f71ffa61eb84455c52b4cd2eed083c0d20dfb8bca712151352bcd7cfa6a8bd918f6efcfde67a3a81520b42cfb3b92b01d02aba3ad511fa8baaacd1fe7c514570b083cbfd73a45e65c93ce665d4f88f400476071de4f501cbfafcaa70ee8408db21602894ec123ec257ed2c7b730828998d387d48087ff8aed872ebec75a468e856605e6eb3df27d41dadd9ad7eba2e08807fb8e369c2462893d4b201fa6f09469e49aac8f3", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) kcmp(0x0, r5, 0x2, r6, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 487.787643][ T49] Bluetooth: hci6: sending frame failed (-49) [ 487.788899][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:35 executing program 2: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) syz_open_pts(r4, 0x10800) syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 487.874697][ T42] Bluetooth: hci7: Frame reassembly failed (-84) [ 487.913909][T12736] Bluetooth: hci6: Frame reassembly failed (-84) [ 487.983535][T14612] loop1: detected capacity change from 0 to 65536 04:02:36 executing program 2: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) syz_open_pts(r4, 0x10800) syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:36 executing program 2: r0 = syz_io_uring_setup(0x40005448, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x328}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r4, 0x400455c8, 0x4) syz_open_pts(r4, 0x10800) syz_open_pts(r3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r5, 0x400455c8, 0x4) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x8000, 0x4, 0x1ff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x16f8e0a9c12c70c8, @fd, 0x3, 0xeca9, 0x5, 0x2, 0x1, {0x3}}, 0x7) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x3, 0x1, 0x18, 0x3, 0xbe, &(0x7f00000003c0)}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:36 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) 04:02:37 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x15}) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:37 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:37 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) [ 489.898156][ T7066] Bluetooth: hci7: command 0x1003 tx timeout [ 489.898303][ T3649] Bluetooth: hci7: Opcode 0x1003 failed: -110 04:02:38 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r3, 0x402, 0x0) ftruncate(r3, 0x7fff) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) tkill(0x0, 0x12) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0xfffffffe) r6 = syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="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", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) kcmp(0x0, r5, 0x2, r6, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r3, 0x402, 0x0) (async) ftruncate(r3, 0x7fff) (async) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) (async) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) (async) tkill(0x0, 0x12) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace$setopts(0x4206, r5, 0x0, 0x0) (async) tkill(0x0, 0xfffffffe) (async) syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="8c4c01537982eed050342d23be5bab4eefb3f67ca5a7d4c90d2e68a68f20434756c078a5f28a35401fbd1a46ea5083607fdf5c0c19e1c2ebe780affdcc03ec1a818ec8d470bd2df0f959e66a4484c6a25521fb441092c65c841ba88f6a2ac8502eea15538db2a32618cb60fa73a6013870874a34d60f236144d19b26633fba65e767f9cef52ad05baa2a117a055538f0688e8d83126c2998661e2cd85c98d8ac3cf2335fdfb75889af6f7be4bd9be7440179c23dda7b0ddeefb05feeb4c06d581859b927c3ef6e5c7485a54520aa563a0973593e0f564f8a9510d5184444331a679feee42ec201a07b98271b52d31d2c32c070faa62e5efb32c7cee7a9eaaa0ff4045c475182e305b7b100d72133be6d6809d1379b69200e6a68d2b38045b7839c857384e1bb4c717ff291f3fd7221845b5f263ba76749885d192413c7af8db9a828b5167a816a379e40628e96c3c202a55951fafc770a69d53801f1142ab558d2fcee375d60634690d27eec0027da080b0592fb6568df43e68fc1f1a40e4614cb028feffcdc14d085a68a9aab3d98cbef018f6b2d745e2bcfb070950674727114a7f9e481902f0196450be243e8bfb0b3d2e0e99308da35b89380508d1f6e02cdd06672e169e18403875208291f7b48b9dc78ad14d188973a4bbc194f5f6076d77235d9ef2eedb3e501662b4e7fae43422c8819025a57347f159b26e3f7febeda7875b9c37a44ad2387ebd0f0d36d37644a91b5307e0e4e6a8b00ce50b50cabadb68b0977cbb2eb8234969f7803e0ad27ae024ccc411364f0c916a30b72c22df435b2748ae472420ee1ec8431f7309fb7ae2475221ad8b9d928fe1cbd1c734f4ea7acca7ceb475b9d035cc04dbf78a40cc97993de32297175f9790e0c446e30c984aa84869aa8fe0000d5ac42276ec5f4280fa9d0bec8fc5135a4569e98571a59b7d5ff295a645784b61ab51acc16c89310eb0a7748edb31c3ed5760d0b39ed9bc9266d9b372ef300198df3f78e58df8a17043c8205ca26569eadb648e48563b0b3aa6dd7e52d32c14bc6c16e874fc90464f5474618c754d111dac3c3262ceb36768b68d05be307a4fbf959c2ca3cff379db55034d158345d8275a0905e2c86901d7154a59fda82d40fd02179a6ef161e06f59a60c75647fb584ddae3ab1e474c1593300ecee18efd17e46877289ef4ed642f58a3e9dfa509ddc9966edb0724a413f576f7051f8f6bd9ff20507b89dc591fde48339df9b2c370b7dd060442152a7f4d5a4e2ba4a96307ec77802ec8ca8fefbf52eccf23061824139d5ccfe117eeaa3e892b3bf6663db3c33a1a619afd73abb2d27633c33a9086a82edfd025e9c48147496bdb8e7e869a2ad59de71445f22dc58bd57a7b1482c20a31013da323e11a07001997d550cde03859f3e0b074653f1ed7e13510fce232e1cd36e1f86470fe4976d8751a5e99ddf31dac83d6dfbd165f1f70ab909c9a244b877930cd09d09e1097b916565bbbb08b9fbf0ca6e66208cb86262d3715cd91291f80d91cc78854e0e4c94e7a3b4962839b5a92ef6173d52e958a650361a4983ec86075e7796d631ef3d3e897032cf4adba6adb126b6f35c926f40654891b6ba74fd55c263792e4295613e5887ce65a0f2fe0e6b269c42dcc1a9b6290947279abf8e9425bbcff41644a365f1131e804a844958c6f98c5121f61a303f4cf8f3bd080578eb0e8a420752fbdbe8f613eec46f5ee587531b33e15267b954c0477ffa937190c18dec99db24b267d797b15586e4d597003974cf0c3d7bfe19327857237d7f14bfa0a2c3a3f4732468d94b2fde8fb994da98c745b08c1bfc529369d6e530028e57071a8e484fa569f9f90b527174316d10f5720d4db929c843dacf96966d3844470569a0c76a26b5360f860945397a6d0a2212c7e9c26fd90a24c4c232647c1867d25d7ff3dfff06e6da75c9df200939c751f1723b352c52b1cf486a2953e189661a389e08a6ec5cf882999eb8c20f6c572453e887e891d692d84d43335f3dafe2efe7e585edae87df08dac57e22220883749202f9a073416051b0eb19b17209cb113acbb881767c2935fa98e5b20fce16a0a088369a8ccb77052d1f5c94cfa316d9fb101986452203eaf0b64762966e1d6a8ce89ef9f1b498391a029f6ca1c3a88f2418a7aef12b648d1da48ac51388c486eb5df0db67bf6811d1b5b2bc7ccbf366e0dbca4739c4d44afd1c844f1e83d2a639e6d6f5974d1b32252c0591981b9f5f17227d5f52972d40a8d32c35ab434b9d596b8e458d77b50432b426189799f34121f76f4759c17ef3c294040d2cb97653b3c361eaeab810a07cca8256b3160a545bd27bb6d681b86d8a51142554bbf7dc4ac5466b09cfce456bac20b0dfa138dfa991e6c47d798a576e658ce8f86c95fa2d3adeee93febdf9426ea1f42980802a5ac3e236defcc1a3110bc6c05f23308204976e17d1dbc4cafcb50de317d2218fdee31d97c8e543457ace124a933ac9a32cd7d1b34c6e2b5b129b65d606cc29ed6ea32d426fe2c7a6c96496d8c578bd24d0461eb1df30785d70dabc904e0e974ed8f2a0eca740a57bf0a6150191f41f0eaac23e22008e851bcae7aff5efd001bf40151b996d7ed4dc87bc00db28a855041e236ff95d7bd99597cc409b4a5ae3fe610d500179e65100340143efbd6222ba96e2737b43bc54e8caa7d4169b83b090e1fc030754d4b11bf2fe3ec3b3d40b8c51a98b957f2a6c880410be5c699bb1617d022f6d204fcf545ea0e5ab2dd9c34b978364569d87ae4f19a0da08f1503ef37a111addf57ac933c3218ebb2de0e271ac96091e8990cc0a0d4a5fa859c54d79101d3e4a74ca6e5e59b5871d4f7ef6757856dbbf7e6bcd8098ae2d4ffa861aa198a2b5704b2b76f61080bd87de9a40bbe06853a083d0448891d31608e28099f7e088d7953e086672f6669ccc5e64af37c70f8d3da82e55d29b4d3ae4b4a8de1a2eb4587344047985d2025a46540d4a9e97df0f0d4df5b7fedf2718b29ec127792cc5c25124b1f8e74a229164241ee1df4c61d8b7c0d20822b5e6cdb0aba0d913965139ad3017f752054ef6e29a6e39fa77c8f1aa547006d648088fd6df532322aedf08de3cac6b056b2046599fb5390acd0b57ace4d553f21874b97d35212af532f6dabe180c7b60d32dbdf6b277b3f2b6dbfbf586061b45fe458841c138453e44184cefa041fe465b216fa4544191883e6688481a330fca0a8a6656ce784ea0175f1b5938f8c33bf6259715ac808037ec7781497f0914c954c284e7186ec4ab8fd29f22ad5573558458a3753c23129e8f4ea0a970f2d35327f449a49e8ff48e2ae4975622fb63c0a0ad97de1f7e5c0ae1f077a4e16f5f8c2137e861128deaa931c5217ef015ac715375ffee2b5bf607bf3b87a1819d1f79b206c2ef62cb5dbac1fd4e8008765df8c8daf86fb4baaf73e5c4833a3bc533b249a544d6b2ac1d7a0f93525f19394c9e8258d3a87f246741560ec8565a064202d1abcb90b483a3aa082d0cc18335e598035c5466ef67dbb1e7a6621e6a7cf54608a734497a730895eec9e350da37121e343d194c25dcb496e7dfbdcc0a0cc9f257198dd94005a31e9a5dd3a897d9975e6ae025842081b3d6237ba5b8e0d737dcdcc02e9875eb83fa49074576c4483cd7eae37db2d7fad0613198f128b3695f80afd400fd3a899c32bbcd991563df512d08af11892385056cd4f69405b1e07bfc7ecded82543a2ff4ada770b2c05855701ceecfb6fb6339db118565a55f349e4e54797ee27eb553d68096d0b5b9f81005d04ec32144120324ca4f3af6ae5e48e94603bfad1892c4de383e47d74ea55b05c4a3fba8d3fd3ab5591e909044c1382bb5ab0b7279a69d8407286ffd1852fd8c35731fefaf9662e00bd0e4dda39b689b7ec11d0017b87b72131153a23651defa84ff89ceb7a46d805ed06447c0e10d5a16c403e89f48ff6375e0bdfa7875122522ad632d8e89106019e1fac88debdbafd3246d5aa54b86e6dd0e39cdc56c380b0a9ab6e10029de3ac6450ccb7cdf8e2b2d73253eeb1d3924898e78916ab1afbaa20f88554edc01ca993415b35873995ba77ef5dff162351cbbf05fccfe851c621205e39a12d4621c7c3ee0ffbbe511ba32a1c5e825c00ec9bda0b802fac29a1296f7eebb058153d325313041a88d5b480a29f351a138902e0951955de2022ef986edd1df1b749db6deafd329369e317c4dad050e26cea66c7a7a9d90a5f1428ba1b58936de6fae5ccf8ec9f19a37ccaf83085282bb0d4124ed5a60ed44018431667720c1bab73c5136a64b9f777a14189fd9d64c6ad52e7d13b13f7d711d8f9fb2fa6c831d069a55724e4707f0ba77e3d0ee3e17a12223289d26b38e0e6383df0c379b4cb2810d6e9d3f2c944abaa240b23ed4315418cfcd04b9a5d7029efdc25836bf5b1bafb420f4475a729e34b406d43fd8c86ae1eaac187cecad9cefd1f44bcd032661b548589861a930943651f932409e598596debb13b1b5b537f8bd0c9db0549dd2f6214052aed97b6c5a5339f697f5293491b40f90ce46a410f9ba63e72ba316e6b69565249d67574e5e0e9db7747026094b794b5e4f62a3719c1e4e5b1d6400616099b7f1d02fecc5343f96f520a7f7fc22462ee3903483e9aa4dacfe5629a694be220b7418410f4b9ceada45162439648f95649f7e7d8a34c28fd8bc9b72aa49a58a778bb441744ea939354abe7ce629ba9a917dd23b5f5aee36bd66f0ddedbe14123f0971f4571966ff02a01937a3052df3207ff0e152f619a537404bfd9be5c1a92ead68f166b81ff914866c2f5ea41b132a01b231c2e7a069d6a4475d67417b51f49e13356a99689fb528b927b871f8ac1566c23f6e9cdc415c83e921ae8363d1a500208d3284c623ea7fc2ff4fab1c1abacecb30343d1c1505497efd33f5466c5d43b6819f27aa5551d2ed0ba4891bd35165746a65dc5ac02093ab1e830a7b57e57a4f4f2e88934640f010f589c0702a4768b9e32aaf6f56d69ee3dbad7940057b5023d1ed0134e247d6f1b7dadf34ec2b6d197633116a8671b816f54fbdf246641472a7b428763ecd75b1a9a968e011f4f21954e7758134eafac3f54b45c8175a2047d3c587279dc9b5b97388eb0f38ff896a5f3868ada86579c0eae26a318f39d6cb8058cd0a32450116986861043eccdfdce6728437bfac1ef2ff4c553e60856858ba327d6f944ac4d26efe897493ef1b419133ce1d47abecb405da398f67495483667a293f1cf39b682a75c75320d65ea5f79fc182888c113f1e0aff5f3d1ef2193dde78e112f93522475825efe274ca20541e8ef9aea12ed6137d69d1746bb30ea50e9c3e53f27131f49429d9267ba73ff4772745afe40144bec87ff1b07ce632254f8502994d7e840d104f3d5fa639a6c7f2e6bb98d9737a189e8174aa10c8d470b4912ff84df6384cfe8b274d94a38716295036c499dae9c21b0a02a803d511f61a2ba5283a0b92cbe17d8bf6fafa54cbbd7fc4d49c1fdf6018470d1abd17da69aad54377ed8b9e0a5f71ffa61eb84455c52b4cd2eed083c0d20dfb8bca712151352bcd7cfa6a8bd918f6efcfde67a3a81520b42cfb3b92b01d02aba3ad511fa8baaacd1fe7c514570b083cbfd73a45e65c93ce665d4f88f400476071de4f501cbfafcaa70ee8408db21602894ec123ec257ed2c7b730828998d387d48087ff8aed872ebec75a468e856605e6eb3df27d41dadd9ad7eba2e08807fb8e369c2462893d4b201fa6f09469e49aac8f3", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) (async) kcmp(0x0, r5, 0x2, r6, r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) [ 489.978227][ T14] Bluetooth: hci6: command 0x1003 tx timeout [ 489.978458][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:38 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x15}) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) [ 490.034338][ T49] Bluetooth: hci6: sending frame failed (-49) [ 490.035258][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 04:02:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000200)) r5 = syz_open_pts(r4, 0x0) r6 = creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x2, 0x7, 0xebdb, 0xff, 0x3, "08c5f12b93749082161f681e05f4c8972919af"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r7, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r7, 0x400455c8, 0x4) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x12) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) close_range(r1, 0xffffffffffffffff, 0x0) [ 490.133080][T14644] loop1: detected capacity change from 0 to 65536 04:02:38 executing program 5: r0 = syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x15}) (async) r4 = syz_open_pts(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) 04:02:38 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r3, 0x402, 0x0) ftruncate(r3, 0x7fff) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) tkill(0x0, 0x12) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0xfffffffe) r6 = syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="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", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) kcmp(0x0, r5, 0x2, r6, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 04:02:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r3, 0x402, 0x0) ftruncate(r3, 0x7fff) (async) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) (async) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) tkill(0x0, 0x12) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) (async, rerun: 64) tkill(0x0, 0xfffffffe) (async, rerun: 64) r6 = syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="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", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) kcmp(0x0, r5, 0x2, r6, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 04:02:38 executing program 5: r0 = syz_io_uring_setup(0x7375, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x7fff, 0x7, 0x4}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) 04:02:38 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0a00000000000000000000000000000008000000000000000000000500"/92]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) listen(r2, 0x8) 04:02:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 04:02:38 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006edfa8dbc3dcac990000000000000000000000080000d0d1739efded7d8e8e75a362891745cdfe86dfe7449d885d0ecbd5342d2867c91077a01304c57808914dd68cf531eb695bd8f83a91611c8454a983be2306272b9bc70a05341409e2909dcd439987e70dadd23ad807df682a333d6734e958851fd3"]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r3, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r3, 0x402, 0x0) ftruncate(r3, 0x7fff) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c40)={0x2020}, 0x2020) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="8a", 0x1}, {&(0x7f00000000c0)="966c8bf7ff2c672bc89e531a04acdda7bb6ea0cdcc054511c429f5a6", 0x1c}, {&(0x7f0000000100)="223a961794507bc9142ea87c3f61eca9c7ed7fd0a57bece242264136d5a44838d80730999ef87d44a7aaead968d13f7a334c6e601d248da1576f22fe2dd59134fef79b9bad784996d175d52a91d048635888db115d04e3fe802a001e57902d94adc1caead9793bfb02cf9c828de73dad2e130d156552d2164e529aa0d4f5", 0x7e}], 0x3, 0x0, 0x0, 0x895}, 0x40048804) tkill(0x0, 0x12) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x6, 0x0, 0xffffffffffffffb9}, &(0x7f0000000340)=[{}, {}, {}]) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(0x0, 0xfffffffe) r6 = syz_mount_image$ufs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="1eff493073b90e7e0ecad1fe46", 0xd, 0x8000000000000001}, {&(0x7f0000000400)="77a9d15d09f78382919416fdfd916730b81c968504d88432729c327800a040f700af4fbecc3a4f5ad114a63e78700bd5e4d99ec7903c38e13ea8b355feb6246e8962e505332a1a30b8074a9db0d17e5c83c809eff3564d7acf770f52fce3bbae4aae46f56dbf006c7479a89746e83158fd6fe56314ac96b6558d1f9abf3f3be2f5d095d6553b3131c18107609338cdbabbf49be4631da52e51", 0x99, 0x200}, {&(0x7f00000004c0)="ed9bd954a8fd7626f44650e8a13c0b718bfd68e22ed55e850f32e4fe85e63594c40baa9a3297a0d2c8d3385da637fbe9f8159bad6934321abe4173a0dafc77322e518f1bd801a5adef1d33986bd843f7373b65bf917955ff1f0ff5e725f2a28ff840e14a7bab799d758256f576689cf7620148a77f363e6a2c56b8a553f8ff75e29bf9a7d5c994ff73eb6e2b2f605c", 0x8f, 0x10000}, {&(0x7f0000000580)="532f162d3e25139accc4e618bafa4272e1923fae8d1d6c0b2fc44ae88c3b953a3266d9f825aebbd5c8bc52", 0x2b, 0x80}, {&(0x7f00000005c0)="d84feeb8cd36767cb64fc6c803f847e516500169bd21c6d4d86cbb783caf35582cdcd28aa680bdce4aa42365f21c5ad0f3bfd9c4e0ccc97a113bfae4e2d38c9b14036740287c3dba484cce71c5ff7363fdff3a3337e7d805a43ac9dec143a9b17d745d", 0x63, 0x1}, {&(0x7f0000000640)="fc6efef5ef301662d158d79d6cc164e95f7fd2dd5a758fc0957ffa2b8c980ad636e34d110033a3cee12eb2b36def1b4fed7979cfbad26b0641a271d2e10a9af68c3b5d1a3c9c4bba9c1f9fd6d714f72532440ad861369a90be632e95cd64d135968430e81a4071d2dcdca6308619f08d1e0e5b4c46604e15776e98cca94ad2b0e9b9412381a8d22ec205b7e3b4002153e00fbd27ce4963d68a8cdf73f25f42", 0x9f}, {&(0x7f0000000700)="5e4d647890e6b97c853548f09e209a179e865d875bd74d96bf8d6515a59cb6e4638a57e20040140865c30175be531dfa67f881c53d3548a9d6b96d688974b359e2de98f7bf158ad7c33228074c3be53ea80baae5319230a7cd3b1950d17f334e6244", 0x62, 0x1000000}, {&(0x7f0000000780)="12da2da0bf76f691aa9b9f13929207a5c80605ad2361b8ff85d959118a1927715e7f345a730646848b6f1d39233e6b57fd7ec2d7fedeedb66a8b27d80696edb5342823dc2fe310d5a861d31b88cfedafa48e66762597a2a93b6abbdb61c31ef3ed0e9829ddd73773093eb5209d68c27fb01f97635a6c5556353b6a1028c5e92b1d2b9533de9903ffc7a52aa1ae45b548c8d3164e28542401092a838c55568d58e92c8b6b65d34ecd7993d9ec404d8137402f48ca74ca2eccc4829af6a3127dd8485f58177e49231118744f0b70d9534e4f3d0bf88583d35f1d2f8012fd05fbbf0ca0564fa1", 0xe5, 0x6}, {&(0x7f0000002c00)="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", 0x1000, 0x401}, {&(0x7f0000000880)="c6bc80256ab8aa35cbb45ff9d4c1d7bc67f2e91ba54c60f85334a4d1f51509be914bb5769d30cc7e3f2b59eb", 0x2c, 0xabd5}], 0x111002, &(0x7f00000009c0)={[{}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@appraise_type}, {@fsmagic}]}) kcmp(0x0, r5, 0x2, r6, r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 04:02:38 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0a00000000000000000000000000000008000000000000000000000500"/92]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r2, 0x402, 0x0) (async) listen(r2, 0x8) 04:02:39 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r2, 0x8000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:02:39 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0a00000000000000000000000000000008000000000000000000000500"/92]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) fcntl$notify(r2, 0x402, 0x0) listen(r2, 0x8) socket$tipc(0x1e, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=ANY=[@ANYBLOB="0f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0a00000000000000000000000000000008000000000000000000000500"/92]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) accept4(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCGIFMTU(r2, 0x8929, &(0x7f0000000380)={'macvtap0\x00'}) (async) fcntl$notify(r2, 0x402, 0x0) (async) listen(r2, 0x8) (async) 04:02:39 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:39 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='-[\x00', 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000040)={{@host, 0x400}, 0xffff, 0x8}) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) [ 491.154996][ T48] Bluetooth: hci7: Frame reassembly failed (-84) 04:02:39 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='-[\x00', 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000040)={{@host, 0x400}, 0xffff, 0x8}) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='-[\x00', 0x0, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000040)={{@host, 0x400}, 0xffff, 0x8}) (async) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) (async) [ 491.338316][ T42] Bluetooth: hci8: Frame reassembly failed (-84) 04:02:39 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='-[\x00', 0x0, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000040)={{@host, 0x400}, 0xffff, 0x8}) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000001f00)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}) 04:02:40 executing program 5: r0 = syz_io_uring_setup(0x7375, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) r4 = syz_open_pts(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x7fff, 0x7, 0x4}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) ioctl$KDADDIO(r6, 0x400455c8, 0x4) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) syz_io_uring_setup(0x7375, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)) (async) syz_open_pts(r3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) (async) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0x7fff, 0x7, 0x4}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) (async) io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "d455c879b54ccc45a23c27f386eb720dbc55a5"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000080)) (async) ioctl$KDADDIO(r6, 0x400455c8, 0x4) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) (async) 04:02:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x791, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r3 = syz_io_uring_setup(0x3464, &(0x7f0000000140)={0x0, 0x9b27, 0x2, 0x1, 0x2a7, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f00005ee000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x8000000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x7ffff000) close_range(r0, 0xffffffffffffffff, 0x0) 04:02:40 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}) 04:02:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$cont(0x20, 0x0, 0x7, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) [ 492.858172][ T7066] Bluetooth: hci6: command 0x1003 tx timeout [ 492.858303][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -110 04:02:41 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001cc0)={'netdevsim0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000000000000000000000002e0000000000000000000000e70000000000000000000000000000000000000000000000000000000000000000c35e650d8a20dbe10000000000000000000000000000000000000000000000000000000005000000000d0cbd0f8c50d2d9fa1a10f256c7d12d562c0fc6c577756fc2fe1420e74939bbe1c4c8637f29fa403bca7bf6c2430f7a9636b98724006f75c63bc4bdd2692ccb5abb28d97a4862c2de35ffc190d0037033f03257e8d6705400319db3f59219748038b9dd2345aa0b7f79440aa13e4b2d897972979e1b19b4ff0d19afd6815393ead71a8cffe5fc9e0e20fb8fd28d298f4a03f51870c6df45934090c5b1c04b14acbc6043"]}) [ 493.040613][T14704] Bluetooth: hci6: sending frame failed (-49) [ 493.041303][ T3649] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 493.178212][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 493.178519][ T14] ==================================================================