sockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000600)={0x40, {{0xa, 0x4e22, 0x98, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, {{0xa, 0x4e21, 0x6, @local, 0x73}}}, 0x108) pwrite64(r1, &(0x7f0000000040)="020cd01f96226b0a6794287acbfab64b3875fd8786848fc48391207d7b32dc78697a37ada5c52fb15cb488e25f3c9ee8e7b2df815d", 0x35, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0xd8) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=0x1, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:20:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000140)) (async) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) (async, rerun: 64) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x3, 0x0, "61f090", 0x4, 0x1}) (rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES8=r3, @ANYRESDEC=r4, @ANYRES64=r1, @ANYBLOB="d65bfb3e2697d685b5b174521a15c1fd242a4c0f61d559106fd8e26f73cdcd22be6c09b1fc2584fd0bd31815963edbb8c9737eed0782783c27e36eb0ab3867ef007316f08ef2a310363236fb5d967e7fbb1ace1293f282b0c08ebf926d9516341ae313c6cda73dd8d35a7bfd71e98ec59c5f8d1c5e3a06f77168821906dc5b385bf614c25d47a465402b9ba52bbb765055caad59821899b01f204c2fe6880daca08320be694c89a789212918d80100dce793be9984e5c96c3ac96994f7765f8f369ad71e7fb60ccd3abce99d4600"/220], 0x3c}}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffff0d, &(0x7f00000001c0)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, r3, 0xee00}}}], 0x18}, 0x240048f0) 10:20:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 461.896877][ T6364] Bluetooth: hci6: command 0x1003 tx timeout [ 461.896999][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 461.978441][ T6364] Bluetooth: hci9: command 0x1003 tx timeout [ 461.978661][ T3655] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 461.984505][ T6364] Bluetooth: hci8: command 0x1003 tx timeout [ 461.984625][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5460, &(0x7f00000000c0)) 10:20:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f00000000c0)) [ 462.042853][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000480)={{}, "02e1f3964e41340ad8d6f00a5d4b8b67122152c06db32921f17e9da8d15bf022d183874ddb778c8a64ef40e96435c1a86a21827e9e1cfefcf7480d1915ab565304cb2ec1d1e37847bd278c5f42041819eb6f540cb38a83f5ae22b09268d004e9b372576f9df663be38c02e4ef3fa4815c17ef3ee3313c22fbf83548bc03a015af77f2fd0791522850efd6fc469d157bb77e941ff89b4083e12d7a74824bab6f2096a67f8f58e16161ca86154f956c8d4eba619c7ed84578cc0f97285a9fc7164f0c0b8b8089a9196a13b9c7800f8e1092aed063569de2b73ed1b021b4655669d2976398527094bf8c78cb8f4445afbbc6762fa0482770e71c81d7b952507bcad8ca3f5f7b623572f4df40f15d0401d06805fa15d1a9de983e68fe81517b2dcc792d49638270eadb1398930f0dc2c2553d5b3472d9c08b9ab25f54bcf315f0748ba83db6efa4100dbc73204ac93397356d4977f654bda893a7e4471e2265b0deb721f94a2cb52a72b04402c1aa7a734f72b540824b412a2ca2e0bb7b2ee51a54d9bcb9abf03d109035171024e1d6a0fb13886432734ad5e74ee6578713269a33bd0fe3fe9cf76a4be870a785b8bc2b634957f6929b73802aeb2b7b833cd3d0b5af99abe7a4418bd47f0ad135a278d03c7bee22437c418250a745b5cbbb7b5a91e140e292f71cb04a2f8057ea52fb35e5e286f36289b30f58959454875b480d49638f06ca90c88c2c3045e24991f00d0701fa7d78097250d6f6571f6f90c65c813ec598ae859f0955b85de171496e173026c11d8b3abe060e501ad9dbbe419d126cf58b9ca3db4559b4a54ff7b10d9103e737d65eaffa4371fe05f1286f821ec7538c82ecea77fe461116fc21f0cc5df0155f47498aaa1e8fe7598ca057ab3a1e49c409d07b96ef51be8aff90f6e1e4938db01ce014b5f8a18f974be147c6647140badf41c9b7ac5ba764a838faa250bf374536b52e1389de02c8fab6aa6ecef061f1af63b6ee105ac2d1653cdd9ec89f28e07477cca4538d39528e7fa46edb29d4ce79e3407e31fc68c0e712007550db2e3790917799f4da25fe5a668c98f672cb6b1471232bb9942cb7d54bf3c52b75a2d631583bc76e3ce9527cbc031d75fdf1b28bbaeab01eaf6f2ed6ef300f38ff3c68463837687f95e69fd7f9d78a59700bcf7d92771baa2e116e0d53988c95c3c424b261db9c6ea2583cc869ce268741b0d56d38514ef75e3c716286dd4d925496c9002cbf0f9846682097855f4a3fe060f03a6ad21da91c52a9beba0b9c2e03eec55ebc2fc053e267bf0f8b3934a8c447adcdc9633500c1d526ccb93acfccc92ee94e773600c5ceb168336f6ae3ec7d6451b7f6f920d5244886186d7beaf10a319c2e525462594f4fdd263ee9873ac8cc4970a99eecd93563ea5da1f818915e74bab5b8c99805551302f49421f473fdd2888389121f1fbd96515193be832b91f64b960fac9eaef677fd7d84d5afbcdfc73eaab0630d0d10a5b98ee89a2550e23f74133300907bca1ac9b0b8201292200becb265b88f42c2911c85ba70caece3330b280336dba2f5762ea760e29f57269c5050f2b7bde5fa08c533da643b9e90b411ac639f60ae98148902914c75ec27e3901ec88a9080e1b48f60be466cd57a9e66fe8a75bbf9676defbc1bbf8738c1ef341f13617fc814e008b2e6b31f9358be8b2fbbdf646d7053e3ee2045bdbca7312d2f6f9e3afdc8a9cd8a343bc8d3f1dcabab429117b0bc8dc5266018a6093ace3b6c99f943b417da4f6e2d20ce1ac878d939856f978e58dcafdba5686c99e219440c7f6075f3bcc9cb4bef4672a3ab33094da1acabed22768117fc027d739d93a5bf4cedccf961c7dd3a4b13ae3ee5b04ba67764b68a466334293347755f35b0b96753b1429ce49af1dbc13d70fdc067ac8e29ffbd6978c0eb730243774da85e578c4b3ee06fcfbd4b6aab360e14fa0ccda88cca15eacf4c757136e7da2990434fcc9723ae001db6fb6832a07565289029c856210a3667818c793848afecd13a0c0975a62fda1ac57b334498454afcf69195eabfc0121041b862811d4a61542e2bb370fad6b2a9e1c67acb7dd80243604149de7f368165e93152e97e6ba934f217067d504a3403663c8f320c36b9e7f02cf78c5a5d262bd6d9daa761d992527636a29cca7069637fa96916653525c8cb57cb42803644b514fd3aa6c332f017fcfb0046d281c035a88efe83e6f387b539b1f803bf470c494efe1c13d25e66fb2f30f545544dfbee30c0e6214be8c3d3f0666220fbb6a7bfe79f95fdb5a16ed058eb35a0491f6affca228f31857f0943f3e45728e9edd6e7cd2ac0304af2edec28a78e1b89c7369078db5e1b6c48cc69146682dd279f781ad767a3985542a57115429f80d563dcc7840736fa0335831fec621f3041492540397cec15e3ef7bd74d47944da895ba2ad58582c6bcabdb2565da9f42e1a96ec722e467b7316a0ff5e38f09d47ef01835f549ffa95643d637abf0a18c3959a1a1f322583eb93508992c1f4068fc1262162489c09db7052240dd95f271f127e0cd576dc9aec421dc66e5fac7598d8dfeee82af21666fa734dcc3983d915e834e5dfadeff0739f03e55f0965bf147735ee688bd2b3cd1ed26efd458b654ece296c89e0c665e8de5cadd17fce5c296ff63618b237eec70694ca1e9969cd24c2631e180d22e91bf091cace9a33134e5e35faeb4f775e3ee79d89e27df2ee2d2041da9d4a20ea580bb8e8d127bba341fc474131ca338d10943030d2da36c9f3e4edc9db307198a6150dde16768ad4e10b118d29ba418122408d978a4f5c45e638355069056bc7aa0e64c2e653261b2f0e1b715b29b27083c9682901fbbd53adea56799c27e72385933251043a57647bc1364771d2676e0840431ff3ab1f9f0291e32b3ce971addd82859407c9116fd48b3d1d283c2293786d6753cb82fd936900ef3d81fd588afd218dc26e3da158ddb8296a48a8a010b3de3e82e82e822a64e7d9f25b053549d06644f9d1686f570d556461661f722db83b3ae9634e34f7608dba4885eb5da421f7071499ce9dd6f641c5bda607f66058546be466ee1b6e08bf22c9eacd10b4832457507cf1d248320cde24e6abac35a9e448f7ee3749cb5eab7746ba2b2a0fe7278135bf85343b5ae994ea6b032389f097a94d1c5ce81972bf7a8d5fd5bd4530501e5022033014e159a23ddd1fe6218c36d4f5084e80f9952790c8e8d66237c4ad217a7d2bf3cba9eab6ceba10968756dec53017252d5b790d163adf3f94c5adfffeb8f46ceff9285e3391839515dd789b34dcf1b0be3f896b77af4b6eb895a9186cc58cbc2044826a844e9120f7edef3b840881785665ee78d2489c6d2b8ca30468d044dc3512ec8b083c3bf70e11ba228b52d331908e6a8c613ad843b95e6ed502a8480fc4cccf3f7ba2727801c49f9444d34e1ca7b3bf2a26a56a96f769ff5b39caedcbad30e53dad8b54bd80ded355925595085720175c786805ac10951405921a77bd94733a55e28ff8f219f1157cf19fcf295359febd07acf78eec3e7a816277e84f6f3777a7b966ddd633fc2dcdda01cd15f15d3522344087fe093e2d441ea61cc4f1c2f5dd68c2921c6473ccf5def354b4f4e6af97b491fe2ba83d9c64bcdba7a2fa0f678b9a3ff420c0b6053b97890751b1d5325eae9d96ef5cbfebdc5d1a3017ccee4ea4dcd3d8fede3b5f12416ec0490fcd2ed8e4207579447d80218d8942d8ddd12624c0431b03dc34cde7235b7b637c37a3d0b74525ada5ec9340b7931ce5a06419a7a98976fad631ccd629cd2b46a22dccbe7dfda0ca02ffe52c57b211ef75856be9946e4e0ba6ab483ede22f970f61217bf3009918a075145174f64bd056065767cbedf8777dac9d14eeff669acb4f401f59d687b56973ae81d908b6e6dff499ac47baeb3eeee4592e565c86603be77f69a71a433ee8bb620841d56f39f5e246a14471aeb3434b223763c0dde6690506e6d2322edbc2b4c9a4e2b9e7889f04fd04482209521b599d546b1d8378fbb6dcee118fa14b266f107248bba8c3865932fd59b8cbc7c11e8f6c0d16669b1106115df6cc5aa3b36a3e9818dbf9ab415b9b7e5a79f300c019a5b4552a5af703456df3c5e9f83b0c98934cb9f18c86b5da595d7613bda3b8a1d87c71ca844da2429cf9157f5f72f90804a399cb58a4b8a2598510d0f1e98b8f23a6a35d92a675563fe3e3231dc7a974aafb00e22fe2e82e39d20fb6c00a09cc173d16a22954d93caf1d7b6962241d6499ed3f638052d7883347d9810e07d1a36cf2df1dea71520bf73c069e645ab58eea1ccb053941434a3b5a325c661b3cc5e0cb3dab35f4ac07581e37c4cc7fcca49b8b591b4ca72dacaa550fc1c1507ae41c88ceefac7cce2ee0dd8f079ae82602f1b38be9928a7c632158847f6d148ae94bee12558cf7e969bb66315228bc5bb3f2d1566ee2a5b73063e7ea1ffe10eae0398c774e1748e9ac5516b77a5cad94a9eff1721f947a9809ce17a7c53c04366cfc5cb54a669794190034474f82b37fb75f9e4e24dc010c973cdac6530f3d66af0938ca85cff9918b9fe7d71838862153913c7f377b207387b88be824d34b9ae6531d30c8a867b6625b355652119a58c30012a64860735b2ad729a602d90f973a320c8a1227ea85a4542b27b38dbe37cff6327df02ce1c9b8ca9082fb8f2eb57a02d7feea9c38a264b62e6acb650680412765c1797b8bfb036f13fc204c4a1c59b97a7abfa607e67dcc043b87772ac41975f58185c68c7157cb28887a4689dc7f2158100249de61fbdcd862c7ae45dffce19dc3818f82ea200affd7e0157c077deb66a224455baace27362a18fbc0d5a4952c365ed6b64de6b09d38b0cc7807320e4b0f0598803174f7efa74910526346ef35086e1dfcf0d70669ed130743c20f135cb4b4cfed172de523a720f6b2a795371204c42101453d09fa51ca28f8afd707f656ca2e8e75e17b8e75d05fdfd43e230d0ecd4f5e420fcfc1590405da3c313f81ed3a9612c5f823fca8f585c217abddcbc7d2b6d09cef39650c199d093d5b76a98000a69238099cadb390b328a3606513ba2edd8466dc46c5e52ad56ec2a78e3e17fade54c8aa10da8d5e5459aea646f8ee0b127d9029c59585399f58de211c45037bf728886893d1c6fcc50c08b68bfc5d49438d18ad561f24c8e2eb1bb0c82f3909763b8a324e32c4a45fe21093094481eedb72f855133707fb6966b4e23d640be2cb94d53eb44f94d3a8e27af8e58a24a19014f362cd7c6f046d9b3bbf34f19a9565f766ac3d47bc15cf5307c4e069cb976a871d8b15df33a541e1a2d121be602c1d1abd9a43c164be77cdae5222f1c5eb44c68834091353a1e4864cc08ae8577554e36752340710dbb785818bcf8da6b94b92aa02d2fa4fa832fc6110e4985187cc586c3cc7008d34afce5cce97f5e10b212a29f08584c286ec5e0ef67da5ec529683f6b2119d2806c53e31d2ba3486787e397fafc3b6ed566dfb83e0a2c11b05f59821e454ed4902e7d718d4538a45305dc0e1530916cd461b8a761b8e8ad6f981f5f1dedbb0ea99df733c332689a8a485713ee9563a6300ee7c3bda0d73f427e6c1f0c4595ece8f262d803ad7cee9d26f4cfca0574cb9eb5d7561ac50f59c7e700210d03b30441d5a3d881d4d08832a18402761ac1527d181d6d0e32b829e10f3154544b14fe83f76178647fd580d46d25af17e277c8231267effb0dad79fae7b763b8023b00"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x8000000000000001, 0x889a, 0x7fff, 0x7, 0xcfc, 0x0, 0x0, 0x6, 0x7, 0x0, 0xfffffffffffffffd, 0x7], 0x10000}) [ 462.128734][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 462.137163][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 462.147415][ T9090] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:32 executing program 4: r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000040) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async, rerun: 32) r2 = socket(0xf, 0x2, 0x0) (rerun: 32) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r2) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000600)={0x40, {{0xa, 0x4e22, 0x98, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, {{0xa, 0x4e21, 0x6, @local, 0x73}}}, 0x108) (async) pwrite64(r1, &(0x7f0000000040)="020cd01f96226b0a6794287acbfab64b3875fd8786848fc48391207d7b32dc78697a37ada5c52fb15cb488e25f3c9ee8e7b2df815d", 0x35, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0xd8) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=0x1, 0x4) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:20:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x8933, &(0x7f00000000c0)) 10:20:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f00000000c0)) 10:20:32 executing program 4: r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (rerun: 64) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000040) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) (async, rerun: 64) r2 = socket(0xf, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000600)={0x40, {{0xa, 0x4e22, 0x98, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, {{0xa, 0x4e21, 0x6, @local, 0x73}}}, 0x108) pwrite64(r1, &(0x7f0000000040)="020cd01f96226b0a6794287acbfab64b3875fd8786848fc48391207d7b32dc78697a37ada5c52fb15cb488e25f3c9ee8e7b2df815d", 0x35, 0x0) (async, rerun: 32) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0xd8) (async, rerun: 32) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=0x1, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 462.429191][ T5864] Bluetooth: hci8: Frame reassembly failed (-84) 10:20:32 executing program 4: r0 = memfd_create(&(0x7f0000000440)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11B\x84\xb6\x1e\x835F\xef\x19\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\xb8\xfe4\xda\x80e\x94az\x04\xf1k\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8', 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000040) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0xf, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000600)={0x40, {{0xa, 0x4e22, 0x98, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, {{0xa, 0x4e21, 0x6, @local, 0x73}}}, 0x108) pwrite64(r1, &(0x7f0000000040)="020cd01f96226b0a6794287acbfab64b3875fd8786848fc48391207d7b32dc78697a37ada5c52fb15cb488e25f3c9ee8e7b2df815d", 0x35, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0xd8) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000740)=0x1, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:20:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x401c5820, &(0x7f00000000c0)) 10:20:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, &(0x7f0000003080)={0x0, 0x3938700}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xac, 0x0, 0x0, "e915ebc95478cee2c7d503b81997760b", "6bd0da9d13bfb545cbbc504388a10b91d40533f17791acc0a4a7ab8c487047e7052c573f10f717e8901440a951a595adcfaf490e2f1569417fba1361b4e5ab4376e329ac77c2f9d684a025c7045c2d35c9220bcf9bc5c85f0da3d3b5d582703e22aedbb65b2a985d81d0fc3b54d9e7aba8b99ae74dbfdeeee8ddc3d81e1fe7d53211eabc8e0a9b12518a9c26403c2fca63e7df976e2ebf"}, 0xac, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000440)=0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20000001) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x0, 0x80, "5b9cdb25ceb82faaf484a8aec01ab6a5"}, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00'}, 0x10) 10:20:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000480)={{}, "02e1f3964e41340ad8d6f00a5d4b8b67122152c06db32921f17e9da8d15bf022d183874ddb778c8a64ef40e96435c1a86a21827e9e1cfefcf7480d1915ab565304cb2ec1d1e37847bd278c5f42041819eb6f540cb38a83f5ae22b09268d004e9b372576f9df663be38c02e4ef3fa4815c17ef3ee3313c22fbf83548bc03a015af77f2fd0791522850efd6fc469d157bb77e941ff89b4083e12d7a74824bab6f2096a67f8f58e16161ca86154f956c8d4eba619c7ed84578cc0f97285a9fc7164f0c0b8b8089a9196a13b9c7800f8e1092aed063569de2b73ed1b021b4655669d2976398527094bf8c78cb8f4445afbbc6762fa0482770e71c81d7b952507bcad8ca3f5f7b623572f4df40f15d0401d06805fa15d1a9de983e68fe81517b2dcc792d49638270eadb1398930f0dc2c2553d5b3472d9c08b9ab25f54bcf315f0748ba83db6efa4100dbc73204ac93397356d4977f654bda893a7e4471e2265b0deb721f94a2cb52a72b04402c1aa7a734f72b540824b412a2ca2e0bb7b2ee51a54d9bcb9abf03d109035171024e1d6a0fb13886432734ad5e74ee6578713269a33bd0fe3fe9cf76a4be870a785b8bc2b634957f6929b73802aeb2b7b833cd3d0b5af99abe7a4418bd47f0ad135a278d03c7bee22437c418250a745b5cbbb7b5a91e140e292f71cb04a2f8057ea52fb35e5e286f36289b30f58959454875b480d49638f06ca90c88c2c3045e24991f00d0701fa7d78097250d6f6571f6f90c65c813ec598ae859f0955b85de171496e173026c11d8b3abe060e501ad9dbbe419d126cf58b9ca3db4559b4a54ff7b10d9103e737d65eaffa4371fe05f1286f821ec7538c82ecea77fe461116fc21f0cc5df0155f47498aaa1e8fe7598ca057ab3a1e49c409d07b96ef51be8aff90f6e1e4938db01ce014b5f8a18f974be147c6647140badf41c9b7ac5ba764a838faa250bf374536b52e1389de02c8fab6aa6ecef061f1af63b6ee105ac2d1653cdd9ec89f28e07477cca4538d39528e7fa46edb29d4ce79e3407e31fc68c0e712007550db2e3790917799f4da25fe5a668c98f672cb6b1471232bb9942cb7d54bf3c52b75a2d631583bc76e3ce9527cbc031d75fdf1b28bbaeab01eaf6f2ed6ef300f38ff3c68463837687f95e69fd7f9d78a59700bcf7d92771baa2e116e0d53988c95c3c424b261db9c6ea2583cc869ce268741b0d56d38514ef75e3c716286dd4d925496c9002cbf0f9846682097855f4a3fe060f03a6ad21da91c52a9beba0b9c2e03eec55ebc2fc053e267bf0f8b3934a8c447adcdc9633500c1d526ccb93acfccc92ee94e773600c5ceb168336f6ae3ec7d6451b7f6f920d5244886186d7beaf10a319c2e525462594f4fdd263ee9873ac8cc4970a99eecd93563ea5da1f818915e74bab5b8c99805551302f49421f473fdd2888389121f1fbd96515193be832b91f64b960fac9eaef677fd7d84d5afbcdfc73eaab0630d0d10a5b98ee89a2550e23f74133300907bca1ac9b0b8201292200becb265b88f42c2911c85ba70caece3330b280336dba2f5762ea760e29f57269c5050f2b7bde5fa08c533da643b9e90b411ac639f60ae98148902914c75ec27e3901ec88a9080e1b48f60be466cd57a9e66fe8a75bbf9676defbc1bbf8738c1ef341f13617fc814e008b2e6b31f9358be8b2fbbdf646d7053e3ee2045bdbca7312d2f6f9e3afdc8a9cd8a343bc8d3f1dcabab429117b0bc8dc5266018a6093ace3b6c99f943b417da4f6e2d20ce1ac878d939856f978e58dcafdba5686c99e219440c7f6075f3bcc9cb4bef4672a3ab33094da1acabed22768117fc027d739d93a5bf4cedccf961c7dd3a4b13ae3ee5b04ba67764b68a466334293347755f35b0b96753b1429ce49af1dbc13d70fdc067ac8e29ffbd6978c0eb730243774da85e578c4b3ee06fcfbd4b6aab360e14fa0ccda88cca15eacf4c757136e7da2990434fcc9723ae001db6fb6832a07565289029c856210a3667818c793848afecd13a0c0975a62fda1ac57b334498454afcf69195eabfc0121041b862811d4a61542e2bb370fad6b2a9e1c67acb7dd80243604149de7f368165e93152e97e6ba934f217067d504a3403663c8f320c36b9e7f02cf78c5a5d262bd6d9daa761d992527636a29cca7069637fa96916653525c8cb57cb42803644b514fd3aa6c332f017fcfb0046d281c035a88efe83e6f387b539b1f803bf470c494efe1c13d25e66fb2f30f545544dfbee30c0e6214be8c3d3f0666220fbb6a7bfe79f95fdb5a16ed058eb35a0491f6affca228f31857f0943f3e45728e9edd6e7cd2ac0304af2edec28a78e1b89c7369078db5e1b6c48cc69146682dd279f781ad767a3985542a57115429f80d563dcc7840736fa0335831fec621f3041492540397cec15e3ef7bd74d47944da895ba2ad58582c6bcabdb2565da9f42e1a96ec722e467b7316a0ff5e38f09d47ef01835f549ffa95643d637abf0a18c3959a1a1f322583eb93508992c1f4068fc1262162489c09db7052240dd95f271f127e0cd576dc9aec421dc66e5fac7598d8dfeee82af21666fa734dcc3983d915e834e5dfadeff0739f03e55f0965bf147735ee688bd2b3cd1ed26efd458b654ece296c89e0c665e8de5cadd17fce5c296ff63618b237eec70694ca1e9969cd24c2631e180d22e91bf091cace9a33134e5e35faeb4f775e3ee79d89e27df2ee2d2041da9d4a20ea580bb8e8d127bba341fc474131ca338d10943030d2da36c9f3e4edc9db307198a6150dde16768ad4e10b118d29ba418122408d978a4f5c45e638355069056bc7aa0e64c2e653261b2f0e1b715b29b27083c9682901fbbd53adea56799c27e72385933251043a57647bc1364771d2676e0840431ff3ab1f9f0291e32b3ce971addd82859407c9116fd48b3d1d283c2293786d6753cb82fd936900ef3d81fd588afd218dc26e3da158ddb8296a48a8a010b3de3e82e82e822a64e7d9f25b053549d06644f9d1686f570d556461661f722db83b3ae9634e34f7608dba4885eb5da421f7071499ce9dd6f641c5bda607f66058546be466ee1b6e08bf22c9eacd10b4832457507cf1d248320cde24e6abac35a9e448f7ee3749cb5eab7746ba2b2a0fe7278135bf85343b5ae994ea6b032389f097a94d1c5ce81972bf7a8d5fd5bd4530501e5022033014e159a23ddd1fe6218c36d4f5084e80f9952790c8e8d66237c4ad217a7d2bf3cba9eab6ceba10968756dec53017252d5b790d163adf3f94c5adfffeb8f46ceff9285e3391839515dd789b34dcf1b0be3f896b77af4b6eb895a9186cc58cbc2044826a844e9120f7edef3b840881785665ee78d2489c6d2b8ca30468d044dc3512ec8b083c3bf70e11ba228b52d331908e6a8c613ad843b95e6ed502a8480fc4cccf3f7ba2727801c49f9444d34e1ca7b3bf2a26a56a96f769ff5b39caedcbad30e53dad8b54bd80ded355925595085720175c786805ac10951405921a77bd94733a55e28ff8f219f1157cf19fcf295359febd07acf78eec3e7a816277e84f6f3777a7b966ddd633fc2dcdda01cd15f15d3522344087fe093e2d441ea61cc4f1c2f5dd68c2921c6473ccf5def354b4f4e6af97b491fe2ba83d9c64bcdba7a2fa0f678b9a3ff420c0b6053b97890751b1d5325eae9d96ef5cbfebdc5d1a3017ccee4ea4dcd3d8fede3b5f12416ec0490fcd2ed8e4207579447d80218d8942d8ddd12624c0431b03dc34cde7235b7b637c37a3d0b74525ada5ec9340b7931ce5a06419a7a98976fad631ccd629cd2b46a22dccbe7dfda0ca02ffe52c57b211ef75856be9946e4e0ba6ab483ede22f970f61217bf3009918a075145174f64bd056065767cbedf8777dac9d14eeff669acb4f401f59d687b56973ae81d908b6e6dff499ac47baeb3eeee4592e565c86603be77f69a71a433ee8bb620841d56f39f5e246a14471aeb3434b223763c0dde6690506e6d2322edbc2b4c9a4e2b9e7889f04fd04482209521b599d546b1d8378fbb6dcee118fa14b266f107248bba8c3865932fd59b8cbc7c11e8f6c0d16669b1106115df6cc5aa3b36a3e9818dbf9ab415b9b7e5a79f300c019a5b4552a5af703456df3c5e9f83b0c98934cb9f18c86b5da595d7613bda3b8a1d87c71ca844da2429cf9157f5f72f90804a399cb58a4b8a2598510d0f1e98b8f23a6a35d92a675563fe3e3231dc7a974aafb00e22fe2e82e39d20fb6c00a09cc173d16a22954d93caf1d7b6962241d6499ed3f638052d7883347d9810e07d1a36cf2df1dea71520bf73c069e645ab58eea1ccb053941434a3b5a325c661b3cc5e0cb3dab35f4ac07581e37c4cc7fcca49b8b591b4ca72dacaa550fc1c1507ae41c88ceefac7cce2ee0dd8f079ae82602f1b38be9928a7c632158847f6d148ae94bee12558cf7e969bb66315228bc5bb3f2d1566ee2a5b73063e7ea1ffe10eae0398c774e1748e9ac5516b77a5cad94a9eff1721f947a9809ce17a7c53c04366cfc5cb54a669794190034474f82b37fb75f9e4e24dc010c973cdac6530f3d66af0938ca85cff9918b9fe7d71838862153913c7f377b207387b88be824d34b9ae6531d30c8a867b6625b355652119a58c30012a64860735b2ad729a602d90f973a320c8a1227ea85a4542b27b38dbe37cff6327df02ce1c9b8ca9082fb8f2eb57a02d7feea9c38a264b62e6acb650680412765c1797b8bfb036f13fc204c4a1c59b97a7abfa607e67dcc043b87772ac41975f58185c68c7157cb28887a4689dc7f2158100249de61fbdcd862c7ae45dffce19dc3818f82ea200affd7e0157c077deb66a224455baace27362a18fbc0d5a4952c365ed6b64de6b09d38b0cc7807320e4b0f0598803174f7efa74910526346ef35086e1dfcf0d70669ed130743c20f135cb4b4cfed172de523a720f6b2a795371204c42101453d09fa51ca28f8afd707f656ca2e8e75e17b8e75d05fdfd43e230d0ecd4f5e420fcfc1590405da3c313f81ed3a9612c5f823fca8f585c217abddcbc7d2b6d09cef39650c199d093d5b76a98000a69238099cadb390b328a3606513ba2edd8466dc46c5e52ad56ec2a78e3e17fade54c8aa10da8d5e5459aea646f8ee0b127d9029c59585399f58de211c45037bf728886893d1c6fcc50c08b68bfc5d49438d18ad561f24c8e2eb1bb0c82f3909763b8a324e32c4a45fe21093094481eedb72f855133707fb6966b4e23d640be2cb94d53eb44f94d3a8e27af8e58a24a19014f362cd7c6f046d9b3bbf34f19a9565f766ac3d47bc15cf5307c4e069cb976a871d8b15df33a541e1a2d121be602c1d1abd9a43c164be77cdae5222f1c5eb44c68834091353a1e4864cc08ae8577554e36752340710dbb785818bcf8da6b94b92aa02d2fa4fa832fc6110e4985187cc586c3cc7008d34afce5cce97f5e10b212a29f08584c286ec5e0ef67da5ec529683f6b2119d2806c53e31d2ba3486787e397fafc3b6ed566dfb83e0a2c11b05f59821e454ed4902e7d718d4538a45305dc0e1530916cd461b8a761b8e8ad6f981f5f1dedbb0ea99df733c332689a8a485713ee9563a6300ee7c3bda0d73f427e6c1f0c4595ece8f262d803ad7cee9d26f4cfca0574cb9eb5d7561ac50f59c7e700210d03b30441d5a3d881d4d08832a18402761ac1527d181d6d0e32b829e10f3154544b14fe83f76178647fd580d46d25af17e277c8231267effb0dad79fae7b763b8023b00"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x8000000000000001, 0x889a, 0x7fff, 0x7, 0xcfc, 0x0, 0x0, 0x6, 0x7, 0x0, 0xfffffffffffffffd, 0x7], 0x10000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000480)={{}, "02e1f3964e41340ad8d6f00a5d4b8b67122152c06db32921f17e9da8d15bf022d183874ddb778c8a64ef40e96435c1a86a21827e9e1cfefcf7480d1915ab565304cb2ec1d1e37847bd278c5f42041819eb6f540cb38a83f5ae22b09268d004e9b372576f9df663be38c02e4ef3fa4815c17ef3ee3313c22fbf83548bc03a015af77f2fd0791522850efd6fc469d157bb77e941ff89b4083e12d7a74824bab6f2096a67f8f58e16161ca86154f956c8d4eba619c7ed84578cc0f97285a9fc7164f0c0b8b8089a9196a13b9c7800f8e1092aed063569de2b73ed1b021b4655669d2976398527094bf8c78cb8f4445afbbc6762fa0482770e71c81d7b952507bcad8ca3f5f7b623572f4df40f15d0401d06805fa15d1a9de983e68fe81517b2dcc792d49638270eadb1398930f0dc2c2553d5b3472d9c08b9ab25f54bcf315f0748ba83db6efa4100dbc73204ac93397356d4977f654bda893a7e4471e2265b0deb721f94a2cb52a72b04402c1aa7a734f72b540824b412a2ca2e0bb7b2ee51a54d9bcb9abf03d109035171024e1d6a0fb13886432734ad5e74ee6578713269a33bd0fe3fe9cf76a4be870a785b8bc2b634957f6929b73802aeb2b7b833cd3d0b5af99abe7a4418bd47f0ad135a278d03c7bee22437c418250a745b5cbbb7b5a91e140e292f71cb04a2f8057ea52fb35e5e286f36289b30f58959454875b480d49638f06ca90c88c2c3045e24991f00d0701fa7d78097250d6f6571f6f90c65c813ec598ae859f0955b85de171496e173026c11d8b3abe060e501ad9dbbe419d126cf58b9ca3db4559b4a54ff7b10d9103e737d65eaffa4371fe05f1286f821ec7538c82ecea77fe461116fc21f0cc5df0155f47498aaa1e8fe7598ca057ab3a1e49c409d07b96ef51be8aff90f6e1e4938db01ce014b5f8a18f974be147c6647140badf41c9b7ac5ba764a838faa250bf374536b52e1389de02c8fab6aa6ecef061f1af63b6ee105ac2d1653cdd9ec89f28e07477cca4538d39528e7fa46edb29d4ce79e3407e31fc68c0e712007550db2e3790917799f4da25fe5a668c98f672cb6b1471232bb9942cb7d54bf3c52b75a2d631583bc76e3ce9527cbc031d75fdf1b28bbaeab01eaf6f2ed6ef300f38ff3c68463837687f95e69fd7f9d78a59700bcf7d92771baa2e116e0d53988c95c3c424b261db9c6ea2583cc869ce268741b0d56d38514ef75e3c716286dd4d925496c9002cbf0f9846682097855f4a3fe060f03a6ad21da91c52a9beba0b9c2e03eec55ebc2fc053e267bf0f8b3934a8c447adcdc9633500c1d526ccb93acfccc92ee94e773600c5ceb168336f6ae3ec7d6451b7f6f920d5244886186d7beaf10a319c2e525462594f4fdd263ee9873ac8cc4970a99eecd93563ea5da1f818915e74bab5b8c99805551302f49421f473fdd2888389121f1fbd96515193be832b91f64b960fac9eaef677fd7d84d5afbcdfc73eaab0630d0d10a5b98ee89a2550e23f74133300907bca1ac9b0b8201292200becb265b88f42c2911c85ba70caece3330b280336dba2f5762ea760e29f57269c5050f2b7bde5fa08c533da643b9e90b411ac639f60ae98148902914c75ec27e3901ec88a9080e1b48f60be466cd57a9e66fe8a75bbf9676defbc1bbf8738c1ef341f13617fc814e008b2e6b31f9358be8b2fbbdf646d7053e3ee2045bdbca7312d2f6f9e3afdc8a9cd8a343bc8d3f1dcabab429117b0bc8dc5266018a6093ace3b6c99f943b417da4f6e2d20ce1ac878d939856f978e58dcafdba5686c99e219440c7f6075f3bcc9cb4bef4672a3ab33094da1acabed22768117fc027d739d93a5bf4cedccf961c7dd3a4b13ae3ee5b04ba67764b68a466334293347755f35b0b96753b1429ce49af1dbc13d70fdc067ac8e29ffbd6978c0eb730243774da85e578c4b3ee06fcfbd4b6aab360e14fa0ccda88cca15eacf4c757136e7da2990434fcc9723ae001db6fb6832a07565289029c856210a3667818c793848afecd13a0c0975a62fda1ac57b334498454afcf69195eabfc0121041b862811d4a61542e2bb370fad6b2a9e1c67acb7dd80243604149de7f368165e93152e97e6ba934f217067d504a3403663c8f320c36b9e7f02cf78c5a5d262bd6d9daa761d992527636a29cca7069637fa96916653525c8cb57cb42803644b514fd3aa6c332f017fcfb0046d281c035a88efe83e6f387b539b1f803bf470c494efe1c13d25e66fb2f30f545544dfbee30c0e6214be8c3d3f0666220fbb6a7bfe79f95fdb5a16ed058eb35a0491f6affca228f31857f0943f3e45728e9edd6e7cd2ac0304af2edec28a78e1b89c7369078db5e1b6c48cc69146682dd279f781ad767a3985542a57115429f80d563dcc7840736fa0335831fec621f3041492540397cec15e3ef7bd74d47944da895ba2ad58582c6bcabdb2565da9f42e1a96ec722e467b7316a0ff5e38f09d47ef01835f549ffa95643d637abf0a18c3959a1a1f322583eb93508992c1f4068fc1262162489c09db7052240dd95f271f127e0cd576dc9aec421dc66e5fac7598d8dfeee82af21666fa734dcc3983d915e834e5dfadeff0739f03e55f0965bf147735ee688bd2b3cd1ed26efd458b654ece296c89e0c665e8de5cadd17fce5c296ff63618b237eec70694ca1e9969cd24c2631e180d22e91bf091cace9a33134e5e35faeb4f775e3ee79d89e27df2ee2d2041da9d4a20ea580bb8e8d127bba341fc474131ca338d10943030d2da36c9f3e4edc9db307198a6150dde16768ad4e10b118d29ba418122408d978a4f5c45e638355069056bc7aa0e64c2e653261b2f0e1b715b29b27083c9682901fbbd53adea56799c27e72385933251043a57647bc1364771d2676e0840431ff3ab1f9f0291e32b3ce971addd82859407c9116fd48b3d1d283c2293786d6753cb82fd936900ef3d81fd588afd218dc26e3da158ddb8296a48a8a010b3de3e82e82e822a64e7d9f25b053549d06644f9d1686f570d556461661f722db83b3ae9634e34f7608dba4885eb5da421f7071499ce9dd6f641c5bda607f66058546be466ee1b6e08bf22c9eacd10b4832457507cf1d248320cde24e6abac35a9e448f7ee3749cb5eab7746ba2b2a0fe7278135bf85343b5ae994ea6b032389f097a94d1c5ce81972bf7a8d5fd5bd4530501e5022033014e159a23ddd1fe6218c36d4f5084e80f9952790c8e8d66237c4ad217a7d2bf3cba9eab6ceba10968756dec53017252d5b790d163adf3f94c5adfffeb8f46ceff9285e3391839515dd789b34dcf1b0be3f896b77af4b6eb895a9186cc58cbc2044826a844e9120f7edef3b840881785665ee78d2489c6d2b8ca30468d044dc3512ec8b083c3bf70e11ba228b52d331908e6a8c613ad843b95e6ed502a8480fc4cccf3f7ba2727801c49f9444d34e1ca7b3bf2a26a56a96f769ff5b39caedcbad30e53dad8b54bd80ded355925595085720175c786805ac10951405921a77bd94733a55e28ff8f219f1157cf19fcf295359febd07acf78eec3e7a816277e84f6f3777a7b966ddd633fc2dcdda01cd15f15d3522344087fe093e2d441ea61cc4f1c2f5dd68c2921c6473ccf5def354b4f4e6af97b491fe2ba83d9c64bcdba7a2fa0f678b9a3ff420c0b6053b97890751b1d5325eae9d96ef5cbfebdc5d1a3017ccee4ea4dcd3d8fede3b5f12416ec0490fcd2ed8e4207579447d80218d8942d8ddd12624c0431b03dc34cde7235b7b637c37a3d0b74525ada5ec9340b7931ce5a06419a7a98976fad631ccd629cd2b46a22dccbe7dfda0ca02ffe52c57b211ef75856be9946e4e0ba6ab483ede22f970f61217bf3009918a075145174f64bd056065767cbedf8777dac9d14eeff669acb4f401f59d687b56973ae81d908b6e6dff499ac47baeb3eeee4592e565c86603be77f69a71a433ee8bb620841d56f39f5e246a14471aeb3434b223763c0dde6690506e6d2322edbc2b4c9a4e2b9e7889f04fd04482209521b599d546b1d8378fbb6dcee118fa14b266f107248bba8c3865932fd59b8cbc7c11e8f6c0d16669b1106115df6cc5aa3b36a3e9818dbf9ab415b9b7e5a79f300c019a5b4552a5af703456df3c5e9f83b0c98934cb9f18c86b5da595d7613bda3b8a1d87c71ca844da2429cf9157f5f72f90804a399cb58a4b8a2598510d0f1e98b8f23a6a35d92a675563fe3e3231dc7a974aafb00e22fe2e82e39d20fb6c00a09cc173d16a22954d93caf1d7b6962241d6499ed3f638052d7883347d9810e07d1a36cf2df1dea71520bf73c069e645ab58eea1ccb053941434a3b5a325c661b3cc5e0cb3dab35f4ac07581e37c4cc7fcca49b8b591b4ca72dacaa550fc1c1507ae41c88ceefac7cce2ee0dd8f079ae82602f1b38be9928a7c632158847f6d148ae94bee12558cf7e969bb66315228bc5bb3f2d1566ee2a5b73063e7ea1ffe10eae0398c774e1748e9ac5516b77a5cad94a9eff1721f947a9809ce17a7c53c04366cfc5cb54a669794190034474f82b37fb75f9e4e24dc010c973cdac6530f3d66af0938ca85cff9918b9fe7d71838862153913c7f377b207387b88be824d34b9ae6531d30c8a867b6625b355652119a58c30012a64860735b2ad729a602d90f973a320c8a1227ea85a4542b27b38dbe37cff6327df02ce1c9b8ca9082fb8f2eb57a02d7feea9c38a264b62e6acb650680412765c1797b8bfb036f13fc204c4a1c59b97a7abfa607e67dcc043b87772ac41975f58185c68c7157cb28887a4689dc7f2158100249de61fbdcd862c7ae45dffce19dc3818f82ea200affd7e0157c077deb66a224455baace27362a18fbc0d5a4952c365ed6b64de6b09d38b0cc7807320e4b0f0598803174f7efa74910526346ef35086e1dfcf0d70669ed130743c20f135cb4b4cfed172de523a720f6b2a795371204c42101453d09fa51ca28f8afd707f656ca2e8e75e17b8e75d05fdfd43e230d0ecd4f5e420fcfc1590405da3c313f81ed3a9612c5f823fca8f585c217abddcbc7d2b6d09cef39650c199d093d5b76a98000a69238099cadb390b328a3606513ba2edd8466dc46c5e52ad56ec2a78e3e17fade54c8aa10da8d5e5459aea646f8ee0b127d9029c59585399f58de211c45037bf728886893d1c6fcc50c08b68bfc5d49438d18ad561f24c8e2eb1bb0c82f3909763b8a324e32c4a45fe21093094481eedb72f855133707fb6966b4e23d640be2cb94d53eb44f94d3a8e27af8e58a24a19014f362cd7c6f046d9b3bbf34f19a9565f766ac3d47bc15cf5307c4e069cb976a871d8b15df33a541e1a2d121be602c1d1abd9a43c164be77cdae5222f1c5eb44c68834091353a1e4864cc08ae8577554e36752340710dbb785818bcf8da6b94b92aa02d2fa4fa832fc6110e4985187cc586c3cc7008d34afce5cce97f5e10b212a29f08584c286ec5e0ef67da5ec529683f6b2119d2806c53e31d2ba3486787e397fafc3b6ed566dfb83e0a2c11b05f59821e454ed4902e7d718d4538a45305dc0e1530916cd461b8a761b8e8ad6f981f5f1dedbb0ea99df733c332689a8a485713ee9563a6300ee7c3bda0d73f427e6c1f0c4595ece8f262d803ad7cee9d26f4cfca0574cb9eb5d7561ac50f59c7e700210d03b30441d5a3d881d4d08832a18402761ac1527d181d6d0e32b829e10f3154544b14fe83f76178647fd580d46d25af17e277c8231267effb0dad79fae7b763b8023b00"}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x8000000000000001, 0x889a, 0x7fff, 0x7, 0xcfc, 0x0, 0x0, 0x6, 0x7, 0x0, 0xfffffffffffffffd, 0x7], 0x10000}) (async) [ 463.896691][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 463.897346][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 463.979786][ T3655] Bluetooth: hci7: sending frame failed (-49) [ 463.987076][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f00000000c0)) [ 464.032472][ T9135] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 464.125377][ T9137] loop4: detected capacity change from 0 to 264192 [ 464.396911][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 464.456656][ T3679] Bluetooth: hci8: command 0x1003 tx timeout [ 464.862325][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f00000000c0)) 10:20:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400448c9, &(0x7f00000000c0)) 10:20:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getrlimit(0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, &(0x7f0000003080)={0x0, 0x3938700}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xac, 0x0, 0x0, "e915ebc95478cee2c7d503b81997760b", "6bd0da9d13bfb545cbbc504388a10b91d40533f17791acc0a4a7ab8c487047e7052c573f10f717e8901440a951a595adcfaf490e2f1569417fba1361b4e5ab4376e329ac77c2f9d684a025c7045c2d35c9220bcf9bc5c85f0da3d3b5d582703e22aedbb65b2a985d81d0fc3b54d9e7aba8b99ae74dbfdeeee8ddc3d81e1fe7d53211eabc8e0a9b12518a9c26403c2fca63e7df976e2ebf"}, 0xac, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000440)=0x20) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20000001) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x0, 0x80, "5b9cdb25ceb82faaf484a8aec01ab6a5"}, 0x15, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00'}, 0x10) 10:20:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) (rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000480)={{}, "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"}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x8000000000000001, 0x889a, 0x7fff, 0x7, 0xcfc, 0x0, 0x0, 0x6, 0x7, 0x0, 0xfffffffffffffffd, 0x7], 0x10000}) [ 465.130717][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 465.139322][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 465.158149][ T1090] Bluetooth: hci7: Frame reassembly failed (-84) [ 465.164557][ T1090] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400448dd, &(0x7f00000000c0)) [ 465.180304][ T9142] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 465.215865][ T9150] loop4: detected capacity change from 0 to 264192 10:20:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x401c5820, &(0x7f00000000c0)) 10:20:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) getrlimit(0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, &(0x7f0000003080)={0x0, 0x3938700}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xac, 0x0, 0x0, "e915ebc95478cee2c7d503b81997760b", "6bd0da9d13bfb545cbbc504388a10b91d40533f17791acc0a4a7ab8c487047e7052c573f10f717e8901440a951a595adcfaf490e2f1569417fba1361b4e5ab4376e329ac77c2f9d684a025c7045c2d35c9220bcf9bc5c85f0da3d3b5d582703e22aedbb65b2a985d81d0fc3b54d9e7aba8b99ae74dbfdeeee8ddc3d81e1fe7d53211eabc8e0a9b12518a9c26403c2fca63e7df976e2ebf"}, 0xac, 0x0) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000440)=0x20) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x20000001) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x0, 0x80, "5b9cdb25ceb82faaf484a8aec01ab6a5"}, 0x15, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00'}, 0x10) 10:20:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 465.383540][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 465.390499][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -49 10:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newtaction={0x32c4, 0x30, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_csum={0x12c, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x428efae9, 0x5, 0x3, 0x9e}, 0x80000001}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2e2f, 0x100, 0x4, 0x778df892, 0x92}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0xffffffffffffffff, 0x2, 0x10001}, 0x5d}}]}, {0xa9, 0x6, "662641596021431a77b7e483826becc5ec663ffa66eef0d2c91cce8003b47757f7da219a7fd9de7a8ec5039a4e6a2c3c89b4ed8d26dede0285dba465022a1ecaf98c7ce91b8b0446551dc305eb8155c18380c21893b9cf1514de6d101dc86a840dd55930a937a0ac625cb85a3d3dd37ac56ed71589053d296ba40db5c730f28a82b4370e7508c873344624a3bcccfd5f3930b66fbc5fe3b7e5fe62c5fdd4c6e47349abd9bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xf8, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffff01, 0x1, 0x3, 0x3, 0xa259}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1243c963, 0x2, 0xb285, 0xa7a}}, @TCA_DEF_DATA={0x9, 0x3, '](&$\x00'}]}, {0x8c, 0x6, "a02f8833b73c991af9b431bcf137b2ee70af9f5d08cbcf7e68a42b37c299078f87adb95af11f1cce519a9263dd49f333a05e87a5cc1a25b4abc17eeac06add21e8ad25bc9de98125fad9479a9ad9ff680bd8d1c63828786210072cfd2d616ef2f76462bbecc6daae853183795a2f024e5c1bc214f16fbf66e2ce2d7c1efa6f67071073a5bce74b5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x280c, 0x1, [@m_skbedit={0xac, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x77, 0x6, "101a70829d6fc063ce973853b921e5da74de1e3316a90c3240fd3ddac03578e1abbce23b0f19da89995525dc391bb58d907250e11d63dc4df4d392f3686048462617319313cd2a4a62fa2e581ab64b22955474e58ee58497e3dd22073e923ddc5d0ce2bab8da8dcacc3ac6fdbc2c08a881927c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x108, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xda8f}, @TCA_CT_LABELS_MASK={0x14, 0x8, "70798bb79aed6855544b94f1e0bd1074"}]}, {0x82, 0x6, "d546e2d2fc6986ae1a4ac7aeaf138b402778ea584e1b8461473c0f86e832c563b9551e3426e289c26a6aeb8ee652ca0eaf229dd39bb19d4a132a0120f876a22db367653de7493c4a65e00576aec88c44be26ff6ea32c7ca20b80b303c74b83eb883a137fefbaafe6d36dc3aa4ef3d9df98499b1e28553e373f28c04ffaea"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x130, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe782}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xc3, 0x6, "196586e5b9888fe4b5e2f4f094bcc43f3210e4f4c454fff626beb55e6391135d3bc210289066115af4c91d6c951d9859ef31a43e3d5e104ad4866e8e16eb4b1a776de38024d28d94c6cb110bee0b42454cf9ca3c6be0e2b447ed25a9f0736696e2bc3f425bf8596398ce1ae917d0dc8ef116ba587e13ffd31121724e429ad99340fa0a04e6b3f0ae3d5c3ec6edd9932cfefd1552e880288e14d5b5223f0bb61a07a2be4367da661a570cc73fcd0b6d2a8c43502bf53e4b7694a6f625105134"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2344, 0x0, 0x0, 0x0, {{0xb}, {0x22ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x23f, 0x10000000, 0x10001, 0xffffffff, 0x9, {0x0, 0x0, 0x5, 0x9, 0x7, 0x5}, {0x7, 0x0, 0x2, 0x400, 0x1, 0x7}, 0x9, 0x7, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xffff, 0xffff8000, 0x8803, 0x8, 0x7fffffff, 0x1, 0x80000000, 0x1ff, 0x0, 0x80000000, 0x7, 0x2, 0xe0000000, 0x5, 0x5, 0x1, 0xfffff001, 0xec, 0x2, 0x8001, 0x4b, 0x7fff, 0x1, 0xfff, 0x1, 0x6, 0x3f, 0x4, 0x0, 0x7, 0x519, 0x3d, 0x8, 0x664, 0x7, 0x4, 0x7f, 0x3, 0x7, 0x3, 0x0, 0x40, 0x100, 0x3f, 0x3, 0x3, 0x8, 0x8, 0x8000000, 0x5ebd, 0x2, 0x4c, 0x8, 0x5c6a, 0x400, 0x1f, 0x7, 0x80000001, 0x40000000, 0x7fff, 0x7, 0x8, 0x5, 0x8, 0x8, 0x4, 0x39, 0x20, 0x101, 0x100, 0x5, 0xfff, 0x7, 0x3f, 0xff, 0x0, 0x5, 0x1, 0x9, 0x10000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x101, 0x2, 0xffff0001, 0x6, 0x7, 0x5, 0x5, 0x0, 0x800, 0x20, 0xab32, 0x8, 0x101, 0x1, 0xf3, 0x3, 0x1000, 0x0, 0x8, 0xf299, 0x2e8, 0x0, 0x0, 0x200, 0x5, 0x6, 0x6, 0x8000, 0xfff, 0x5, 0x5, 0x6, 0x7, 0x7fff, 0x40, 0x9, 0x7, 0x3ff, 0x9, 0x5, 0x7, 0x242, 0x8, 0x7f, 0xfffffff9, 0x0, 0x7ff, 0x7b26db0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x413b, 0x8001, 0x1, 0xff, 0x80000000, 0x6549, 0x2, 0x1000, 0x71c8, 0x7, 0x8, 0x8, 0x6, 0x9, 0x5, 0x9, 0x80000001, 0x10000, 0x1, 0x5, 0xff, 0x539, 0x7, 0xe913, 0x6c, 0x0, 0x8, 0x2, 0xae6, 0xd8da, 0xfff, 0x2ec, 0xfffffffc, 0x9, 0x1, 0x8, 0x3, 0x9, 0x0, 0x422, 0xe397, 0x0, 0x2, 0xfffffe07, 0x2, 0xff, 0xe0, 0xfff, 0x3, 0x10001, 0x3, 0x5, 0x5, 0x5, 0x6, 0x8, 0x8, 0x8e700, 0xffff93f6, 0xfff, 0x4, 0x6, 0x4, 0x3, 0x8000, 0x1000, 0xffffffff, 0xf5, 0xf075, 0x81, 0x1000, 0x7, 0x4, 0xffffffff, 0x66, 0x7ff, 0xc9b4, 0x0, 0x0, 0x7, 0x40, 0x9, 0x7, 0x1f, 0x3, 0x52f7, 0x8, 0xa07, 0x10001, 0x7f, 0x8001, 0x80, 0x6, 0x2, 0xfffffffc, 0x80000001, 0x7, 0x1fe, 0x3, 0x2, 0x0, 0x5, 0x4, 0xd2ad, 0x8000, 0x9, 0x3f, 0x80000000, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff800, 0xffffffffffffffff, 0x0, 0x80000001, 0x80000000, {0x80, 0x2, 0x8, 0x2, 0x1, 0x6}, {0x1, 0x0, 0x2, 0x3, 0x8, 0x7}, 0x7fff, 0xff, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x2, 0x5, 0x1000, 0x7f, {0x7, 0x1, 0xfffa, 0x0, 0x80, 0x8}, {0x6, 0x0, 0x1, 0x1, 0x3823, 0xf947}, 0x81, 0x0, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xec4, 0x8, 0x6, 0xfffffff9, 0x9, 0x10000, 0xffffff81, 0xffffffaa, 0x49, 0x7, 0x2, 0x1, 0x18d0, 0x3f, 0x3, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xffff7fff, 0x10000, 0x7, 0x1, 0xff, 0x9, 0xff, 0x5, 0xe81, 0x80, 0x40, 0xff, 0x6, 0x8, 0x38bf3ef5, 0x6, 0x80000001, 0x2, 0x4, 0x5, 0x8, 0xffff, 0xb2, 0x5, 0x8, 0x1, 0x3, 0x1, 0x7, 0xffff, 0x9, 0x20, 0x100, 0x9976, 0x401, 0x5, 0x0, 0xfffffffb, 0x1, 0x3ff, 0xfffffffc, 0x100, 0x3, 0x3, 0x6, 0x10001, 0x2, 0x800, 0xffffe2ad, 0x8, 0xfffffff7, 0x6, 0xfffffffd, 0x400, 0x0, 0x7, 0xfffffa84, 0x4, 0x800, 0x100, 0x0, 0x0, 0x1000, 0xffff, 0x3, 0x8, 0x0, 0x100, 0x2, 0xffff, 0x7, 0x3, 0x0, 0xc9, 0x8, 0x0, 0x1d635bf3, 0x9, 0x20, 0x80000001, 0x4, 0xfffffffb, 0x0, 0x8, 0x5, 0xc7, 0xc000, 0xffffff06, 0x4, 0xffffffff, 0x1, 0x8, 0x2, 0x858ec61e, 0x3ff, 0x7, 0x6, 0x1, 0xa14b, 0xfffffffe, 0x7fffffff, 0x2, 0x20, 0x1f, 0x8, 0x200, 0xfffffffe, 0x6, 0xfff, 0x9, 0xff, 0x9, 0x5, 0x0, 0x1e, 0x4, 0x8001, 0x5, 0x1f, 0x0, 0xffffff7f, 0x4, 0x0, 0x65b, 0xdf3, 0x3, 0x800, 0x3, 0x1ff, 0x1, 0x9, 0x3, 0x8000, 0x20, 0x1, 0x2, 0x7, 0x3, 0x4, 0x1284f61c, 0xfffffbff, 0xfffffffe, 0x4, 0x4, 0x81, 0x4, 0x0, 0x2, 0x1, 0xfffffffb, 0x5, 0x10001, 0x0, 0x4, 0x5, 0x5, 0x1, 0x6, 0x4, 0x983, 0x86, 0x79b5, 0x100, 0x5, 0x9, 0x6, 0x9, 0xffffffff, 0x3f, 0x3, 0x81, 0x9, 0x0, 0x8, 0x2, 0x7, 0x8, 0x1, 0x8, 0xc9, 0x400, 0xbea6, 0x4, 0xffffffff, 0x309a4, 0x200, 0x4, 0x1, 0x3, 0xe000, 0xfffffd60, 0x1, 0x9, 0x2, 0x1c00, 0x73c94b62, 0x80000001, 0x0, 0x1, 0x401, 0x5, 0xffffff00, 0x7c000000, 0x6, 0x4, 0x2, 0xfff, 0x1, 0x2000000, 0x1ff, 0xffff5477, 0x4, 0x200, 0x9, 0x7, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x400, 0x6, 0xf35, 0x9, 0x8f, 0x0, 0x4, 0xffffff57, 0x200, 0xaa7, 0x6, 0x8, 0x400, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xff, 0x80000001, 0x2, 0x8, 0xe0, 0x3f, 0x3, 0x2, 0x10001, 0x0, 0x3, 0xfff, 0x40, 0x5, 0x7, 0x1000, 0x5, 0x8, 0xfff, 0x5, 0x3, 0x2, 0x3, 0x243e, 0xffffbcc6, 0x1, 0x4, 0x22036895, 0x101, 0xf05, 0x3ff, 0x8, 0x1, 0x349d, 0x7, 0x6, 0x9, 0x3ff, 0x1f, 0x0, 0x0, 0x3, 0x9, 0x9, 0x3f, 0x7, 0xa7, 0x7, 0x4, 0x3, 0x2d0c, 0xfff, 0x10000, 0xae, 0x24000000, 0x10000, 0x4, 0x6e, 0x8, 0x5, 0x3, 0xfffffffa, 0x2, 0x2e02, 0x72, 0x4d82, 0x2, 0x8, 0x1, 0x80000000, 0x1f, 0x6, 0x8, 0x800, 0x5, 0xffff, 0x8, 0x10000, 0x81, 0xf9e4, 0x7, 0x7, 0x4, 0x7, 0x9e, 0x2, 0x6c5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9fcc, 0x183, 0x5, 0x7, 0x10000000, 0xfff, 0x1, 0x2, 0x0, 0x5d1, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x8, 0x476, 0x800, 0x1, 0x6, 0x9, 0x8, 0x7a, 0x57, 0x533, 0x6, 0x200, 0x0, 0x1, 0x7f, 0x9, 0x3, 0x0, 0x3, 0xae28, 0x2bd9, 0x101, 0x3, 0x1, 0xd9, 0xfff, 0x2, 0x4, 0x48a6, 0x7, 0x0, 0x57, 0x3e9466d7, 0x40, 0x0, 0xeb, 0x4, 0x80000000, 0x401, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0xed6f, 0x4, 0x0, 0x69417c58, 0x8, 0x7f, 0x3ff, 0x2, 0x50d7, 0x2971, 0x36, 0x1, 0x6, 0xa0, 0x8, 0x76, 0xfff, 0x8, 0x19, 0x3, 0xfffffffe, 0x401, 0x7, 0x7fff, 0x5, 0x9, 0x1000, 0xfff, 0x8a, 0x9, 0x1, 0x2, 0xffff, 0x9, 0x0, 0x400, 0x6, 0x9, 0x6, 0x71, 0x100, 0x8, 0x9, 0x10000, 0xf4, 0x9, 0x401, 0x6, 0x5, 0x2, 0x4, 0x101, 0x2, 0x2, 0x78, 0xcc6, 0x5, 0x4, 0x5, 0xb5, 0x400, 0x8, 0x1, 0x2749, 0x9, 0x169, 0xf22e, 0x7f, 0x570d, 0x6, 0x5b9, 0x8, 0x5, 0x401, 0x1, 0x8, 0x29f, 0x100, 0x3, 0x1, 0x3, 0x6aa, 0x5, 0x80000000, 0x8, 0x4, 0x7, 0x1, 0x80, 0x3, 0x7, 0x80000001, 0x1, 0x3, 0x86fa, 0x401, 0x6, 0xf630]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7311363c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x7ff, 0x200, 0x7, {0x7, 0x2, 0x5, 0x0, 0x7989}, {0x9, 0x1, 0x8001, 0x1, 0x0, 0x800}, 0x81e, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xfffffffa, 0xfff000, 0x8, 0x7fffffff, 0x922, 0x3, 0x276, 0x8, 0x8000, 0x0, 0xe9, 0xfffffbff, 0x6, 0x1, 0x80, 0x0, 0x7, 0x911d, 0x689, 0x400, 0x401, 0x5, 0xfffffeff, 0x8, 0xfffffffd, 0x206, 0x8, 0x4, 0x5, 0x2, 0x27, 0x61, 0x6, 0x9, 0xea, 0x43e, 0x3, 0x4, 0x3, 0x0, 0x401, 0x0, 0x8, 0xffffffff, 0x62, 0xc702, 0x929, 0x9, 0x8, 0x9, 0x9, 0x2, 0x9, 0x7f, 0x81, 0x7, 0x7, 0x101, 0xb56, 0x4, 0x84, 0x7, 0x4, 0x290a, 0x3, 0x7fffffff, 0x10000, 0x6, 0xc683, 0x2, 0xfffffff8, 0x80000001, 0x9, 0x53c8, 0x6, 0xd69, 0x400, 0x3, 0x6, 0xfffffff7, 0xda51, 0x1f, 0xe768, 0x38a, 0x24f1, 0x1, 0x0, 0x401, 0xf3b, 0x8000, 0x2, 0xeb, 0x81, 0x3, 0x3, 0xfffffffa, 0x7, 0xfffffffa, 0x3fd191, 0x5, 0x6, 0x1, 0x7, 0x3ff, 0xbe8, 0x80, 0x5, 0x37, 0xffffffc7, 0x9, 0x10001, 0x7, 0x6, 0x3831, 0x9, 0x4, 0x8, 0x3f, 0xae, 0x3, 0x3, 0x94, 0x0, 0x7f, 0x400, 0x8, 0xb57, 0x7fffffff, 0x7f, 0x10001, 0x9, 0x7, 0x7ff, 0x6, 0x5, 0x280, 0x61, 0x12, 0x9, 0xc100000, 0x3, 0x7, 0x3, 0x7, 0x5, 0x4, 0xf8de, 0x4, 0x7f, 0x5, 0xf, 0x7, 0x28, 0x896, 0x80, 0x6, 0x8, 0x0, 0xa1, 0x7, 0x5, 0x0, 0xffff, 0x4, 0x20, 0x43f4, 0x8, 0x190ecf32, 0x8, 0x400, 0x0, 0x9, 0x9, 0x81, 0x8, 0x8, 0x7, 0x1, 0x101, 0x1, 0x4, 0x9, 0x9, 0x4, 0x100, 0xe625, 0x9, 0x2, 0x6, 0x5, 0x9, 0x2, 0x20, 0xff, 0x4, 0x1ff, 0x9f2a, 0x4, 0x1b, 0x8, 0x5, 0x1, 0xffff, 0x1, 0x4, 0x80000000, 0x8, 0x7, 0xac, 0x7fff, 0x7b4, 0x0, 0x3, 0xfe2, 0x9, 0x2, 0x10001, 0x3, 0x5, 0x8, 0x2, 0x10001, 0x5, 0x3, 0x800, 0xa6, 0x3, 0xc722, 0xffff, 0x9, 0x7, 0x5, 0x1, 0x6, 0x5, 0xffff, 0xfff, 0xffff, 0x4, 0xffffffff, 0x73, 0x8, 0x101, 0x2, 0x2, 0x1, 0x4, 0x100, 0x0, 0xba9, 0x80000000, 0x20, 0x1, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7, 0x4, 0x9, 0x7, 0xffff, 0x1, 0x80000000, 0x7f, 0x2a4c, 0x3, 0x8, 0x8, 0x0, 0x7, 0x9, 0x1, 0x800, 0x4, 0x7ff, 0x2, 0x9, 0x0, 0x8, 0x1f, 0x5, 0x10001, 0xfffffffd, 0x6, 0x3f, 0x4, 0x2, 0x3ff, 0x2, 0x1, 0xffffffff, 0x7, 0xfff, 0x80000000, 0x0, 0x6, 0x785, 0x8, 0x6, 0x1, 0xe6, 0x80, 0x1, 0x1, 0x0, 0x6, 0x8001, 0x200, 0x7f, 0x4, 0x8, 0x7ff, 0x1ff, 0x10000, 0x0, 0x8a, 0xff, 0x84, 0x7a7, 0x7, 0xae4, 0x80000000, 0x8, 0x800, 0x80000000, 0x1, 0x3, 0x4, 0x0, 0x72, 0x9c49, 0x7, 0x9ed, 0x401, 0x3, 0x8, 0x4, 0xffffffff, 0x6, 0x77, 0x0, 0x99e, 0x5, 0x3, 0xe0000000, 0xfffffffe, 0x9, 0x5, 0x4, 0x401, 0x3ff, 0x8001, 0xd2, 0x23, 0x7, 0x8, 0x5, 0x7, 0x4f, 0x7f, 0x9, 0x53, 0x6, 0x7, 0x38, 0x3a5b, 0x4, 0x8, 0x5, 0x1, 0x3, 0x8, 0x18800, 0x401, 0xfffff244, 0x7f, 0xfffffffc, 0x7, 0x7fffffff, 0x2, 0x40, 0x3, 0xeba, 0x1, 0x7, 0x7f, 0x7, 0x0, 0x6, 0x6, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x0, 0x5, 0x3, 0x5686bf01, 0x84, 0x5, 0x9, 0x772a, 0x5, 0x1, 0x3, 0x1ff, 0x4b88, 0x3, 0x0, 0x1f, 0x9, 0x1f, 0x0, 0x2, 0x9, 0x7, 0x1, 0x1, 0x0, 0x4, 0x80, 0xfffffffa, 0x4, 0x7ff, 0xea, 0x38, 0x0, 0x81, 0x1, 0x10001, 0x9, 0xbc1, 0x0, 0x101, 0x1, 0x200, 0x7fffffff, 0x7, 0x2, 0x8370, 0x0, 0x4df, 0x9, 0x7e, 0x1, 0x2, 0x3, 0x10001, 0xf5c, 0x3, 0x7fff, 0x0, 0x7, 0xffff8001, 0x95e, 0x7b2, 0x8, 0x81, 0x95, 0x7, 0x7, 0x7fff, 0xfffff054, 0x6d, 0x7, 0x4, 0x885d, 0x400, 0x0, 0x0, 0x7, 0x8, 0x1c000, 0xab, 0x7, 0xffff4472, 0x2, 0x80000001, 0x6, 0x2, 0x6, 0x3, 0x0, 0x3f, 0x7ff, 0x5, 0x3, 0xffff0001, 0x2, 0x20, 0x0, 0x80, 0xfffffff8, 0x3, 0x8001, 0x3, 0x1b26, 0x7fffffff, 0x5, 0x1, 0x2, 0x4, 0xb1d, 0x7, 0x6, 0x9, 0x3f, 0xb0a, 0x40, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x591c, 0x8, 0x6, {0x4, 0x1, 0x8000, 0xc6, 0x54d3, 0x4}, {0x1, 0x2, 0x3, 0x4, 0x7ff, 0x80}, 0x6, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x8, 0x9, 0x7, {0x40, 0x2, 0x3, 0x7, 0x8001, 0x7be}, {0x40, 0x1, 0x3, 0x0, 0x3f, 0x2}, 0x20, 0x8000, 0x1000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x9, 0xffff, 0x81, 0x4, 0x7fff, 0x0, 0x4, 0xe16b, 0x100, 0x3bb, 0x6, 0x9, 0xfff, 0x2, 0x9, 0x2, 0x80, 0x6, 0x0, 0xe0fb, 0x9, 0x9, 0x7, 0x7fff, 0x1f, 0x3, 0xffff0000, 0x6, 0x2, 0x8eb, 0x5, 0x1, 0x2, 0x7936, 0x2c, 0x3, 0xfffff6a5, 0x0, 0x5, 0x461dffa5, 0xb2a, 0x7f, 0x400, 0x1d1, 0x7, 0x7fff, 0x4, 0xb3, 0x0, 0x2, 0x1ff, 0xb0, 0x7f, 0x6, 0x7, 0x2, 0xc05, 0x0, 0x4, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x40, 0x4, 0x8001, 0x8, 0x401, 0x7fffffff, 0xec, 0xde3, 0xd1, 0x6, 0x0, 0x1de6, 0x0, 0x8fa, 0x7, 0x5, 0x3, 0x3, 0x8793, 0x80000000, 0x2, 0x40, 0x9, 0x3c3b, 0x7, 0x2, 0x200, 0x8, 0xfffffff7, 0x5, 0x3f, 0x0, 0x2, 0x4, 0x8, 0x7, 0x9, 0xfffffff9, 0x7, 0x3ff, 0x10000, 0x1f, 0xd3, 0x6, 0x80, 0x1000, 0x6, 0xfffffffe, 0x3, 0x8, 0x9, 0x4, 0x0, 0x2, 0x1, 0x80, 0x7, 0x6, 0x448c, 0x1, 0x1, 0x5, 0x8d, 0x4, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x5, 0x2, 0x7, 0x5, 0x400, 0x1, 0x5, 0xfff, 0x1000, 0x7ba8, 0x8001, 0x9, 0x0, 0x0, 0x219, 0x3, 0xe1, 0x4, 0x40, 0xff, 0x8, 0xfff, 0x8, 0x10001, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x1, 0x9, 0xff, 0x1, 0x6, 0x641, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x804, 0x401, 0x3, 0x0, 0xa45, 0x100, 0x7, 0x2, 0x2, 0xbc69, 0x5, 0x80000001, 0x81, 0x0, 0x8, 0x800, 0x20, 0x40, 0x10000, 0x5d, 0x5, 0x6, 0x3, 0x8, 0x7ff, 0x3, 0xffff8000, 0xfffeffff, 0x1, 0x33f, 0x8, 0xb76a, 0x8000, 0x9, 0x1f, 0x3, 0x1f, 0x4, 0x0, 0x9, 0x1, 0x548, 0x1f, 0x7ff, 0x3, 0x8, 0x2fc6, 0x9, 0x100, 0x1f, 0xae, 0xea76, 0x2, 0xfffffe00, 0x7, 0x800, 0x5, 0x9, 0x4, 0xfda, 0x5, 0x8000, 0x40, 0x3ff, 0x3, 0x4, 0x75, 0x4782, 0x20, 0x10000, 0x9, 0x40, 0x1000, 0x3, 0x0, 0x10000, 0x38000, 0x5, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0x8, 0x8bf, {0x9, 0x0, 0x3, 0x80, 0x3, 0x1}, {0x1, 0x0, 0x2d3, 0x100, 0x4}, 0x13, 0x81, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0x200, 0x3f, 0x8, 0xe45e, 0x6, 0x2, 0x6, 0x0, 0x7ff, 0x1, 0x9, 0x4d1, 0x7, 0x3, 0x3, 0x3, 0x10000, 0x7, 0x1, 0xf3, 0x1000, 0x2, 0x3, 0x902, 0x8000, 0x8, 0xe4ea, 0x80000001, 0x3, 0xfff, 0x4, 0xc3b8, 0xfffffffc, 0x1, 0xcb, 0x200, 0x0, 0x8, 0x0, 0x45, 0x9, 0x7fffffff, 0x80, 0x20, 0x6, 0x7ff, 0x3ff, 0x3ff, 0x3c, 0x0, 0x3f, 0x81, 0xcd, 0x80000000, 0x4, 0x1, 0x1f, 0x0, 0x6, 0x1000, 0x6, 0x7fffffff, 0x1, 0x3, 0x5, 0x9dd, 0x1, 0xe90, 0x8, 0x1000, 0x100, 0x6, 0xec2, 0x5, 0x5, 0xdd, 0xfffff800, 0x4, 0x3e1da87, 0x6, 0x800, 0x7ff, 0x20, 0x7ff, 0x7ff, 0x7, 0x1, 0x7, 0xffffffff, 0x3, 0x80000000, 0x1, 0x81, 0xffff, 0x3ff, 0xfffffffa, 0xca, 0xfffffe00, 0xfffffff9, 0x7fffffff, 0xfffffc00, 0x800, 0x0, 0x9, 0x80000001, 0x6321, 0x4, 0x18, 0x400, 0x7, 0x200, 0x4, 0xfff, 0x5, 0x3, 0x8001, 0x7, 0x40, 0x9, 0x80000000, 0x5, 0x8679, 0x3, 0xffffa1a5, 0x10001, 0x7fff, 0xffff, 0x40, 0x1, 0x6, 0x80000000, 0x5, 0x7, 0x3, 0xa6a, 0x3c, 0xfff, 0x1f, 0x5, 0x0, 0x3, 0x5, 0x401, 0x2, 0xd5, 0x2, 0x6, 0x91b, 0x80000000, 0x4, 0x3f, 0x200, 0xd935, 0x200, 0x401, 0x3f, 0x400, 0x4, 0x2, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x7, 0xffff8001, 0x5, 0x20, 0x3ff, 0x101, 0x3a, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0x7, 0x8, 0x9, 0x4, 0x9, 0x5, 0x7, 0xf7dc, 0x7, 0x80000001, 0xc3, 0x100, 0xfffff000, 0x2, 0x100, 0x3, 0x6, 0x4, 0x3ff, 0x5, 0x3, 0xfffeffff, 0xcaf1, 0x1, 0x3, 0x2, 0x3ff, 0x5dc4, 0x0, 0x7, 0xbbab, 0x80000001, 0x1, 0x1ff, 0x3ff, 0x9, 0x800, 0x4, 0x100, 0x5, 0x4, 0x4, 0x8, 0x7, 0x1, 0xffffdf5c, 0x8, 0x0, 0x3, 0x9, 0x2, 0x318, 0x7, 0x1, 0xffff9d99, 0xc1, 0xc1, 0x800, 0x4, 0xfff, 0x1ff, 0x400, 0x7f, 0x3, 0x134c, 0x400, 0x200, 0x40, 0xc460, 0x81, 0x0, 0x5f78, 0x9, 0x6, 0xfff, 0x7e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1f, 0x200, 0x6, 0x0, 0x80000000, 0x8, 0x1ff, 0x711a, 0x8, 0x3f, 0x86, 0x8, 0xd4, 0x7, 0x20, 0x7, 0x7, 0x1, 0x9a, 0x8000, 0x0, 0x3f, 0x2d0, 0xffffffff, 0x3, 0x4, 0x40, 0x7ff, 0x7fff, 0xffffffff, 0x8, 0x4, 0x8, 0xfffffffd, 0x1217488a, 0x7c, 0x5, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x60a7bbac, 0x401, 0x8, 0x7, 0x459b, 0x8000, 0x5, 0xffffffff, 0x9, 0x10001, 0x93, 0x10001, 0x9, 0x4, 0x5, 0x63, 0x7, 0xfffffff9, 0x2, 0x9, 0xd7f, 0x3, 0x3, 0x81, 0x2, 0x1000, 0x100, 0x5, 0x200, 0x6, 0x4, 0x4, 0x4, 0x9f, 0x80000001, 0x85cd, 0x80000000, 0x3, 0x7f, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x9, 0x6, 0x2, 0x3, 0x400, 0x3f, 0x9, 0x2, 0xfffffffa, 0x9, 0xa77, 0x4, 0x5, 0x2, 0x0, 0x8, 0x9b8, 0x20, 0x3, 0x4, 0x7, 0x100, 0xfff, 0x8, 0x1, 0x1ff, 0x7, 0x8, 0x2, 0x9, 0x8fee6c8, 0x6429d2af, 0xff, 0xffffffff, 0x3f, 0x4, 0x200, 0x1, 0x1f, 0xa8e, 0xc9, 0x1, 0x6, 0xb039, 0x1000, 0x8, 0x0, 0x19b9a688, 0x557, 0x9, 0x5, 0x0, 0x3, 0x6, 0x80000001, 0x700, 0x5a, 0x4, 0x80, 0x800, 0x10001, 0x6f1, 0x1, 0x2, 0x7fffffff, 0x50b, 0x84, 0x1, 0x4, 0x6, 0x7, 0x80, 0x100, 0x7fffffff, 0x1, 0x81, 0x5, 0x80000000, 0x4c03, 0x2, 0xea, 0x5, 0xd3, 0x4, 0x707, 0xffffffff, 0x7, 0x1000, 0x8, 0x7f, 0xfffffff8, 0xfffffffb, 0x2, 0x1, 0x3, 0xffffff17, 0x7ff, 0x7, 0x0, 0x2, 0x1, 0x7, 0x6, 0x1, 0x800, 0xfffffffb, 0x100, 0xffff, 0x9, 0xfff, 0x7fff, 0x7, 0xd0, 0x80, 0x81, 0x1f, 0x8, 0x80000001, 0x1ff, 0x56a, 0x3ff, 0x0, 0x8, 0x81, 0x7fff, 0x3, 0x1, 0x6, 0x1, 0x7d, 0x2, 0x3ff, 0x3ff, 0xfffffffd, 0x7ff, 0x8, 0x401, 0xb4000000, 0x7, 0xffff, 0x58, 0x7, 0x2, 0x7, 0x4, 0x7ff, 0x7ff, 0x6, 0x4, 0x27, 0x0, 0x6, 0x25, 0x80, 0x5, 0x9, 0x5804, 0x6, 0x9, 0xfdd, 0x9, 0x6, 0x5, 0x3ff, 0x1f, 0x0, 0x1ff, 0x80000001]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff110, 0x2, 0x9, 0xb52d, 0xc5, {0x5, 0x0, 0x7bb, 0x101, 0xfff8, 0x8}, {0x0, 0x2, 0x101, 0x7, 0x8, 0x9}, 0x4, 0x81, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x85}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x2d, 0x6, "e8e80d4e1e9d1946b88f5da722227926b15ebfe3168815b0b966517d902561b581890fcdb5a3af0a31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x118, 0x16, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x7, 0x9b, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x7, 0x8, 0x7}, {0x7fff, 0x58, 0x90, 0x400}, {0x6, 0x3, 0x7f, 0xd799}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x2, 0x10000000, 0x100, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x27b, 0x0, 0x3, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x1, 0x3}, {0x7f, 0x7f, 0xb4, 0x8001}, {0x7, 0x8, 0x5a, 0x4}, {0x6, 0x3, 0x8, 0x4}]}]}, {0x54, 0x6, "09dab61b757b69c4600c64f3d93ed0a7cd914e9cf26cf7c4a422c03dff7630b9ea5609efa566f7382026950f7fa096b021da8ce878d45e9a0ad9dbadf96697891ef95e96b1f6a5eef7ca488daff902df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xffffffff, 0x8}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd8, 0x7d3f, 0x20000006, 0x8001, 0x3}, 0x2}}]}, {0x5b, 0x6, "29d375a1f7b13f04340b52364afd7d2c73408cca125f3a7e238115f5674eb62817c3b97a3daefbe5137d9cee330aaeae88d74890a24a1430677ff20804b0ba80aaa68dd6493d19c9435aa587a476fbf81d29d90c904347"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x294, 0x1, [@m_ctinfo={0x58, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000, 0x0, 0xffffffffffffffff, 0x190, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x2, 0x10000000, 0x2, 0xffff337b}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0xffffffffffffffff, 0x7fffffff, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x0, 0xfffeffff, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x9d, 0x6, "29f2f8875bc249f9764b212946f0b41738b8e528ddf629dbbfd0729bb523afbe7ad3630aa5c56ffe64660da07571da24d725995ee8cdfe7cfbc30bfa2ff1c7511004386ac772c057f79aff53783bd5febf5c83ac07c86f1d134c486aecb6024ae97daf8e601aa01feb6884553c21a94cd7a4309f2b9352171f4abc14d54b88eaf6e5d81170e6e214dd481b4f4b7442b890975e57b3136cb877"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xfc, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1f}]}, {0xbf, 0x6, "0c4ec741e8115169e49c94d5b2375d1c24c277d130744caa410856c818132ee28eec003fb1966f8254e073d383dc657101e2ef543fe6588a39953f3627c1a398c79255556cff77e941ecb30792a34d23d92f855fba820435e53e20a0333918ae5d23f4a574a0beb44ab8528ecad70163297c55c4c1a4695641f1906dd47584a1d6d13ba31a47c604f7e77d0e927f5f7d6b53e0ee6b4370eeae8c36202e228dd2e30c2ca8536d06fa1154cdb51646f4603e6fd329b67bade6a5de50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x5e8, 0x1, [@m_nat={0x1b0, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1f, 0x8, 0xff, 0x401}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x0, 0x74, 0x4}, @broadcast, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7, 0x3, 0x8, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x7, 0x2, 0x80}, @local, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x8, 0x4, 0x7, 0xa7e}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4a, 0x321, 0x1, 0x2, 0xe866}, @remote, @multicast2, 0xff}}]}, {0x96, 0x6, "ef0b2a4654bf3bb5cf46f23a1bc6141fa19b4a495ac99a63361060b8a6695f9efc1686a0b81383d1309db3566b9fdf9b31d7c9d426eeba4a80b9c6fb5b463ef5736ad72ffa36773a4cf611ea02a19925fa189709218a8aa2f42ba9af7543ed9118263aa3c17e77b7bc6a9289876b4754856a3de899fdc0de8cae5435fe7d0d7e50617116b17915651fd40694f4f40274bbf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x158, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xcb, 0x6, "6099234ea2eed63aef504bf939636a9364a5a14c1769834c28643bf642e77ef62fed3e7d30410a81e7b27c9f3a22dd684373337336560e081782c979ec896ff0596ac6b74694d207d45dae9eb866957655f3656872c443cddfdfdedf3c1244a4d5b0e3d12a44192da8b753f6926c418acc693d0cf34f31e68b4c1be4cbd02fa47f9384dcbe0a60eb60c8d886e04208b4fc876e17791e11718657d4eb8fcbeee631fdf85db832052ca6ef75788dcd2070c261aba7095ea8e5286198abdb557638e2174710383ec9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x10c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x77a, 0x7, 0x2, 0x7f}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}]}, {0x9e, 0x6, "cc11e8928ac8f3afeb2654fb519d8f8d0c2b0a3ba3c48f51aacae3678c0418fe5662abfcf5ab78eb44f5e081354a7dbfd8441c6da9d6d18c75c5d3f4a313993588e0ac62fb6474832e9c27f7754fbd7df1ca483b89b50f6761ff8b940f3d1c74715a2feea048ec8f31da7b0310df3f32e45058231a96f51d97beb481dceef2860b1d82e2d81325bd6f7d7cecbc568dae50116bf636ef69924131"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x98, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x57, 0x6, "9d1e2a880b3aef93ade0591f2e75b4a826586547e73e7f17ce836d7e5af0a9650a5ccda27cdea065b7c1c1582c0355e49b508afdf155d1194302878e4f507b04df44108cf74261c5c1d262aa001724d48ba45f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x138, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x6, 0x3, 0x8001}, 0x1}}]}, {0xf4, 0x6, "1c527788260907ebc13a37c5676cd4d2815fc796e9eb20e50675ef5508c907a0215dddf490ff7b12ae74f32c92cc96a2fc13a0b71475b8aa66286c3832e4e15b3a1f15ad9743c3c217f4a3e4a5762fa0e884b1e38f742162ef55391073c3b37d34be520335b5653ac04a0307c511a4721417ebd83d36da57b8c4cbae9893500746aeba66fdadea2682cbc2cdb380a8b2597ce4bea66a08645b550a60eaaa974d9fde87b4fe9f3c2ab4edd88c0c1104edae0a7add6396a4e0988fb3e5413c661860356b3089b3d0184f10ec7c43335759d5177d3e337f577c9e8c1e33658dc9ffdc1bcdfb83aee7891e86f1e632054751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x32c4}, 0x1, 0x0, 0x0, 0x840}, 0x24001004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getlink={0xf0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10, 0x20042}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_MTU={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "9f6b268b7c36c4464d581b894feab3ab55b034bf4cf0317322a06d3a"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_MAP={0x24, 0xe, {0x1000, 0x6, 0x400, 0x1, 0x80, 0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r5) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWNSID={0x14, 0x58, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000052700000000000000000000000034c3111da92df09db1b46c4c40ea3f452cbf6d21c2535cc9f927a477b5c0eb1213ce541c45596bdc2264385f2e342bbabdbc9caae2793471132258fdd2426e443c58e93df2b113def755f233feb01e7caea3d428729b2068b09df4b5990bae5aa878858b257508292b2e0b7120b843642c3e5226cad11baa0110324a887f5db3e57fbdda8b66af4267d02cf034629cea0c4c5f1e6bd8d2961d247094f3f63ff5b12c9acaf9eb34d8", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfe46}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005940)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x4000000) [ 465.519955][ T9169] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.552489][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newtaction={0x32c4, 0x30, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_csum={0x12c, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x428efae9, 0x5, 0x3, 0x9e}, 0x80000001}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2e2f, 0x100, 0x4, 0x778df892, 0x92}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0xffffffffffffffff, 0x2, 0x10001}, 0x5d}}]}, {0xa9, 0x6, "662641596021431a77b7e483826becc5ec663ffa66eef0d2c91cce8003b47757f7da219a7fd9de7a8ec5039a4e6a2c3c89b4ed8d26dede0285dba465022a1ecaf98c7ce91b8b0446551dc305eb8155c18380c21893b9cf1514de6d101dc86a840dd55930a937a0ac625cb85a3d3dd37ac56ed71589053d296ba40db5c730f28a82b4370e7508c873344624a3bcccfd5f3930b66fbc5fe3b7e5fe62c5fdd4c6e47349abd9bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xf8, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffff01, 0x1, 0x3, 0x3, 0xa259}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1243c963, 0x2, 0xb285, 0xa7a}}, @TCA_DEF_DATA={0x9, 0x3, '](&$\x00'}]}, {0x8c, 0x6, "a02f8833b73c991af9b431bcf137b2ee70af9f5d08cbcf7e68a42b37c299078f87adb95af11f1cce519a9263dd49f333a05e87a5cc1a25b4abc17eeac06add21e8ad25bc9de98125fad9479a9ad9ff680bd8d1c63828786210072cfd2d616ef2f76462bbecc6daae853183795a2f024e5c1bc214f16fbf66e2ce2d7c1efa6f67071073a5bce74b5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x280c, 0x1, [@m_skbedit={0xac, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x77, 0x6, "101a70829d6fc063ce973853b921e5da74de1e3316a90c3240fd3ddac03578e1abbce23b0f19da89995525dc391bb58d907250e11d63dc4df4d392f3686048462617319313cd2a4a62fa2e581ab64b22955474e58ee58497e3dd22073e923ddc5d0ce2bab8da8dcacc3ac6fdbc2c08a881927c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x108, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xda8f}, @TCA_CT_LABELS_MASK={0x14, 0x8, "70798bb79aed6855544b94f1e0bd1074"}]}, {0x82, 0x6, "d546e2d2fc6986ae1a4ac7aeaf138b402778ea584e1b8461473c0f86e832c563b9551e3426e289c26a6aeb8ee652ca0eaf229dd39bb19d4a132a0120f876a22db367653de7493c4a65e00576aec88c44be26ff6ea32c7ca20b80b303c74b83eb883a137fefbaafe6d36dc3aa4ef3d9df98499b1e28553e373f28c04ffaea"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x130, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe782}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xc3, 0x6, "196586e5b9888fe4b5e2f4f094bcc43f3210e4f4c454fff626beb55e6391135d3bc210289066115af4c91d6c951d9859ef31a43e3d5e104ad4866e8e16eb4b1a776de38024d28d94c6cb110bee0b42454cf9ca3c6be0e2b447ed25a9f0736696e2bc3f425bf8596398ce1ae917d0dc8ef116ba587e13ffd31121724e429ad99340fa0a04e6b3f0ae3d5c3ec6edd9932cfefd1552e880288e14d5b5223f0bb61a07a2be4367da661a570cc73fcd0b6d2a8c43502bf53e4b7694a6f625105134"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2344, 0x0, 0x0, 0x0, {{0xb}, {0x22ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x23f, 0x10000000, 0x10001, 0xffffffff, 0x9, {0x0, 0x0, 0x5, 0x9, 0x7, 0x5}, {0x7, 0x0, 0x2, 0x400, 0x1, 0x7}, 0x9, 0x7, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xffff, 0xffff8000, 0x8803, 0x8, 0x7fffffff, 0x1, 0x80000000, 0x1ff, 0x0, 0x80000000, 0x7, 0x2, 0xe0000000, 0x5, 0x5, 0x1, 0xfffff001, 0xec, 0x2, 0x8001, 0x4b, 0x7fff, 0x1, 0xfff, 0x1, 0x6, 0x3f, 0x4, 0x0, 0x7, 0x519, 0x3d, 0x8, 0x664, 0x7, 0x4, 0x7f, 0x3, 0x7, 0x3, 0x0, 0x40, 0x100, 0x3f, 0x3, 0x3, 0x8, 0x8, 0x8000000, 0x5ebd, 0x2, 0x4c, 0x8, 0x5c6a, 0x400, 0x1f, 0x7, 0x80000001, 0x40000000, 0x7fff, 0x7, 0x8, 0x5, 0x8, 0x8, 0x4, 0x39, 0x20, 0x101, 0x100, 0x5, 0xfff, 0x7, 0x3f, 0xff, 0x0, 0x5, 0x1, 0x9, 0x10000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x101, 0x2, 0xffff0001, 0x6, 0x7, 0x5, 0x5, 0x0, 0x800, 0x20, 0xab32, 0x8, 0x101, 0x1, 0xf3, 0x3, 0x1000, 0x0, 0x8, 0xf299, 0x2e8, 0x0, 0x0, 0x200, 0x5, 0x6, 0x6, 0x8000, 0xfff, 0x5, 0x5, 0x6, 0x7, 0x7fff, 0x40, 0x9, 0x7, 0x3ff, 0x9, 0x5, 0x7, 0x242, 0x8, 0x7f, 0xfffffff9, 0x0, 0x7ff, 0x7b26db0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x413b, 0x8001, 0x1, 0xff, 0x80000000, 0x6549, 0x2, 0x1000, 0x71c8, 0x7, 0x8, 0x8, 0x6, 0x9, 0x5, 0x9, 0x80000001, 0x10000, 0x1, 0x5, 0xff, 0x539, 0x7, 0xe913, 0x6c, 0x0, 0x8, 0x2, 0xae6, 0xd8da, 0xfff, 0x2ec, 0xfffffffc, 0x9, 0x1, 0x8, 0x3, 0x9, 0x0, 0x422, 0xe397, 0x0, 0x2, 0xfffffe07, 0x2, 0xff, 0xe0, 0xfff, 0x3, 0x10001, 0x3, 0x5, 0x5, 0x5, 0x6, 0x8, 0x8, 0x8e700, 0xffff93f6, 0xfff, 0x4, 0x6, 0x4, 0x3, 0x8000, 0x1000, 0xffffffff, 0xf5, 0xf075, 0x81, 0x1000, 0x7, 0x4, 0xffffffff, 0x66, 0x7ff, 0xc9b4, 0x0, 0x0, 0x7, 0x40, 0x9, 0x7, 0x1f, 0x3, 0x52f7, 0x8, 0xa07, 0x10001, 0x7f, 0x8001, 0x80, 0x6, 0x2, 0xfffffffc, 0x80000001, 0x7, 0x1fe, 0x3, 0x2, 0x0, 0x5, 0x4, 0xd2ad, 0x8000, 0x9, 0x3f, 0x80000000, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff800, 0xffffffffffffffff, 0x0, 0x80000001, 0x80000000, {0x80, 0x2, 0x8, 0x2, 0x1, 0x6}, {0x1, 0x0, 0x2, 0x3, 0x8, 0x7}, 0x7fff, 0xff, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x2, 0x5, 0x1000, 0x7f, {0x7, 0x1, 0xfffa, 0x0, 0x80, 0x8}, {0x6, 0x0, 0x1, 0x1, 0x3823, 0xf947}, 0x81, 0x0, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xec4, 0x8, 0x6, 0xfffffff9, 0x9, 0x10000, 0xffffff81, 0xffffffaa, 0x49, 0x7, 0x2, 0x1, 0x18d0, 0x3f, 0x3, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xffff7fff, 0x10000, 0x7, 0x1, 0xff, 0x9, 0xff, 0x5, 0xe81, 0x80, 0x40, 0xff, 0x6, 0x8, 0x38bf3ef5, 0x6, 0x80000001, 0x2, 0x4, 0x5, 0x8, 0xffff, 0xb2, 0x5, 0x8, 0x1, 0x3, 0x1, 0x7, 0xffff, 0x9, 0x20, 0x100, 0x9976, 0x401, 0x5, 0x0, 0xfffffffb, 0x1, 0x3ff, 0xfffffffc, 0x100, 0x3, 0x3, 0x6, 0x10001, 0x2, 0x800, 0xffffe2ad, 0x8, 0xfffffff7, 0x6, 0xfffffffd, 0x400, 0x0, 0x7, 0xfffffa84, 0x4, 0x800, 0x100, 0x0, 0x0, 0x1000, 0xffff, 0x3, 0x8, 0x0, 0x100, 0x2, 0xffff, 0x7, 0x3, 0x0, 0xc9, 0x8, 0x0, 0x1d635bf3, 0x9, 0x20, 0x80000001, 0x4, 0xfffffffb, 0x0, 0x8, 0x5, 0xc7, 0xc000, 0xffffff06, 0x4, 0xffffffff, 0x1, 0x8, 0x2, 0x858ec61e, 0x3ff, 0x7, 0x6, 0x1, 0xa14b, 0xfffffffe, 0x7fffffff, 0x2, 0x20, 0x1f, 0x8, 0x200, 0xfffffffe, 0x6, 0xfff, 0x9, 0xff, 0x9, 0x5, 0x0, 0x1e, 0x4, 0x8001, 0x5, 0x1f, 0x0, 0xffffff7f, 0x4, 0x0, 0x65b, 0xdf3, 0x3, 0x800, 0x3, 0x1ff, 0x1, 0x9, 0x3, 0x8000, 0x20, 0x1, 0x2, 0x7, 0x3, 0x4, 0x1284f61c, 0xfffffbff, 0xfffffffe, 0x4, 0x4, 0x81, 0x4, 0x0, 0x2, 0x1, 0xfffffffb, 0x5, 0x10001, 0x0, 0x4, 0x5, 0x5, 0x1, 0x6, 0x4, 0x983, 0x86, 0x79b5, 0x100, 0x5, 0x9, 0x6, 0x9, 0xffffffff, 0x3f, 0x3, 0x81, 0x9, 0x0, 0x8, 0x2, 0x7, 0x8, 0x1, 0x8, 0xc9, 0x400, 0xbea6, 0x4, 0xffffffff, 0x309a4, 0x200, 0x4, 0x1, 0x3, 0xe000, 0xfffffd60, 0x1, 0x9, 0x2, 0x1c00, 0x73c94b62, 0x80000001, 0x0, 0x1, 0x401, 0x5, 0xffffff00, 0x7c000000, 0x6, 0x4, 0x2, 0xfff, 0x1, 0x2000000, 0x1ff, 0xffff5477, 0x4, 0x200, 0x9, 0x7, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x400, 0x6, 0xf35, 0x9, 0x8f, 0x0, 0x4, 0xffffff57, 0x200, 0xaa7, 0x6, 0x8, 0x400, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xff, 0x80000001, 0x2, 0x8, 0xe0, 0x3f, 0x3, 0x2, 0x10001, 0x0, 0x3, 0xfff, 0x40, 0x5, 0x7, 0x1000, 0x5, 0x8, 0xfff, 0x5, 0x3, 0x2, 0x3, 0x243e, 0xffffbcc6, 0x1, 0x4, 0x22036895, 0x101, 0xf05, 0x3ff, 0x8, 0x1, 0x349d, 0x7, 0x6, 0x9, 0x3ff, 0x1f, 0x0, 0x0, 0x3, 0x9, 0x9, 0x3f, 0x7, 0xa7, 0x7, 0x4, 0x3, 0x2d0c, 0xfff, 0x10000, 0xae, 0x24000000, 0x10000, 0x4, 0x6e, 0x8, 0x5, 0x3, 0xfffffffa, 0x2, 0x2e02, 0x72, 0x4d82, 0x2, 0x8, 0x1, 0x80000000, 0x1f, 0x6, 0x8, 0x800, 0x5, 0xffff, 0x8, 0x10000, 0x81, 0xf9e4, 0x7, 0x7, 0x4, 0x7, 0x9e, 0x2, 0x6c5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9fcc, 0x183, 0x5, 0x7, 0x10000000, 0xfff, 0x1, 0x2, 0x0, 0x5d1, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x8, 0x476, 0x800, 0x1, 0x6, 0x9, 0x8, 0x7a, 0x57, 0x533, 0x6, 0x200, 0x0, 0x1, 0x7f, 0x9, 0x3, 0x0, 0x3, 0xae28, 0x2bd9, 0x101, 0x3, 0x1, 0xd9, 0xfff, 0x2, 0x4, 0x48a6, 0x7, 0x0, 0x57, 0x3e9466d7, 0x40, 0x0, 0xeb, 0x4, 0x80000000, 0x401, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0xed6f, 0x4, 0x0, 0x69417c58, 0x8, 0x7f, 0x3ff, 0x2, 0x50d7, 0x2971, 0x36, 0x1, 0x6, 0xa0, 0x8, 0x76, 0xfff, 0x8, 0x19, 0x3, 0xfffffffe, 0x401, 0x7, 0x7fff, 0x5, 0x9, 0x1000, 0xfff, 0x8a, 0x9, 0x1, 0x2, 0xffff, 0x9, 0x0, 0x400, 0x6, 0x9, 0x6, 0x71, 0x100, 0x8, 0x9, 0x10000, 0xf4, 0x9, 0x401, 0x6, 0x5, 0x2, 0x4, 0x101, 0x2, 0x2, 0x78, 0xcc6, 0x5, 0x4, 0x5, 0xb5, 0x400, 0x8, 0x1, 0x2749, 0x9, 0x169, 0xf22e, 0x7f, 0x570d, 0x6, 0x5b9, 0x8, 0x5, 0x401, 0x1, 0x8, 0x29f, 0x100, 0x3, 0x1, 0x3, 0x6aa, 0x5, 0x80000000, 0x8, 0x4, 0x7, 0x1, 0x80, 0x3, 0x7, 0x80000001, 0x1, 0x3, 0x86fa, 0x401, 0x6, 0xf630]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7311363c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x7ff, 0x200, 0x7, {0x7, 0x2, 0x5, 0x0, 0x7989}, {0x9, 0x1, 0x8001, 0x1, 0x0, 0x800}, 0x81e, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xfffffffa, 0xfff000, 0x8, 0x7fffffff, 0x922, 0x3, 0x276, 0x8, 0x8000, 0x0, 0xe9, 0xfffffbff, 0x6, 0x1, 0x80, 0x0, 0x7, 0x911d, 0x689, 0x400, 0x401, 0x5, 0xfffffeff, 0x8, 0xfffffffd, 0x206, 0x8, 0x4, 0x5, 0x2, 0x27, 0x61, 0x6, 0x9, 0xea, 0x43e, 0x3, 0x4, 0x3, 0x0, 0x401, 0x0, 0x8, 0xffffffff, 0x62, 0xc702, 0x929, 0x9, 0x8, 0x9, 0x9, 0x2, 0x9, 0x7f, 0x81, 0x7, 0x7, 0x101, 0xb56, 0x4, 0x84, 0x7, 0x4, 0x290a, 0x3, 0x7fffffff, 0x10000, 0x6, 0xc683, 0x2, 0xfffffff8, 0x80000001, 0x9, 0x53c8, 0x6, 0xd69, 0x400, 0x3, 0x6, 0xfffffff7, 0xda51, 0x1f, 0xe768, 0x38a, 0x24f1, 0x1, 0x0, 0x401, 0xf3b, 0x8000, 0x2, 0xeb, 0x81, 0x3, 0x3, 0xfffffffa, 0x7, 0xfffffffa, 0x3fd191, 0x5, 0x6, 0x1, 0x7, 0x3ff, 0xbe8, 0x80, 0x5, 0x37, 0xffffffc7, 0x9, 0x10001, 0x7, 0x6, 0x3831, 0x9, 0x4, 0x8, 0x3f, 0xae, 0x3, 0x3, 0x94, 0x0, 0x7f, 0x400, 0x8, 0xb57, 0x7fffffff, 0x7f, 0x10001, 0x9, 0x7, 0x7ff, 0x6, 0x5, 0x280, 0x61, 0x12, 0x9, 0xc100000, 0x3, 0x7, 0x3, 0x7, 0x5, 0x4, 0xf8de, 0x4, 0x7f, 0x5, 0xf, 0x7, 0x28, 0x896, 0x80, 0x6, 0x8, 0x0, 0xa1, 0x7, 0x5, 0x0, 0xffff, 0x4, 0x20, 0x43f4, 0x8, 0x190ecf32, 0x8, 0x400, 0x0, 0x9, 0x9, 0x81, 0x8, 0x8, 0x7, 0x1, 0x101, 0x1, 0x4, 0x9, 0x9, 0x4, 0x100, 0xe625, 0x9, 0x2, 0x6, 0x5, 0x9, 0x2, 0x20, 0xff, 0x4, 0x1ff, 0x9f2a, 0x4, 0x1b, 0x8, 0x5, 0x1, 0xffff, 0x1, 0x4, 0x80000000, 0x8, 0x7, 0xac, 0x7fff, 0x7b4, 0x0, 0x3, 0xfe2, 0x9, 0x2, 0x10001, 0x3, 0x5, 0x8, 0x2, 0x10001, 0x5, 0x3, 0x800, 0xa6, 0x3, 0xc722, 0xffff, 0x9, 0x7, 0x5, 0x1, 0x6, 0x5, 0xffff, 0xfff, 0xffff, 0x4, 0xffffffff, 0x73, 0x8, 0x101, 0x2, 0x2, 0x1, 0x4, 0x100, 0x0, 0xba9, 0x80000000, 0x20, 0x1, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7, 0x4, 0x9, 0x7, 0xffff, 0x1, 0x80000000, 0x7f, 0x2a4c, 0x3, 0x8, 0x8, 0x0, 0x7, 0x9, 0x1, 0x800, 0x4, 0x7ff, 0x2, 0x9, 0x0, 0x8, 0x1f, 0x5, 0x10001, 0xfffffffd, 0x6, 0x3f, 0x4, 0x2, 0x3ff, 0x2, 0x1, 0xffffffff, 0x7, 0xfff, 0x80000000, 0x0, 0x6, 0x785, 0x8, 0x6, 0x1, 0xe6, 0x80, 0x1, 0x1, 0x0, 0x6, 0x8001, 0x200, 0x7f, 0x4, 0x8, 0x7ff, 0x1ff, 0x10000, 0x0, 0x8a, 0xff, 0x84, 0x7a7, 0x7, 0xae4, 0x80000000, 0x8, 0x800, 0x80000000, 0x1, 0x3, 0x4, 0x0, 0x72, 0x9c49, 0x7, 0x9ed, 0x401, 0x3, 0x8, 0x4, 0xffffffff, 0x6, 0x77, 0x0, 0x99e, 0x5, 0x3, 0xe0000000, 0xfffffffe, 0x9, 0x5, 0x4, 0x401, 0x3ff, 0x8001, 0xd2, 0x23, 0x7, 0x8, 0x5, 0x7, 0x4f, 0x7f, 0x9, 0x53, 0x6, 0x7, 0x38, 0x3a5b, 0x4, 0x8, 0x5, 0x1, 0x3, 0x8, 0x18800, 0x401, 0xfffff244, 0x7f, 0xfffffffc, 0x7, 0x7fffffff, 0x2, 0x40, 0x3, 0xeba, 0x1, 0x7, 0x7f, 0x7, 0x0, 0x6, 0x6, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x0, 0x5, 0x3, 0x5686bf01, 0x84, 0x5, 0x9, 0x772a, 0x5, 0x1, 0x3, 0x1ff, 0x4b88, 0x3, 0x0, 0x1f, 0x9, 0x1f, 0x0, 0x2, 0x9, 0x7, 0x1, 0x1, 0x0, 0x4, 0x80, 0xfffffffa, 0x4, 0x7ff, 0xea, 0x38, 0x0, 0x81, 0x1, 0x10001, 0x9, 0xbc1, 0x0, 0x101, 0x1, 0x200, 0x7fffffff, 0x7, 0x2, 0x8370, 0x0, 0x4df, 0x9, 0x7e, 0x1, 0x2, 0x3, 0x10001, 0xf5c, 0x3, 0x7fff, 0x0, 0x7, 0xffff8001, 0x95e, 0x7b2, 0x8, 0x81, 0x95, 0x7, 0x7, 0x7fff, 0xfffff054, 0x6d, 0x7, 0x4, 0x885d, 0x400, 0x0, 0x0, 0x7, 0x8, 0x1c000, 0xab, 0x7, 0xffff4472, 0x2, 0x80000001, 0x6, 0x2, 0x6, 0x3, 0x0, 0x3f, 0x7ff, 0x5, 0x3, 0xffff0001, 0x2, 0x20, 0x0, 0x80, 0xfffffff8, 0x3, 0x8001, 0x3, 0x1b26, 0x7fffffff, 0x5, 0x1, 0x2, 0x4, 0xb1d, 0x7, 0x6, 0x9, 0x3f, 0xb0a, 0x40, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x591c, 0x8, 0x6, {0x4, 0x1, 0x8000, 0xc6, 0x54d3, 0x4}, {0x1, 0x2, 0x3, 0x4, 0x7ff, 0x80}, 0x6, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x8, 0x9, 0x7, {0x40, 0x2, 0x3, 0x7, 0x8001, 0x7be}, {0x40, 0x1, 0x3, 0x0, 0x3f, 0x2}, 0x20, 0x8000, 0x1000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x9, 0xffff, 0x81, 0x4, 0x7fff, 0x0, 0x4, 0xe16b, 0x100, 0x3bb, 0x6, 0x9, 0xfff, 0x2, 0x9, 0x2, 0x80, 0x6, 0x0, 0xe0fb, 0x9, 0x9, 0x7, 0x7fff, 0x1f, 0x3, 0xffff0000, 0x6, 0x2, 0x8eb, 0x5, 0x1, 0x2, 0x7936, 0x2c, 0x3, 0xfffff6a5, 0x0, 0x5, 0x461dffa5, 0xb2a, 0x7f, 0x400, 0x1d1, 0x7, 0x7fff, 0x4, 0xb3, 0x0, 0x2, 0x1ff, 0xb0, 0x7f, 0x6, 0x7, 0x2, 0xc05, 0x0, 0x4, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x40, 0x4, 0x8001, 0x8, 0x401, 0x7fffffff, 0xec, 0xde3, 0xd1, 0x6, 0x0, 0x1de6, 0x0, 0x8fa, 0x7, 0x5, 0x3, 0x3, 0x8793, 0x80000000, 0x2, 0x40, 0x9, 0x3c3b, 0x7, 0x2, 0x200, 0x8, 0xfffffff7, 0x5, 0x3f, 0x0, 0x2, 0x4, 0x8, 0x7, 0x9, 0xfffffff9, 0x7, 0x3ff, 0x10000, 0x1f, 0xd3, 0x6, 0x80, 0x1000, 0x6, 0xfffffffe, 0x3, 0x8, 0x9, 0x4, 0x0, 0x2, 0x1, 0x80, 0x7, 0x6, 0x448c, 0x1, 0x1, 0x5, 0x8d, 0x4, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x5, 0x2, 0x7, 0x5, 0x400, 0x1, 0x5, 0xfff, 0x1000, 0x7ba8, 0x8001, 0x9, 0x0, 0x0, 0x219, 0x3, 0xe1, 0x4, 0x40, 0xff, 0x8, 0xfff, 0x8, 0x10001, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x1, 0x9, 0xff, 0x1, 0x6, 0x641, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x804, 0x401, 0x3, 0x0, 0xa45, 0x100, 0x7, 0x2, 0x2, 0xbc69, 0x5, 0x80000001, 0x81, 0x0, 0x8, 0x800, 0x20, 0x40, 0x10000, 0x5d, 0x5, 0x6, 0x3, 0x8, 0x7ff, 0x3, 0xffff8000, 0xfffeffff, 0x1, 0x33f, 0x8, 0xb76a, 0x8000, 0x9, 0x1f, 0x3, 0x1f, 0x4, 0x0, 0x9, 0x1, 0x548, 0x1f, 0x7ff, 0x3, 0x8, 0x2fc6, 0x9, 0x100, 0x1f, 0xae, 0xea76, 0x2, 0xfffffe00, 0x7, 0x800, 0x5, 0x9, 0x4, 0xfda, 0x5, 0x8000, 0x40, 0x3ff, 0x3, 0x4, 0x75, 0x4782, 0x20, 0x10000, 0x9, 0x40, 0x1000, 0x3, 0x0, 0x10000, 0x38000, 0x5, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0x8, 0x8bf, {0x9, 0x0, 0x3, 0x80, 0x3, 0x1}, {0x1, 0x0, 0x2d3, 0x100, 0x4}, 0x13, 0x81, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0x200, 0x3f, 0x8, 0xe45e, 0x6, 0x2, 0x6, 0x0, 0x7ff, 0x1, 0x9, 0x4d1, 0x7, 0x3, 0x3, 0x3, 0x10000, 0x7, 0x1, 0xf3, 0x1000, 0x2, 0x3, 0x902, 0x8000, 0x8, 0xe4ea, 0x80000001, 0x3, 0xfff, 0x4, 0xc3b8, 0xfffffffc, 0x1, 0xcb, 0x200, 0x0, 0x8, 0x0, 0x45, 0x9, 0x7fffffff, 0x80, 0x20, 0x6, 0x7ff, 0x3ff, 0x3ff, 0x3c, 0x0, 0x3f, 0x81, 0xcd, 0x80000000, 0x4, 0x1, 0x1f, 0x0, 0x6, 0x1000, 0x6, 0x7fffffff, 0x1, 0x3, 0x5, 0x9dd, 0x1, 0xe90, 0x8, 0x1000, 0x100, 0x6, 0xec2, 0x5, 0x5, 0xdd, 0xfffff800, 0x4, 0x3e1da87, 0x6, 0x800, 0x7ff, 0x20, 0x7ff, 0x7ff, 0x7, 0x1, 0x7, 0xffffffff, 0x3, 0x80000000, 0x1, 0x81, 0xffff, 0x3ff, 0xfffffffa, 0xca, 0xfffffe00, 0xfffffff9, 0x7fffffff, 0xfffffc00, 0x800, 0x0, 0x9, 0x80000001, 0x6321, 0x4, 0x18, 0x400, 0x7, 0x200, 0x4, 0xfff, 0x5, 0x3, 0x8001, 0x7, 0x40, 0x9, 0x80000000, 0x5, 0x8679, 0x3, 0xffffa1a5, 0x10001, 0x7fff, 0xffff, 0x40, 0x1, 0x6, 0x80000000, 0x5, 0x7, 0x3, 0xa6a, 0x3c, 0xfff, 0x1f, 0x5, 0x0, 0x3, 0x5, 0x401, 0x2, 0xd5, 0x2, 0x6, 0x91b, 0x80000000, 0x4, 0x3f, 0x200, 0xd935, 0x200, 0x401, 0x3f, 0x400, 0x4, 0x2, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x7, 0xffff8001, 0x5, 0x20, 0x3ff, 0x101, 0x3a, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0x7, 0x8, 0x9, 0x4, 0x9, 0x5, 0x7, 0xf7dc, 0x7, 0x80000001, 0xc3, 0x100, 0xfffff000, 0x2, 0x100, 0x3, 0x6, 0x4, 0x3ff, 0x5, 0x3, 0xfffeffff, 0xcaf1, 0x1, 0x3, 0x2, 0x3ff, 0x5dc4, 0x0, 0x7, 0xbbab, 0x80000001, 0x1, 0x1ff, 0x3ff, 0x9, 0x800, 0x4, 0x100, 0x5, 0x4, 0x4, 0x8, 0x7, 0x1, 0xffffdf5c, 0x8, 0x0, 0x3, 0x9, 0x2, 0x318, 0x7, 0x1, 0xffff9d99, 0xc1, 0xc1, 0x800, 0x4, 0xfff, 0x1ff, 0x400, 0x7f, 0x3, 0x134c, 0x400, 0x200, 0x40, 0xc460, 0x81, 0x0, 0x5f78, 0x9, 0x6, 0xfff, 0x7e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1f, 0x200, 0x6, 0x0, 0x80000000, 0x8, 0x1ff, 0x711a, 0x8, 0x3f, 0x86, 0x8, 0xd4, 0x7, 0x20, 0x7, 0x7, 0x1, 0x9a, 0x8000, 0x0, 0x3f, 0x2d0, 0xffffffff, 0x3, 0x4, 0x40, 0x7ff, 0x7fff, 0xffffffff, 0x8, 0x4, 0x8, 0xfffffffd, 0x1217488a, 0x7c, 0x5, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x60a7bbac, 0x401, 0x8, 0x7, 0x459b, 0x8000, 0x5, 0xffffffff, 0x9, 0x10001, 0x93, 0x10001, 0x9, 0x4, 0x5, 0x63, 0x7, 0xfffffff9, 0x2, 0x9, 0xd7f, 0x3, 0x3, 0x81, 0x2, 0x1000, 0x100, 0x5, 0x200, 0x6, 0x4, 0x4, 0x4, 0x9f, 0x80000001, 0x85cd, 0x80000000, 0x3, 0x7f, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x9, 0x6, 0x2, 0x3, 0x400, 0x3f, 0x9, 0x2, 0xfffffffa, 0x9, 0xa77, 0x4, 0x5, 0x2, 0x0, 0x8, 0x9b8, 0x20, 0x3, 0x4, 0x7, 0x100, 0xfff, 0x8, 0x1, 0x1ff, 0x7, 0x8, 0x2, 0x9, 0x8fee6c8, 0x6429d2af, 0xff, 0xffffffff, 0x3f, 0x4, 0x200, 0x1, 0x1f, 0xa8e, 0xc9, 0x1, 0x6, 0xb039, 0x1000, 0x8, 0x0, 0x19b9a688, 0x557, 0x9, 0x5, 0x0, 0x3, 0x6, 0x80000001, 0x700, 0x5a, 0x4, 0x80, 0x800, 0x10001, 0x6f1, 0x1, 0x2, 0x7fffffff, 0x50b, 0x84, 0x1, 0x4, 0x6, 0x7, 0x80, 0x100, 0x7fffffff, 0x1, 0x81, 0x5, 0x80000000, 0x4c03, 0x2, 0xea, 0x5, 0xd3, 0x4, 0x707, 0xffffffff, 0x7, 0x1000, 0x8, 0x7f, 0xfffffff8, 0xfffffffb, 0x2, 0x1, 0x3, 0xffffff17, 0x7ff, 0x7, 0x0, 0x2, 0x1, 0x7, 0x6, 0x1, 0x800, 0xfffffffb, 0x100, 0xffff, 0x9, 0xfff, 0x7fff, 0x7, 0xd0, 0x80, 0x81, 0x1f, 0x8, 0x80000001, 0x1ff, 0x56a, 0x3ff, 0x0, 0x8, 0x81, 0x7fff, 0x3, 0x1, 0x6, 0x1, 0x7d, 0x2, 0x3ff, 0x3ff, 0xfffffffd, 0x7ff, 0x8, 0x401, 0xb4000000, 0x7, 0xffff, 0x58, 0x7, 0x2, 0x7, 0x4, 0x7ff, 0x7ff, 0x6, 0x4, 0x27, 0x0, 0x6, 0x25, 0x80, 0x5, 0x9, 0x5804, 0x6, 0x9, 0xfdd, 0x9, 0x6, 0x5, 0x3ff, 0x1f, 0x0, 0x1ff, 0x80000001]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff110, 0x2, 0x9, 0xb52d, 0xc5, {0x5, 0x0, 0x7bb, 0x101, 0xfff8, 0x8}, {0x0, 0x2, 0x101, 0x7, 0x8, 0x9}, 0x4, 0x81, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x85}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x2d, 0x6, "e8e80d4e1e9d1946b88f5da722227926b15ebfe3168815b0b966517d902561b581890fcdb5a3af0a31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x118, 0x16, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x7, 0x9b, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x7, 0x8, 0x7}, {0x7fff, 0x58, 0x90, 0x400}, {0x6, 0x3, 0x7f, 0xd799}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x2, 0x10000000, 0x100, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x27b, 0x0, 0x3, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x1, 0x3}, {0x7f, 0x7f, 0xb4, 0x8001}, {0x7, 0x8, 0x5a, 0x4}, {0x6, 0x3, 0x8, 0x4}]}]}, {0x54, 0x6, "09dab61b757b69c4600c64f3d93ed0a7cd914e9cf26cf7c4a422c03dff7630b9ea5609efa566f7382026950f7fa096b021da8ce878d45e9a0ad9dbadf96697891ef95e96b1f6a5eef7ca488daff902df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xffffffff, 0x8}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd8, 0x7d3f, 0x20000006, 0x8001, 0x3}, 0x2}}]}, {0x5b, 0x6, "29d375a1f7b13f04340b52364afd7d2c73408cca125f3a7e238115f5674eb62817c3b97a3daefbe5137d9cee330aaeae88d74890a24a1430677ff20804b0ba80aaa68dd6493d19c9435aa587a476fbf81d29d90c904347"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x294, 0x1, [@m_ctinfo={0x58, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000, 0x0, 0xffffffffffffffff, 0x190, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x2, 0x10000000, 0x2, 0xffff337b}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0xffffffffffffffff, 0x7fffffff, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x0, 0xfffeffff, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x9d, 0x6, "29f2f8875bc249f9764b212946f0b41738b8e528ddf629dbbfd0729bb523afbe7ad3630aa5c56ffe64660da07571da24d725995ee8cdfe7cfbc30bfa2ff1c7511004386ac772c057f79aff53783bd5febf5c83ac07c86f1d134c486aecb6024ae97daf8e601aa01feb6884553c21a94cd7a4309f2b9352171f4abc14d54b88eaf6e5d81170e6e214dd481b4f4b7442b890975e57b3136cb877"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xfc, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1f}]}, {0xbf, 0x6, "0c4ec741e8115169e49c94d5b2375d1c24c277d130744caa410856c818132ee28eec003fb1966f8254e073d383dc657101e2ef543fe6588a39953f3627c1a398c79255556cff77e941ecb30792a34d23d92f855fba820435e53e20a0333918ae5d23f4a574a0beb44ab8528ecad70163297c55c4c1a4695641f1906dd47584a1d6d13ba31a47c604f7e77d0e927f5f7d6b53e0ee6b4370eeae8c36202e228dd2e30c2ca8536d06fa1154cdb51646f4603e6fd329b67bade6a5de50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x5e8, 0x1, [@m_nat={0x1b0, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1f, 0x8, 0xff, 0x401}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x0, 0x74, 0x4}, @broadcast, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7, 0x3, 0x8, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x7, 0x2, 0x80}, @local, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x8, 0x4, 0x7, 0xa7e}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4a, 0x321, 0x1, 0x2, 0xe866}, @remote, @multicast2, 0xff}}]}, {0x96, 0x6, "ef0b2a4654bf3bb5cf46f23a1bc6141fa19b4a495ac99a63361060b8a6695f9efc1686a0b81383d1309db3566b9fdf9b31d7c9d426eeba4a80b9c6fb5b463ef5736ad72ffa36773a4cf611ea02a19925fa189709218a8aa2f42ba9af7543ed9118263aa3c17e77b7bc6a9289876b4754856a3de899fdc0de8cae5435fe7d0d7e50617116b17915651fd40694f4f40274bbf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x158, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xcb, 0x6, "6099234ea2eed63aef504bf939636a9364a5a14c1769834c28643bf642e77ef62fed3e7d30410a81e7b27c9f3a22dd684373337336560e081782c979ec896ff0596ac6b74694d207d45dae9eb866957655f3656872c443cddfdfdedf3c1244a4d5b0e3d12a44192da8b753f6926c418acc693d0cf34f31e68b4c1be4cbd02fa47f9384dcbe0a60eb60c8d886e04208b4fc876e17791e11718657d4eb8fcbeee631fdf85db832052ca6ef75788dcd2070c261aba7095ea8e5286198abdb557638e2174710383ec9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x10c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x77a, 0x7, 0x2, 0x7f}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}]}, {0x9e, 0x6, "cc11e8928ac8f3afeb2654fb519d8f8d0c2b0a3ba3c48f51aacae3678c0418fe5662abfcf5ab78eb44f5e081354a7dbfd8441c6da9d6d18c75c5d3f4a313993588e0ac62fb6474832e9c27f7754fbd7df1ca483b89b50f6761ff8b940f3d1c74715a2feea048ec8f31da7b0310df3f32e45058231a96f51d97beb481dceef2860b1d82e2d81325bd6f7d7cecbc568dae50116bf636ef69924131"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x98, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x57, 0x6, "9d1e2a880b3aef93ade0591f2e75b4a826586547e73e7f17ce836d7e5af0a9650a5ccda27cdea065b7c1c1582c0355e49b508afdf155d1194302878e4f507b04df44108cf74261c5c1d262aa001724d48ba45f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x138, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x6, 0x3, 0x8001}, 0x1}}]}, {0xf4, 0x6, "1c527788260907ebc13a37c5676cd4d2815fc796e9eb20e50675ef5508c907a0215dddf490ff7b12ae74f32c92cc96a2fc13a0b71475b8aa66286c3832e4e15b3a1f15ad9743c3c217f4a3e4a5762fa0e884b1e38f742162ef55391073c3b37d34be520335b5653ac04a0307c511a4721417ebd83d36da57b8c4cbae9893500746aeba66fdadea2682cbc2cdb380a8b2597ce4bea66a08645b550a60eaaa974d9fde87b4fe9f3c2ab4edd88c0c1104edae0a7add6396a4e0988fb3e5413c661860356b3089b3d0184f10ec7c43335759d5177d3e337f577c9e8c1e33658dc9ffdc1bcdfb83aee7891e86f1e632054751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x32c4}, 0x1, 0x0, 0x0, 0x840}, 0x24001004) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getlink={0xf0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10, 0x20042}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_MTU={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "9f6b268b7c36c4464d581b894feab3ab55b034bf4cf0317322a06d3a"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_MAP={0x24, 0xe, {0x1000, 0x6, 0x400, 0x1, 0x80, 0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r5) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWNSID={0x14, 0x58, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000052700000000000000000000000034c3111da92df09db1b46c4c40ea3f452cbf6d21c2535cc9f927a477b5c0eb1213ce541c45596bdc2264385f2e342bbabdbc9caae2793471132258fdd2426e443c58e93df2b113def755f233feb01e7caea3d428729b2068b09df4b5990bae5aa878858b257508292b2e0b7120b843642c3e5226cad11baa0110324a887f5db3e57fbdda8b66af4267d02cf034629cea0c4c5f1e6bd8d2961d247094f3f63ff5b12c9acaf9eb34d8", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfe46}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005940)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(0xffffffffffffffff) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newtaction={0x32c4, 0x30, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_csum={0x12c, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x428efae9, 0x5, 0x3, 0x9e}, 0x80000001}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2e2f, 0x100, 0x4, 0x778df892, 0x92}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0xffffffffffffffff, 0x2, 0x10001}, 0x5d}}]}, {0xa9, 0x6, "662641596021431a77b7e483826becc5ec663ffa66eef0d2c91cce8003b47757f7da219a7fd9de7a8ec5039a4e6a2c3c89b4ed8d26dede0285dba465022a1ecaf98c7ce91b8b0446551dc305eb8155c18380c21893b9cf1514de6d101dc86a840dd55930a937a0ac625cb85a3d3dd37ac56ed71589053d296ba40db5c730f28a82b4370e7508c873344624a3bcccfd5f3930b66fbc5fe3b7e5fe62c5fdd4c6e47349abd9bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xf8, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffff01, 0x1, 0x3, 0x3, 0xa259}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1243c963, 0x2, 0xb285, 0xa7a}}, @TCA_DEF_DATA={0x9, 0x3, '](&$\x00'}]}, {0x8c, 0x6, "a02f8833b73c991af9b431bcf137b2ee70af9f5d08cbcf7e68a42b37c299078f87adb95af11f1cce519a9263dd49f333a05e87a5cc1a25b4abc17eeac06add21e8ad25bc9de98125fad9479a9ad9ff680bd8d1c63828786210072cfd2d616ef2f76462bbecc6daae853183795a2f024e5c1bc214f16fbf66e2ce2d7c1efa6f67071073a5bce74b5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x280c, 0x1, [@m_skbedit={0xac, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x77, 0x6, "101a70829d6fc063ce973853b921e5da74de1e3316a90c3240fd3ddac03578e1abbce23b0f19da89995525dc391bb58d907250e11d63dc4df4d392f3686048462617319313cd2a4a62fa2e581ab64b22955474e58ee58497e3dd22073e923ddc5d0ce2bab8da8dcacc3ac6fdbc2c08a881927c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x108, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xda8f}, @TCA_CT_LABELS_MASK={0x14, 0x8, "70798bb79aed6855544b94f1e0bd1074"}]}, {0x82, 0x6, "d546e2d2fc6986ae1a4ac7aeaf138b402778ea584e1b8461473c0f86e832c563b9551e3426e289c26a6aeb8ee652ca0eaf229dd39bb19d4a132a0120f876a22db367653de7493c4a65e00576aec88c44be26ff6ea32c7ca20b80b303c74b83eb883a137fefbaafe6d36dc3aa4ef3d9df98499b1e28553e373f28c04ffaea"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x130, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe782}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xc3, 0x6, "196586e5b9888fe4b5e2f4f094bcc43f3210e4f4c454fff626beb55e6391135d3bc210289066115af4c91d6c951d9859ef31a43e3d5e104ad4866e8e16eb4b1a776de38024d28d94c6cb110bee0b42454cf9ca3c6be0e2b447ed25a9f0736696e2bc3f425bf8596398ce1ae917d0dc8ef116ba587e13ffd31121724e429ad99340fa0a04e6b3f0ae3d5c3ec6edd9932cfefd1552e880288e14d5b5223f0bb61a07a2be4367da661a570cc73fcd0b6d2a8c43502bf53e4b7694a6f625105134"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2344, 0x0, 0x0, 0x0, {{0xb}, {0x22ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x23f, 0x10000000, 0x10001, 0xffffffff, 0x9, {0x0, 0x0, 0x5, 0x9, 0x7, 0x5}, {0x7, 0x0, 0x2, 0x400, 0x1, 0x7}, 0x9, 0x7, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xffff, 0xffff8000, 0x8803, 0x8, 0x7fffffff, 0x1, 0x80000000, 0x1ff, 0x0, 0x80000000, 0x7, 0x2, 0xe0000000, 0x5, 0x5, 0x1, 0xfffff001, 0xec, 0x2, 0x8001, 0x4b, 0x7fff, 0x1, 0xfff, 0x1, 0x6, 0x3f, 0x4, 0x0, 0x7, 0x519, 0x3d, 0x8, 0x664, 0x7, 0x4, 0x7f, 0x3, 0x7, 0x3, 0x0, 0x40, 0x100, 0x3f, 0x3, 0x3, 0x8, 0x8, 0x8000000, 0x5ebd, 0x2, 0x4c, 0x8, 0x5c6a, 0x400, 0x1f, 0x7, 0x80000001, 0x40000000, 0x7fff, 0x7, 0x8, 0x5, 0x8, 0x8, 0x4, 0x39, 0x20, 0x101, 0x100, 0x5, 0xfff, 0x7, 0x3f, 0xff, 0x0, 0x5, 0x1, 0x9, 0x10000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x101, 0x2, 0xffff0001, 0x6, 0x7, 0x5, 0x5, 0x0, 0x800, 0x20, 0xab32, 0x8, 0x101, 0x1, 0xf3, 0x3, 0x1000, 0x0, 0x8, 0xf299, 0x2e8, 0x0, 0x0, 0x200, 0x5, 0x6, 0x6, 0x8000, 0xfff, 0x5, 0x5, 0x6, 0x7, 0x7fff, 0x40, 0x9, 0x7, 0x3ff, 0x9, 0x5, 0x7, 0x242, 0x8, 0x7f, 0xfffffff9, 0x0, 0x7ff, 0x7b26db0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x413b, 0x8001, 0x1, 0xff, 0x80000000, 0x6549, 0x2, 0x1000, 0x71c8, 0x7, 0x8, 0x8, 0x6, 0x9, 0x5, 0x9, 0x80000001, 0x10000, 0x1, 0x5, 0xff, 0x539, 0x7, 0xe913, 0x6c, 0x0, 0x8, 0x2, 0xae6, 0xd8da, 0xfff, 0x2ec, 0xfffffffc, 0x9, 0x1, 0x8, 0x3, 0x9, 0x0, 0x422, 0xe397, 0x0, 0x2, 0xfffffe07, 0x2, 0xff, 0xe0, 0xfff, 0x3, 0x10001, 0x3, 0x5, 0x5, 0x5, 0x6, 0x8, 0x8, 0x8e700, 0xffff93f6, 0xfff, 0x4, 0x6, 0x4, 0x3, 0x8000, 0x1000, 0xffffffff, 0xf5, 0xf075, 0x81, 0x1000, 0x7, 0x4, 0xffffffff, 0x66, 0x7ff, 0xc9b4, 0x0, 0x0, 0x7, 0x40, 0x9, 0x7, 0x1f, 0x3, 0x52f7, 0x8, 0xa07, 0x10001, 0x7f, 0x8001, 0x80, 0x6, 0x2, 0xfffffffc, 0x80000001, 0x7, 0x1fe, 0x3, 0x2, 0x0, 0x5, 0x4, 0xd2ad, 0x8000, 0x9, 0x3f, 0x80000000, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff800, 0xffffffffffffffff, 0x0, 0x80000001, 0x80000000, {0x80, 0x2, 0x8, 0x2, 0x1, 0x6}, {0x1, 0x0, 0x2, 0x3, 0x8, 0x7}, 0x7fff, 0xff, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x2, 0x5, 0x1000, 0x7f, {0x7, 0x1, 0xfffa, 0x0, 0x80, 0x8}, {0x6, 0x0, 0x1, 0x1, 0x3823, 0xf947}, 0x81, 0x0, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xec4, 0x8, 0x6, 0xfffffff9, 0x9, 0x10000, 0xffffff81, 0xffffffaa, 0x49, 0x7, 0x2, 0x1, 0x18d0, 0x3f, 0x3, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xffff7fff, 0x10000, 0x7, 0x1, 0xff, 0x9, 0xff, 0x5, 0xe81, 0x80, 0x40, 0xff, 0x6, 0x8, 0x38bf3ef5, 0x6, 0x80000001, 0x2, 0x4, 0x5, 0x8, 0xffff, 0xb2, 0x5, 0x8, 0x1, 0x3, 0x1, 0x7, 0xffff, 0x9, 0x20, 0x100, 0x9976, 0x401, 0x5, 0x0, 0xfffffffb, 0x1, 0x3ff, 0xfffffffc, 0x100, 0x3, 0x3, 0x6, 0x10001, 0x2, 0x800, 0xffffe2ad, 0x8, 0xfffffff7, 0x6, 0xfffffffd, 0x400, 0x0, 0x7, 0xfffffa84, 0x4, 0x800, 0x100, 0x0, 0x0, 0x1000, 0xffff, 0x3, 0x8, 0x0, 0x100, 0x2, 0xffff, 0x7, 0x3, 0x0, 0xc9, 0x8, 0x0, 0x1d635bf3, 0x9, 0x20, 0x80000001, 0x4, 0xfffffffb, 0x0, 0x8, 0x5, 0xc7, 0xc000, 0xffffff06, 0x4, 0xffffffff, 0x1, 0x8, 0x2, 0x858ec61e, 0x3ff, 0x7, 0x6, 0x1, 0xa14b, 0xfffffffe, 0x7fffffff, 0x2, 0x20, 0x1f, 0x8, 0x200, 0xfffffffe, 0x6, 0xfff, 0x9, 0xff, 0x9, 0x5, 0x0, 0x1e, 0x4, 0x8001, 0x5, 0x1f, 0x0, 0xffffff7f, 0x4, 0x0, 0x65b, 0xdf3, 0x3, 0x800, 0x3, 0x1ff, 0x1, 0x9, 0x3, 0x8000, 0x20, 0x1, 0x2, 0x7, 0x3, 0x4, 0x1284f61c, 0xfffffbff, 0xfffffffe, 0x4, 0x4, 0x81, 0x4, 0x0, 0x2, 0x1, 0xfffffffb, 0x5, 0x10001, 0x0, 0x4, 0x5, 0x5, 0x1, 0x6, 0x4, 0x983, 0x86, 0x79b5, 0x100, 0x5, 0x9, 0x6, 0x9, 0xffffffff, 0x3f, 0x3, 0x81, 0x9, 0x0, 0x8, 0x2, 0x7, 0x8, 0x1, 0x8, 0xc9, 0x400, 0xbea6, 0x4, 0xffffffff, 0x309a4, 0x200, 0x4, 0x1, 0x3, 0xe000, 0xfffffd60, 0x1, 0x9, 0x2, 0x1c00, 0x73c94b62, 0x80000001, 0x0, 0x1, 0x401, 0x5, 0xffffff00, 0x7c000000, 0x6, 0x4, 0x2, 0xfff, 0x1, 0x2000000, 0x1ff, 0xffff5477, 0x4, 0x200, 0x9, 0x7, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x400, 0x6, 0xf35, 0x9, 0x8f, 0x0, 0x4, 0xffffff57, 0x200, 0xaa7, 0x6, 0x8, 0x400, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xff, 0x80000001, 0x2, 0x8, 0xe0, 0x3f, 0x3, 0x2, 0x10001, 0x0, 0x3, 0xfff, 0x40, 0x5, 0x7, 0x1000, 0x5, 0x8, 0xfff, 0x5, 0x3, 0x2, 0x3, 0x243e, 0xffffbcc6, 0x1, 0x4, 0x22036895, 0x101, 0xf05, 0x3ff, 0x8, 0x1, 0x349d, 0x7, 0x6, 0x9, 0x3ff, 0x1f, 0x0, 0x0, 0x3, 0x9, 0x9, 0x3f, 0x7, 0xa7, 0x7, 0x4, 0x3, 0x2d0c, 0xfff, 0x10000, 0xae, 0x24000000, 0x10000, 0x4, 0x6e, 0x8, 0x5, 0x3, 0xfffffffa, 0x2, 0x2e02, 0x72, 0x4d82, 0x2, 0x8, 0x1, 0x80000000, 0x1f, 0x6, 0x8, 0x800, 0x5, 0xffff, 0x8, 0x10000, 0x81, 0xf9e4, 0x7, 0x7, 0x4, 0x7, 0x9e, 0x2, 0x6c5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9fcc, 0x183, 0x5, 0x7, 0x10000000, 0xfff, 0x1, 0x2, 0x0, 0x5d1, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x8, 0x476, 0x800, 0x1, 0x6, 0x9, 0x8, 0x7a, 0x57, 0x533, 0x6, 0x200, 0x0, 0x1, 0x7f, 0x9, 0x3, 0x0, 0x3, 0xae28, 0x2bd9, 0x101, 0x3, 0x1, 0xd9, 0xfff, 0x2, 0x4, 0x48a6, 0x7, 0x0, 0x57, 0x3e9466d7, 0x40, 0x0, 0xeb, 0x4, 0x80000000, 0x401, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0xed6f, 0x4, 0x0, 0x69417c58, 0x8, 0x7f, 0x3ff, 0x2, 0x50d7, 0x2971, 0x36, 0x1, 0x6, 0xa0, 0x8, 0x76, 0xfff, 0x8, 0x19, 0x3, 0xfffffffe, 0x401, 0x7, 0x7fff, 0x5, 0x9, 0x1000, 0xfff, 0x8a, 0x9, 0x1, 0x2, 0xffff, 0x9, 0x0, 0x400, 0x6, 0x9, 0x6, 0x71, 0x100, 0x8, 0x9, 0x10000, 0xf4, 0x9, 0x401, 0x6, 0x5, 0x2, 0x4, 0x101, 0x2, 0x2, 0x78, 0xcc6, 0x5, 0x4, 0x5, 0xb5, 0x400, 0x8, 0x1, 0x2749, 0x9, 0x169, 0xf22e, 0x7f, 0x570d, 0x6, 0x5b9, 0x8, 0x5, 0x401, 0x1, 0x8, 0x29f, 0x100, 0x3, 0x1, 0x3, 0x6aa, 0x5, 0x80000000, 0x8, 0x4, 0x7, 0x1, 0x80, 0x3, 0x7, 0x80000001, 0x1, 0x3, 0x86fa, 0x401, 0x6, 0xf630]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7311363c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x7ff, 0x200, 0x7, {0x7, 0x2, 0x5, 0x0, 0x7989}, {0x9, 0x1, 0x8001, 0x1, 0x0, 0x800}, 0x81e, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xfffffffa, 0xfff000, 0x8, 0x7fffffff, 0x922, 0x3, 0x276, 0x8, 0x8000, 0x0, 0xe9, 0xfffffbff, 0x6, 0x1, 0x80, 0x0, 0x7, 0x911d, 0x689, 0x400, 0x401, 0x5, 0xfffffeff, 0x8, 0xfffffffd, 0x206, 0x8, 0x4, 0x5, 0x2, 0x27, 0x61, 0x6, 0x9, 0xea, 0x43e, 0x3, 0x4, 0x3, 0x0, 0x401, 0x0, 0x8, 0xffffffff, 0x62, 0xc702, 0x929, 0x9, 0x8, 0x9, 0x9, 0x2, 0x9, 0x7f, 0x81, 0x7, 0x7, 0x101, 0xb56, 0x4, 0x84, 0x7, 0x4, 0x290a, 0x3, 0x7fffffff, 0x10000, 0x6, 0xc683, 0x2, 0xfffffff8, 0x80000001, 0x9, 0x53c8, 0x6, 0xd69, 0x400, 0x3, 0x6, 0xfffffff7, 0xda51, 0x1f, 0xe768, 0x38a, 0x24f1, 0x1, 0x0, 0x401, 0xf3b, 0x8000, 0x2, 0xeb, 0x81, 0x3, 0x3, 0xfffffffa, 0x7, 0xfffffffa, 0x3fd191, 0x5, 0x6, 0x1, 0x7, 0x3ff, 0xbe8, 0x80, 0x5, 0x37, 0xffffffc7, 0x9, 0x10001, 0x7, 0x6, 0x3831, 0x9, 0x4, 0x8, 0x3f, 0xae, 0x3, 0x3, 0x94, 0x0, 0x7f, 0x400, 0x8, 0xb57, 0x7fffffff, 0x7f, 0x10001, 0x9, 0x7, 0x7ff, 0x6, 0x5, 0x280, 0x61, 0x12, 0x9, 0xc100000, 0x3, 0x7, 0x3, 0x7, 0x5, 0x4, 0xf8de, 0x4, 0x7f, 0x5, 0xf, 0x7, 0x28, 0x896, 0x80, 0x6, 0x8, 0x0, 0xa1, 0x7, 0x5, 0x0, 0xffff, 0x4, 0x20, 0x43f4, 0x8, 0x190ecf32, 0x8, 0x400, 0x0, 0x9, 0x9, 0x81, 0x8, 0x8, 0x7, 0x1, 0x101, 0x1, 0x4, 0x9, 0x9, 0x4, 0x100, 0xe625, 0x9, 0x2, 0x6, 0x5, 0x9, 0x2, 0x20, 0xff, 0x4, 0x1ff, 0x9f2a, 0x4, 0x1b, 0x8, 0x5, 0x1, 0xffff, 0x1, 0x4, 0x80000000, 0x8, 0x7, 0xac, 0x7fff, 0x7b4, 0x0, 0x3, 0xfe2, 0x9, 0x2, 0x10001, 0x3, 0x5, 0x8, 0x2, 0x10001, 0x5, 0x3, 0x800, 0xa6, 0x3, 0xc722, 0xffff, 0x9, 0x7, 0x5, 0x1, 0x6, 0x5, 0xffff, 0xfff, 0xffff, 0x4, 0xffffffff, 0x73, 0x8, 0x101, 0x2, 0x2, 0x1, 0x4, 0x100, 0x0, 0xba9, 0x80000000, 0x20, 0x1, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7, 0x4, 0x9, 0x7, 0xffff, 0x1, 0x80000000, 0x7f, 0x2a4c, 0x3, 0x8, 0x8, 0x0, 0x7, 0x9, 0x1, 0x800, 0x4, 0x7ff, 0x2, 0x9, 0x0, 0x8, 0x1f, 0x5, 0x10001, 0xfffffffd, 0x6, 0x3f, 0x4, 0x2, 0x3ff, 0x2, 0x1, 0xffffffff, 0x7, 0xfff, 0x80000000, 0x0, 0x6, 0x785, 0x8, 0x6, 0x1, 0xe6, 0x80, 0x1, 0x1, 0x0, 0x6, 0x8001, 0x200, 0x7f, 0x4, 0x8, 0x7ff, 0x1ff, 0x10000, 0x0, 0x8a, 0xff, 0x84, 0x7a7, 0x7, 0xae4, 0x80000000, 0x8, 0x800, 0x80000000, 0x1, 0x3, 0x4, 0x0, 0x72, 0x9c49, 0x7, 0x9ed, 0x401, 0x3, 0x8, 0x4, 0xffffffff, 0x6, 0x77, 0x0, 0x99e, 0x5, 0x3, 0xe0000000, 0xfffffffe, 0x9, 0x5, 0x4, 0x401, 0x3ff, 0x8001, 0xd2, 0x23, 0x7, 0x8, 0x5, 0x7, 0x4f, 0x7f, 0x9, 0x53, 0x6, 0x7, 0x38, 0x3a5b, 0x4, 0x8, 0x5, 0x1, 0x3, 0x8, 0x18800, 0x401, 0xfffff244, 0x7f, 0xfffffffc, 0x7, 0x7fffffff, 0x2, 0x40, 0x3, 0xeba, 0x1, 0x7, 0x7f, 0x7, 0x0, 0x6, 0x6, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x0, 0x5, 0x3, 0x5686bf01, 0x84, 0x5, 0x9, 0x772a, 0x5, 0x1, 0x3, 0x1ff, 0x4b88, 0x3, 0x0, 0x1f, 0x9, 0x1f, 0x0, 0x2, 0x9, 0x7, 0x1, 0x1, 0x0, 0x4, 0x80, 0xfffffffa, 0x4, 0x7ff, 0xea, 0x38, 0x0, 0x81, 0x1, 0x10001, 0x9, 0xbc1, 0x0, 0x101, 0x1, 0x200, 0x7fffffff, 0x7, 0x2, 0x8370, 0x0, 0x4df, 0x9, 0x7e, 0x1, 0x2, 0x3, 0x10001, 0xf5c, 0x3, 0x7fff, 0x0, 0x7, 0xffff8001, 0x95e, 0x7b2, 0x8, 0x81, 0x95, 0x7, 0x7, 0x7fff, 0xfffff054, 0x6d, 0x7, 0x4, 0x885d, 0x400, 0x0, 0x0, 0x7, 0x8, 0x1c000, 0xab, 0x7, 0xffff4472, 0x2, 0x80000001, 0x6, 0x2, 0x6, 0x3, 0x0, 0x3f, 0x7ff, 0x5, 0x3, 0xffff0001, 0x2, 0x20, 0x0, 0x80, 0xfffffff8, 0x3, 0x8001, 0x3, 0x1b26, 0x7fffffff, 0x5, 0x1, 0x2, 0x4, 0xb1d, 0x7, 0x6, 0x9, 0x3f, 0xb0a, 0x40, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x591c, 0x8, 0x6, {0x4, 0x1, 0x8000, 0xc6, 0x54d3, 0x4}, {0x1, 0x2, 0x3, 0x4, 0x7ff, 0x80}, 0x6, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x8, 0x9, 0x7, {0x40, 0x2, 0x3, 0x7, 0x8001, 0x7be}, {0x40, 0x1, 0x3, 0x0, 0x3f, 0x2}, 0x20, 0x8000, 0x1000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x9, 0xffff, 0x81, 0x4, 0x7fff, 0x0, 0x4, 0xe16b, 0x100, 0x3bb, 0x6, 0x9, 0xfff, 0x2, 0x9, 0x2, 0x80, 0x6, 0x0, 0xe0fb, 0x9, 0x9, 0x7, 0x7fff, 0x1f, 0x3, 0xffff0000, 0x6, 0x2, 0x8eb, 0x5, 0x1, 0x2, 0x7936, 0x2c, 0x3, 0xfffff6a5, 0x0, 0x5, 0x461dffa5, 0xb2a, 0x7f, 0x400, 0x1d1, 0x7, 0x7fff, 0x4, 0xb3, 0x0, 0x2, 0x1ff, 0xb0, 0x7f, 0x6, 0x7, 0x2, 0xc05, 0x0, 0x4, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x40, 0x4, 0x8001, 0x8, 0x401, 0x7fffffff, 0xec, 0xde3, 0xd1, 0x6, 0x0, 0x1de6, 0x0, 0x8fa, 0x7, 0x5, 0x3, 0x3, 0x8793, 0x80000000, 0x2, 0x40, 0x9, 0x3c3b, 0x7, 0x2, 0x200, 0x8, 0xfffffff7, 0x5, 0x3f, 0x0, 0x2, 0x4, 0x8, 0x7, 0x9, 0xfffffff9, 0x7, 0x3ff, 0x10000, 0x1f, 0xd3, 0x6, 0x80, 0x1000, 0x6, 0xfffffffe, 0x3, 0x8, 0x9, 0x4, 0x0, 0x2, 0x1, 0x80, 0x7, 0x6, 0x448c, 0x1, 0x1, 0x5, 0x8d, 0x4, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x5, 0x2, 0x7, 0x5, 0x400, 0x1, 0x5, 0xfff, 0x1000, 0x7ba8, 0x8001, 0x9, 0x0, 0x0, 0x219, 0x3, 0xe1, 0x4, 0x40, 0xff, 0x8, 0xfff, 0x8, 0x10001, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x1, 0x9, 0xff, 0x1, 0x6, 0x641, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x804, 0x401, 0x3, 0x0, 0xa45, 0x100, 0x7, 0x2, 0x2, 0xbc69, 0x5, 0x80000001, 0x81, 0x0, 0x8, 0x800, 0x20, 0x40, 0x10000, 0x5d, 0x5, 0x6, 0x3, 0x8, 0x7ff, 0x3, 0xffff8000, 0xfffeffff, 0x1, 0x33f, 0x8, 0xb76a, 0x8000, 0x9, 0x1f, 0x3, 0x1f, 0x4, 0x0, 0x9, 0x1, 0x548, 0x1f, 0x7ff, 0x3, 0x8, 0x2fc6, 0x9, 0x100, 0x1f, 0xae, 0xea76, 0x2, 0xfffffe00, 0x7, 0x800, 0x5, 0x9, 0x4, 0xfda, 0x5, 0x8000, 0x40, 0x3ff, 0x3, 0x4, 0x75, 0x4782, 0x20, 0x10000, 0x9, 0x40, 0x1000, 0x3, 0x0, 0x10000, 0x38000, 0x5, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0x8, 0x8bf, {0x9, 0x0, 0x3, 0x80, 0x3, 0x1}, {0x1, 0x0, 0x2d3, 0x100, 0x4}, 0x13, 0x81, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0x200, 0x3f, 0x8, 0xe45e, 0x6, 0x2, 0x6, 0x0, 0x7ff, 0x1, 0x9, 0x4d1, 0x7, 0x3, 0x3, 0x3, 0x10000, 0x7, 0x1, 0xf3, 0x1000, 0x2, 0x3, 0x902, 0x8000, 0x8, 0xe4ea, 0x80000001, 0x3, 0xfff, 0x4, 0xc3b8, 0xfffffffc, 0x1, 0xcb, 0x200, 0x0, 0x8, 0x0, 0x45, 0x9, 0x7fffffff, 0x80, 0x20, 0x6, 0x7ff, 0x3ff, 0x3ff, 0x3c, 0x0, 0x3f, 0x81, 0xcd, 0x80000000, 0x4, 0x1, 0x1f, 0x0, 0x6, 0x1000, 0x6, 0x7fffffff, 0x1, 0x3, 0x5, 0x9dd, 0x1, 0xe90, 0x8, 0x1000, 0x100, 0x6, 0xec2, 0x5, 0x5, 0xdd, 0xfffff800, 0x4, 0x3e1da87, 0x6, 0x800, 0x7ff, 0x20, 0x7ff, 0x7ff, 0x7, 0x1, 0x7, 0xffffffff, 0x3, 0x80000000, 0x1, 0x81, 0xffff, 0x3ff, 0xfffffffa, 0xca, 0xfffffe00, 0xfffffff9, 0x7fffffff, 0xfffffc00, 0x800, 0x0, 0x9, 0x80000001, 0x6321, 0x4, 0x18, 0x400, 0x7, 0x200, 0x4, 0xfff, 0x5, 0x3, 0x8001, 0x7, 0x40, 0x9, 0x80000000, 0x5, 0x8679, 0x3, 0xffffa1a5, 0x10001, 0x7fff, 0xffff, 0x40, 0x1, 0x6, 0x80000000, 0x5, 0x7, 0x3, 0xa6a, 0x3c, 0xfff, 0x1f, 0x5, 0x0, 0x3, 0x5, 0x401, 0x2, 0xd5, 0x2, 0x6, 0x91b, 0x80000000, 0x4, 0x3f, 0x200, 0xd935, 0x200, 0x401, 0x3f, 0x400, 0x4, 0x2, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x7, 0xffff8001, 0x5, 0x20, 0x3ff, 0x101, 0x3a, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0x7, 0x8, 0x9, 0x4, 0x9, 0x5, 0x7, 0xf7dc, 0x7, 0x80000001, 0xc3, 0x100, 0xfffff000, 0x2, 0x100, 0x3, 0x6, 0x4, 0x3ff, 0x5, 0x3, 0xfffeffff, 0xcaf1, 0x1, 0x3, 0x2, 0x3ff, 0x5dc4, 0x0, 0x7, 0xbbab, 0x80000001, 0x1, 0x1ff, 0x3ff, 0x9, 0x800, 0x4, 0x100, 0x5, 0x4, 0x4, 0x8, 0x7, 0x1, 0xffffdf5c, 0x8, 0x0, 0x3, 0x9, 0x2, 0x318, 0x7, 0x1, 0xffff9d99, 0xc1, 0xc1, 0x800, 0x4, 0xfff, 0x1ff, 0x400, 0x7f, 0x3, 0x134c, 0x400, 0x200, 0x40, 0xc460, 0x81, 0x0, 0x5f78, 0x9, 0x6, 0xfff, 0x7e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1f, 0x200, 0x6, 0x0, 0x80000000, 0x8, 0x1ff, 0x711a, 0x8, 0x3f, 0x86, 0x8, 0xd4, 0x7, 0x20, 0x7, 0x7, 0x1, 0x9a, 0x8000, 0x0, 0x3f, 0x2d0, 0xffffffff, 0x3, 0x4, 0x40, 0x7ff, 0x7fff, 0xffffffff, 0x8, 0x4, 0x8, 0xfffffffd, 0x1217488a, 0x7c, 0x5, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x60a7bbac, 0x401, 0x8, 0x7, 0x459b, 0x8000, 0x5, 0xffffffff, 0x9, 0x10001, 0x93, 0x10001, 0x9, 0x4, 0x5, 0x63, 0x7, 0xfffffff9, 0x2, 0x9, 0xd7f, 0x3, 0x3, 0x81, 0x2, 0x1000, 0x100, 0x5, 0x200, 0x6, 0x4, 0x4, 0x4, 0x9f, 0x80000001, 0x85cd, 0x80000000, 0x3, 0x7f, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x9, 0x6, 0x2, 0x3, 0x400, 0x3f, 0x9, 0x2, 0xfffffffa, 0x9, 0xa77, 0x4, 0x5, 0x2, 0x0, 0x8, 0x9b8, 0x20, 0x3, 0x4, 0x7, 0x100, 0xfff, 0x8, 0x1, 0x1ff, 0x7, 0x8, 0x2, 0x9, 0x8fee6c8, 0x6429d2af, 0xff, 0xffffffff, 0x3f, 0x4, 0x200, 0x1, 0x1f, 0xa8e, 0xc9, 0x1, 0x6, 0xb039, 0x1000, 0x8, 0x0, 0x19b9a688, 0x557, 0x9, 0x5, 0x0, 0x3, 0x6, 0x80000001, 0x700, 0x5a, 0x4, 0x80, 0x800, 0x10001, 0x6f1, 0x1, 0x2, 0x7fffffff, 0x50b, 0x84, 0x1, 0x4, 0x6, 0x7, 0x80, 0x100, 0x7fffffff, 0x1, 0x81, 0x5, 0x80000000, 0x4c03, 0x2, 0xea, 0x5, 0xd3, 0x4, 0x707, 0xffffffff, 0x7, 0x1000, 0x8, 0x7f, 0xfffffff8, 0xfffffffb, 0x2, 0x1, 0x3, 0xffffff17, 0x7ff, 0x7, 0x0, 0x2, 0x1, 0x7, 0x6, 0x1, 0x800, 0xfffffffb, 0x100, 0xffff, 0x9, 0xfff, 0x7fff, 0x7, 0xd0, 0x80, 0x81, 0x1f, 0x8, 0x80000001, 0x1ff, 0x56a, 0x3ff, 0x0, 0x8, 0x81, 0x7fff, 0x3, 0x1, 0x6, 0x1, 0x7d, 0x2, 0x3ff, 0x3ff, 0xfffffffd, 0x7ff, 0x8, 0x401, 0xb4000000, 0x7, 0xffff, 0x58, 0x7, 0x2, 0x7, 0x4, 0x7ff, 0x7ff, 0x6, 0x4, 0x27, 0x0, 0x6, 0x25, 0x80, 0x5, 0x9, 0x5804, 0x6, 0x9, 0xfdd, 0x9, 0x6, 0x5, 0x3ff, 0x1f, 0x0, 0x1ff, 0x80000001]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff110, 0x2, 0x9, 0xb52d, 0xc5, {0x5, 0x0, 0x7bb, 0x101, 0xfff8, 0x8}, {0x0, 0x2, 0x101, 0x7, 0x8, 0x9}, 0x4, 0x81, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x85}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x2d, 0x6, "e8e80d4e1e9d1946b88f5da722227926b15ebfe3168815b0b966517d902561b581890fcdb5a3af0a31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x118, 0x16, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x7, 0x9b, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x7, 0x8, 0x7}, {0x7fff, 0x58, 0x90, 0x400}, {0x6, 0x3, 0x7f, 0xd799}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x2, 0x10000000, 0x100, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x27b, 0x0, 0x3, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x1, 0x3}, {0x7f, 0x7f, 0xb4, 0x8001}, {0x7, 0x8, 0x5a, 0x4}, {0x6, 0x3, 0x8, 0x4}]}]}, {0x54, 0x6, "09dab61b757b69c4600c64f3d93ed0a7cd914e9cf26cf7c4a422c03dff7630b9ea5609efa566f7382026950f7fa096b021da8ce878d45e9a0ad9dbadf96697891ef95e96b1f6a5eef7ca488daff902df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xffffffff, 0x8}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd8, 0x7d3f, 0x20000006, 0x8001, 0x3}, 0x2}}]}, {0x5b, 0x6, "29d375a1f7b13f04340b52364afd7d2c73408cca125f3a7e238115f5674eb62817c3b97a3daefbe5137d9cee330aaeae88d74890a24a1430677ff20804b0ba80aaa68dd6493d19c9435aa587a476fbf81d29d90c904347"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x294, 0x1, [@m_ctinfo={0x58, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000, 0x0, 0xffffffffffffffff, 0x190, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x2, 0x10000000, 0x2, 0xffff337b}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0xffffffffffffffff, 0x7fffffff, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x0, 0xfffeffff, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x9d, 0x6, "29f2f8875bc249f9764b212946f0b41738b8e528ddf629dbbfd0729bb523afbe7ad3630aa5c56ffe64660da07571da24d725995ee8cdfe7cfbc30bfa2ff1c7511004386ac772c057f79aff53783bd5febf5c83ac07c86f1d134c486aecb6024ae97daf8e601aa01feb6884553c21a94cd7a4309f2b9352171f4abc14d54b88eaf6e5d81170e6e214dd481b4f4b7442b890975e57b3136cb877"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xfc, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1f}]}, {0xbf, 0x6, "0c4ec741e8115169e49c94d5b2375d1c24c277d130744caa410856c818132ee28eec003fb1966f8254e073d383dc657101e2ef543fe6588a39953f3627c1a398c79255556cff77e941ecb30792a34d23d92f855fba820435e53e20a0333918ae5d23f4a574a0beb44ab8528ecad70163297c55c4c1a4695641f1906dd47584a1d6d13ba31a47c604f7e77d0e927f5f7d6b53e0ee6b4370eeae8c36202e228dd2e30c2ca8536d06fa1154cdb51646f4603e6fd329b67bade6a5de50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x5e8, 0x1, [@m_nat={0x1b0, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1f, 0x8, 0xff, 0x401}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x0, 0x74, 0x4}, @broadcast, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7, 0x3, 0x8, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x7, 0x2, 0x80}, @local, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x8, 0x4, 0x7, 0xa7e}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4a, 0x321, 0x1, 0x2, 0xe866}, @remote, @multicast2, 0xff}}]}, {0x96, 0x6, "ef0b2a4654bf3bb5cf46f23a1bc6141fa19b4a495ac99a63361060b8a6695f9efc1686a0b81383d1309db3566b9fdf9b31d7c9d426eeba4a80b9c6fb5b463ef5736ad72ffa36773a4cf611ea02a19925fa189709218a8aa2f42ba9af7543ed9118263aa3c17e77b7bc6a9289876b4754856a3de899fdc0de8cae5435fe7d0d7e50617116b17915651fd40694f4f40274bbf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x158, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xcb, 0x6, "6099234ea2eed63aef504bf939636a9364a5a14c1769834c28643bf642e77ef62fed3e7d30410a81e7b27c9f3a22dd684373337336560e081782c979ec896ff0596ac6b74694d207d45dae9eb866957655f3656872c443cddfdfdedf3c1244a4d5b0e3d12a44192da8b753f6926c418acc693d0cf34f31e68b4c1be4cbd02fa47f9384dcbe0a60eb60c8d886e04208b4fc876e17791e11718657d4eb8fcbeee631fdf85db832052ca6ef75788dcd2070c261aba7095ea8e5286198abdb557638e2174710383ec9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x10c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x77a, 0x7, 0x2, 0x7f}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}]}, {0x9e, 0x6, "cc11e8928ac8f3afeb2654fb519d8f8d0c2b0a3ba3c48f51aacae3678c0418fe5662abfcf5ab78eb44f5e081354a7dbfd8441c6da9d6d18c75c5d3f4a313993588e0ac62fb6474832e9c27f7754fbd7df1ca483b89b50f6761ff8b940f3d1c74715a2feea048ec8f31da7b0310df3f32e45058231a96f51d97beb481dceef2860b1d82e2d81325bd6f7d7cecbc568dae50116bf636ef69924131"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x98, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x57, 0x6, "9d1e2a880b3aef93ade0591f2e75b4a826586547e73e7f17ce836d7e5af0a9650a5ccda27cdea065b7c1c1582c0355e49b508afdf155d1194302878e4f507b04df44108cf74261c5c1d262aa001724d48ba45f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x138, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x6, 0x3, 0x8001}, 0x1}}]}, {0xf4, 0x6, "1c527788260907ebc13a37c5676cd4d2815fc796e9eb20e50675ef5508c907a0215dddf490ff7b12ae74f32c92cc96a2fc13a0b71475b8aa66286c3832e4e15b3a1f15ad9743c3c217f4a3e4a5762fa0e884b1e38f742162ef55391073c3b37d34be520335b5653ac04a0307c511a4721417ebd83d36da57b8c4cbae9893500746aeba66fdadea2682cbc2cdb380a8b2597ce4bea66a08645b550a60eaaa974d9fde87b4fe9f3c2ab4edd88c0c1104edae0a7add6396a4e0988fb3e5413c661860356b3089b3d0184f10ec7c43335759d5177d3e337f577c9e8c1e33658dc9ffdc1bcdfb83aee7891e86f1e632054751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x32c4}, 0x1, 0x0, 0x0, 0x840}, 0x24001004) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getlink={0xf0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10, 0x20042}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_MTU={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "9f6b268b7c36c4464d581b894feab3ab55b034bf4cf0317322a06d3a"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_MAP={0x24, 0xe, {0x1000, 0x6, 0x400, 0x1, 0x80, 0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async) socket(0x10, 0x803, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r5) (async) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWNSID={0x14, 0x58, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000052700000000000000000000000034c3111da92df09db1b46c4c40ea3f452cbf6d21c2535cc9f927a477b5c0eb1213ce541c45596bdc2264385f2e342bbabdbc9caae2793471132258fdd2426e443c58e93df2b113def755f233feb01e7caea3d428729b2068b09df4b5990bae5aa878858b257508292b2e0b7120b843642c3e5226cad11baa0110324a887f5db3e57fbdda8b66af4267d02cf034629cea0c4c5f1e6bd8d2961d247094f3f63ff5b12c9acaf9eb34d8", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfe46}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005940)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x4000000) (async) [ 465.578793][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.718880][ T9173] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.740927][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.779226][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f00000000c0)) [ 467.096637][ T3679] Bluetooth: hci6: command 0x1003 tx timeout [ 467.097269][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:20:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) 10:20:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="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"}) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x4) 10:20:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(0xffffffffffffffff) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000800)=@newtaction={0x32c4, 0x30, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{0x130, 0x1, [@m_csum={0x12c, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x428efae9, 0x5, 0x3, 0x9e}, 0x80000001}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2e2f, 0x100, 0x4, 0x778df892, 0x92}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0xffffffffffffffff, 0x2, 0x10001}, 0x5d}}]}, {0xa9, 0x6, "662641596021431a77b7e483826becc5ec663ffa66eef0d2c91cce8003b47757f7da219a7fd9de7a8ec5039a4e6a2c3c89b4ed8d26dede0285dba465022a1ecaf98c7ce91b8b0446551dc305eb8155c18380c21893b9cf1514de6d101dc86a840dd55930a937a0ac625cb85a3d3dd37ac56ed71589053d296ba40db5c730f28a82b4370e7508c873344624a3bcccfd5f3930b66fbc5fe3b7e5fe62c5fdd4c6e47349abd9bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0xf8, 0x1, [@m_simple={0xf4, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffff01, 0x1, 0x3, 0x3, 0xa259}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1243c963, 0x2, 0xb285, 0xa7a}}, @TCA_DEF_DATA={0x9, 0x3, '](&$\x00'}]}, {0x8c, 0x6, "a02f8833b73c991af9b431bcf137b2ee70af9f5d08cbcf7e68a42b37c299078f87adb95af11f1cce519a9263dd49f333a05e87a5cc1a25b4abc17eeac06add21e8ad25bc9de98125fad9479a9ad9ff680bd8d1c63828786210072cfd2d616ef2f76462bbecc6daae853183795a2f024e5c1bc214f16fbf66e2ce2d7c1efa6f67071073a5bce74b5b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x280c, 0x1, [@m_skbedit={0xac, 0x4, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x77, 0x6, "101a70829d6fc063ce973853b921e5da74de1e3316a90c3240fd3ddac03578e1abbce23b0f19da89995525dc391bb58d907250e11d63dc4df4d392f3686048462617319313cd2a4a62fa2e581ab64b22955474e58ee58497e3dd22073e923ddc5d0ce2bab8da8dcacc3ac6fdbc2c08a881927c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x108, 0x18, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xda8f}, @TCA_CT_LABELS_MASK={0x14, 0x8, "70798bb79aed6855544b94f1e0bd1074"}]}, {0x82, 0x6, "d546e2d2fc6986ae1a4ac7aeaf138b402778ea584e1b8461473c0f86e832c563b9551e3426e289c26a6aeb8ee652ca0eaf229dd39bb19d4a132a0120f876a22db367653de7493c4a65e00576aec88c44be26ff6ea32c7ca20b80b303c74b83eb883a137fefbaafe6d36dc3aa4ef3d9df98499b1e28553e373f28c04ffaea"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x130, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7fffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe782}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xc3, 0x6, "196586e5b9888fe4b5e2f4f094bcc43f3210e4f4c454fff626beb55e6391135d3bc210289066115af4c91d6c951d9859ef31a43e3d5e104ad4866e8e16eb4b1a776de38024d28d94c6cb110bee0b42454cf9ca3c6be0e2b447ed25a9f0736696e2bc3f425bf8596398ce1ae917d0dc8ef116ba587e13ffd31121724e429ad99340fa0a04e6b3f0ae3d5c3ec6edd9932cfefd1552e880288e14d5b5223f0bb61a07a2be4367da661a570cc73fcd0b6d2a8c43502bf53e4b7694a6f625105134"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2344, 0x0, 0x0, 0x0, {{0xb}, {0x22ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x23f, 0x10000000, 0x10001, 0xffffffff, 0x9, {0x0, 0x0, 0x5, 0x9, 0x7, 0x5}, {0x7, 0x0, 0x2, 0x400, 0x1, 0x7}, 0x9, 0x7, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x5, 0xffff, 0xffff8000, 0x8803, 0x8, 0x7fffffff, 0x1, 0x80000000, 0x1ff, 0x0, 0x80000000, 0x7, 0x2, 0xe0000000, 0x5, 0x5, 0x1, 0xfffff001, 0xec, 0x2, 0x8001, 0x4b, 0x7fff, 0x1, 0xfff, 0x1, 0x6, 0x3f, 0x4, 0x0, 0x7, 0x519, 0x3d, 0x8, 0x664, 0x7, 0x4, 0x7f, 0x3, 0x7, 0x3, 0x0, 0x40, 0x100, 0x3f, 0x3, 0x3, 0x8, 0x8, 0x8000000, 0x5ebd, 0x2, 0x4c, 0x8, 0x5c6a, 0x400, 0x1f, 0x7, 0x80000001, 0x40000000, 0x7fff, 0x7, 0x8, 0x5, 0x8, 0x8, 0x4, 0x39, 0x20, 0x101, 0x100, 0x5, 0xfff, 0x7, 0x3f, 0xff, 0x0, 0x5, 0x1, 0x9, 0x10000, 0x3, 0xfff, 0x3, 0x1, 0x2, 0x101, 0x2, 0xffff0001, 0x6, 0x7, 0x5, 0x5, 0x0, 0x800, 0x20, 0xab32, 0x8, 0x101, 0x1, 0xf3, 0x3, 0x1000, 0x0, 0x8, 0xf299, 0x2e8, 0x0, 0x0, 0x200, 0x5, 0x6, 0x6, 0x8000, 0xfff, 0x5, 0x5, 0x6, 0x7, 0x7fff, 0x40, 0x9, 0x7, 0x3ff, 0x9, 0x5, 0x7, 0x242, 0x8, 0x7f, 0xfffffff9, 0x0, 0x7ff, 0x7b26db0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x413b, 0x8001, 0x1, 0xff, 0x80000000, 0x6549, 0x2, 0x1000, 0x71c8, 0x7, 0x8, 0x8, 0x6, 0x9, 0x5, 0x9, 0x80000001, 0x10000, 0x1, 0x5, 0xff, 0x539, 0x7, 0xe913, 0x6c, 0x0, 0x8, 0x2, 0xae6, 0xd8da, 0xfff, 0x2ec, 0xfffffffc, 0x9, 0x1, 0x8, 0x3, 0x9, 0x0, 0x422, 0xe397, 0x0, 0x2, 0xfffffe07, 0x2, 0xff, 0xe0, 0xfff, 0x3, 0x10001, 0x3, 0x5, 0x5, 0x5, 0x6, 0x8, 0x8, 0x8e700, 0xffff93f6, 0xfff, 0x4, 0x6, 0x4, 0x3, 0x8000, 0x1000, 0xffffffff, 0xf5, 0xf075, 0x81, 0x1000, 0x7, 0x4, 0xffffffff, 0x66, 0x7ff, 0xc9b4, 0x0, 0x0, 0x7, 0x40, 0x9, 0x7, 0x1f, 0x3, 0x52f7, 0x8, 0xa07, 0x10001, 0x7f, 0x8001, 0x80, 0x6, 0x2, 0xfffffffc, 0x80000001, 0x7, 0x1fe, 0x3, 0x2, 0x0, 0x5, 0x4, 0xd2ad, 0x8000, 0x9, 0x3f, 0x80000000, 0x9, 0x9, 0xfffffff7, 0x5, 0x5, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff800, 0xffffffffffffffff, 0x0, 0x80000001, 0x80000000, {0x80, 0x2, 0x8, 0x2, 0x1, 0x6}, {0x1, 0x0, 0x2, 0x3, 0x8, 0x7}, 0x7fff, 0xff, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x2, 0x5, 0x1000, 0x7f, {0x7, 0x1, 0xfffa, 0x0, 0x80, 0x8}, {0x6, 0x0, 0x1, 0x1, 0x3823, 0xf947}, 0x81, 0x0, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0xec4, 0x8, 0x6, 0xfffffff9, 0x9, 0x10000, 0xffffff81, 0xffffffaa, 0x49, 0x7, 0x2, 0x1, 0x18d0, 0x3f, 0x3, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xffff7fff, 0x10000, 0x7, 0x1, 0xff, 0x9, 0xff, 0x5, 0xe81, 0x80, 0x40, 0xff, 0x6, 0x8, 0x38bf3ef5, 0x6, 0x80000001, 0x2, 0x4, 0x5, 0x8, 0xffff, 0xb2, 0x5, 0x8, 0x1, 0x3, 0x1, 0x7, 0xffff, 0x9, 0x20, 0x100, 0x9976, 0x401, 0x5, 0x0, 0xfffffffb, 0x1, 0x3ff, 0xfffffffc, 0x100, 0x3, 0x3, 0x6, 0x10001, 0x2, 0x800, 0xffffe2ad, 0x8, 0xfffffff7, 0x6, 0xfffffffd, 0x400, 0x0, 0x7, 0xfffffa84, 0x4, 0x800, 0x100, 0x0, 0x0, 0x1000, 0xffff, 0x3, 0x8, 0x0, 0x100, 0x2, 0xffff, 0x7, 0x3, 0x0, 0xc9, 0x8, 0x0, 0x1d635bf3, 0x9, 0x20, 0x80000001, 0x4, 0xfffffffb, 0x0, 0x8, 0x5, 0xc7, 0xc000, 0xffffff06, 0x4, 0xffffffff, 0x1, 0x8, 0x2, 0x858ec61e, 0x3ff, 0x7, 0x6, 0x1, 0xa14b, 0xfffffffe, 0x7fffffff, 0x2, 0x20, 0x1f, 0x8, 0x200, 0xfffffffe, 0x6, 0xfff, 0x9, 0xff, 0x9, 0x5, 0x0, 0x1e, 0x4, 0x8001, 0x5, 0x1f, 0x0, 0xffffff7f, 0x4, 0x0, 0x65b, 0xdf3, 0x3, 0x800, 0x3, 0x1ff, 0x1, 0x9, 0x3, 0x8000, 0x20, 0x1, 0x2, 0x7, 0x3, 0x4, 0x1284f61c, 0xfffffbff, 0xfffffffe, 0x4, 0x4, 0x81, 0x4, 0x0, 0x2, 0x1, 0xfffffffb, 0x5, 0x10001, 0x0, 0x4, 0x5, 0x5, 0x1, 0x6, 0x4, 0x983, 0x86, 0x79b5, 0x100, 0x5, 0x9, 0x6, 0x9, 0xffffffff, 0x3f, 0x3, 0x81, 0x9, 0x0, 0x8, 0x2, 0x7, 0x8, 0x1, 0x8, 0xc9, 0x400, 0xbea6, 0x4, 0xffffffff, 0x309a4, 0x200, 0x4, 0x1, 0x3, 0xe000, 0xfffffd60, 0x1, 0x9, 0x2, 0x1c00, 0x73c94b62, 0x80000001, 0x0, 0x1, 0x401, 0x5, 0xffffff00, 0x7c000000, 0x6, 0x4, 0x2, 0xfff, 0x1, 0x2000000, 0x1ff, 0xffff5477, 0x4, 0x200, 0x9, 0x7, 0x0, 0x6, 0x5, 0xfffffffe, 0x8, 0x400, 0x6, 0xf35, 0x9, 0x8f, 0x0, 0x4, 0xffffff57, 0x200, 0xaa7, 0x6, 0x8, 0x400, 0x4, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xff, 0x80000001, 0x2, 0x8, 0xe0, 0x3f, 0x3, 0x2, 0x10001, 0x0, 0x3, 0xfff, 0x40, 0x5, 0x7, 0x1000, 0x5, 0x8, 0xfff, 0x5, 0x3, 0x2, 0x3, 0x243e, 0xffffbcc6, 0x1, 0x4, 0x22036895, 0x101, 0xf05, 0x3ff, 0x8, 0x1, 0x349d, 0x7, 0x6, 0x9, 0x3ff, 0x1f, 0x0, 0x0, 0x3, 0x9, 0x9, 0x3f, 0x7, 0xa7, 0x7, 0x4, 0x3, 0x2d0c, 0xfff, 0x10000, 0xae, 0x24000000, 0x10000, 0x4, 0x6e, 0x8, 0x5, 0x3, 0xfffffffa, 0x2, 0x2e02, 0x72, 0x4d82, 0x2, 0x8, 0x1, 0x80000000, 0x1f, 0x6, 0x8, 0x800, 0x5, 0xffff, 0x8, 0x10000, 0x81, 0xf9e4, 0x7, 0x7, 0x4, 0x7, 0x9e, 0x2, 0x6c5, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9fcc, 0x183, 0x5, 0x7, 0x10000000, 0xfff, 0x1, 0x2, 0x0, 0x5d1, 0x2, 0x8e, 0x2, 0x1, 0x0, 0x8, 0x476, 0x800, 0x1, 0x6, 0x9, 0x8, 0x7a, 0x57, 0x533, 0x6, 0x200, 0x0, 0x1, 0x7f, 0x9, 0x3, 0x0, 0x3, 0xae28, 0x2bd9, 0x101, 0x3, 0x1, 0xd9, 0xfff, 0x2, 0x4, 0x48a6, 0x7, 0x0, 0x57, 0x3e9466d7, 0x40, 0x0, 0xeb, 0x4, 0x80000000, 0x401, 0xffffffff, 0x1, 0x3, 0x7, 0x7, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0xed6f, 0x4, 0x0, 0x69417c58, 0x8, 0x7f, 0x3ff, 0x2, 0x50d7, 0x2971, 0x36, 0x1, 0x6, 0xa0, 0x8, 0x76, 0xfff, 0x8, 0x19, 0x3, 0xfffffffe, 0x401, 0x7, 0x7fff, 0x5, 0x9, 0x1000, 0xfff, 0x8a, 0x9, 0x1, 0x2, 0xffff, 0x9, 0x0, 0x400, 0x6, 0x9, 0x6, 0x71, 0x100, 0x8, 0x9, 0x10000, 0xf4, 0x9, 0x401, 0x6, 0x5, 0x2, 0x4, 0x101, 0x2, 0x2, 0x78, 0xcc6, 0x5, 0x4, 0x5, 0xb5, 0x400, 0x8, 0x1, 0x2749, 0x9, 0x169, 0xf22e, 0x7f, 0x570d, 0x6, 0x5b9, 0x8, 0x5, 0x401, 0x1, 0x8, 0x29f, 0x100, 0x3, 0x1, 0x3, 0x6aa, 0x5, 0x80000000, 0x8, 0x4, 0x7, 0x1, 0x80, 0x3, 0x7, 0x80000001, 0x1, 0x3, 0x86fa, 0x401, 0x6, 0xf630]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7311363c}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x7ff, 0x200, 0x7, {0x7, 0x2, 0x5, 0x0, 0x7989}, {0x9, 0x1, 0x8001, 0x1, 0x0, 0x800}, 0x81e, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x400, 0xfffffffa, 0xfff000, 0x8, 0x7fffffff, 0x922, 0x3, 0x276, 0x8, 0x8000, 0x0, 0xe9, 0xfffffbff, 0x6, 0x1, 0x80, 0x0, 0x7, 0x911d, 0x689, 0x400, 0x401, 0x5, 0xfffffeff, 0x8, 0xfffffffd, 0x206, 0x8, 0x4, 0x5, 0x2, 0x27, 0x61, 0x6, 0x9, 0xea, 0x43e, 0x3, 0x4, 0x3, 0x0, 0x401, 0x0, 0x8, 0xffffffff, 0x62, 0xc702, 0x929, 0x9, 0x8, 0x9, 0x9, 0x2, 0x9, 0x7f, 0x81, 0x7, 0x7, 0x101, 0xb56, 0x4, 0x84, 0x7, 0x4, 0x290a, 0x3, 0x7fffffff, 0x10000, 0x6, 0xc683, 0x2, 0xfffffff8, 0x80000001, 0x9, 0x53c8, 0x6, 0xd69, 0x400, 0x3, 0x6, 0xfffffff7, 0xda51, 0x1f, 0xe768, 0x38a, 0x24f1, 0x1, 0x0, 0x401, 0xf3b, 0x8000, 0x2, 0xeb, 0x81, 0x3, 0x3, 0xfffffffa, 0x7, 0xfffffffa, 0x3fd191, 0x5, 0x6, 0x1, 0x7, 0x3ff, 0xbe8, 0x80, 0x5, 0x37, 0xffffffc7, 0x9, 0x10001, 0x7, 0x6, 0x3831, 0x9, 0x4, 0x8, 0x3f, 0xae, 0x3, 0x3, 0x94, 0x0, 0x7f, 0x400, 0x8, 0xb57, 0x7fffffff, 0x7f, 0x10001, 0x9, 0x7, 0x7ff, 0x6, 0x5, 0x280, 0x61, 0x12, 0x9, 0xc100000, 0x3, 0x7, 0x3, 0x7, 0x5, 0x4, 0xf8de, 0x4, 0x7f, 0x5, 0xf, 0x7, 0x28, 0x896, 0x80, 0x6, 0x8, 0x0, 0xa1, 0x7, 0x5, 0x0, 0xffff, 0x4, 0x20, 0x43f4, 0x8, 0x190ecf32, 0x8, 0x400, 0x0, 0x9, 0x9, 0x81, 0x8, 0x8, 0x7, 0x1, 0x101, 0x1, 0x4, 0x9, 0x9, 0x4, 0x100, 0xe625, 0x9, 0x2, 0x6, 0x5, 0x9, 0x2, 0x20, 0xff, 0x4, 0x1ff, 0x9f2a, 0x4, 0x1b, 0x8, 0x5, 0x1, 0xffff, 0x1, 0x4, 0x80000000, 0x8, 0x7, 0xac, 0x7fff, 0x7b4, 0x0, 0x3, 0xfe2, 0x9, 0x2, 0x10001, 0x3, 0x5, 0x8, 0x2, 0x10001, 0x5, 0x3, 0x800, 0xa6, 0x3, 0xc722, 0xffff, 0x9, 0x7, 0x5, 0x1, 0x6, 0x5, 0xffff, 0xfff, 0xffff, 0x4, 0xffffffff, 0x73, 0x8, 0x101, 0x2, 0x2, 0x1, 0x4, 0x100, 0x0, 0xba9, 0x80000000, 0x20, 0x1, 0x1ff]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7, 0x4, 0x9, 0x7, 0xffff, 0x1, 0x80000000, 0x7f, 0x2a4c, 0x3, 0x8, 0x8, 0x0, 0x7, 0x9, 0x1, 0x800, 0x4, 0x7ff, 0x2, 0x9, 0x0, 0x8, 0x1f, 0x5, 0x10001, 0xfffffffd, 0x6, 0x3f, 0x4, 0x2, 0x3ff, 0x2, 0x1, 0xffffffff, 0x7, 0xfff, 0x80000000, 0x0, 0x6, 0x785, 0x8, 0x6, 0x1, 0xe6, 0x80, 0x1, 0x1, 0x0, 0x6, 0x8001, 0x200, 0x7f, 0x4, 0x8, 0x7ff, 0x1ff, 0x10000, 0x0, 0x8a, 0xff, 0x84, 0x7a7, 0x7, 0xae4, 0x80000000, 0x8, 0x800, 0x80000000, 0x1, 0x3, 0x4, 0x0, 0x72, 0x9c49, 0x7, 0x9ed, 0x401, 0x3, 0x8, 0x4, 0xffffffff, 0x6, 0x77, 0x0, 0x99e, 0x5, 0x3, 0xe0000000, 0xfffffffe, 0x9, 0x5, 0x4, 0x401, 0x3ff, 0x8001, 0xd2, 0x23, 0x7, 0x8, 0x5, 0x7, 0x4f, 0x7f, 0x9, 0x53, 0x6, 0x7, 0x38, 0x3a5b, 0x4, 0x8, 0x5, 0x1, 0x3, 0x8, 0x18800, 0x401, 0xfffff244, 0x7f, 0xfffffffc, 0x7, 0x7fffffff, 0x2, 0x40, 0x3, 0xeba, 0x1, 0x7, 0x7f, 0x7, 0x0, 0x6, 0x6, 0xffffffff, 0x4, 0x1, 0x8, 0x9, 0x0, 0x5, 0x3, 0x5686bf01, 0x84, 0x5, 0x9, 0x772a, 0x5, 0x1, 0x3, 0x1ff, 0x4b88, 0x3, 0x0, 0x1f, 0x9, 0x1f, 0x0, 0x2, 0x9, 0x7, 0x1, 0x1, 0x0, 0x4, 0x80, 0xfffffffa, 0x4, 0x7ff, 0xea, 0x38, 0x0, 0x81, 0x1, 0x10001, 0x9, 0xbc1, 0x0, 0x101, 0x1, 0x200, 0x7fffffff, 0x7, 0x2, 0x8370, 0x0, 0x4df, 0x9, 0x7e, 0x1, 0x2, 0x3, 0x10001, 0xf5c, 0x3, 0x7fff, 0x0, 0x7, 0xffff8001, 0x95e, 0x7b2, 0x8, 0x81, 0x95, 0x7, 0x7, 0x7fff, 0xfffff054, 0x6d, 0x7, 0x4, 0x885d, 0x400, 0x0, 0x0, 0x7, 0x8, 0x1c000, 0xab, 0x7, 0xffff4472, 0x2, 0x80000001, 0x6, 0x2, 0x6, 0x3, 0x0, 0x3f, 0x7ff, 0x5, 0x3, 0xffff0001, 0x2, 0x20, 0x0, 0x80, 0xfffffff8, 0x3, 0x8001, 0x3, 0x1b26, 0x7fffffff, 0x5, 0x1, 0x2, 0x4, 0xb1d, 0x7, 0x6, 0x9, 0x3f, 0xb0a, 0x40, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x591c, 0x8, 0x6, {0x4, 0x1, 0x8000, 0xc6, 0x54d3, 0x4}, {0x1, 0x2, 0x3, 0x4, 0x7ff, 0x80}, 0x6, 0x3ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x8, 0x9, 0x7, {0x40, 0x2, 0x3, 0x7, 0x8001, 0x7be}, {0x40, 0x1, 0x3, 0x0, 0x3f, 0x2}, 0x20, 0x8000, 0x1000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3, 0x9, 0xffff, 0x81, 0x4, 0x7fff, 0x0, 0x4, 0xe16b, 0x100, 0x3bb, 0x6, 0x9, 0xfff, 0x2, 0x9, 0x2, 0x80, 0x6, 0x0, 0xe0fb, 0x9, 0x9, 0x7, 0x7fff, 0x1f, 0x3, 0xffff0000, 0x6, 0x2, 0x8eb, 0x5, 0x1, 0x2, 0x7936, 0x2c, 0x3, 0xfffff6a5, 0x0, 0x5, 0x461dffa5, 0xb2a, 0x7f, 0x400, 0x1d1, 0x7, 0x7fff, 0x4, 0xb3, 0x0, 0x2, 0x1ff, 0xb0, 0x7f, 0x6, 0x7, 0x2, 0xc05, 0x0, 0x4, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0x40, 0x4, 0x8001, 0x8, 0x401, 0x7fffffff, 0xec, 0xde3, 0xd1, 0x6, 0x0, 0x1de6, 0x0, 0x8fa, 0x7, 0x5, 0x3, 0x3, 0x8793, 0x80000000, 0x2, 0x40, 0x9, 0x3c3b, 0x7, 0x2, 0x200, 0x8, 0xfffffff7, 0x5, 0x3f, 0x0, 0x2, 0x4, 0x8, 0x7, 0x9, 0xfffffff9, 0x7, 0x3ff, 0x10000, 0x1f, 0xd3, 0x6, 0x80, 0x1000, 0x6, 0xfffffffe, 0x3, 0x8, 0x9, 0x4, 0x0, 0x2, 0x1, 0x80, 0x7, 0x6, 0x448c, 0x1, 0x1, 0x5, 0x8d, 0x4, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x5, 0x2, 0x7, 0x5, 0x400, 0x1, 0x5, 0xfff, 0x1000, 0x7ba8, 0x8001, 0x9, 0x0, 0x0, 0x219, 0x3, 0xe1, 0x4, 0x40, 0xff, 0x8, 0xfff, 0x8, 0x10001, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x1, 0x9, 0xff, 0x1, 0x6, 0x641, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x804, 0x401, 0x3, 0x0, 0xa45, 0x100, 0x7, 0x2, 0x2, 0xbc69, 0x5, 0x80000001, 0x81, 0x0, 0x8, 0x800, 0x20, 0x40, 0x10000, 0x5d, 0x5, 0x6, 0x3, 0x8, 0x7ff, 0x3, 0xffff8000, 0xfffeffff, 0x1, 0x33f, 0x8, 0xb76a, 0x8000, 0x9, 0x1f, 0x3, 0x1f, 0x4, 0x0, 0x9, 0x1, 0x548, 0x1f, 0x7ff, 0x3, 0x8, 0x2fc6, 0x9, 0x100, 0x1f, 0xae, 0xea76, 0x2, 0xfffffe00, 0x7, 0x800, 0x5, 0x9, 0x4, 0xfda, 0x5, 0x8000, 0x40, 0x3ff, 0x3, 0x4, 0x75, 0x4782, 0x20, 0x10000, 0x9, 0x40, 0x1000, 0x3, 0x0, 0x10000, 0x38000, 0x5, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0x8, 0x8bf, {0x9, 0x0, 0x3, 0x80, 0x3, 0x1}, {0x1, 0x0, 0x2d3, 0x100, 0x4}, 0x13, 0x81, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6b, 0x200, 0x3f, 0x8, 0xe45e, 0x6, 0x2, 0x6, 0x0, 0x7ff, 0x1, 0x9, 0x4d1, 0x7, 0x3, 0x3, 0x3, 0x10000, 0x7, 0x1, 0xf3, 0x1000, 0x2, 0x3, 0x902, 0x8000, 0x8, 0xe4ea, 0x80000001, 0x3, 0xfff, 0x4, 0xc3b8, 0xfffffffc, 0x1, 0xcb, 0x200, 0x0, 0x8, 0x0, 0x45, 0x9, 0x7fffffff, 0x80, 0x20, 0x6, 0x7ff, 0x3ff, 0x3ff, 0x3c, 0x0, 0x3f, 0x81, 0xcd, 0x80000000, 0x4, 0x1, 0x1f, 0x0, 0x6, 0x1000, 0x6, 0x7fffffff, 0x1, 0x3, 0x5, 0x9dd, 0x1, 0xe90, 0x8, 0x1000, 0x100, 0x6, 0xec2, 0x5, 0x5, 0xdd, 0xfffff800, 0x4, 0x3e1da87, 0x6, 0x800, 0x7ff, 0x20, 0x7ff, 0x7ff, 0x7, 0x1, 0x7, 0xffffffff, 0x3, 0x80000000, 0x1, 0x81, 0xffff, 0x3ff, 0xfffffffa, 0xca, 0xfffffe00, 0xfffffff9, 0x7fffffff, 0xfffffc00, 0x800, 0x0, 0x9, 0x80000001, 0x6321, 0x4, 0x18, 0x400, 0x7, 0x200, 0x4, 0xfff, 0x5, 0x3, 0x8001, 0x7, 0x40, 0x9, 0x80000000, 0x5, 0x8679, 0x3, 0xffffa1a5, 0x10001, 0x7fff, 0xffff, 0x40, 0x1, 0x6, 0x80000000, 0x5, 0x7, 0x3, 0xa6a, 0x3c, 0xfff, 0x1f, 0x5, 0x0, 0x3, 0x5, 0x401, 0x2, 0xd5, 0x2, 0x6, 0x91b, 0x80000000, 0x4, 0x3f, 0x200, 0xd935, 0x200, 0x401, 0x3f, 0x400, 0x4, 0x2, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x7, 0xffff8001, 0x5, 0x20, 0x3ff, 0x101, 0x3a, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0x7, 0x8, 0x9, 0x4, 0x9, 0x5, 0x7, 0xf7dc, 0x7, 0x80000001, 0xc3, 0x100, 0xfffff000, 0x2, 0x100, 0x3, 0x6, 0x4, 0x3ff, 0x5, 0x3, 0xfffeffff, 0xcaf1, 0x1, 0x3, 0x2, 0x3ff, 0x5dc4, 0x0, 0x7, 0xbbab, 0x80000001, 0x1, 0x1ff, 0x3ff, 0x9, 0x800, 0x4, 0x100, 0x5, 0x4, 0x4, 0x8, 0x7, 0x1, 0xffffdf5c, 0x8, 0x0, 0x3, 0x9, 0x2, 0x318, 0x7, 0x1, 0xffff9d99, 0xc1, 0xc1, 0x800, 0x4, 0xfff, 0x1ff, 0x400, 0x7f, 0x3, 0x134c, 0x400, 0x200, 0x40, 0xc460, 0x81, 0x0, 0x5f78, 0x9, 0x6, 0xfff, 0x7e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x1f, 0x200, 0x6, 0x0, 0x80000000, 0x8, 0x1ff, 0x711a, 0x8, 0x3f, 0x86, 0x8, 0xd4, 0x7, 0x20, 0x7, 0x7, 0x1, 0x9a, 0x8000, 0x0, 0x3f, 0x2d0, 0xffffffff, 0x3, 0x4, 0x40, 0x7ff, 0x7fff, 0xffffffff, 0x8, 0x4, 0x8, 0xfffffffd, 0x1217488a, 0x7c, 0x5, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x60a7bbac, 0x401, 0x8, 0x7, 0x459b, 0x8000, 0x5, 0xffffffff, 0x9, 0x10001, 0x93, 0x10001, 0x9, 0x4, 0x5, 0x63, 0x7, 0xfffffff9, 0x2, 0x9, 0xd7f, 0x3, 0x3, 0x81, 0x2, 0x1000, 0x100, 0x5, 0x200, 0x6, 0x4, 0x4, 0x4, 0x9f, 0x80000001, 0x85cd, 0x80000000, 0x3, 0x7f, 0x1ff, 0x401, 0x0, 0x6, 0x0, 0x9, 0x6, 0x2, 0x3, 0x400, 0x3f, 0x9, 0x2, 0xfffffffa, 0x9, 0xa77, 0x4, 0x5, 0x2, 0x0, 0x8, 0x9b8, 0x20, 0x3, 0x4, 0x7, 0x100, 0xfff, 0x8, 0x1, 0x1ff, 0x7, 0x8, 0x2, 0x9, 0x8fee6c8, 0x6429d2af, 0xff, 0xffffffff, 0x3f, 0x4, 0x200, 0x1, 0x1f, 0xa8e, 0xc9, 0x1, 0x6, 0xb039, 0x1000, 0x8, 0x0, 0x19b9a688, 0x557, 0x9, 0x5, 0x0, 0x3, 0x6, 0x80000001, 0x700, 0x5a, 0x4, 0x80, 0x800, 0x10001, 0x6f1, 0x1, 0x2, 0x7fffffff, 0x50b, 0x84, 0x1, 0x4, 0x6, 0x7, 0x80, 0x100, 0x7fffffff, 0x1, 0x81, 0x5, 0x80000000, 0x4c03, 0x2, 0xea, 0x5, 0xd3, 0x4, 0x707, 0xffffffff, 0x7, 0x1000, 0x8, 0x7f, 0xfffffff8, 0xfffffffb, 0x2, 0x1, 0x3, 0xffffff17, 0x7ff, 0x7, 0x0, 0x2, 0x1, 0x7, 0x6, 0x1, 0x800, 0xfffffffb, 0x100, 0xffff, 0x9, 0xfff, 0x7fff, 0x7, 0xd0, 0x80, 0x81, 0x1f, 0x8, 0x80000001, 0x1ff, 0x56a, 0x3ff, 0x0, 0x8, 0x81, 0x7fff, 0x3, 0x1, 0x6, 0x1, 0x7d, 0x2, 0x3ff, 0x3ff, 0xfffffffd, 0x7ff, 0x8, 0x401, 0xb4000000, 0x7, 0xffff, 0x58, 0x7, 0x2, 0x7, 0x4, 0x7ff, 0x7ff, 0x6, 0x4, 0x27, 0x0, 0x6, 0x25, 0x80, 0x5, 0x9, 0x5804, 0x6, 0x9, 0xfdd, 0x9, 0x6, 0x5, 0x3ff, 0x1f, 0x0, 0x1ff, 0x80000001]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffff110, 0x2, 0x9, 0xb52d, 0xc5, {0x5, 0x0, 0x7bb, 0x101, 0xfff8, 0x8}, {0x0, 0x2, 0x101, 0x7, 0x8, 0x9}, 0x4, 0x81, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x85}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x2d, 0x6, "e8e80d4e1e9d1946b88f5da722227926b15ebfe3168815b0b966517d902561b581890fcdb5a3af0a31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x118, 0x16, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x7, 0x9b, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x7, 0x8, 0x7}, {0x7fff, 0x58, 0x90, 0x400}, {0x6, 0x3, 0x7f, 0xd799}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x2, 0x10000000, 0x100, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x27b, 0x0, 0x3, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7, 0x1, 0x3}, {0x7f, 0x7f, 0xb4, 0x8001}, {0x7, 0x8, 0x5a, 0x4}, {0x6, 0x3, 0x8, 0x4}]}]}, {0x54, 0x6, "09dab61b757b69c4600c64f3d93ed0a7cd914e9cf26cf7c4a422c03dff7630b9ea5609efa566f7382026950f7fa096b021da8ce878d45e9a0ad9dbadf96697891ef95e96b1f6a5eef7ca488daff902df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xffffffff, 0x8}, 0x7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbd8, 0x7d3f, 0x20000006, 0x8001, 0x3}, 0x2}}]}, {0x5b, 0x6, "29d375a1f7b13f04340b52364afd7d2c73408cca125f3a7e238115f5674eb62817c3b97a3daefbe5137d9cee330aaeae88d74890a24a1430677ff20804b0ba80aaa68dd6493d19c9435aa587a476fbf81d29d90c904347"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x294, 0x1, [@m_ctinfo={0x58, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8000, 0x0, 0xffffffffffffffff, 0x190, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x13c, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x2, 0x10000000, 0x2, 0xffff337b}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0xffffffffffffffff, 0x7fffffff, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x0, 0xfffeffff, 0x5}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}]}, {0x9d, 0x6, "29f2f8875bc249f9764b212946f0b41738b8e528ddf629dbbfd0729bb523afbe7ad3630aa5c56ffe64660da07571da24d725995ee8cdfe7cfbc30bfa2ff1c7511004386ac772c057f79aff53783bd5febf5c83ac07c86f1d134c486aecb6024ae97daf8e601aa01feb6884553c21a94cd7a4309f2b9352171f4abc14d54b88eaf6e5d81170e6e214dd481b4f4b7442b890975e57b3136cb877"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xfc, 0xd, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x101}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1f}]}, {0xbf, 0x6, "0c4ec741e8115169e49c94d5b2375d1c24c277d130744caa410856c818132ee28eec003fb1966f8254e073d383dc657101e2ef543fe6588a39953f3627c1a398c79255556cff77e941ecb30792a34d23d92f855fba820435e53e20a0333918ae5d23f4a574a0beb44ab8528ecad70163297c55c4c1a4695641f1906dd47584a1d6d13ba31a47c604f7e77d0e927f5f7d6b53e0ee6b4370eeae8c36202e228dd2e30c2ca8536d06fa1154cdb51646f4603e6fd329b67bade6a5de50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x5e8, 0x1, [@m_nat={0x1b0, 0x18, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1f, 0x8, 0xff, 0x401}, @loopback, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x0, 0x74, 0x4}, @broadcast, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7, 0x3, 0x8, 0x5}, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x7, 0x2, 0x80}, @local, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x8, 0x4, 0x7, 0xa7e}, @local, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4a, 0x321, 0x1, 0x2, 0xe866}, @remote, @multicast2, 0xff}}]}, {0x96, 0x6, "ef0b2a4654bf3bb5cf46f23a1bc6141fa19b4a495ac99a63361060b8a6695f9efc1686a0b81383d1309db3566b9fdf9b31d7c9d426eeba4a80b9c6fb5b463ef5736ad72ffa36773a4cf611ea02a19925fa189709218a8aa2f42ba9af7543ed9118263aa3c17e77b7bc6a9289876b4754856a3de899fdc0de8cae5435fe7d0d7e50617116b17915651fd40694f4f40274bbf5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x158, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xcb, 0x6, "6099234ea2eed63aef504bf939636a9364a5a14c1769834c28643bf642e77ef62fed3e7d30410a81e7b27c9f3a22dd684373337336560e081782c979ec896ff0596ac6b74694d207d45dae9eb866957655f3656872c443cddfdfdedf3c1244a4d5b0e3d12a44192da8b753f6926c418acc693d0cf34f31e68b4c1be4cbd02fa47f9384dcbe0a60eb60c8d886e04208b4fc876e17791e11718657d4eb8fcbeee631fdf85db832052ca6ef75788dcd2070c261aba7095ea8e5286198abdb557638e2174710383ec9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x10c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x81}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x77a, 0x7, 0x2, 0x7f}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3ff}]}, {0x9e, 0x6, "cc11e8928ac8f3afeb2654fb519d8f8d0c2b0a3ba3c48f51aacae3678c0418fe5662abfcf5ab78eb44f5e081354a7dbfd8441c6da9d6d18c75c5d3f4a313993588e0ac62fb6474832e9c27f7754fbd7df1ca483b89b50f6761ff8b940f3d1c74715a2feea048ec8f31da7b0310df3f32e45058231a96f51d97beb481dceef2860b1d82e2d81325bd6f7d7cecbc568dae50116bf636ef69924131"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x98, 0x9, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x57, 0x6, "9d1e2a880b3aef93ade0591f2e75b4a826586547e73e7f17ce836d7e5af0a9650a5ccda27cdea065b7c1c1582c0355e49b508afdf155d1194302878e4f507b04df44108cf74261c5c1d262aa001724d48ba45f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x138, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x6, 0x3, 0x8001}, 0x1}}]}, {0xf4, 0x6, "1c527788260907ebc13a37c5676cd4d2815fc796e9eb20e50675ef5508c907a0215dddf490ff7b12ae74f32c92cc96a2fc13a0b71475b8aa66286c3832e4e15b3a1f15ad9743c3c217f4a3e4a5762fa0e884b1e38f742162ef55391073c3b37d34be520335b5653ac04a0307c511a4721417ebd83d36da57b8c4cbae9893500746aeba66fdadea2682cbc2cdb380a8b2597ce4bea66a08645b550a60eaaa974d9fde87b4fe9f3c2ab4edd88c0c1104edae0a7add6396a4e0988fb3e5413c661860356b3089b3d0184f10ec7c43335759d5177d3e337f577c9e8c1e33658dc9ffdc1bcdfb83aee7891e86f1e632054751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x32c4}, 0x1, 0x0, 0x0, 0x840}, 0x24001004) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getlink={0xf0, 0x12, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10, 0x20042}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_MTU={0x8}, @IFLA_GROUP={0x8, 0x1b, 0x10000}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7ff}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "9f6b268b7c36c4464d581b894feab3ab55b034bf4cf0317322a06d3a"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'team_slave_1\x00'}]}, @IFLA_MAP={0x24, 0xe, {0x1000, 0x6, 0x400, 0x1, 0x80, 0x8}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r5) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWNSID={0x14, 0x58, 0x20, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000001000052700000000000000000000000034c3111da92df09db1b46c4c40ea3f452cbf6d21c2535cc9f927a477b5c0eb1213ce541c45596bdc2264385f2e342bbabdbc9caae2793471132258fdd2426e443c58e93df2b113def755f233feb01e7caea3d428729b2068b09df4b5990bae5aa878858b257508292b2e0b7120b843642c3e5226cad11baa0110324a887f5db3e57fbdda8b66af4267d02cf034629cea0c4c5f1e6bd8d2961d247094f3f63ff5b12c9acaf9eb34d8", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfe46}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005940)=@delchain={0x24, 0x2a, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x4000000) [ 467.176876][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 467.187064][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:20:37 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'Z+$/-P$(-'}, {0x20, 'lo\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0x101b) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x9, 0xffe1}, {0x5, 0xf}}, [{0x8, 0xb, 0xb7bb}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000020000000000ab00000000000000000000000000002c000c0000000000000000000000000000000000feffffff00000000000000000000000009000000000000000c000800b29f6c857d5629fa0000000000"], 0x84}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 467.303526][ T9195] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f00000000c0)) [ 467.404653][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 467.412285][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 467.416841][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 467.420020][ T143] Bluetooth: hci8: command 0x1003 tx timeout 10:20:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) [ 467.583142][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 467.590494][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f00000000c0)) [ 467.813443][ T8764] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="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"}) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="77d41bcc2b7ed411d0f35654de9d0e10084813b1122a1782f7f20be23f92527d8d258bb355ab95b1d6ec847ce81ca31228e2b04b3b6d92e41d2af33b0ab664035da29f9a095804b318734d8b23c75457133a88f33d6d08e6f5349a880c3acd3837c579995211fbaa077bcef04d5706967700ddef9a1f439c46a4a6bd54bfe264c90f98838e8734e21ebed71350718b2caa80d223cc43f1579cef597e8b195a003e0c6c2959c0544073ea87ace50dfc74c0e911935a5c0b0b7c73d019ea3e840f0049e8b9c99f23d7a420c42defe7486757601da7d913863fd653908b79e5b78b61d667c2881c8c4eb82b149ddfff441b5ff8709b96475b3ca1ef8bfd1f2ddb3b88bbc33b53681773faa9e778363f8c33484362f2f534bb8c919ac44e67d62e58c67a82cd47f2decb3b6a07605fc0506a5504bb9408032ea46ef90135745b863ee4bfa35e9ad77040f1a64a0ab0ef709d8a0fa2d7f5272642762d2457e584ea8aecbe235a15f1fa3dfe3aa5335e2a958a9310687643b391a30bded555d052c5f1f91818018a96a7063bfe9831ec5af1b60160b10b7c12924dbea5107e197f742b5da09b1123b3e539f13186e6252f171c06ab40e910cd489a3f9a3aa1e9b96ed137ed481d60b7b22f638a3c4c0538410d0dfa351d2e20704aa63e171c32d5840440b8209a5ab02c608ab7df19521213a2ac4006bf0a8a0df5fc0c00afb7c1cc6d3944f6390ff5e747727a07d8cb28457cdc6cc1c4c6b803aa8d38102ba05ce6ef681f8a167e69305e3eb0904756ff2ecbd668b63f26de85e98a53ea4d920f992442f9c3b4211c920d82f9885f27cd8a8c9ca13f15b05b4a0a862cb30f4b7738e871a6dcce56c939f635cc8203f4f494f2d3006f35842d74f12f091ce5c6b0a722b01ec4bd21d8656890905abe717365eed3a963546f1c7ac5312f3aa3e8515d4e58a1fabb6480c5abc00c3134456ed68865e593d97e2b9adb6d8cba9321f2674fe2804593fb0c7750160e8a87f8ef50e5d214dde23da353f8d40948910ce89d0a1ca67ec4a462038f097e51688dbe012e8512dcedde4b07c850e4356a33ac1352af196a60805fca81e084b8e6bcb3358c574ad750961a0164bb4294f2174f3845c5c4258a64e990a8cb5166ff13e8c43d4f85c7642905a806b1cf3c092d0e8b90a23d2a3f5cb22c3e149ff0c94cd62bf91cb3955afc7d5934fd0ef6a78d030812475fdd927ec8cf44b46ea4ea4ed7aa812bd498d2031256ca90f91be9d9234c5a6d55cdb72762f9b05b376a7ca6161bfd266bb3ccc0507cd36191c6ce19f7b249ad7608fe2bdf5d6c6c7b39eb9259eee75efb79efe38ac23cd8e56316b830f9c347893fa9cb7868981513bf19bdb67dfa5f4af688468caf832eec635bdabee049fdea166878e4aa8ff76c3b34ebfe9e9f6acdb2fad636afc23419fd6be802e95ecf2123ffa1c485f9fad6cb5b994ac919fef0037a2dc8fa0a1b1a26a29f2a856d7a9f673808484a64eff88f9a2b585c4640fae153aad53437e6e36d98d597ed04f670202214566532bd90e88e1c40b037d1a8fd35ca6aa8294a144ea88b1844643e13eca450e3c5cbae05e6c1d0d27fe57e0824a34b81725c7cc599454735c613a1b6ea173b3370947a214171e808ef22c32495f395ad4c83034584fc8b3f3a5df7ea20d5e8535effcde9f1ee9ca4834eeaec8cb85a75eae398208b8462cb41608e3bcacfb91c81f7095ae8580a4d22ccc3b7bec4d7406998a231f885c965d92d1924081861acf53f1489aad4ce3facb4f3613f8585f3aadbbe310f2486494cf7406589167a9be170de654d43d9bf8b4f4463faa22b3b9ff385b56aec4d0199ac994383fe86a5181018a6a21f91f01057825882a4db5c401e6e37899c82c86378ecbebe86b6ae643db6374cfb57d6c67217d35dfe6d1c1fb617f2fa1c3b309360503b087d9495eb89ae03fa0b5cc1a59bae166482bf5248800e42f7fd11091745a9a493898ddb293eade2c5ac2e0c731698691b141ce4392163b62b6f7f73989160ee64f1a6c1eb6022f40fd1d3b73957108c441c5241875b0dc4917ef1a5b6cbaec87e0a8029ba9f523d0ada5c0d4d6d35260dcde20fe611f12443c27c57a89022906ee527d0f0c5d00cae9e9ce4630099ccf0c968de8056d1da58c3cc8189592afb5f6a64e25f1757f81ca27d7531abf2ba546ca13cd8ba56317c0673d282d2d8840cc51a93d4b50645ce28a3cbfcf9f690ccca8a352947fc7c017ddd71390e4298c1fb8986eb388ba96c759a2167ce469fb894bc66709857b3a334fd413596933bd3fec3f2151a8de24d94660549915054b536458f9f06a4d4a59a35e12e203a164e6ccb0ab637789ddc22566d50573f8bf83e5ec1130f211b7b9a441b106987b98b2f6a8217f6b14c4547b030ab693a5d232e5c4eeb3674719c9aea171b776afd319500180d3660f4866251718a35d4d36bca8bf3853664eb82510f2220ef24203d490052a4613333962cca6b796bb4b78403937353f40b55093aded6425aeab9a1d91cc7dd4d3fc2c8f4674fd07345b7b3b9e04ec6f837e37d7f6ebfd5bfe6bd890e882234e1143e8a8753959f45899648e405842c76e6ffcb978d7cf9151effa82d7680753dd0a650d0bc89252d6f811d46ee3462a9699acdf2bee618a833cfb632309ed73efea4f77cf3889079f98eddfe3a62e69bcff7ce9b9500b1e3d4d3523cdc5e9fb8ac46f3368a4639b179bdbb2ac80c28256f02395febb9e53d16fe11afecc2ffc9476e16d2710b8e283de4b7f94c8a382ee9ac6880774390fca543dab8c447d799396f7cf95c8fb2ca8dcf80f0e748991b7957f2976b69b634da675df9a6b53133192998b05d8339b95940345a2d3a7307185ea215a063fdda5918a92ac57fd376e81b26dcf1182e52e62fd5f41ba322eb12d141ba991e1b7f3cc4c134e39aee183541bed98dbb2d0be6f48a6b1e6f342605580106defb26c1d6f77c70b4f649fc83959e677cf07d92e20ec8110bf6d64618286a1d5145e25028cfec82284e4bbaa2863d4b67f0920b62883b576f08582d707aab6a4e765b69fd0654f8910e17ece09d1f726791faa873a09edd7105a59c34aec3d1a8c4547c493ab844b0b444b3cedb77d38052872bdcce93ce165c5b567deaa21313a6a1226310e37aec61a4c5113740cf85c1d4e0505a7a2047644d7b6ddf0ab2db8ab0ede1dc3c4bfa9e7f12b9557a4804bcc1f5bfd2a6bbbbb9c5534e95c4ddcc6eedc072e4709fdc453125535da652464bcd37377c470578b0b548e785b510f30d90995017c5d50c28d983e09833922b2454ef52a78e4d2768d15203b893cefcadab522b243d8bbec2d067599b84cb725866da785afb10e308ea55518ccf7d3ebe4b684c83e7e4d8e9441609e11dd26d217e4bba2fac36052247829d1f06ab0a3daf78c9ec96c47aa3ea6c6cfb01fe00edbce40046ea5a7cbe84feecab35adef60a718a71cce145de7437643857e805acef1c4fe6781a779125ead4e9cce36ba99fabbfa9201c46cee9b59fb7467969ca4209ab1410e1dddd2fc73bddfd3d6cf37a4a8b4a296567fe71cfac2611694f8143c29aa9c06055723c3ef14f2b56502eaf9d7f4d182927eba830dc1646835e85b972aa52addbc2915741ad2bcde1e95d648727b12350c4c5049efb8637e12a0a6d81e68d008ac1ea54352dbd2309ffce1582e57afa13503599cea7c9c69f15135660492607e6bc531c9e9c6fcb1252e6f32c0f32184c18fb77ed2707869c1956c11329821780287fbd456e74a9bb7f188a0f5edc9116b67bf077cc45bf893673848966d5358b433aecaefc56d01e0f926af92dc7db69f50c6ba07948a13b29e6cf389276f2ed90b332d5b9eaea2cfc63d1f1a93eaeaaaf5c4cc00348ce836264ca55d4336ea70cdc51c0bd4a6dfb60cf80e1da10539a02cf5bedd11dc523a68cadf18495380085b248451a88532bf594d91866462e1b7b99bd792ca8cc636b88a15d5a5879f98efd91000f764787cdc8a7dfb3a89a5c91dcdda8552128b64df69b798cdf5337c709accb7cfc215599c5093b9faa51c034a9eb7fca8551b355bbdd71801fd6b5ceec8acea7f407935603ef6d9e902005ab1f6571d466c4ef871fba76a3d3a27fd7145ff655826895cce2505614a5df7852b617fb5ef1addc6db4577f39d7c1738d438120a355729f440128a74baaadf16770416238b4a397338600027edd78d9aa73a1b0c9463075170e9d43f0d0e5307c34f4a373cbc800ff0806627f71cb7bc993c476a1f3a37f274d6c56e49d9fa6414b7328906d5a4dfa4c8dc0e648c5fb55eb0f4ab894789419b0fe386341767ddef9e9ac7d727068d8e4b118feee50a5aca1849252f99c281d0b2451067a64b0b878b330c755ffa1520fc252e3c49a7829c1a41986525e95b9b84126c3b644bb2648d958e19e5570e6ed97a3e5600aa73260d8dccef5ebb1d1f5494cbe98390e91772d56e4fe7766290f7689b03c6be2a70251129da258ae4cfb96e227c7247734ebb34b7c9d7382903a7446e325309162b6fb45a871fbad9a83473cfa33eb11a9271228ea79e487b2aa7171cd53816a44840eddd1f3d6f68e36b21f44972981c51250d8c85fd249dbe821b6c618511db0297a63181d7737198917554f108881e7ba0b90bc618cd9f2bbd6d32c2a18e2d13dea7f7f608b69e06535bb98b1a2bb07c18b888359cf927ad8f980af663f173111dfa39757af6cccbad65a57ad88fff1e97187db117d0e9ce75108846521719d0a39607b25515070d2e1ac63376e9d3785af85274b76051257a9d5bbfbb6ca7d7e8df3e144ca4b05b005fdea137b7640ffe9f5858b69473a7352a3a53881c80c32773cdd2c76352ec0ef2a324a890dcf84baa633c65896a4e87523b18afefb70e1a73037adf31d57a96603e134e5653b4e36c5db0a25415977f4c75cc0e9ba0e23f5ba2ce21d4a9b92081001fd593c89b9f5e33496e36e0638ad55e2f706f0a61518b66b20e5af3c3c4e465c9590a3d3d814c954c5f9e4eb6108413d008415d568dabef62f00d0eb2b53227dda1b705322a023341307ceeff067a489018b5d2eb97254ceb3dee6a1181cfa5194a6ab4c35b5436f5f689e74c32d55dc13294283c650138b8e90944c093e4596241b62cd0032c9ddd5634b9d0ea3d7e52932b48846c068199fef8fb600901d27227995c4672b0b6651ad932fb6c8f4dc4ab91817c5823cef11b386426ed4591e19f94a40bf633e82cccdd844f123c2feccb2b2df739e30f8925c124ef60f38d9f63625444a3a88ce9d1ed9faef5d4b63fbec27d6042af5cbb6cc0736a2b4b35f95df8b212b8adab8a448464a021bc84c7dd0003edadc93859d453059ad2ad52d176e4bec69609553dea385d9a073316b8d37036acf1dcd4b4063947822adf27528222d3ce791b528dab6b37b6c9d20760f446ff461f072271b1985f5a20fbc4ba293507f8f923aa4a10dbacec2cee312b2a256c4c698cd60e69682278c286c765495010c8f671c750868834012dc5a6faf16ec90a77fa23a693f53a0c2ba3c9997d44a7613cf43b1e9326a58bf913f735639baa7a40ac26305be7a5e061110a2553abb01894d6d5e5c10506da36768ce3f8b86547a2fee63d42d4ebb369d870a5d69fa388ef8c57c6e977e79f8cbcb3490c0b393d23e1bdd88d81489f0dd375edf722d17b009a08124fdf68a994659ebd15ddbbda85867f72ee97707293c4e12d58b9f84f9711059ee23fa18cec0dc502c02df3d8399a83346ec0b2f3fb4646"}) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) tkill(0xffffffffffffffff, 0x4) (async) [ 468.263570][ T9212] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 468.382322][ T9198] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:38 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'Z+$/-P$(-'}, {0x20, 'lo\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0x101b) (async, rerun: 64) r3 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x9, 0xffe1}, {0x5, 0xf}}, [{0x8, 0xb, 0xb7bb}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000020000000000ab00000000000000000000000000002c000c0000000000000000000000000000000000feffffff00000000000000000000000009000000000000000c000800b29f6c857d5629fa0000000000"], 0x84}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 10:20:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f00000000c0)) 10:20:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="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"}) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="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"}) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) tkill(0xffffffffffffffff, 0x4) (async) 10:20:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 469.176741][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:20:39 executing program 3: unshare(0x6c060000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'Z+$/-P$(-'}, {0x20, 'lo\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0x101b) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x9, 0xffe1}, {0x5, 0xf}}, [{0x8, 0xb, 0xb7bb}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000020000000000ab00000000000000000000000000002c000c0000000000000000000000000000000000feffffff00000000000000000000000009000000000000000c000800b29f6c857d5629fa0000000000"], 0x84}}, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 10:20:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f00000000c0)) [ 469.656714][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 469.656986][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:39 executing program 4: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'Z+$/-P$(-'}, {0x20, 'lo\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0x101b) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x3c, 0x66, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x9, 0xffe1}, {0x5, 0xf}}, [{0x8, 0xb, 0xb7bb}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="8400000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000020000000000ab00000000000000000000000000002c000c0000000000000000000000000000000000feffffff00000000000000000000000009000000000000000c000800b29f6c857d5629fa0000000000"], 0x84}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020001, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 10:20:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f00000000c0)) [ 469.797029][ T8760] Bluetooth: hci8: Frame reassembly failed (-84) [ 469.816813][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 469.823172][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 469.947237][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 469.955062][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x40186366, &(0x7f00000000c0)) 10:20:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 470.328712][ T9257] __nla_validate_parse: 1 callbacks suppressed [ 470.328728][ T9257] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x8, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x80, 0x1, 0x8, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="280000003ff7e6d2ce6c1d420329bd7000fddbdf0638c20000", @ANYRES32=r1, @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x240040a0}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000080), 0x1000, 0x0, &(0x7f00000003c0)="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"}) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x2e7, &(0x7f0000001500)={0x0, 0xcb40, 0x1, 0x3, 0x38e, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000001580)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r5, &(0x7f0000001440)="b34c5073e683afc2b1ad5885b13132a79a2b5f072e027f79ad296415729681c68355210e6ea8c8b28505278d8766c87409f8377c86fc110498092e9f35bec0d5a62ff8c6f54615bc91cfddf7a98e68deac25e4ac2cce978150a01ae8fa2e62d99dc0f1019ea6a4e74b8bfa6c1455", 0x6e, 0x8000, &(0x7f00000014c0)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xfffffffd, @empty}}, 0x0, 0x0, 0x0, 0x3, 0xb3550aa4ba878354}, 0x9c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x4) [ 471.081885][ T9250] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 471.326429][ T9270] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f00000000c0)) [ 471.416874][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:20:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 471.730740][ T9277] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f00000000c0)) [ 471.816763][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x401c5820, &(0x7f00000000c0)) [ 472.137361][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 472.147376][ T143] Bluetooth: hci7: command tx timeout [ 472.285179][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 472.293073][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f00000000c0)) [ 472.502690][ T9288] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 472.525716][ T11] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 472.819822][ T9291] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 473.209183][ T9294] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 473.534791][ T9297] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f00000000c0)) [ 473.576805][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:20:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:20:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 473.976693][ T22] Bluetooth: hci8: command 0x1003 tx timeout [ 473.976804][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 474.194521][ T9305] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f00000000c0)) [ 474.510887][ T9310] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 474.536719][ T143] Bluetooth: hci7: command 0x1003 tx timeout [ 474.536980][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 474.711694][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 474.718978][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f00000000c0)) 10:20:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 475.582089][ T9321] __nla_validate_parse: 1 callbacks suppressed [ 475.582145][ T9321] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 475.656688][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 475.656826][ T3312] Bluetooth: hci6: command 0x1003 tx timeout [ 475.690869][ T9322] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f00000000c0)) [ 475.860849][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 475.868226][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:20:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f00000000c0)) 10:20:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) 10:20:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) [ 476.140013][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 476.146224][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 476.169948][ T11] Bluetooth: hci6: Frame reassembly failed (-84) 10:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) 10:20:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 476.710597][ T9337] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 476.888910][ T9340] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.936808][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 476.943349][ T6366] Bluetooth: hci7: command 0x1003 tx timeout 10:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f00000000c0)) [ 477.087448][ T3655] Bluetooth: hci7: sending frame failed (-49) [ 477.095130][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f00000000c0)) 10:20:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 477.624502][ T9348] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 477.995519][ T9351] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 478.216888][ T6366] Bluetooth: hci6: command 0x1003 tx timeout [ 478.223039][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 478.377033][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 478.383137][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 10:20:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 478.454784][ T9354] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.456777][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 478.470447][ T6366] Bluetooth: hci9: command 0x1003 tx timeout 10:20:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f00000000c0)) [ 478.649123][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 478.656061][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 478.679773][ T9362] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f00000000c0)) [ 478.848586][ T8760] Bluetooth: hci6: Frame reassembly failed (-84) [ 478.857470][ T8760] Bluetooth: hci6: Frame reassembly failed (-84) 10:20:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 479.230901][ T9368] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f00000000c0)) [ 479.336825][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 479.345026][ T3689] Bluetooth: hci7: command tx timeout 10:20:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 479.520358][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 479.527494][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) 10:20:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f00000000c0)) [ 479.715148][ T9377] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 479.752277][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 479.759588][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f00000000c0)) [ 479.917215][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 479.924001][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 10:20:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f00000000c0)) [ 480.043091][ T11] Bluetooth: hci9: Frame reassembly failed (-84) 10:20:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) 10:20:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 480.776654][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 480.786889][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 480.856858][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 480.864767][ T3689] Bluetooth: hci6: command tx timeout [ 480.881078][ T6327] Bluetooth: hci8: Frame reassembly failed (-84) 10:20:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 480.964406][ T9391] __nla_validate_parse: 1 callbacks suppressed [ 480.964425][ T9391] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) [ 481.010469][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 481.018724][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 481.121275][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 481.128902][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:20:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) [ 481.271031][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 481.278555][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:20:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) 10:20:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 481.418773][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 481.425985][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:20:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) [ 481.561554][ T9404] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.620450][ T8764] Bluetooth: hci6: Frame reassembly failed (-84) 10:20:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:51 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 481.816699][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 481.826817][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 481.972306][ T9411] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:20:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f00000000c0)) [ 482.019865][ T9412] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.056737][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 482.063295][ T3689] Bluetooth: hci9: command 0x1003 tx timeout [ 482.184865][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 482.191988][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 482.389576][ T8764] Bluetooth: hci7: Frame reassembly failed (-84) [ 482.397600][ T8764] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) 10:20:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 482.936722][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 483.055248][ T9426] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.082270][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 483.089588][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 483.105902][ T9428] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 483.178688][ T9424] mkiss: ax0: crc mode is auto. 10:20:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) [ 483.439054][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 483.446438][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:20:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) [ 483.656860][ T6364] Bluetooth: hci6: command 0x1003 tx timeout [ 483.657697][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 483.707063][ T9406] mkiss: ax0: crc mode is auto. 10:20:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) 10:20:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 483.924412][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 483.932129][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:20:53 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 484.097765][ T9441] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) 10:20:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 484.278663][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 484.286218][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 484.346753][ T9446] sp0: Synchronizing with TNC 10:20:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 10:20:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) [ 484.456761][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 484.463020][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 484.595979][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 484.603105][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e) [ 484.783569][ T8760] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 485.123191][ T9461] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 485.976632][ T6364] Bluetooth: hci6: command 0x1003 tx timeout [ 485.986799][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 486.019198][ T9437] sp0: Synchronizing with TNC 10:20:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 10:20:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 486.184106][ T9465] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 486.264628][ T9471] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 486.290949][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 486.298422][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e) [ 486.696914][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 486.703109][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 10:20:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x300) [ 486.856657][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 486.862910][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x300) [ 487.033889][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 487.041163][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x500) 10:20:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x500) [ 487.347226][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 487.354484][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 487.395085][ T9492] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:57 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x600) 10:20:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 488.309161][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 488.316669][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x700) [ 488.464426][ T9503] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:20:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 488.574366][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 488.582239][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 488.618873][ T9504] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:20:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) 10:20:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf00) [ 489.016716][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 489.016771][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 489.189914][ T1090] Bluetooth: hci7: Frame reassembly failed (-84) 10:20:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 489.495019][ T9519] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 489.504648][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 489.510899][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:20:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x600) 10:20:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:20:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 489.691145][ T9526] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 490.477893][ T9531] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 490.832168][ T9538] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e00) [ 491.176895][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 491.185505][ T6366] Bluetooth: hci6: command tx timeout 10:21:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) 10:21:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 491.256701][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 491.263116][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 491.434341][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 491.456029][ T9545] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x700) [ 491.736659][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 491.742797][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 491.867459][ T8760] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 492.405885][ T9557] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 493.365970][ T9565] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 493.425149][ T9566] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.496764][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 493.504282][ T6364] Bluetooth: hci7: command tx timeout [ 493.509849][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f00) [ 493.571158][ T9543] mkiss: ax0: crc mode is auto. 10:21:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6) [ 493.722829][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 493.730686][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff00) [ 493.799762][ T11] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf00) [ 493.896963][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 493.903153][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:21:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 494.345900][ T9583] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 494.689309][ T9590] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 495.384599][ T9593] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) [ 495.816710][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 495.823504][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 495.845943][ T9600] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 495.925609][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 495.932753][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1000000) [ 495.978489][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 495.984545][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 496.078432][ T9602] sp0: Synchronizing with TNC [ 496.136737][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 496.143426][ T3689] Bluetooth: hci8: command tx timeout 10:21:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e00) 10:21:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xa) 10:21:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 496.385832][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 496.393568][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) [ 496.542591][ T9614] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.669884][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 496.677111][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) [ 496.855828][ T55] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) [ 497.248202][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 497.255544][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 497.329877][ T9624] sp0: Synchronizing with TNC 10:21:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) 10:21:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 497.471382][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 497.478459][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 497.553435][ T9626] mkiss: ax0: crc mode is auto. [ 497.585635][ T9632] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e00) [ 497.816139][ T55] Bluetooth: hci9: Frame reassembly failed (-84) 10:21:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2000000) [ 498.216962][ T6366] Bluetooth: hci6: command 0x1003 tx timeout [ 498.217124][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f00) 10:21:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 498.377008][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 498.385519][ T6366] Bluetooth: hci7: command tx timeout 10:21:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 498.429732][ T8760] Bluetooth: hci6: Frame reassembly failed (-84) [ 498.540432][ T9644] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e) [ 498.856607][ T3679] Bluetooth: hci8: command 0x1003 tx timeout [ 498.856826][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 499.000161][ T11] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 499.488852][ T9653] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 10:21:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 499.816832][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 499.823350][ T3679] Bluetooth: hci9: command 0x1003 tx timeout [ 499.998543][ T9656] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3000000) [ 500.456884][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 500.462980][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff00) [ 500.536860][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:21:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2000000) 10:21:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x48) [ 501.016738][ T3679] Bluetooth: hci8: command 0x1003 tx timeout [ 501.016907][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 501.099867][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.106187][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.198609][ T1090] Bluetooth: hci8: Frame reassembly failed (-84) [ 501.251664][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 501.260007][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -49 10:21:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee", 0x2b}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f040000004801001000", 0x1d}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee", 0x2b}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 502.696961][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 502.703412][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 502.706912][ T3679] Bluetooth: hci7: command 0x1003 tx timeout [ 502.709541][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1000000) 10:21:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4000000) [ 502.863856][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 502.871067][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5000000) 10:21:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2000000) [ 503.071068][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 503.078244][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6000000) 10:21:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4c) [ 503.256802][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 503.267579][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 503.278751][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7000000) 10:21:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee", 0x2b}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 503.430233][ T1090] Bluetooth: hci6: Frame reassembly failed (-84) [ 503.554606][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 503.561971][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf000000) [ 503.691144][ T11] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x48) [ 503.929804][ T11] Bluetooth: hci9: Frame reassembly failed (-84) 10:21:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000", 0x32}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3000000) [ 505.176716][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 505.182967][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:21:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000", 0x32}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x68) [ 505.496738][ T6366] Bluetooth: hci6: command 0x1003 tx timeout [ 505.502932][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e000000) [ 505.736876][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 505.743381][ T3689] Bluetooth: hci8: command 0x1003 tx timeout 10:21:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf000000) [ 505.976722][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 505.976749][ T3688] Bluetooth: hci9: command 0x1003 tx timeout [ 506.095086][ T1090] Bluetooth: hci9: Frame reassembly failed (-84) [ 506.103556][ T1090] Bluetooth: hci9: Frame reassembly failed (-84) 10:21:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000", 0x32}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000", 0x36}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4000000) [ 507.336625][ T3684] Bluetooth: hci7: command 0x1003 tx timeout [ 507.336805][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 507.534130][ T11] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6c) [ 507.656781][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 507.748416][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 507.757197][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x74) 10:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7a) [ 507.878547][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 507.886147][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 507.896730][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 507.897213][ T3688] Bluetooth: hci8: command 0x1003 tx timeout 10:21:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f000000) [ 508.074003][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 508.081581][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff00) 10:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x300) [ 508.142849][ T3652] Bluetooth: hci9: Opcode 0x1003 failed: -110 10:21:18 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000", 0x36}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 508.254062][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 508.261853][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x500) 10:21:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff00) [ 508.549130][ T3655] Bluetooth: hci9: sending frame failed (-49) [ 508.556364][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -49 10:21:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5000000) 10:21:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000", 0x36}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000", 0x36}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 509.577846][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 509.641603][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 509.649580][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfeffffff) 10:21:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6000000) [ 510.136662][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 510.142787][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 510.193650][ T8760] Bluetooth: hci7: Frame reassembly failed (-84) [ 510.324028][ T8760] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x600) [ 510.456843][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 510.466016][ T6365] Bluetooth: hci6: command tx timeout 10:21:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000", 0x36}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 510.680827][ T55] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7000000) [ 512.216734][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 512.223161][ T6365] Bluetooth: hci7: command 0x1003 tx timeout 10:21:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff000000) [ 512.371603][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 512.378021][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 512.384046][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 512.392259][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf000000) 10:21:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 512.626355][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 512.634033][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 512.642564][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 512.649995][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x700) [ 512.700852][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e000000) 10:21:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xffffff7f) 10:21:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd0000000000000072", 0x38}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 512.918502][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 512.925657][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 512.943690][ T5864] Bluetooth: hci8: Frame reassembly failed (-84) [ 512.963955][ T5864] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f000000) 10:21:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 513.160747][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 513.169107][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfeffffff) [ 513.375981][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 513.383149][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff000000) [ 513.508030][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 513.515662][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfffffffe) 10:21:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 513.706698][ T55] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 513.944911][ T9847] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfeffffff) 10:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xa00) 10:21:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 514.856700][ T3689] Bluetooth: hci6: command 0x1003 tx timeout [ 514.862788][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 514.940978][ T3655] Bluetooth: hci6: sending frame failed (-49) [ 514.957825][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfffffffe) 10:21:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xb98) [ 515.016692][ T3689] Bluetooth: hci8: command 0x1003 tx timeout [ 515.022940][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 515.140478][ T1090] Bluetooth: hci6: Frame reassembly failed (-84) [ 515.149642][ T9861] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x303200, 0x0) syz_open_pts(r0, 0x40000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x8, 0x4, 0xf7, 0xfffffffd, 0x10, "ff3c992a028117b5ade7bfc005af55e5464869"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x8b343b2803d3560c, 0x40) [ 515.736833][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 515.743252][ T6365] Bluetooth: hci7: command 0x1003 tx timeout 10:21:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x303200, 0x0) syz_open_pts(r0, 0x40000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x8, 0x4, 0xf7, 0xfffffffd, 0x10, "ff3c992a028117b5ade7bfc005af55e5464869"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat(r2, &(0x7f0000000140)='./file0\x00', 0x8b343b2803d3560c, 0x40) 10:21:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x303200, 0x0) syz_open_pts(r0, 0x40000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x8, 0x4, 0xf7, 0xfffffffd, 0x10, "ff3c992a028117b5ade7bfc005af55e5464869"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat(r2, &(0x7f0000000140)='./file0\x00', 0x8b343b2803d3560c, 0x40) [ 516.067353][ T9874] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) [ 516.279150][ T5864] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 516.616590][ T3688] Bluetooth: hci9: command 0x1003 tx timeout [ 516.616726][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 10:21:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 516.847479][ T9883] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 517.060238][ T9890] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 517.177147][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 517.183201][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 517.256765][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 517.257063][ T3684] Bluetooth: hci8: command 0x1003 tx timeout 10:21:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xc6c) 10:21:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x80000000, 0x4) close(r1) dup(r1) [ 517.421091][ T1090] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async, rerun: 32) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (rerun: 32) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x80000000, 0x4) (rerun: 64) close(r1) dup(r1) 10:21:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x80000000, 0x4) close(r1) dup(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x80000000, 0x4) (async) close(r1) (async) dup(r1) (async) 10:21:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:27 executing program 0: timer_create(0x7, &(0x7f0000000000)={0x0, 0x26, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 518.139272][ T9916] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 518.182331][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 518.189826][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) (async) 10:21:28 executing program 0: timer_create(0x7, &(0x7f0000000000)={0x0, 0x26, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 518.296725][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 518.371836][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 518.378959][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:28 executing program 0: timer_create(0x7, &(0x7f0000000000)={0x0, 0x26, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) timer_create(0x7, &(0x7f0000000000)={0x0, 0x26, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 518.483584][ T9923] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.509326][ T5864] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf00) 10:21:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:29 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 519.496841][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 519.504970][ T6365] Bluetooth: hci6: command tx timeout [ 519.580560][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 519.587498][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e00) [ 519.632712][ T9944] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.667113][ T9945] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) 10:21:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 520.551450][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 520.558118][ T6366] Bluetooth: hci7: command 0x1003 tx timeout 10:21:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:30 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0xc3, {{0xa, 0x4e20, 0x6, @mcast2, 0x3f}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) 10:21:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 520.616759][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 520.624987][ T6366] Bluetooth: hci8: command tx timeout [ 520.751333][ T9962] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 520.787711][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 520.794950][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0xad5, 0x7f, 0x8, 0xa9, "6c1618fbba5c28c9df006a6235421f4f553830", 0x3, 0x80}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) 10:21:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 520.994840][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 521.001929][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0xad5, 0x7f, 0x8, 0xa9, "6c1618fbba5c28c9df006a6235421f4f553830", 0x3, 0x80}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) 10:21:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1f00) 10:21:31 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 521.816684][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 521.822745][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 521.917654][ T9984] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 521.947143][ T5864] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e00) 10:21:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:32 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0xc3, {{0xa, 0x4e20, 0x6, @mcast2, 0x3f}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) [ 522.833340][ T9992] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 522.856741][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 522.862928][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:21:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0xad5, 0x7f, 0x8, 0xa9, "6c1618fbba5c28c9df006a6235421f4f553830", 0x3, 0x80}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) [ 523.256750][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 523.263202][ T6365] Bluetooth: hci7: command 0x1003 tx timeout 10:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404080, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r4 = open(&(0x7f0000000180)='./file0\x00', 0x98441, 0x8) ioctl$TCXONC(r4, 0x540a, 0x2) 10:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404080, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r4 = open(&(0x7f0000000180)='./file0\x00', 0x98441, 0x8) ioctl$TCXONC(r4, 0x540a, 0x2) 10:21:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 523.754818][T10014] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2000) 10:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404080, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r4 = open(&(0x7f0000000180)='./file0\x00', 0x98441, 0x8) ioctl$TCXONC(r4, 0x540a, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404080, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) (async) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) open(&(0x7f0000000180)='./file0\x00', 0x98441, 0x8) (async) ioctl$TCXONC(r4, 0x540a, 0x2) (async) 10:21:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 523.976692][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 523.984540][ T6366] Bluetooth: hci6: command 0x1003 tx timeout 10:21:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xa19, 0x10000, 0x13, "1175d1a55637b44033a0e5f99ff4104d33279d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ff0f0000ff01810000000000003000"]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 524.142616][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 524.150506][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 524.296813][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 10:21:34 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0xc3, {{0xa, 0x4e20, 0x6, @mcast2, 0x3f}}}, 0x88) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) 10:21:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f00) 10:21:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xa19, 0x10000, 0x13, "1175d1a55637b44033a0e5f99ff4104d33279d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ff0f0000ff01810000000000003000"]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x13) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xa19, 0x10000, 0x13, "1175d1a55637b44033a0e5f99ff4104d33279d"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ff0f0000ff01810000000000003000"]) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x13) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:34 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 525.016817][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 525.024182][ T3684] Bluetooth: hci8: command tx timeout 10:21:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10bb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x6) (async, rerun: 64) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xa19, 0x10000, 0x13, "1175d1a55637b44033a0e5f99ff4104d33279d"}) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ff0f0000ff01810000000000003000"]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x13) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 525.143906][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 525.150803][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 525.235253][T10060] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:35 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4000) 10:21:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 525.362603][T10066] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 525.537006][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 525.554736][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 525.562214][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4800) [ 525.717590][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 525.725577][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4c00) [ 525.946065][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 525.954027][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6800) [ 526.166272][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 526.173404][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6c00) 10:21:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:36 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:36 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 526.464703][T10095] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 526.491443][T10094] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10bb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:37 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 527.336856][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 527.343172][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:21:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 527.485812][T10102] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10bb00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 527.576697][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 527.582876][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 527.692691][ T1090] Bluetooth: hci6: Frame reassembly failed (-84) [ 527.704798][T10112] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.765317][ T55] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6c0c) [ 528.376788][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 528.383038][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:21:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7400) [ 528.556653][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 528.563576][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 528.591029][T10125] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 528.735213][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 528.742427][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:38 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7a00) [ 528.931833][ T11] Bluetooth: hci8: Frame reassembly failed (-84) [ 528.951413][T10132] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 529.473180][T10137] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x2}}, './file0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0xfffffffa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 529.745013][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 529.753612][ T3312] Bluetooth: hci6: command tx timeout 10:21:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 529.816837][ T6366] Bluetooth: hci7: command 0x1003 tx timeout [ 529.826987][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 530.024262][T10150] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 530.611777][T10156] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:40 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x980b) [ 530.936767][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 530.943208][ T6364] Bluetooth: hci8: command 0x1003 tx timeout [ 531.066105][T10161] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 531.091164][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 531.098298][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xc089) 10:21:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x2}}, './file0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0xfffffffa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 531.708893][T10168] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x7fac) ioctl$KDADDIO(r2, 0x4b34, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 531.976661][ T6364] Bluetooth: hci6: command 0x1003 tx timeout [ 531.976991][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 532.142882][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 532.149869][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 532.166943][T10181] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x7fac) (async) ioctl$KDADDIO(r2, 0x4b34, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x7fac) ioctl$KDADDIO(r2, 0x4b34, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$TIOCSBRK(r1, 0x5427) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) (async) preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x7fac) (async) ioctl$KDADDIO(r2, 0x4b34, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 532.802213][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 532.809701][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x2}}, './file0\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000200), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0xfffffffa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x2}}, './file0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r3, &(0x7f0000000200), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000100)=0xfffffffa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 533.053944][T10205] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 533.131013][T10207] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff00) 10:21:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x106aea) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x81, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 533.336940][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 533.343400][ T6364] Bluetooth: hci7: command 0x1003 tx timeout 10:21:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x106aea) (async) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x81, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x20000) 10:21:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x106aea) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x81, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 10:21:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 534.035259][T10227] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) [ 534.160124][T10236] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 10:21:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 535.066370][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 535.074357][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 535.109046][T10253] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.244978][T10256] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x400000) 10:21:45 executing program 1: rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f0000000100), &(0x7f00000001c0), 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x2, 0x4d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 535.976798][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1000000) [ 536.154348][T10269] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 536.313551][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 536.322946][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2000000) 10:21:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 536.478224][T10279] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 537.094648][T10288] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 538.136716][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:21:48 executing program 1: rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f0000000100), &(0x7f00000001c0), 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x2, 0x4d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f0000000100), &(0x7f00000001c0), 0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x2, 0x4d032, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 538.376670][ T3688] Bluetooth: hci8: command 0x1003 tx timeout [ 538.376813][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 538.504464][ T8764] Bluetooth: hci6: Frame reassembly failed (-84) [ 538.512463][ T1090] Bluetooth: hci8: Frame reassembly failed (-84) [ 538.536683][ T3688] Bluetooth: hci7: command 0x1003 tx timeout [ 538.536836][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:21:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3000000) [ 538.575373][T10301] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 538.639960][T10310] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 538.659886][T10307] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 538.703554][T10302] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:21:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 539.520781][T10333] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.537604][T10332] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 540.536667][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 540.537039][ T3643] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 540.544773][ T3312] Bluetooth: hci8: command tx timeout 10:21:50 executing program 1: rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, &(0x7f0000000100), &(0x7f00000001c0), 0x8) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) mmap(&(0x7f0000400000/0x1000)=nil, 0x1000, 0x2, 0x4d032, 0xffffffffffffffff, 0x0) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) (async, rerun: 64) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40640, 0x0) dup(0xffffffffffffffff) open(&(0x7f0000000140)='./bus\x00', 0x48542, 0x0) r1 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000780)}, 0x21) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getpid() bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$ITER_CREATE(0x21, 0x0, 0xf69f4b2e09fc88c8) [ 540.704308][T10347] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.729251][T10345] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 540.744045][T10349] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 540.777171][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:21:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4000000) 10:21:50 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0xa0111, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x0, 0x10181, 0x0, {0x1}}, 0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) r2 = dup(r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x8) ioctl$TIOCCBRK(r1, 0x5428) 10:21:50 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0xa0111, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x0, 0x10181, 0x0, {0x1}}, 0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) r2 = dup(r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x8) ioctl$TIOCCBRK(r1, 0x5428) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0xa0111, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x0, 0x10181, 0x0, {0x1}}, 0x10000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) (async) dup(r1) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x8) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) [ 540.998629][ T5864] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:50 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0xa0111, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x0, 0x10181, 0x0, {0x1}}, 0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) r2 = dup(r1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x8) ioctl$TIOCCBRK(r1, 0x5428) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0xa0111, 0xffffffffffffffff, 0x0) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/104, 0x68}], 0x1, &(0x7f0000000280)=""/7, 0x7}, 0x0, 0x10181, 0x0, {0x1}}, 0x10000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) (async) dup(r1) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x8) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) [ 541.045321][T10360] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 541.211506][T10370] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:21:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101102) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009cc1e8c92c7becf", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) fsetxattr(r3, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='$\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) [ 541.408103][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 541.416115][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101102) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009cc1e8c92c7becf", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) fsetxattr(r3, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='$\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101102) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009cc1e8c92c7becf", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r3) (async) fsetxattr(r3, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='$\x00', 0x2, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) 10:21:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:51 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 541.635054][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 541.643612][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:21:51 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40640, 0x0) dup(0xffffffffffffffff) open(&(0x7f0000000140)='./bus\x00', 0x48542, 0x0) r1 = getpid() recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000780)}, 0x21) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getpid() bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$ITER_CREATE(0x21, 0x0, 0xf69f4b2e09fc88c8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40640, 0x0) (async) dup(0xffffffffffffffff) (async) open(&(0x7f0000000140)='./bus\x00', 0x48542, 0x0) (async) getpid() (async) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000780)}, 0x21) (async) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getpid() (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$ITER_CREATE(0x21, 0x0, 0xf69f4b2e09fc88c8) (async) 10:21:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101102) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009cc1e8c92c7becf", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) fsetxattr(r3, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='$\x00', 0x2, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101102) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009cc1e8c92c7becf", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r3) (async) fsetxattr(r3, &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='$\x00', 0x2, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) [ 541.791565][T10400] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.910848][T10404] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 541.981221][ T55] Bluetooth: hci7: Frame reassembly failed (-84) [ 542.102188][T10414] ptm ptm4: ldisc open failed (-12), clearing slot 4 10:21:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5000000) 10:21:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) (async, rerun: 64) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40640, 0x0) dup(0xffffffffffffffff) (async, rerun: 32) open(&(0x7f0000000140)='./bus\x00', 0x48542, 0x0) (rerun: 32) r1 = getpid() (async) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000780)}, 0x21) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getpid() (async, rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$ITER_CREATE(0x21, 0x0, 0xf69f4b2e09fc88c8) 10:21:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:52 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 543.016682][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 543.025474][ T6365] Bluetooth: hci6: command tx timeout [ 543.150010][T10431] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 543.193863][T10435] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/138) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) 10:21:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 543.426057][ T55] Bluetooth: hci8: Frame reassembly failed (-84) 10:21:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:53 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x3, "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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 544.056855][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 544.057099][ T3312] Bluetooth: hci7: command 0x1003 tx timeout [ 544.080511][T10445] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.237908][T10452] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6000000) 10:21:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x3, "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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x3, "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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 545.176709][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 545.250928][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 545.258296][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 545.379281][T10465] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 545.398108][T10471] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 545.445126][T10472] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7000000) 10:21:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async, rerun: 32) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80) (rerun: 32) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/138) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) 10:21:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x3, "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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 545.507447][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 545.520562][ T22] Bluetooth: hci8: command tx timeout [ 545.603510][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 545.610394][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:21:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xa000000) [ 545.850318][ T11] Bluetooth: hci6: Frame reassembly failed (-84) 10:21:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x204) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000100)=0x1c) dup(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x424280, 0x0) syz_open_pts(r2, 0x103000) 10:21:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x204) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000100)=0x1c) dup(r1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x424280, 0x0) syz_open_pts(r2, 0x103000) 10:21:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/138) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0x80) (async) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/138) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x13) (async) 10:21:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x204) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000100)=0x1c) dup(r1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x424280, 0x0) syz_open_pts(r2, 0x103000) [ 546.230530][ T8764] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x19, 0x2, 0x186, &(0x7f0000000100)}) [ 546.326347][T10503] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 546.452427][T10524] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x19, 0x2, 0x186, &(0x7f0000000100)}) [ 546.549248][T10530] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x19, 0x2, 0x186, &(0x7f0000000100)}) 10:21:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:21:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf000000) 10:21:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 547.911489][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 547.920619][ T22] Bluetooth: hci6: command tx timeout [ 548.020209][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 548.027149][ T3652] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 548.076115][T10563] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 10:21:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r2 = syz_open_dev$media(&(0x7f0000000100), 0x9, 0x40801) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@fd={0x4675, 0x8, 0x4, 0x4, 0x3, {0x0, 0xea60}, {0x0, 0xc, 0x3f, 0x5, 0x5, 0xc2, "4de3d663"}, 0x9, 0x4, {}, 0xffffffc0, 0x0, r1}) 10:21:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10000000) [ 548.296689][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 548.296714][ T6365] Bluetooth: hci7: command 0x1003 tx timeout [ 548.405142][ T55] Bluetooth: hci6: Frame reassembly failed (-84) [ 548.447763][T10574] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:21:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1e000000) [ 548.631388][ T6327] Bluetooth: hci7: Frame reassembly failed (-84) 10:21:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:21:58 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 549.091372][T10591] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 549.096926][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 549.101064][ T3687] Bluetooth: hci8: command 0x1003 tx timeout 10:21:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:21:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 549.262086][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 549.269662][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:21:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 549.485592][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 549.493086][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 549.512107][T10605] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 549.581231][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 549.589273][ T3643] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 549.612281][T10602] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:21:59 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x25, 0x3, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x7e, {{0xa, 0x4e24, 0xed3, @loopback, 0x1c4706d0}}, {{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x108) close(r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x387840, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$KDADDIO(r2, 0x400455c8, 0xffffffffffffffff) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xda, "4f9ac1dfcd4aef93139d749cc0646208180af1bda1469fcfb751387cde3abe49eb8118e002a2852c8219648d8d83e603cdf78f6d823536733ff7c80a1ed9a992c0486fe64d9fb23551d6d096417119857467d8d7536489af9d0319284655bf68097657f38fa91f23e26a010a3e4e1a20e6731b6791a2a42cf0b943efec7654464cd8181c32b4c2cf754d5d68c962c6f56943ebd5378c8ede54edd3516819bca56640bac07cb946cfc9663a691994c86cc851cb13b4438c5ddaa1a519974947ccdb1ec0b1b3dde9f17a71331ea5425a128fc9cfa382a604b6a5da"}, &(0x7f0000000000)=0xe2) 10:21:59 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket(0x25, 0x3, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x7e, {{0xa, 0x4e24, 0xed3, @loopback, 0x1c4706d0}}, {{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x108) close(r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x387840, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$KDADDIO(r2, 0x400455c8, 0xffffffffffffffff) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xda, "4f9ac1dfcd4aef93139d749cc0646208180af1bda1469fcfb751387cde3abe49eb8118e002a2852c8219648d8d83e603cdf78f6d823536733ff7c80a1ed9a992c0486fe64d9fb23551d6d096417119857467d8d7536489af9d0319284655bf68097657f38fa91f23e26a010a3e4e1a20e6731b6791a2a42cf0b943efec7654464cd8181c32b4c2cf754d5d68c962c6f56943ebd5378c8ede54edd3516819bca56640bac07cb946cfc9663a691994c86cc851cb13b4438c5ddaa1a519974947ccdb1ec0b1b3dde9f17a71331ea5425a128fc9cfa382a604b6a5da"}, &(0x7f0000000000)=0xe2) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) socket(0x25, 0x3, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x7e, {{0xa, 0x4e24, 0xed3, @loopback, 0x1c4706d0}}, {{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x108) (async) close(r0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x387840, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$VT_DISALLOCATE(r2, 0x5608) (async) ioctl$KDADDIO(r2, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xda, "4f9ac1dfcd4aef93139d749cc0646208180af1bda1469fcfb751387cde3abe49eb8118e002a2852c8219648d8d83e603cdf78f6d823536733ff7c80a1ed9a992c0486fe64d9fb23551d6d096417119857467d8d7536489af9d0319284655bf68097657f38fa91f23e26a010a3e4e1a20e6731b6791a2a42cf0b943efec7654464cd8181c32b4c2cf754d5d68c962c6f56943ebd5378c8ede54edd3516819bca56640bac07cb946cfc9663a691994c86cc851cb13b4438c5ddaa1a519974947ccdb1ec0b1b3dde9f17a71331ea5425a128fc9cfa382a604b6a5da"}, &(0x7f0000000000)=0xe2) (async) 10:21:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async, rerun: 32) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async, rerun: 32) r2 = syz_open_dev$media(&(0x7f0000000100), 0x9, 0x40801) (rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@fd={0x4675, 0x8, 0x4, 0x4, 0x3, {0x0, 0xea60}, {0x0, 0xc, 0x3f, 0x5, 0x5, 0xc2, "4de3d663"}, 0x9, 0x4, {}, 0xffffffc0, 0x0, r1}) 10:22:00 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) r1 = socket(0x25, 0x3, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x7e, {{0xa, 0x4e24, 0xed3, @loopback, 0x1c4706d0}}, {{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}}}, 0x108) (async) close(r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x387840, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$KDADDIO(r2, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCXONC(r2, 0x540a, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xda, "4f9ac1dfcd4aef93139d749cc0646208180af1bda1469fcfb751387cde3abe49eb8118e002a2852c8219648d8d83e603cdf78f6d823536733ff7c80a1ed9a992c0486fe64d9fb23551d6d096417119857467d8d7536489af9d0319284655bf68097657f38fa91f23e26a010a3e4e1a20e6731b6791a2a42cf0b943efec7654464cd8181c32b4c2cf754d5d68c962c6f56943ebd5378c8ede54edd3516819bca56640bac07cb946cfc9663a691994c86cc851cb13b4438c5ddaa1a519974947ccdb1ec0b1b3dde9f17a71331ea5425a128fc9cfa382a604b6a5da"}, &(0x7f0000000000)=0xe2) 10:22:00 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 550.456778][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 550.462850][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 550.627908][ T55] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1f000000) 10:22:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 550.697485][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 550.703942][ T3312] Bluetooth: hci7: command 0x1003 tx timeout 10:22:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 550.802254][T10647] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 550.826353][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 550.834043][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 550.871795][T10649] Bluetooth: hci7: Frame reassembly failed (-84) 10:22:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:22:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2a) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 551.286930][T10659] Bluetooth: hci7: Frame reassembly failed (-84) 10:22:01 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 551.827962][T10666] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 552.696804][ T6366] Bluetooth: hci6: command 0x1003 tx timeout [ 552.706828][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 552.946935][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 553.336711][ T3312] Bluetooth: hci7: command 0x1003 tx timeout [ 553.336764][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:22:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async) r2 = syz_open_dev$media(&(0x7f0000000100), 0x9, 0x40801) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@fd={0x4675, 0x8, 0x4, 0x4, 0x3, {0x0, 0xea60}, {0x0, 0xc, 0x3f, 0x5, 0x5, 0xc2, "4de3d663"}, 0x9, 0x4, {}, 0xffffffc0, 0x0, r1}) 10:22:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:04 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x20000000) 10:22:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 554.776674][ T3312] Bluetooth: hci6: command 0x1003 tx timeout [ 554.776694][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 554.863892][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 554.871127][ T3643] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 554.977868][T10687] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 555.063315][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 555.071145][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 555.260061][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 555.267905][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3ff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100f36df17dd31296cf2467d5f7dbf868dab0f49e08227663bd4bf078afffbfa03ac42f9db4d6d3a01ab71997a9e2c50bd9c9f1d5a8192673248cf742ec095b56e3b812c97193fdfaa86adb3e606f5c07811747ce67047720b8fcf53b026cd9", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x10, 0x15, 0xb9, &(0x7f0000000100)}) 10:22:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3ff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100f36df17dd31296cf2467d5f7dbf868dab0f49e08227663bd4bf078afffbfa03ac42f9db4d6d3a01ab71997a9e2c50bd9c9f1d5a8192673248cf742ec095b56e3b812c97193fdfaa86adb3e606f5c07811747ce67047720b8fcf53b026cd9", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x10, 0x15, 0xb9, &(0x7f0000000100)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3ff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100f36df17dd31296cf2467d5f7dbf868dab0f49e08227663bd4bf078afffbfa03ac42f9db4d6d3a01ab71997a9e2c50bd9c9f1d5a8192673248cf742ec095b56e3b812c97193fdfaa86adb3e606f5c07811747ce67047720b8fcf53b026cd9", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x10, 0x15, 0xb9, &(0x7f0000000100)}) (async) 10:22:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:05 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 556.856819][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 556.864916][ T3312] Bluetooth: hci6: command tx timeout 10:22:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3ff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100f36df17dd31296cf2467d5f7dbf868dab0f49e08227663bd4bf078afffbfa03ac42f9db4d6d3a01ab71997a9e2c50bd9c9f1d5a8192673248cf742ec095b56e3b812c97193fdfaa86adb3e606f5c07811747ce67047720b8fcf53b026cd9", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x10, 0x15, 0xb9, &(0x7f0000000100)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3ff) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)=ANY=[@ANYBLOB="0100f36df17dd31296cf2467d5f7dbf868dab0f49e08227663bd4bf078afffbfa03ac42f9db4d6d3a01ab71997a9e2c50bd9c9f1d5a8192673248cf742ec095b56e3b812c97193fdfaa86adb3e606f5c07811747ce67047720b8fcf53b026cd9", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x10, 0x15, 0xb9, &(0x7f0000000100)}) (async) 10:22:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3f000000) 10:22:06 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:06 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @remote}, {0x6, @multicast}, 0x40, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 'nr0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08386935f05ddf9629a83040000000f000000000"]) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/255, &(0x7f0000000280)=0xff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x15c000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) [ 556.936689][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:22:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffe) 10:22:06 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @remote}, {0x6, @multicast}, 0x40, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 'nr0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08386935f05ddf9629a83040000000f000000000"]) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/255, &(0x7f0000000280)=0xff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x15c000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) [ 557.065362][T10731] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.098013][T10718] ptm ptm2: ldisc open failed (-12), clearing slot 2 10:22:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x40000000) [ 557.242207][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 557.249220][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x48000000) [ 557.286614][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 557.294094][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:07 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @remote}, {0x6, @multicast}, 0x40, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 'nr0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08386935f05ddf9629a83040000000f000000000"]) (async) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/255, &(0x7f0000000280)=0xff) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x15c000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) 10:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffe) (async) [ 557.476784][ T5864] Bluetooth: hci6: Frame reassembly failed (-84) [ 557.598076][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 557.605358][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 557.683044][T10751] ptm ptm2: ldisc open failed (-12), clearing slot 2 10:22:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = dup(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) ioctl$FICLONE(r2, 0x40049409, r1) 10:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffe) (async) 10:22:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 558.019943][ T55] Bluetooth: hci8: Frame reassembly failed (-84) [ 558.083425][T10771] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:08 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 559.149551][T10793] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4c000000) [ 559.496858][ T6365] Bluetooth: hci6: command 0x1003 tx timeout [ 559.502902][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 559.681811][ T55] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 560.056746][ T3687] Bluetooth: hci8: command 0x1003 tx timeout [ 560.056859][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 560.062915][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:22:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/79, 0x69}, {&(0x7f0000000480)=""/193, 0xc1}], 0x6, 0xd9f, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xc6a1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:22:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = dup(r0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r2) ioctl$FICLONE(r2, 0x40049409, r1) [ 560.217368][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 560.225460][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 560.242347][T10808] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 560.302675][ T5864] Bluetooth: hci7: Frame reassembly failed (-84) [ 560.314321][ T5864] Bluetooth: hci7: Frame reassembly failed (-84) 10:22:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = dup(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) ioctl$FICLONE(r2, 0x40049409, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) dup(r0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r2) (async) ioctl$FICLONE(r2, 0x40049409, r1) (async) [ 560.420554][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 560.428733][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 560.507081][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 560.514059][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x80) [ 560.670927][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 560.678342][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x80) 10:22:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 561.225201][T10836] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x68000000) [ 561.736947][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:22:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 561.985981][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 561.993447][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6c000000) [ 562.125655][T10841] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 562.188536][ T8760] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/79, 0x69}, {&(0x7f0000000480)=""/193, 0xc1}], 0x6, 0xd9f, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0xc6a1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 562.376736][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 562.382076][ T6364] Bluetooth: hci7: command 0x1003 tx timeout [ 562.537581][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.543911][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.573837][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 562.581449][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/79, 0x69}, {&(0x7f0000000480)=""/193, 0xc1}], 0x6, 0xd9f, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xc6a1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/79, 0x69}, {&(0x7f0000000480)=""/193, 0xc1}], 0x6, 0xd9f, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0xc6a1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 562.757553][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 562.764764][ T3652] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x4, 0x7, 0x3ff, 0x8, 0x3, "80c9cf4ec62f8240ad4ff87cc9e5e31d081920"}) 10:22:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x80) (async) [ 562.937116][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:22:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 563.097450][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 563.106445][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 563.203405][T10872] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0xde6b819113cffed4, &(0x7f0000000380)={0x3, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x80000001}}, {{0xa, 0x4e20, 0x8, @remote, 0xfff}}}, 0x108) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x10001, 0x1, 0x4}) 10:22:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 563.434439][ T11] Bluetooth: hci8: Frame reassembly failed (-84) 10:22:13 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 564.164836][T10883] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6c0c0000) [ 564.216675][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 564.216690][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 10:22:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 564.347014][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 564.354202][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x74000000) 10:22:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 564.615302][ T6327] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:14 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 565.096751][ T3687] Bluetooth: hci7: command 0x1003 tx timeout [ 565.103100][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:22:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async, rerun: 64) preadv(r1, &(0x7f0000000280), 0x0, 0x5, 0x0) (rerun: 64) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x4, 0x7, 0x3ff, 0x8, 0x3, "80c9cf4ec62f8240ad4ff87cc9e5e31d081920"}) [ 565.143162][T10896] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 565.231029][ T5864] Bluetooth: hci7: Frame reassembly failed (-84) 10:22:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0xde6b819113cffed4, &(0x7f0000000380)={0x3, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x80000001}}, {{0xa, 0x4e20, 0x8, @remote, 0xfff}}}, 0x108) (async) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x10001, 0x1, 0x4}) [ 565.507330][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 565.513869][ T22] Bluetooth: hci8: command 0x1003 tx timeout 10:22:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 566.130631][T10918] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7a000000) [ 566.616747][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 566.623219][ T6366] Bluetooth: hci6: command 0x1003 tx timeout 10:22:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 566.688513][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 566.695836][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x89c00000) [ 566.831324][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 566.838672][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x97ffffff) 10:22:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9de"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x980b0000) [ 567.071827][T10936] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 567.200441][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 567.207909][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 10:22:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x4, 0x7, 0x3ff, 0x8, 0x3, "80c9cf4ec62f8240ad4ff87cc9e5e31d081920"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) (async) preadv(r1, &(0x7f0000000280), 0x0, 0x5, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x4, 0x7, 0x3ff, 0x8, 0x3, "80c9cf4ec62f8240ad4ff87cc9e5e31d081920"}) (async) [ 567.256746][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 567.259760][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:22:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf5ffffff) [ 567.491996][ T8760] Bluetooth: hci7: Frame reassembly failed (-84) [ 567.532375][T10944] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:22:17 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (async) close(r1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0xde6b819113cffed4, &(0x7f0000000380)={0x3, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x80000001}}, {{0xa, 0x4e20, 0x8, @remote, 0xfff}}}, 0x108) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x10001, 0x1, 0x4}) [ 567.742372][ T6366] Bluetooth: hci8: command 0x1003 tx timeout [ 567.746639][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:22:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 567.899828][ T8764] Bluetooth: hci8: Frame reassembly failed (-84) [ 568.033469][T10965] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:18 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 568.972602][T10972] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfdfdffff) [ 569.496721][ T3689] Bluetooth: hci7: command 0x1003 tx timeout [ 569.496776][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 569.507011][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 569.509321][ T3687] Bluetooth: hci6: command 0x1003 tx timeout 10:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:22:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 569.680050][ T11] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:22:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 10:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 569.896713][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 569.896757][ T6366] Bluetooth: hci8: command 0x1003 tx timeout 10:22:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 10:22:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 570.079215][T10997] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 570.235625][ T3652] Bluetooth: hci7: sending frame failed (-49) [ 570.242968][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) 10:22:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) [ 570.594437][T11008] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:22:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfdffffff) 10:22:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_io_uring_setup(0xadd, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x50000001) syz_io_uring_setup(0x3bbc, &(0x7f00000000c0)={0x0, 0x6541, 0x8, 0x0, 0x2e7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x6, 0xaf, 0x6c, 0x80, 0x1, 0x1, {0x2}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 10:22:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="3877b89fef6c39727fb2ebb1ebb283fb03807846768ff6cfb282200fefc376e286cd6462484e35dfbb45ee880f9d84eb8b9d46b33111d17b11f6482dc56e5aac388dbee99640d9d8ea2e97740d75c25395ae86e15726e52088543e6031e75c28b14ae3c0a2be9bde3514f9444ec0c2babcba7e0c9465c4b3333181635a9acea72cd324e473d016167a94cee00f4a5073c9e167bc19b2a2e58751c0ae4af55b0a4076963aca63e5d9308abca7d8e2b1fef2d3624a11ef24faf6015282b948c99347a218f480d4dfb8cdbbabc05e2c5d186991ebd0c2e408ffbc256531d48946b7aef3000000000000000000008587d1c8dd25841fa33ad815c87279ff325939ec880376c09decf8a83815cbf463ebbf1a1924a8b4f772df4f9eb0b4d8ce1253c316bb9e24456efc42ca673a113a373fbad03504f61da25fa8aee2c3fc24977a68e782e3c9aa7e99b9df58bb606561f7d30cdfd3fe4707a21e8197a0e99678485e4df858be6aa55d473cb51815d67ad94852207eff27eb533332508582667c26062023af69009cc1f98ee64bda5263afdd3908a887c655dae256e282d1416e19becf403be828048eea1c041ddefc8efcac7fcc447d891e7968fa0a636f25819b7513cf70b4c70b79511a60f8b0f4f24b8bf9bfd784c9c571f3c5d2a5e9dee111e5"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 571.736722][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 571.736922][ T6366] Bluetooth: hci6: command 0x1003 tx timeout [ 571.870718][ T3652] Bluetooth: hci6: sending frame failed (-49) [ 571.877641][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 571.902807][ T3652] Bluetooth: hci8: sending frame failed (-49) [ 571.910163][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfeffffff) [ 571.934893][T11030] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_io_uring_setup(0xadd, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x50000001) syz_io_uring_setup(0x3bbc, &(0x7f00000000c0)={0x0, 0x6541, 0x8, 0x0, 0x2e7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x6, 0xaf, 0x6c, 0x80, 0x1, 0x1, {0x2}}, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_io_uring_setup(0xadd, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x50000001) (async) syz_io_uring_setup(0x3bbc, &(0x7f00000000c0)={0x0, 0x6541, 0x8, 0x0, 0x2e7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x6, 0xaf, 0x6c, 0x80, 0x1, 0x1, {0x2}}, 0x7) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) [ 572.130280][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 572.165827][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 572.173060][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_io_uring_setup(0xadd, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x50000001) (async, rerun: 32) syz_io_uring_setup(0x3bbc, &(0x7f00000000c0)={0x0, 0x6541, 0x8, 0x0, 0x2e7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x6, 0xaf, 0x6c, 0x80, 0x1, 0x1, {0x2}}, 0x7) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 572.435091][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 572.442034][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSCTTY(r0, 0x540e, 0x8001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2c) [ 572.580156][ T3643] Bluetooth: hci8: sending frame failed (-49) [ 572.587068][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -49 10:22:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSCTTY(r0, 0x540e, 0x8001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x8001) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2c) (async) 10:22:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 10:22:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 572.771101][ T8760] Bluetooth: hci8: Frame reassembly failed (-84) [ 572.776997][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 572.777741][ T3687] Bluetooth: hci7: command 0x1003 tx timeout [ 572.791576][ T8760] Bluetooth: hci8: Frame reassembly failed (-84) [ 572.946880][T11063] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x6, 0x5, "a9c4d4de4e0b539cc82ae91163507fadf4ee1b", 0x400, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 573.102289][ T3643] Bluetooth: hci7: sending frame failed (-49) [ 573.110029][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 10:22:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x6, 0x5, "a9c4d4de4e0b539cc82ae91163507fadf4ee1b", 0x400, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x6, 0x5, "a9c4d4de4e0b539cc82ae91163507fadf4ee1b", 0x400, 0x8}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) (async) [ 573.506937][T11073] ptm ptm3: ldisc open failed (-12), clearing slot 3 10:22:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xff000000) 10:22:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:23 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 574.136581][ T22] Bluetooth: hci6: command 0x1003 tx timeout [ 574.137140][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 574.264342][T11090] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 574.312748][ T8760] Bluetooth: hci6: Frame reassembly failed (-84) 10:22:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x8001) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2c) [ 574.776648][ T6365] Bluetooth: hci8: command 0x1003 tx timeout [ 574.787686][ T3652] Bluetooth: hci8: Opcode 0x1003 failed: -110 10:22:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 575.227060][T11104] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x3) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xff, 0x0, 0x3, 0x6, 0x5, "a9c4d4de4e0b539cc82ae91163507fadf4ee1b", 0x400, 0x8}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) (async, rerun: 64) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) [ 575.416871][ T6365] Bluetooth: hci7: command 0x1003 tx timeout [ 575.423069][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 10:22:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfffffdfd) 10:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) dup3(r3, r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x1bc}, 0x1, 0xffffff7f0e000000}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 10:22:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "66c8411e54fcabda", "9861e92ba89731de3c01a4b05e38757e", "57da87fb", "1aab2f31e6b7414a"}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x986a1697de8d731, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 576.376676][ T6364] Bluetooth: hci6: command 0x1003 tx timeout [ 576.386637][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 576.486715][ T3643] Bluetooth: hci6: sending frame failed (-49) [ 576.493576][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 576.520452][T11125] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 577.656679][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 577.664524][ T6364] Bluetooth: hci7: command tx timeout [ 623.978446][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.984766][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.428074][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.434358][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.257499][ T28] INFO: task kworker/u5:6:3652 blocked for more than 143 seconds. [ 721.265349][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 721.281509][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.292768][ T28] task:kworker/u5:6 state:D stack:28184 pid: 3652 ppid: 2 flags:0x00004000 [ 721.302450][ T28] Workqueue: hci8 hci_power_on [ 721.307675][ T28] Call Trace: [ 721.310996][ T28] [ 721.313946][ T28] __schedule+0xa09/0x4f10 [ 721.318633][ T28] ? io_schedule_timeout+0x140/0x140 [ 721.323959][ T28] schedule+0xd2/0x1f0 [ 721.328080][ T28] schedule_preempt_disabled+0xf/0x20 [ 721.333481][ T28] __mutex_lock+0xa70/0x1350 [ 721.338258][ T28] ? hci_dev_do_open+0x25/0x70 [ 721.343052][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 721.348775][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.354807][ T28] hci_dev_do_open+0x25/0x70 [ 721.359476][ T28] hci_power_on+0x12e/0x630 [ 721.364016][ T28] ? hci_error_reset+0x130/0x130 [ 721.369020][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.375024][ T28] process_one_work+0x991/0x1610 [ 721.380044][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 721.385456][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 721.390455][ T28] ? _raw_spin_lock_irq+0x41/0x50 [ 721.395573][ T28] worker_thread+0x665/0x1080 [ 721.400319][ T28] ? process_one_work+0x1610/0x1610 [ 721.405553][ T28] kthread+0x2e9/0x3a0 [ 721.410681][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 721.416341][ T28] ret_from_fork+0x1f/0x30 [ 721.421272][ T28] [ 721.424402][ T28] INFO: task syz-executor.0:11095 blocked for more than 143 seconds. [ 721.432860][ T28] Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 721.440088][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.448824][ T28] task:syz-executor.0 state:D stack:27840 pid:11095 ppid: 3634 flags:0x00004004 [ 721.458216][ T28] Call Trace: [ 721.461512][ T28] [ 721.464462][ T28] __schedule+0xa09/0x4f10 [ 721.469061][ T28] ? io_schedule_timeout+0x140/0x140 [ 721.474373][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 721.480495][ T28] schedule+0xd2/0x1f0 [ 721.484595][ T28] schedule_timeout+0x1db/0x2a0 [ 721.489516][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 721.494741][ T28] ? __wait_for_common+0x36f/0x530 [ 721.500191][ T28] ? mark_held_locks+0x9f/0xe0 [ 721.504988][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 721.509980][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.515762][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 721.521831][ T28] __wait_for_common+0x378/0x530 [ 721.528858][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 721.534110][ T28] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 721.540731][ T28] ? lockdep_hardirqs_off+0x90/0xd0 [ 721.546000][ T28] __flush_work+0x56c/0xb10 [ 721.550650][ T28] ? queue_delayed_work_on+0x120/0x120 [ 721.556131][ T28] ? kasan_save_stack+0x2e/0x40 [ 721.564366][ T28] ? flush_workqueue_prep_pwqs+0x4f0/0x4f0 [ 721.572710][ T28] ? mark_held_locks+0x9f/0xe0 [ 721.577742][ T28] ? __cancel_work_timer+0x408/0x570 [ 721.583068][ T28] __cancel_work_timer+0x3f9/0x570 [ 721.588320][ T28] ? cancel_delayed_work+0x20/0x20 [ 721.593464][ T28] ? rcu_read_lock_sched_held+0x3a/0x70 [ 721.599136][ T28] ? trace_contention_end+0xea/0x150 [ 721.604463][ T28] ? __mutex_lock+0x231/0x1350 [ 721.609303][ T28] ? kasan_quarantine_put+0xf5/0x210 [ 721.614942][ T28] ? hci_dev_do_close+0x25/0x70 [ 721.619950][ T28] hci_dev_close_sync+0x88/0x1140 [ 721.625074][ T28] ? hci_dev_open_sync+0x2130/0x2130 [ 721.630538][ T28] ? kfree+0xe2/0x4d0 [ 721.634563][ T28] hci_dev_do_close+0x2d/0x70 [ 721.639987][ T28] hci_unregister_dev+0x1bf/0x540 [ 721.645048][ T28] hci_uart_tty_close+0x23c/0x290 [ 721.650181][ T28] ? hci_uart_close+0x70/0x70 [ 721.654883][ T28] tty_ldisc_close+0x110/0x190 [ 721.660056][ T28] tty_set_ldisc+0x214/0x680 [ 721.664683][ T28] tty_ioctl+0xae0/0x15e0 [ 721.669128][ T28] ? tty_fasync+0x390/0x390 [ 721.673669][ T28] ? __ct_user_exit+0xff/0x150 [ 721.678540][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 721.683426][ T28] ? __fget_files+0x26a/0x440 [ 721.688165][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 721.693140][ T28] ? tty_fasync+0x390/0x390 [ 721.697754][ T28] __x64_sys_ioctl+0x193/0x200 [ 721.702556][ T28] do_syscall_64+0x35/0xb0 [ 721.707068][ T28] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 721.712984][ T28] RIP: 0033:0x7f454f889199 [ 721.717837][ T28] RSP: 002b:00007f4550972168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.726275][ T28] RAX: ffffffffffffffda RBX: 00007f454f99bf60 RCX: 00007f454f889199 [ 721.734273][ T28] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 721.742605][ T28] RBP: 00007f454f8e313b R08: 0000000000000000 R09: 0000000000000000 [ 721.751271][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.759353][ T28] R13: 00007ffd73a1438f R14: 00007f4550972300 R15: 0000000000022000 [ 721.767417][ T28] [ 721.770511][ T28] [ 721.770511][ T28] Showing all locks held in the system: [ 721.778287][ T28] 1 lock held by rcu_tasks_kthre/12: [ 721.783581][ T28] #0: ffffffff8bd864f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 721.794138][ T28] 1 lock held by rcu_tasks_trace/13: [ 721.803147][ T28] #0: ffffffff8bd861f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 721.814188][ T28] 1 lock held by khungtaskd/28: [ 721.819500][ T28] #0: ffffffff8bd87040 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 721.829494][ T28] 1 lock held by klogd/2958: [ 721.834085][ T28] #0: ffff8880b9a39f18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 721.844045][ T28] 2 locks held by getty/3278: [ 721.848900][ T28] #0: ffff88814a1d3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 721.859394][ T28] #1: ffffc90002d162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0 [ 721.869585][ T28] 3 locks held by kworker/u5:6/3652: [ 721.874873][ T28] #0: ffff88807ab90138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610 [ 721.885085][ T28] #1: ffffc90003d4fda8 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610 [ 721.897212][ T28] #2: ffff888038521048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0x25/0x70 [ 721.906835][ T28] 3 locks held by syz-executor.0/11095: [ 721.912419][ T28] #0: ffff8880380491c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 721.922041][ T28] #1: ffff888038049098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x61/0xb0 [ 721.931512][ T28] #2: ffff888038521048 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x25/0x70 [ 721.941158][ T28] [ 721.943497][ T28] ============================================= [ 721.943497][ T28] [ 721.951950][ T28] NMI backtrace for cpu 1 [ 721.956290][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 721.965762][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 721.975827][ T28] Call Trace: [ 721.979114][ T28] [ 721.982057][ T28] dump_stack_lvl+0xcd/0x134 [ 721.986719][ T28] nmi_cpu_backtrace.cold+0x47/0x144 [ 721.992081][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 721.997298][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 722.003345][ T28] watchdog+0xc18/0xf50 [ 722.007530][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 722.013547][ T28] kthread+0x2e9/0x3a0 [ 722.017612][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 722.023271][ T28] ret_from_fork+0x1f/0x30 [ 722.027730][ T28] [ 722.031205][ T28] Sending NMI from CPU 1 to CPUs 0: [ 722.036562][ C0] NMI backtrace for cpu 0 [ 722.036573][ C0] CPU: 0 PID: 2951 Comm: syslogd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 722.036593][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 722.036603][ C0] RIP: 0033:0x7f35d7c58958 [ 722.036619][ C0] Code: 89 c4 48 39 c8 b9 01 00 00 00 0f 45 d1 85 d2 0f 85 dd fc ff ff 85 c0 0f 89 cd f9 ff ff e9 90 f6 ff ff 48 8b 84 24 90 00 00 00 <48> 8d 48 01 48 89 8c 24 90 00 00 00 0f b6 58 01 80 fb 2a 0f 84 1f [ 722.036637][ C0] RSP: 002b:00007ffc8f7cdcd0 EFLAGS: 00000216 [ 722.036651][ C0] RAX: 00007f35d7e6690b RBX: 000000000000002e RCX: 0000000000000001 [ 722.036663][ C0] RDX: 0000000000000000 RSI: 00007f35d7c57f7b RDI: 00007f35d7d68240 [ 722.036675][ C0] RBP: 00007ffc8f7ce200 R08: 00007f35d7d68040 R09: 00007f35d7d680c0 [ 722.036687][ C0] R10: 00007f35d7d67fc0 R11: 0000000000000000 R12: 0000000000000010 [ 722.036699][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc8f7ce338 [ 722.036710][ C0] FS: 00007f35d7b4c800 GS: 0000000000000000 [ 722.038216][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 722.144864][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-next-20220628-syzkaller #0 [ 722.154235][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 722.164286][ T28] Call Trace: [ 722.167575][ T28] [ 722.170507][ T28] dump_stack_lvl+0xcd/0x134 [ 722.175111][ T28] panic+0x2d7/0x636 [ 722.179034][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b [ 722.185023][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 722.190224][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 722.195606][ T28] ? watchdog.cold+0x130/0x158 [ 722.200384][ T28] watchdog.cold+0x141/0x158 [ 722.204979][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 722.210966][ T28] kthread+0x2e9/0x3a0 [ 722.215040][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 722.220675][ T28] ret_from_fork+0x1f/0x30 [ 722.225112][ T28] [ 722.228534][ T28] Kernel Offset: disabled [ 722.236790][ T28] Rebooting in 86400 seconds..