t$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2b41aa00, 0x3f, 0x4, 0x5, 0x1a, "57472211697384b4b49f0d8b6cb23e41be5aa6"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01f26b5f000000001a000000644d6803490b0273592ed88a7616841e4ddff874d1c9e870f18b62fcb2d736d514d40671de8ff7821d776c6d318d3eb8f52afabf41d3338ab869e628d831df54eff8619f7fa9866002899dae0fd8c7a180e4fcbf0e9f104de254553e4369d001b736e70f995c787e2d2844a008d8931ecbd2533a188405f3497b1f1839696193aada35b231e1f3c9ebd2b0d8", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000040)) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x3, 0x1ff, 0x7, 0xffff, 0xf, "9377a0363d167df8419800982d2eca6bfea73c"}) [ 572.458115][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 572.465555][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:31:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_kthread_work_execute_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnexthop={0x2c, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 16:31:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x68) 16:31:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 16:31:31 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:31:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2b41aa00, 0x3f, 0x4, 0x5, 0x1a, "57472211697384b4b49f0d8b6cb23e41be5aa6"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01f26b5f000000001a000000644d6803490b0273592ed88a7616841e4ddff874d1c9e870f18b62fcb2d736d514d40671de8ff7821d776c6d318d3eb8f52afabf41d3338ab869e628d831df54eff8619f7fa9866002899dae0fd8c7a180e4fcbf0e9f104de254553e4369d001b736e70f995c787e2d2844a008d8931ecbd2533a188405f3497b1f1839696193aada35b231e1f3c9ebd2b0d8", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x3, 0x1ff, 0x7, 0xffff, 0xf, "9377a0363d167df8419800982d2eca6bfea73c"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2b41aa00, 0x3f, 0x4, 0x5, 0x1a, "57472211697384b4b49f0d8b6cb23e41be5aa6"}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01f26b5f000000001a000000644d6803490b0273592ed88a7616841e4ddff874d1c9e870f18b62fcb2d736d514d40671de8ff7821d776c6d318d3eb8f52afabf41d3338ab869e628d831df54eff8619f7fa9866002899dae0fd8c7a180e4fcbf0e9f104de254553e4369d001b736e70f995c787e2d2844a008d8931ecbd2533a188405f3497b1f1839696193aada35b231e1f3c9ebd2b0d8", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) (async) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000040)) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x3, 0x1ff, 0x7, 0xffff, 0xf, "9377a0363d167df8419800982d2eca6bfea73c"}) (async) [ 572.675385][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 572.682986][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:31:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x6c) [ 572.811631][ T28] audit: type=1804 audit(1664037091.321:14): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4157073716/syzkaller.1dyxgo/785/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 572.914921][ T28] audit: type=1804 audit(1664037091.361:15): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4157073716/syzkaller.1dyxgo/785/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 16:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x2f) r2 = syz_open_pts(r1, 0x501800) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x420902, 0x0) ioctl$KDDISABIO(r3, 0x4b37) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01c8a0aae70021000429480000000000000000000000000000004ab55b25786f967a4fe582a378f1d7b10633e713fb4a5775d1346c91bfcb88611330645a6279f1b3401d27e5ce182eda407fb23026db41a4e6ea2a41d67f44856f3ebb3bf5d61bff0b568a9b973a3fe39754ac9a939528beeecd6937d9b6e8a0b11e8a0a1116c6e4f3a4ed6402ac662cd0d54507a3ce709258fd67d3b43b8105d52bcc891650", @ANYRES16=r2, @ANYRES8=r0]) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r5, r4, 0x0, 0x80000000004) (async) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xfe) 16:31:32 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) dup(r1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x3000) 16:31:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_kthread_work_execute_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnexthop={0x2c, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 16:31:32 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0001, 0xd4c, '\x00', @p_u8=&(0x7f0000000000)=0x7}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x305300, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0xac8, 0x2014, 0x1}) 16:31:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) [ 574.379978][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:32 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) 16:31:33 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0001, 0xd4c, '\x00', @p_u8=&(0x7f0000000000)=0x7}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x305300, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0xac8, 0x2014, 0x1}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0001, 0xd4c, '\x00', @p_u8=&(0x7f0000000000)=0x7}}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x305300, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0xac8, 0x2014, 0x1}) (async) 16:31:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_kthread_work_execute_end\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnexthop={0x2c, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_kthread_work_execute_end\x00', r0}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnexthop={0x2c, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) (async) 16:31:33 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x38}, 0x1, 0x7}, 0x0) 16:31:33 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x8000, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9f0001, 0xd4c, '\x00', @p_u8=&(0x7f0000000000)=0x7}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x305300, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0xac8, 0x2014, 0x1}) 16:31:33 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) dup(r1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x3000) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) dup(r1) (async) dup(r0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x3000) (async) 16:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x74) [ 574.940147][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 575.001113][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 575.008046][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 16:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd0402, 0x0) r1 = syz_open_pts(r0, 0x10040) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x20, 0x3b8, 0x5f0b, 0x7, 0x5, "7bcad02c8aee1fc120e6bd69f85e0ee7f9acd7"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) 16:31:35 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) dup(r1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x3000) 16:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffc) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 16:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x7a) [ 576.540165][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 16:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd0402, 0x0) r1 = syz_open_pts(r0, 0x10040) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x20, 0x3b8, 0x5f0b, 0x7, 0x5, "7bcad02c8aee1fc120e6bd69f85e0ee7f9acd7"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) [ 576.638323][T14075] Bluetooth: hci6: Frame reassembly failed (-84) [ 576.667398][ T49] Bluetooth: hci8: sending frame failed (-49) [ 576.676394][ T42] Bluetooth: hci6: Frame reassembly failed (-84) [ 576.677863][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 16:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd0402, 0x0) r1 = syz_open_pts(r0, 0x10040) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x20, 0x3b8, 0x5f0b, 0x7, 0x5, "7bcad02c8aee1fc120e6bd69f85e0ee7f9acd7"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) 16:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0002, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x9, 0xfffffffb, 0x14, "6bee874189ade52e36d5aac2d9efe0d9cf3e32"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCNOTTY(r1, 0x5422) 16:31:35 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x80000) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) pidfd_getfd(r1, r2, 0x0) 16:31:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x10) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) [ 576.976249][ T3749] Bluetooth: hci7: Frame reassembly failed (-84) [ 577.045164][ T3646] Bluetooth: hci9: sending frame failed (-49) [ 577.053281][ T3659] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 577.117860][T14107] ptm ptm5: ldisc open failed (-12), clearing slot 5 16:31:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffc) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r2, 0x0) (async) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffc) (async) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) 16:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) pidfd_getfd(r1, r2, 0x0) 16:31:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x80000) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_setup(0x6a39, &(0x7f00000000c0)={0x0, 0xf496, 0x1, 0x2, 0x3b7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x7, 0x7, 0x6f0000, 0x9, 0x0, 0x0, {0x0, r2}}, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$KDADDIO(r3, 0x400455c8, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendfile(r7, r5, 0x0, 0x80000000004) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x3f, 0xffff, 0x8a, 0xb2d1, 0x734c, 0x377}) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 578.700162][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x80000) write$6lowpan_enable(r1, &(0x7f0000000080)='1', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) pidfd_getfd(r1, r2, 0x0) 16:31:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x6a39, &(0x7f00000000c0)={0x0, 0xf496, 0x1, 0x2, 0x3b7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x7, 0x7, 0x6f0000, 0x9, 0x0, 0x0, {0x0, r2}}, 0x5) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendfile(r7, r5, 0x0, 0x80000000004) (async) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x3f, 0xffff, 0x8a, 0xb2d1, 0x734c, 0x377}) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 579.020108][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 579.028149][ T5059] Bluetooth: hci7: command 0x1003 tx timeout [ 579.029994][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0002, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x9, 0xfffffffb, 0x14, "6bee874189ade52e36d5aac2d9efe0d9cf3e32"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCNOTTY(r1, 0x5422) 16:31:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04f52cbd7000fbdbdf250008000300"/30], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xbb}, 0x1c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x80010, r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ftruncate(r4, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/136, 0x88}], 0x7, 0x9, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '0'}, {0x20, '('}, {0x20, '/\x9e{$\x03$[]+'}, {0x20, '0'}, {0x20, '!]'}, {0x20, '/!'}], 0xa, "9a1e833b77b6278c5d99f10cb27242b95847e9a9f5d5d72aa93bc2f80755ad2c1b64d607c907e865ab6305f1248aebc60f489425a0b2126eb956"}, 0x5d) 16:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) 16:31:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 579.154351][ T49] Bluetooth: hci6: sending frame failed (-49) [ 579.155820][T14139] Bluetooth: hci6: Frame reassembly failed (-84) [ 579.167177][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) [ 579.334963][ T12] Bluetooth: hci8: Frame reassembly failed (-84) 16:31:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r2, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffc) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000337000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r2, 0x0) (async) ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffc) (async) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async) 16:31:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_setup(0x6a39, &(0x7f00000000c0)={0x0, 0xf496, 0x1, 0x2, 0x3b7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index=0x7, 0x7, 0x6f0000, 0x9, 0x0, 0x0, {0x0, r2}}, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$KDADDIO(r3, 0x400455c8, 0x8) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendfile(r7, r5, 0x0, 0x80000000004) (async) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x3f, 0xffff, 0x8a, 0xb2d1, 0x734c, 0x377}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) (async) [ 579.464305][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 579.472375][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 579.480250][T14163] Bluetooth: hci6: Frame reassembly failed (-84) 16:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x412040, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001400)={0x2, 0x2, 0x200, 0x6, 0x2, "cd8b61d2c29748d39ccb70e65b83e7d3306d9e"}) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/99, 0x63}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/119, 0x77}], 0x8, 0xffffffff, 0x2) 16:31:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x412040, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001400)={0x2, 0x2, 0x200, 0x6, 0x2, "cd8b61d2c29748d39ccb70e65b83e7d3306d9e"}) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/99, 0x63}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/119, 0x77}], 0x8, 0xffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x412040, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001400)={0x2, 0x2, 0x200, 0x6, 0x2, "cd8b61d2c29748d39ccb70e65b83e7d3306d9e"}) (async) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/99, 0x63}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/119, 0x77}], 0x8, 0xffffffff, 0x2) (async) 16:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f00002d1000/0x2000)=nil, 0x2000, 0x0, 0x28012, r1, 0x3b93f000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xd9d4f0d9d7faea6f, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x401) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 579.739553][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 579.747624][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 579.755626][T14179] Bluetooth: hci6: Frame reassembly failed (-84) 16:31:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0002, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x7, 0x3, 0x9, 0xfffffffb, 0x14, "6bee874189ade52e36d5aac2d9efe0d9cf3e32"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000140)) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xc) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 32) ioctl$TIOCNOTTY(r1, 0x5422) 16:31:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x412040, 0x0) (rerun: 32) ioctl$TCSETS(r1, 0x5402, &(0x7f0000001400)={0x2, 0x2, 0x200, 0x6, 0x2, "cd8b61d2c29748d39ccb70e65b83e7d3306d9e"}) (async) preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/76, 0x4c}, {&(0x7f0000001180)=""/99, 0x63}, {&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/119, 0x77}], 0x8, 0xffffffff, 0x2) 16:31:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:31:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:39 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04f52cbd7000fbdbdf250008000300"/30], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xbb}, 0x1c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x80010, r2, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ftruncate(r4, 0x8) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/136, 0x88}], 0x7, 0x9, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '0'}, {0x20, '('}, {0x20, '/\x9e{$\x03$[]+'}, {0x20, '0'}, {0x20, '!]'}, {0x20, '/!'}], 0xa, "9a1e833b77b6278c5d99f10cb27242b95847e9a9f5d5d72aa93bc2f80755ad2c1b64d607c907e865ab6305f1248aebc60f489425a0b2126eb956"}, 0x5d) 16:31:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f00002d1000/0x2000)=nil, 0x2000, 0x0, 0x28012, r1, 0x3b93f000) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xd9d4f0d9d7faea6f, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x401) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 581.340127][ T5059] Bluetooth: hci8: command 0x1003 tx timeout [ 581.340140][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 581.346373][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:31:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x279, 0x0, 0xca8, 0x20, 0x20000000, 0xb4, 0x7], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) [ 581.445150][T14191] Bluetooth: hci6: Frame reassembly failed (-84) [ 581.479048][ T3749] Bluetooth: hci6: Frame reassembly failed (-84) [ 581.505171][T14191] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 581.532840][T14199] ptm ptm6: ldisc open failed (-12), clearing slot 6 [ 581.544093][ T47] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f00002d1000/0x2000)=nil, 0x2000, 0x0, 0x28012, r1, 0x3b93f000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xd9d4f0d9d7faea6f, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x401) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f00002d1000/0x2000)=nil, 0x2000, 0x0, 0x28012, r1, 0x3b93f000) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xd9d4f0d9d7faea6f, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x401) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:31:40 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04f52cbd7000fbdbdf250008000300"/30], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xbb}, 0x1c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x80010, r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ftruncate(r4, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) preadv(r5, &(0x7f0000000680)=[{&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/57, 0x39}, {&(0x7f0000000480)=""/90, 0x5a}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/136, 0x88}], 0x7, 0x9, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '@'}, {0x20, '0'}, {0x20, '('}, {0x20, '/\x9e{$\x03$[]+'}, {0x20, '0'}, {0x20, '!]'}, {0x20, '/!'}], 0xa, "9a1e833b77b6278c5d99f10cb27242b95847e9a9f5d5d72aa93bc2f80755ad2c1b64d607c907e865ab6305f1248aebc60f489425a0b2126eb956"}, 0x5d) [ 581.557201][ T3659] Bluetooth: hci8: sending frame failed (-49) [ 581.564406][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x279, 0x0, 0xca8, 0x20, 0x20000000, 0xb4, 0x7], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x279, 0x0, 0xca8, 0x20, 0x20000000, 0xb4, 0x7], 0x7, 0x800}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) (async) 16:31:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x74) [ 581.678379][ T3659] Bluetooth: hci8: sending frame failed (-49) [ 581.685823][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:40 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0x65) [ 581.775280][T14229] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 583.500009][ T8189] Bluetooth: hci6: command 0x1003 tx timeout [ 583.500094][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) dup2(r0, 0xffffffffffffffff) 16:31:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2b41aa00, 0x3f, 0x4, 0x5, 0x1a, "57472211697384b4b49f0d8b6cb23e41be5aa6"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01f26b5f000000001a000000644d6803490b0273592ed88a7616841e4ddff874d1c9e870f18b62fcb2d736d514d40671de8ff7821d776c6d318d3eb8f52afabf41d3338ab869e628d831df54eff8619f7fa9866002899dae0fd8c7a180e4fcbf0e9f104de254553e4369d001b736e70f995c787e2d2844a008d8931ecbd2533a188405f3497b1f1839696193aada35b231e1f3c9ebd2b0d8", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f66696c653000"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000040)) ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0x3, 0x1ff, 0x7, 0xffff, 0xf, "9377a0363d167df8419800982d2eca6bfea73c"}) 16:31:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x279, 0x0, 0xca8, 0x20, 0x20000000, 0xb4, 0x7], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) 16:31:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r2 = syz_open_pts(r0, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r5, r4, 0x0, 0x80000000004) recvfrom$unix(r4, &(0x7f00000001c0)=""/116, 0x74, 0x10100, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x4, 0x0, 0xff, 0x200, 0x8, "f86b3eb501877c2e1e1974a6d9d51278cd2b9f"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:42 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0x65) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0x65) (async) 16:31:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 583.579954][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:31:42 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0x65) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) madvise(&(0x7f00001e4000/0x4000)=nil, 0x4000, 0x65) (async) [ 583.702314][ T42] Bluetooth: hci6: Frame reassembly failed (-84) 16:31:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) dup2(r0, 0xffffffffffffffff) 16:31:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:31:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x2f) r2 = syz_open_pts(r1, 0x501800) ioctl$TIOCSTI(r0, 0x5437, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x420902, 0x0) ioctl$KDDISABIO(r3, 0x4b37) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="01c8a0aae70021000429480000000000000000000000000000004ab55b25786f967a4fe582a378f1d7b10633e713fb4a5775d1346c91bfcb88611330645a6279f1b3401d27e5ce182eda407fb23026db41a4e6ea2a41d67f44856f3ebb3bf5d61bff0b568a9b973a3fe39754ac9a939528beeecd6937d9b6e8a0b11e8a0a1116c6e4f3a4ed6402ac662cd0d54507a3ce709258fd67d3b43b8105d52bcc891650", @ANYRES16=r2, @ANYRES8=r0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r5, r4, 0x0, 0x80000000004) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xfe) [ 583.836659][ T3659] Bluetooth: hci8: sending frame failed (-49) [ 583.843959][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) dup2(r0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) dup2(r0, 0xffffffffffffffff) (async) 16:31:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 32) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 16:31:42 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = inotify_init() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x6) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 583.947725][ T3659] Bluetooth: hci8: sending frame failed (-49) [ 583.954858][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/130) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000009673dc4fbce1000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x400005}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x10) [ 583.996843][ T3659] Bluetooth: hci9: sending frame failed (-49) [ 584.005198][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 584.024912][T14286] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 585.739868][ T5058] Bluetooth: hci6: command 0x1003 tx timeout [ 585.749924][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r2 = syz_open_pts(r0, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r5, r4, 0x0, 0x80000000004) recvfrom$unix(r4, &(0x7f00000001c0)=""/116, 0x74, 0x10100, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x4, 0x0, 0xff, 0x200, 0x8, "f86b3eb501877c2e1e1974a6d9d51278cd2b9f"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r5, r4, 0x0, 0x80000000004) (async) recvfrom$unix(r4, &(0x7f00000001c0)=""/116, 0x74, 0x10100, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x4, 0x0, 0xff, 0x200, 0x8, "f86b3eb501877c2e1e1974a6d9d51278cd2b9f"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:31:44 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}]}, 0x38}, 0x1, 0x7}, 0x0) 16:31:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/130) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000009673dc4fbce1000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x400005}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x10) 16:31:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = inotify_init() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000000) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x6) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) inotify_init() (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000000) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x6) (async) dup(r0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) 16:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x9, 0x14, "08c1a62a57a67505"}) 16:31:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 585.820017][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 585.827871][ T5058] Bluetooth: hci7: command tx timeout 16:31:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/130) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000009673dc4fbce1000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x400005}}, './file0\x00'}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x10) 16:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x9, 0x14, "08c1a62a57a67505"}) [ 585.974518][ T47] Bluetooth: hci7: Frame reassembly failed (-84) [ 585.993953][ T1133] Bluetooth: hci8: Frame reassembly failed (-84) 16:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x9, 0x14, "08c1a62a57a67505"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x9, 0x14, "08c1a62a57a67505"}) (async) 16:31:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$l2tp6(r1, &(0x7f0000000100)="e9813b98f640f1acfbddadfb08190267b8a2076021bcf10c2c8418cf426e15cd5cca7f2fa9a3a4db95c1889abbaad3d654acb77223b63b0e24dbb2f3b7c9d5efca0edd827c18d6d9b8a9e466db9d66ac13b62a37f3bcd17994fcabe4933763a61958dc2233663be88809df0f64dd81539b88e71b3c1c37130a86c8bbc609e69fbd456718746b9234b1c2833cbea2454b750464f4436bfb4fe1138e034abcda9fe182734735f1bc3c6fc84f684cede30ec48dc155bf57d0fb7ed646ce08d9b536d1f75f5734997294975f07ca60097fabb4ab1645b736b11122ce8e13401dac3ef6a95cb027ffa0", 0xe7, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xba, @loopback, 0x101, 0x4}, 0x20) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f0000877000/0x2000)=nil, 0x2000, 0x2000000, 0x28012, r2, 0xffffd000) ioctl$TCFLSH(r1, 0x540b, 0xfffffffffffffffb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat(r1, &(0x7f0000000240)='./file0\x00', 0x400, 0x0) [ 586.059636][T14321] ptm ptm3: ldisc open failed (-12), clearing slot 3 16:31:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = inotify_init() (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000000) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x6) (async) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 587.900259][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r2 = syz_open_pts(r0, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r5, r4, 0x0, 0x80000000004) recvfrom$unix(r4, &(0x7f00000001c0)=""/116, 0x74, 0x10100, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x4, 0x0, 0xff, 0x200, 0x8, "f86b3eb501877c2e1e1974a6d9d51278cd2b9f"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r5, r4, 0x0, 0x80000000004) (async) recvfrom$unix(r4, &(0x7f00000001c0)=""/116, 0x74, 0x10100, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x4, 0x0, 0xff, 0x200, 0x8, "f86b3eb501877c2e1e1974a6d9d51278cd2b9f"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:31:46 executing program 0: semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0x4, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)=""/70) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x8, 0x4, 0x1, 0x73, 0x1ff}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x9, 0x8001, 0x4, 0xfffffff7, 0x9, "202f701615d4ee12f26b93b05d511c446d6f1a", 0x485b}) syz_open_pts(r1, 0x40100) 16:31:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x9, 0xa0, 0x3f, 0x2, 0x3e, 0x8, 0x374, 0x40, 0x8, 0x0, 0x3, 0x38, 0x1, 0x2a5, 0x300, 0xff}, [{0x4, 0x9, 0x1ff, 0x8001, 0x2, 0x6, 0x40, 0x43}, {0x60000000, 0xfba, 0x30, 0x2a5, 0x3ff, 0x5, 0x3, 0x4}], "1d5264b9243d4f69a3e7cd17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6bc) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 16:31:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$l2tp6(r1, &(0x7f0000000100)="e9813b98f640f1acfbddadfb08190267b8a2076021bcf10c2c8418cf426e15cd5cca7f2fa9a3a4db95c1889abbaad3d654acb77223b63b0e24dbb2f3b7c9d5efca0edd827c18d6d9b8a9e466db9d66ac13b62a37f3bcd17994fcabe4933763a61958dc2233663be88809df0f64dd81539b88e71b3c1c37130a86c8bbc609e69fbd456718746b9234b1c2833cbea2454b750464f4436bfb4fe1138e034abcda9fe182734735f1bc3c6fc84f684cede30ec48dc155bf57d0fb7ed646ce08d9b536d1f75f5734997294975f07ca60097fabb4ab1645b736b11122ce8e13401dac3ef6a95cb027ffa0", 0xe7, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xba, @loopback, 0x101, 0x4}, 0x20) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f0000877000/0x2000)=nil, 0x2000, 0x2000000, 0x28012, r2, 0xffffd000) ioctl$TCFLSH(r1, 0x540b, 0xfffffffffffffffb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat(r1, &(0x7f0000000240)='./file0\x00', 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000100)="e9813b98f640f1acfbddadfb08190267b8a2076021bcf10c2c8418cf426e15cd5cca7f2fa9a3a4db95c1889abbaad3d654acb77223b63b0e24dbb2f3b7c9d5efca0edd827c18d6d9b8a9e466db9d66ac13b62a37f3bcd17994fcabe4933763a61958dc2233663be88809df0f64dd81539b88e71b3c1c37130a86c8bbc609e69fbd456718746b9234b1c2833cbea2454b750464f4436bfb4fe1138e034abcda9fe182734735f1bc3c6fc84f684cede30ec48dc155bf57d0fb7ed646ce08d9b536d1f75f5734997294975f07ca60097fabb4ab1645b736b11122ce8e13401dac3ef6a95cb027ffa0", 0xe7, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xba, @loopback, 0x101, 0x4}, 0x20) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mmap(&(0x7f0000877000/0x2000)=nil, 0x2000, 0x2000000, 0x28012, r2, 0xffffd000) (async) ioctl$TCFLSH(r1, 0x540b, 0xfffffffffffffffb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat(r1, &(0x7f0000000240)='./file0\x00', 0x400, 0x0) (async) 16:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 587.979953][ T5058] Bluetooth: hci7: command 0x1003 tx timeout [ 587.982271][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 588.060139][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:31:46 executing program 0: semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0x4, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)=""/70) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x8, 0x4, 0x1, 0x73, 0x1ff}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x9, 0x8001, 0x4, 0xfffffff7, 0x9, "202f701615d4ee12f26b93b05d511c446d6f1a", 0x485b}) (async) syz_open_pts(r1, 0x40100) [ 588.134210][ T47] Bluetooth: hci6: Frame reassembly failed (-84) 16:31:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x9, 0xa0, 0x3f, 0x2, 0x3e, 0x8, 0x374, 0x40, 0x8, 0x0, 0x3, 0x38, 0x1, 0x2a5, 0x300, 0xff}, [{0x4, 0x9, 0x1ff, 0x8001, 0x2, 0x6, 0x40, 0x43}, {0x60000000, 0xfba, 0x30, 0x2a5, 0x3ff, 0x5, 0x3, 0x4}], "1d5264b9243d4f69a3e7cd17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6bc) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x9, 0xa0, 0x3f, 0x2, 0x3e, 0x8, 0x374, 0x40, 0x8, 0x0, 0x3, 0x38, 0x1, 0x2a5, 0x300, 0xff}, [{0x4, 0x9, 0x1ff, 0x8001, 0x2, 0x6, 0x40, 0x43}, {0x60000000, 0xfba, 0x30, 0x2a5, 0x3ff, 0x5, 0x3, 0x4}], "1d5264b9243d4f69a3e7cd17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6bc) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) 16:31:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendto$l2tp6(r1, &(0x7f0000000100)="e9813b98f640f1acfbddadfb08190267b8a2076021bcf10c2c8418cf426e15cd5cca7f2fa9a3a4db95c1889abbaad3d654acb77223b63b0e24dbb2f3b7c9d5efca0edd827c18d6d9b8a9e466db9d66ac13b62a37f3bcd17994fcabe4933763a61958dc2233663be88809df0f64dd81539b88e71b3c1c37130a86c8bbc609e69fbd456718746b9234b1c2833cbea2454b750464f4436bfb4fe1138e034abcda9fe182734735f1bc3c6fc84f684cede30ec48dc155bf57d0fb7ed646ce08d9b536d1f75f5734997294975f07ca60097fabb4ab1645b736b11122ce8e13401dac3ef6a95cb027ffa0", 0xe7, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xba, @loopback, 0x101, 0x4}, 0x20) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f0000877000/0x2000)=nil, 0x2000, 0x2000000, 0x28012, r2, 0xffffd000) ioctl$TCFLSH(r1, 0x540b, 0xfffffffffffffffb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat(r1, &(0x7f0000000240)='./file0\x00', 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendto$l2tp6(r1, &(0x7f0000000100)="e9813b98f640f1acfbddadfb08190267b8a2076021bcf10c2c8418cf426e15cd5cca7f2fa9a3a4db95c1889abbaad3d654acb77223b63b0e24dbb2f3b7c9d5efca0edd827c18d6d9b8a9e466db9d66ac13b62a37f3bcd17994fcabe4933763a61958dc2233663be88809df0f64dd81539b88e71b3c1c37130a86c8bbc609e69fbd456718746b9234b1c2833cbea2454b750464f4436bfb4fe1138e034abcda9fe182734735f1bc3c6fc84f684cede30ec48dc155bf57d0fb7ed646ce08d9b536d1f75f5734997294975f07ca60097fabb4ab1645b736b11122ce8e13401dac3ef6a95cb027ffa0", 0xe7, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xba, @loopback, 0x101, 0x4}, 0x20) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mmap(&(0x7f0000877000/0x2000)=nil, 0x2000, 0x2000000, 0x28012, r2, 0xffffd000) (async) ioctl$TCFLSH(r1, 0x540b, 0xfffffffffffffffb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat(r1, &(0x7f0000000240)='./file0\x00', 0x400, 0x0) (async) 16:31:46 executing program 1: futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x1, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 588.276966][ T56] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:46 executing program 0: semop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0x4, 0x1000}, {0x1, 0x2, 0x1000}], 0x2) (async) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)=""/70) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x8, 0x4, 0x1, 0x73, 0x1ff}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x9, 0x8001, 0x4, 0xfffffff7, 0x9, "202f701615d4ee12f26b93b05d511c446d6f1a", 0x485b}) syz_open_pts(r1, 0x40100) [ 588.453947][T14416] Bluetooth: hci8: Frame reassembly failed (-84) [ 588.466084][T14403] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 588.474314][ T42] Bluetooth: hci8: Frame reassembly failed (-84) 16:31:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfbd, 0x7fff, 0x5, 0x5, 0x18, "e397e6456d04d1fafce54f697ee8caea630d6d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:48 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0x9, 0xa0, 0x3f, 0x2, 0x3e, 0x8, 0x374, 0x40, 0x8, 0x0, 0x3, 0x38, 0x1, 0x2a5, 0x300, 0xff}, [{0x4, 0x9, 0x1ff, 0x8001, 0x2, 0x6, 0x40, 0x43}, {0x60000000, 0xfba, 0x30, 0x2a5, 0x3ff, 0x5, 0x3, 0x4}], "1d5264b9243d4f69a3e7cd17", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6bc) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 16:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x1, 0x40000) close_range(r1, r2, 0x0) 16:31:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x80000000, 0x3, 0x5, 0x81, 0x14, "b6ebe7bb87d5e7390c5eb01ac763fe33afa137"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x7f, 0x0, 0xffff, 0xfff}) [ 590.140001][ T3692] Bluetooth: hci6: command 0x1003 tx timeout [ 590.140093][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 590.207797][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 590.215817][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:31:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x1, 0x40000) close_range(r1, r2, 0x0) 16:31:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x80000000, 0x3, 0x5, 0x81, 0x14, "b6ebe7bb87d5e7390c5eb01ac763fe33afa137"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x7f, 0x0, 0xffff, 0xfff}) [ 590.300106][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x80000000, 0x3, 0x5, 0x81, 0x14, "b6ebe7bb87d5e7390c5eb01ac763fe33afa137"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000100)={0x7f, 0x0, 0xffff, 0xfff}) [ 590.386314][ T3659] Bluetooth: hci7: sending frame failed (-49) [ 590.394707][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:31:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x1, 0x40000) close_range(r1, r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x1, 0x40000) (async) close_range(r1, r2, 0x0) (async) [ 590.469940][ T5058] Bluetooth: hci8: command 0x1003 tx timeout [ 590.476207][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 590.503907][ T42] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:49 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x20, 0x0, 0x2, 0x4, 0x2, 0x3, 0x5be, 0x1c, 0x40, 0x0, 0x7, 0x9, 0x38, 0x2002, 0xce, 0x1000, 0xe10}, [{0x1, 0x4, 0xaf, 0x2000000000000000, 0x100, 0x8, 0x1004, 0x1}, {0x4, 0xffff, 0xd6c, 0x0, 0x5, 0x8001, 0x0, 0x3f}], "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"}, 0x2ef) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:49 executing program 1: futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x1, 0x2) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:31:49 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x20, 0x0, 0x2, 0x4, 0x2, 0x3, 0x5be, 0x1c, 0x40, 0x0, 0x7, 0x9, 0x38, 0x2002, 0xce, 0x1000, 0xe10}, [{0x1, 0x4, 0xaf, 0x2000000000000000, 0x100, 0x8, 0x1004, 0x1}, {0x4, 0xffff, 0xd6c, 0x0, 0x5, 0x8001, 0x0, 0x3f}], "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"}, 0x2ef) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x20, 0x0, 0x2, 0x4, 0x2, 0x3, 0x5be, 0x1c, 0x40, 0x0, 0x7, 0x9, 0x38, 0x2002, 0xce, 0x1000, 0xe10}, [{0x1, 0x4, 0xaf, 0x2000000000000000, 0x100, 0x8, 0x1004, 0x1}, {0x4, 0xffff, 0xd6c, 0x0, 0x5, 0x8001, 0x0, 0x3f}], "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"}, 0x2ef) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) [ 590.547724][ T42] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfbd, 0x7fff, 0x5, 0x5, 0x18, "e397e6456d04d1fafce54f697ee8caea630d6d"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:50 executing program 0: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x20, 0x0, 0x2, 0x4, 0x2, 0x3, 0x5be, 0x1c, 0x40, 0x0, 0x7, 0x9, 0x38, 0x2002, 0xce, 0x1000, 0xe10}, [{0x1, 0x4, 0xaf, 0x2000000000000000, 0x100, 0x8, 0x1004, 0x1}, {0x4, 0xffff, 0xd6c, 0x0, 0x5, 0x8001, 0x0, 0x3f}], "ea7188a0cb682226ad4982bcb36f6cdb1ecec42be31e5bdc0000000000000001d8441ed0e768bfbf6e520400dddf850b2c771600384e10134d809dfb75ff8b5a0bc1491cc03a7f9a3df0b04a60d787476ffebe6a6e5d484934a8fbbad6721009fa5ea72f51527f51b2e7c004bd60d085cb721966e4593b42a5e988fcd9d14effb16fac1e69e96d2892dd8704b421feb72238201fd1c47c64edc9fcf72cbabb93d9b1ebf8b3412428d38dbac31860999c5acbac92a9552ff22db70b0758a8184d91d64caac0d5aeae12b6aedc50f853cee52983a84ce7cfe6d7e8c822365bb0cb1865ee0e344815bfbb37baaa27e8a9c34441aed6c84414f9655af141a403ba23ac6c32c3813edae5a76f9064d22b5b180247340793ab0afba205afb5ee460c45232c85f832e15a74df9035d6102bb255ab1dcb40593f62c817b20b09bb9513e6ad906d0fc0f5f08e598e3762b5f6b53abe307576c949f8387b9c99fe142c850c635d87c6aba81c07b88284065362b85f29b364dd3b4b5b85fdcf69f5e0ff55d66332d19ba10015db3afb561197c285c8fad7509142063f5f227b0000000000d6935bbca23c9d523d9a6f8743f123d4c34177782516728640200f479b93688de3849f98fe80b8eee4b9c9d0ca5ec9a5f6a36439deb36e1946c5d12d703573c55dc15dd44e7e69931b9983cad5262e0dbc5e9a4bdb7f997b0f94e299c299db84c1a9d4b028562234e5c4ba3d93fb5e49bc8a3f62f6c83ab360550aaddebc414d54ef6fa0749d495a0f5d686a43dd7b9c33be53847156befd2e2ccca799412a14"}, 0x2ef) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:50 executing program 4: r0 = socket(0xb, 0x0, 0x8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/72) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xe200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)=0x7) 16:31:50 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x88000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1c04c018}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740000002e00000126bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000f000a0007000e000e0008000b000000000008000b000300000063000b000400000008000b00063a3ab5120100000008000b000800000008000b000700000008000b00feffffa13cff08000b006e00000008000b000200000008000b000100"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x240080d4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000700)) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000100)={0x7, 0x3fa, 0x0, 0x80, 0x6, [{0x10000, 0x400, 0x2, '\x00', 0x202}, {0x4, 0x0, 0x3, '\x00', 0x200}, {0x80e, 0x800, 0x1ffe00000000, '\x00', 0x2200}, {0x7, 0x5, 0x3f, '\x00', 0x1008}, {0x9, 0xfffffffffffffff7, 0x1, '\x00', 0x200}, {0x6, 0x9, 0x8001, '\x00', 0x209}]}) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r9, r8, 0x0, 0x80000000004) syz_io_uring_submit(r6, 0x0, &(0x7f0000000a00)=@IORING_OP_STATX={0x15, 0x0, 0x0, r8, &(0x7f00000008c0), &(0x7f00000009c0)='./file0/file0\x00', 0x7ff, 0x4000}, 0xfff) write$uinput_user_dev(r5, &(0x7f0000000280)={'syz0\x00', {0xd0e7, 0x0, 0x7, 0x8}, 0x4f, [0x15bf, 0x5, 0x30000000, 0x1000, 0x5, 0x101, 0x7, 0x3, 0x7f, 0xa5ba, 0x7fff, 0x6, 0x3, 0x2, 0x3, 0x0, 0x80, 0x633cb265, 0x6, 0x400, 0x8a, 0x2, 0x5, 0x8, 0x6, 0x0, 0x80, 0x1, 0x1f, 0x200, 0xdd, 0x3e, 0x6, 0x1f, 0x3, 0x0, 0x2, 0xb592, 0x200, 0x1, 0x6bb4, 0x1, 0x7, 0xffffffff, 0xffffff49, 0x1, 0x8, 0xfff, 0x2, 0x400, 0x4, 0x9, 0x5, 0x200, 0x2, 0x9, 0x1, 0x8, 0x4, 0x2, 0x3, 0x4, 0x4, 0x1], [0x7, 0x9, 0x200, 0x80000000, 0x4800, 0x1, 0xe103, 0x8, 0x1, 0x3, 0x4, 0x2, 0x9, 0x80000001, 0x5, 0x3, 0x1, 0x2, 0x6639fae2, 0x9, 0x4, 0x4, 0x80, 0xbda5, 0x21a, 0x596, 0x4d203960, 0x4564, 0x7, 0x4, 0x40, 0x7, 0x5, 0x6, 0x20, 0xb25, 0x28d, 0x6, 0x40, 0x20, 0x4, 0x6, 0x1, 0x7, 0x3, 0x4, 0x5, 0x1, 0x81, 0x7fffffff, 0x6, 0x1ffc, 0x6, 0x800, 0x3, 0x1, 0x4, 0x5b7, 0xfff, 0x1, 0xfffffffc, 0x8, 0x4, 0x8], [0xffff8000, 0x1, 0x9, 0xc1fc, 0x4, 0x5, 0x1, 0x3, 0x7, 0x9, 0x6, 0x4, 0x1, 0x40, 0x8001, 0x0, 0x8, 0x3, 0x400, 0x9, 0x38, 0x6, 0x1ff, 0xfffffffd, 0x0, 0xffffff3c, 0x5, 0x7ff, 0x1, 0x0, 0x10001, 0x1, 0x9, 0x9, 0x6, 0x67, 0x200, 0xa183, 0xe6a0, 0xcdd1, 0x9, 0x10000, 0x7, 0x1, 0x7c, 0x7fff, 0x7, 0xff, 0x8, 0x9, 0xf1ca, 0x7f, 0x2, 0x1ff, 0x1, 0x9, 0x8, 0x0, 0x4, 0x8, 0x3, 0x8, 0x4ef9, 0x6], [0x7, 0x7, 0x8, 0x6, 0x5, 0x6, 0x7, 0x6, 0x400, 0x800, 0x2, 0x5, 0x6, 0x3ff, 0x0, 0x1, 0x7, 0x4, 0x7c, 0x0, 0x200, 0x7, 0x3, 0x3, 0xffffff17, 0x3, 0x1, 0x0, 0xfb, 0x7fffffff, 0x5, 0x9, 0xffff, 0x9, 0x1, 0x6, 0x200, 0x8, 0x1, 0xa51, 0x2, 0x2, 0x0, 0xfffffff7, 0x2, 0x956f, 0x2, 0x800, 0x9, 0x1f, 0x10000, 0xa3, 0x400, 0x2, 0x3, 0x6, 0x3, 0x80, 0x983b, 0x1a, 0x0, 0x800, 0x8000, 0xcd5]}, 0x45c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:31:50 executing program 1: futex(&(0x7f00000000c0)=0x1, 0x1, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x1, 0x2) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 592.300004][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 592.301275][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 592.382834][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 592.390217][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 592.464361][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 592.471821][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8ce89a549daaa370, 0x0) r1 = socket$isdn(0x22, 0x2, 0x23) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:51 executing program 4: r0 = socket(0xb, 0x0, 0x8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/72) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xe200, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)=0x7) 16:31:51 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x88000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1c04c018}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740000002e00000126bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000f000a0007000e000e0008000b000000000008000b000300000063000b000400000008000b00063a3ab5120100000008000b000800000008000b000700000008000b00feffffa13cff08000b006e00000008000b000200000008000b000100"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x240080d4) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000700)) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000100)={0x7, 0x3fa, 0x0, 0x80, 0x6, [{0x10000, 0x400, 0x2, '\x00', 0x202}, {0x4, 0x0, 0x3, '\x00', 0x200}, {0x80e, 0x800, 0x1ffe00000000, '\x00', 0x2200}, {0x7, 0x5, 0x3f, '\x00', 0x1008}, {0x9, 0xfffffffffffffff7, 0x1, '\x00', 0x200}, {0x6, 0x9, 0x8001, '\x00', 0x209}]}) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r9, r8, 0x0, 0x80000000004) (async) syz_io_uring_submit(r6, 0x0, &(0x7f0000000a00)=@IORING_OP_STATX={0x15, 0x0, 0x0, r8, &(0x7f00000008c0), &(0x7f00000009c0)='./file0/file0\x00', 0x7ff, 0x4000}, 0xfff) (async) write$uinput_user_dev(r5, &(0x7f0000000280)={'syz0\x00', {0xd0e7, 0x0, 0x7, 0x8}, 0x4f, [0x15bf, 0x5, 0x30000000, 0x1000, 0x5, 0x101, 0x7, 0x3, 0x7f, 0xa5ba, 0x7fff, 0x6, 0x3, 0x2, 0x3, 0x0, 0x80, 0x633cb265, 0x6, 0x400, 0x8a, 0x2, 0x5, 0x8, 0x6, 0x0, 0x80, 0x1, 0x1f, 0x200, 0xdd, 0x3e, 0x6, 0x1f, 0x3, 0x0, 0x2, 0xb592, 0x200, 0x1, 0x6bb4, 0x1, 0x7, 0xffffffff, 0xffffff49, 0x1, 0x8, 0xfff, 0x2, 0x400, 0x4, 0x9, 0x5, 0x200, 0x2, 0x9, 0x1, 0x8, 0x4, 0x2, 0x3, 0x4, 0x4, 0x1], [0x7, 0x9, 0x200, 0x80000000, 0x4800, 0x1, 0xe103, 0x8, 0x1, 0x3, 0x4, 0x2, 0x9, 0x80000001, 0x5, 0x3, 0x1, 0x2, 0x6639fae2, 0x9, 0x4, 0x4, 0x80, 0xbda5, 0x21a, 0x596, 0x4d203960, 0x4564, 0x7, 0x4, 0x40, 0x7, 0x5, 0x6, 0x20, 0xb25, 0x28d, 0x6, 0x40, 0x20, 0x4, 0x6, 0x1, 0x7, 0x3, 0x4, 0x5, 0x1, 0x81, 0x7fffffff, 0x6, 0x1ffc, 0x6, 0x800, 0x3, 0x1, 0x4, 0x5b7, 0xfff, 0x1, 0xfffffffc, 0x8, 0x4, 0x8], [0xffff8000, 0x1, 0x9, 0xc1fc, 0x4, 0x5, 0x1, 0x3, 0x7, 0x9, 0x6, 0x4, 0x1, 0x40, 0x8001, 0x0, 0x8, 0x3, 0x400, 0x9, 0x38, 0x6, 0x1ff, 0xfffffffd, 0x0, 0xffffff3c, 0x5, 0x7ff, 0x1, 0x0, 0x10001, 0x1, 0x9, 0x9, 0x6, 0x67, 0x200, 0xa183, 0xe6a0, 0xcdd1, 0x9, 0x10000, 0x7, 0x1, 0x7c, 0x7fff, 0x7, 0xff, 0x8, 0x9, 0xf1ca, 0x7f, 0x2, 0x1ff, 0x1, 0x9, 0x8, 0x0, 0x4, 0x8, 0x3, 0x8, 0x4ef9, 0x6], [0x7, 0x7, 0x8, 0x6, 0x5, 0x6, 0x7, 0x6, 0x400, 0x800, 0x2, 0x5, 0x6, 0x3ff, 0x0, 0x1, 0x7, 0x4, 0x7c, 0x0, 0x200, 0x7, 0x3, 0x3, 0xffffff17, 0x3, 0x1, 0x0, 0xfb, 0x7fffffff, 0x5, 0x9, 0xffff, 0x9, 0x1, 0x6, 0x200, 0x8, 0x1, 0xa51, 0x2, 0x2, 0x0, 0xfffffff7, 0x2, 0x956f, 0x2, 0x800, 0x9, 0x1f, 0x10000, 0xa3, 0x400, 0x2, 0x3, 0x6, 0x3, 0x80, 0x983b, 0x1a, 0x0, 0x800, 0x8000, 0xcd5]}, 0x45c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 592.540178][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfbd, 0x7fff, 0x5, 0x5, 0x18, "e397e6456d04d1fafce54f697ee8caea630d6d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfbd, 0x7fff, 0x5, 0x5, 0x18, "e397e6456d04d1fafce54f697ee8caea630d6d"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:31:51 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x88000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1c04c018}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="740000002e00000126bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000f000a0007000e000e0008000b000000000008000b000300000063000b000400000008000b00063a3ab5120100000008000b000800000008000b000700000008000b00feffffa13cff08000b006e00000008000b000200000008000b000100"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x240080d4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000700)) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000100)={0x7, 0x3fa, 0x0, 0x80, 0x6, [{0x10000, 0x400, 0x2, '\x00', 0x202}, {0x4, 0x0, 0x3, '\x00', 0x200}, {0x80e, 0x800, 0x1ffe00000000, '\x00', 0x2200}, {0x7, 0x5, 0x3f, '\x00', 0x1008}, {0x9, 0xfffffffffffffff7, 0x1, '\x00', 0x200}, {0x6, 0x9, 0x8001, '\x00', 0x209}]}) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r9, r8, 0x0, 0x80000000004) (async) syz_io_uring_submit(r6, 0x0, &(0x7f0000000a00)=@IORING_OP_STATX={0x15, 0x0, 0x0, r8, &(0x7f00000008c0), &(0x7f00000009c0)='./file0/file0\x00', 0x7ff, 0x4000}, 0xfff) (async) write$uinput_user_dev(r5, &(0x7f0000000280)={'syz0\x00', {0xd0e7, 0x0, 0x7, 0x8}, 0x4f, [0x15bf, 0x5, 0x30000000, 0x1000, 0x5, 0x101, 0x7, 0x3, 0x7f, 0xa5ba, 0x7fff, 0x6, 0x3, 0x2, 0x3, 0x0, 0x80, 0x633cb265, 0x6, 0x400, 0x8a, 0x2, 0x5, 0x8, 0x6, 0x0, 0x80, 0x1, 0x1f, 0x200, 0xdd, 0x3e, 0x6, 0x1f, 0x3, 0x0, 0x2, 0xb592, 0x200, 0x1, 0x6bb4, 0x1, 0x7, 0xffffffff, 0xffffff49, 0x1, 0x8, 0xfff, 0x2, 0x400, 0x4, 0x9, 0x5, 0x200, 0x2, 0x9, 0x1, 0x8, 0x4, 0x2, 0x3, 0x4, 0x4, 0x1], [0x7, 0x9, 0x200, 0x80000000, 0x4800, 0x1, 0xe103, 0x8, 0x1, 0x3, 0x4, 0x2, 0x9, 0x80000001, 0x5, 0x3, 0x1, 0x2, 0x6639fae2, 0x9, 0x4, 0x4, 0x80, 0xbda5, 0x21a, 0x596, 0x4d203960, 0x4564, 0x7, 0x4, 0x40, 0x7, 0x5, 0x6, 0x20, 0xb25, 0x28d, 0x6, 0x40, 0x20, 0x4, 0x6, 0x1, 0x7, 0x3, 0x4, 0x5, 0x1, 0x81, 0x7fffffff, 0x6, 0x1ffc, 0x6, 0x800, 0x3, 0x1, 0x4, 0x5b7, 0xfff, 0x1, 0xfffffffc, 0x8, 0x4, 0x8], [0xffff8000, 0x1, 0x9, 0xc1fc, 0x4, 0x5, 0x1, 0x3, 0x7, 0x9, 0x6, 0x4, 0x1, 0x40, 0x8001, 0x0, 0x8, 0x3, 0x400, 0x9, 0x38, 0x6, 0x1ff, 0xfffffffd, 0x0, 0xffffff3c, 0x5, 0x7ff, 0x1, 0x0, 0x10001, 0x1, 0x9, 0x9, 0x6, 0x67, 0x200, 0xa183, 0xe6a0, 0xcdd1, 0x9, 0x10000, 0x7, 0x1, 0x7c, 0x7fff, 0x7, 0xff, 0x8, 0x9, 0xf1ca, 0x7f, 0x2, 0x1ff, 0x1, 0x9, 0x8, 0x0, 0x4, 0x8, 0x3, 0x8, 0x4ef9, 0x6], [0x7, 0x7, 0x8, 0x6, 0x5, 0x6, 0x7, 0x6, 0x400, 0x800, 0x2, 0x5, 0x6, 0x3ff, 0x0, 0x1, 0x7, 0x4, 0x7c, 0x0, 0x200, 0x7, 0x3, 0x3, 0xffffff17, 0x3, 0x1, 0x0, 0xfb, 0x7fffffff, 0x5, 0x9, 0xffff, 0x9, 0x1, 0x6, 0x200, 0x8, 0x1, 0xa51, 0x2, 0x2, 0x0, 0xfffffff7, 0x2, 0x956f, 0x2, 0x800, 0x9, 0x1f, 0x10000, 0xa3, 0x400, 0x2, 0x3, 0x6, 0x3, 0x80, 0x983b, 0x1a, 0x0, 0x800, 0x8000, 0xcd5]}, 0x45c) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 592.600382][ T47] Bluetooth: hci7: Frame reassembly failed (-84) [ 592.613041][T14492] delete_channel: no stack 16:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8ce89a549daaa370, 0x0) (async) r1 = socket$isdn(0x22, 0x2, 0x23) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 592.667780][ T12] Bluetooth: hci8: Frame reassembly failed (-84) 16:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8ce89a549daaa370, 0x0) (async) r1 = socket$isdn(0x22, 0x2, 0x23) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 592.740146][T14507] delete_channel: no stack 16:31:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) read(r2, &(0x7f0000000100)=""/226, 0xe2) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x30, 0x20, 0x556, 0x40, 0x9, 0x5, 0x2, 0x2, {0x1f, 0x2, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0x8}, {0x4, 0x6}, 0x2, 0x2, 0x7ff, 0x1ff, 0x0, 0xfffffffd, 0x8, 0x2, 0x5, 0x401, 0xfffffffc, 0x11, 0x3c, 0x2, 0xddd15e9d30db341f, 0xa}) 16:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) ioctl$KDENABIO(r0, 0x4b36) [ 592.820328][T14522] delete_channel: no stack 16:31:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 32) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) (async, rerun: 32) ioctl$KDENABIO(r0, 0x4b36) 16:31:52 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) read(r2, &(0x7f0000000100)=""/226, 0xe2) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x30, 0x20, 0x556, 0x40, 0x9, 0x5, 0x2, 0x2, {0x1f, 0x2, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0x8}, {0x4, 0x6}, 0x2, 0x2, 0x7ff, 0x1ff, 0x0, 0xfffffffd, 0x8, 0x2, 0x5, 0x401, 0xfffffffc, 0x11, 0x3c, 0x2, 0xddd15e9d30db341f, 0xa}) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) read(r2, &(0x7f0000000100)=""/226, 0xe2) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x30, 0x20, 0x556, 0x40, 0x9, 0x5, 0x2, 0x2, {0x1f, 0x2, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0x8}, {0x4, 0x6}, 0x2, 0x2, 0x7ff, 0x1ff, 0x0, 0xfffffffd, 0x8, 0x2, 0x5, 0x401, 0xfffffffc, 0x11, 0x3c, 0x2, 0xddd15e9d30db341f, 0xa}) (async) [ 594.380166][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 594.380424][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 594.619964][ T5144] Bluetooth: hci7: command 0x1003 tx timeout [ 594.620171][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:31:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) (async) ioctl$KDENABIO(r0, 0x4b36) 16:31:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8011) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x17) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3f) 16:31:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) read(r2, &(0x7f0000000100)=""/226, 0xe2) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x30, 0x20, 0x556, 0x40, 0x9, 0x5, 0x2, 0x2, {0x1f, 0x2, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0x8}, {0x4, 0x6}, 0x2, 0x2, 0x7ff, 0x1ff, 0x0, 0xfffffffd, 0x8, 0x2, 0x5, 0x401, 0xfffffffc, 0x11, 0x3c, 0x2, 0xddd15e9d30db341f, 0xa}) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) read(r2, &(0x7f0000000100)=""/226, 0xe2) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000200)={0x30, 0x20, 0x556, 0x40, 0x9, 0x5, 0x2, 0x2, {0x1f, 0x2, 0x1}, {0x3, 0x1, 0x1}, {0x8, 0x8}, {0x4, 0x6}, 0x2, 0x2, 0x7ff, 0x1ff, 0x0, 0xfffffffd, 0x8, 0x2, 0x5, 0x401, 0xfffffffc, 0x11, 0x3c, 0x2, 0xddd15e9d30db341f, 0xa}) (async) [ 594.700029][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 594.707254][ T3692] Bluetooth: hci8: command tx timeout [ 594.780023][ T3692] Bluetooth: hci9: command 0x1003 tx timeout [ 594.786216][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 594.819288][ T3659] Bluetooth: hci6: sending frame failed (-49) 16:31:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:53 executing program 4: r0 = socket(0xb, 0x0, 0x8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/72) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xe200, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x200], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)=0x7) 16:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x4745, 0x20, 0x8, 0x9, 0x3, "e82a0e5b52484341f9825cb4b50fb61b4c3171"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) [ 594.826792][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:31:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 594.902189][ T12] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8011) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x17) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3f) 16:31:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x4745, 0x20, 0x8, 0x9, 0x3, "e82a0e5b52484341f9825cb4b50fb61b4c3171"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x4745, 0x20, 0x8, 0x9, 0x3, "e82a0e5b52484341f9825cb4b50fb61b4c3171"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) (async) 16:31:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8011) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x17) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3f) (rerun: 32) 16:31:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) [ 595.129968][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 595.137338][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000100)=""/184, &(0x7f0000000040)=0xb8) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) 16:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x4745, 0x20, 0x8, 0x9, 0x3, "e82a0e5b52484341f9825cb4b50fb61b4c3171"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x4745, 0x20, 0x8, 0x9, 0x3, "e82a0e5b52484341f9825cb4b50fb61b4c3171"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xb) (async) [ 595.394165][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 595.402216][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 596.939919][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 596.946952][ T23] Bluetooth: hci7: command tx timeout 16:31:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:55 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80000001, 0xfffffffffffffe01, 0x487a, 0xa2a, 0x2, 0x3}) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x64400, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000fc00000000030005000000000002000000ac1414aa00"/80], 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r0, @ANYRES8=r5, @ANYBLOB="0d473433f475d0a349d49894925a2aac095d3c733f139b6b9cc03070194221", @ANYBLOB="854b5fc891033974da063afe9d942b13e58e9387f776c3c8e7f72a5dd86fe43c09422f0bb75364642537fd7ab3c9f473c32d11838460375869634b9fbe09d7946998018514839e346065b4c6061a5cac51a39e15eb19eff39c2b9c1f1369366e54e7da7a667ff95a4d62a87b4acf8b7dac046f991fd0b388ceb4e163e3239e6ee06d5489638f92d7b993fa6e7a8fda2c160c319da829a0f644fe3b6fb245fdf7876718eada0e9efcacba3ac0cb0828db029e6378229944112cb703826db5fb33616b719b7f831c85f857a227d27bd8", @ANYRESHEX=r4], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:31:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1d42, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x7}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000240)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000100)=0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x8, 0x1, 0xfffff801, 0x496, 0x3, "69003018d7c9a3a706d6e45eda9bb7158392d0"}) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r5, &(0x7f0000000140)='\x00', 0x1, 0x7000000}]) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 597.020055][ T5059] Bluetooth: hci6: command 0x1003 tx timeout [ 597.020090][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x64400, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 597.087201][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 597.094994][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 597.124922][ T12] Bluetooth: hci7: Frame reassembly failed (-84) 16:31:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x64400, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x64400, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:31:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000fc00000000030005000000000002000000ac1414aa00"/80], 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r0, @ANYRES8=r5, @ANYBLOB="0d473433f475d0a349d49894925a2aac095d3c733f139b6b9cc03070194221", @ANYBLOB="854b5fc891033974da063afe9d942b13e58e9387f776c3c8e7f72a5dd86fe43c09422f0bb75364642537fd7ab3c9f473c32d11838460375869634b9fbe09d7946998018514839e346065b4c6061a5cac51a39e15eb19eff39c2b9c1f1369366e54e7da7a667ff95a4d62a87b4acf8b7dac046f991fd0b388ceb4e163e3239e6ee06d5489638f92d7b993fa6e7a8fda2c160c319da829a0f644fe3b6fb245fdf7876718eada0e9efcacba3ac0cb0828db029e6378229944112cb703826db5fb33616b719b7f831c85f857a227d27bd8", @ANYRESHEX=r4], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:31:55 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80000001, 0xfffffffffffffe01, 0x487a, 0xa2a, 0x2, 0x3}) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000fc00000000030005000000000002000000ac1414aa00"/80], 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r0, @ANYRES8=r5, @ANYBLOB="0d473433f475d0a349d49894925a2aac095d3c733f139b6b9cc03070194221", @ANYBLOB="854b5fc891033974da063afe9d942b13e58e9387f776c3c8e7f72a5dd86fe43c09422f0bb75364642537fd7ab3c9f473c32d11838460375869634b9fbe09d7946998018514839e346065b4c6061a5cac51a39e15eb19eff39c2b9c1f1369366e54e7da7a667ff95a4d62a87b4acf8b7dac046f991fd0b388ceb4e163e3239e6ee06d5489638f92d7b993fa6e7a8fda2c160c319da829a0f644fe3b6fb245fdf7876718eada0e9efcacba3ac0cb0828db029e6378229944112cb703826db5fb33616b719b7f831c85f857a227d27bd8", @ANYRESHEX=r4], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000fc00000000030005000000000002000000ac1414aa00"/80], 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r0, @ANYRES8=r5, @ANYBLOB="0d473433f475d0a349d49894925a2aac095d3c733f139b6b9cc03070194221", @ANYBLOB="854b5fc891033974da063afe9d942b13e58e9387f776c3c8e7f72a5dd86fe43c09422f0bb75364642537fd7ab3c9f473c32d11838460375869634b9fbe09d7946998018514839e346065b4c6061a5cac51a39e15eb19eff39c2b9c1f1369366e54e7da7a667ff95a4d62a87b4acf8b7dac046f991fd0b388ceb4e163e3239e6ee06d5489638f92d7b993fa6e7a8fda2c160c319da829a0f644fe3b6fb245fdf7876718eada0e9efcacba3ac0cb0828db029e6378229944112cb703826db5fb33616b719b7f831c85f857a227d27bd8", @ANYRESHEX=r4], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:31:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:31:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="e9f1e8d5c3bf6a1ca99601684d03ea7639787df0e46b9242dbf64dc39b0c656e9b60f97c0f900d01b4c422ac3cdd754f504c90ae262876d5da06f1e3cf1657aff86966135de8b5e2738bf65811024cbc02c734119a163de6138d7b7dcc711bc6d7791c65fefc3b96fe75d0acacda3f5c5ca2d831baf34377bbc6d40b35b40777fbf885a7d0a9262b940a"], 0x3af4701e) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 598.033615][ T47] Bluetooth: hci8: Frame reassembly failed (-84) [ 598.041568][ T47] Bluetooth: hci8: Frame reassembly failed (-84) [ 599.179962][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 599.186959][ T3692] Bluetooth: hci7: command tx timeout 16:31:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) (async, rerun: 64) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1d42, 0x0) (rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000240)) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) io_setup(0x1, &(0x7f0000000100)=0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x8, 0x1, 0xfffff801, 0x496, 0x3, "69003018d7c9a3a706d6e45eda9bb7158392d0"}) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r5, &(0x7f0000000140)='\x00', 0x1, 0x7000000}]) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) (async) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:31:57 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x80000001, 0xfffffffffffffe01, 0x487a, 0xa2a, 0x2, 0x3}) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80000000004) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) 16:31:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:31:57 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="07000040000000002e000000000000003ad986b49c1180016d79d352afbf41dd02d84b3ad1057bbb72b29b1d1d19db8491936f64f090fb88345ee47583f5e09793605beb03"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x1, "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"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 599.420024][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:31:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) sendfile(r2, r1, 0x0, 0x80000000004) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1d42, 0x0) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000240)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) io_setup(0x1, &(0x7f0000000100)=0x0) (async, rerun: 32) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000001c0)={0x8, 0x1, 0xfffff801, 0x496, 0x3, "69003018d7c9a3a706d6e45eda9bb7158392d0"}) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r5, &(0x7f0000000140)='\x00', 0x1, 0x7000000}]) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 599.507785][T14689] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 599.544965][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 599.552119][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:31:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r1, r0, 0x0, 0x80000000004) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) [ 599.599263][ T3659] Bluetooth: hci7: sending frame failed (-49) [ 599.606574][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:31:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80000000004) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) [ 599.657443][T14707] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 599.701374][T14706] ptm ptm5: ldisc open failed (-12), clearing slot 5 16:31:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000001c0)={0x13, 0x20, &(0x7f0000000100)="10f4f6b0a2235e70bd4fda6c959600118a6dac501fc619370d51c183e10985f319116fc9c4dae97a26bfb3c2edc553e584830f1b882be6f89cc0e19534c50a6fd93d9a142d7dfba2facebdee0648478a6669031ef81de821034ae5ec774650aea99e9e053686c692a4a353e02ffab8d8c18e", {0x7, 0x0, 0x34565559, 0x1, 0x10001, 0x7, 0x3, 0x7fff}}) 16:31:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x1, "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"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x1, "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"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:31:58 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="07000040000000002e000000000000003ad986b49c1180016d79d352afbf41dd02d84b3ad1057bbb72b29b1d1d19db8491936f64f090fb88345ee47583f5e09793605beb03"]) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:31:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) 16:31:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x4, 0xab, 0x9, 0x7, 0x12, "695ca7b0aab20b93271dd4d18b3517a900eaff"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 600.059946][ T5091] Bluetooth: hci8: command 0x1003 tx timeout [ 600.061534][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:31:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x4, 0xab, 0x9, 0x7, 0x12, "695ca7b0aab20b93271dd4d18b3517a900eaff"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 600.170800][ T12] Bluetooth: hci7: Frame reassembly failed (-84) [ 600.178304][T14727] Bluetooth: hci6: Frame reassembly failed (-84) [ 600.200792][ T3651] Bluetooth: hci8: sending frame failed (-49) [ 600.208321][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:31:58 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="07000040000000002e000000000000003ad986b49c1180016d79d352afbf41dd02d84b3ad1057bbb72b29b1d1d19db8491936f64f090fb88345ee47583f5e09793605beb03"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="07000040000000002e000000000000003ad986b49c1180016d79d352afbf41dd02d84b3ad1057bbb72b29b1d1d19db8491936f64f090fb88345ee47583f5e09793605beb03"]) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) [ 600.229557][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 600.255685][T14734] ptm ptm1: ldisc open failed (-12), clearing slot 1 16:31:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x1, "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"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:31:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x4, 0xab, 0x9, 0x7, 0x12, "695ca7b0aab20b93271dd4d18b3517a900eaff"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:31:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7) 16:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x8, 0x15, 0x1, 0x3, 0x3e, 0x7, 0x1a, 0x38, 0x224, 0x5, 0x6, 0x20, 0x1, 0xe8, 0x5, 0x1000}, [{0x2, 0x1, 0x4, 0xffff, 0x3, 0x401, 0x40, 0xcf6d}, {0x1, 0x14f4, 0x3, 0x4, 0xa2, 0x1, 0x0, 0x9}], "7c8c0be835a4af89b5043e85e74fc28e78b0a687004ab352ad8947a664115af5951ad58971cf1cc99e303f12b13c1c15a4c2c756043d6a9afa94773a2c607dbcb0f7f3a68bae1d6f9b1e6e077f2f6e44559b54fef297c435988c7b3202aa4bb2232039aba1e0b15ed47dc3613070fe117c65655ca7ddd47ab01b9b29d16b9aef0a296a6321cedfe673c2a1238529c311c4d89bcace477f83c3f77e5c87d1390896167f02ae6af657c94bc51e9656790e1835a6c44404fb54b8cc5530b9838a562cbbc06bca0d99e5f235d8", ['\x00', '\x00', '\x00', '\x00']}, 0x543) [ 600.467295][ T42] Bluetooth: hci8: Frame reassembly failed (-84) [ 600.548308][ T3641] Bluetooth: hci9: sending frame failed (-49) [ 600.557440][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 602.220007][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 602.220261][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 602.227805][ T5091] Bluetooth: hci7: command 0x1003 tx timeout 16:32:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:01 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcb_unregister\x00', r1}, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x8, 0x15, 0x1, 0x3, 0x3e, 0x7, 0x1a, 0x38, 0x224, 0x5, 0x6, 0x20, 0x1, 0xe8, 0x5, 0x1000}, [{0x2, 0x1, 0x4, 0xffff, 0x3, 0x401, 0x40, 0xcf6d}, {0x1, 0x14f4, 0x3, 0x4, 0xa2, 0x1, 0x0, 0x9}], "7c8c0be835a4af89b5043e85e74fc28e78b0a687004ab352ad8947a664115af5951ad58971cf1cc99e303f12b13c1c15a4c2c756043d6a9afa94773a2c607dbcb0f7f3a68bae1d6f9b1e6e077f2f6e44559b54fef297c435988c7b3202aa4bb2232039aba1e0b15ed47dc3613070fe117c65655ca7ddd47ab01b9b29d16b9aef0a296a6321cedfe673c2a1238529c311c4d89bcace477f83c3f77e5c87d1390896167f02ae6af657c94bc51e9656790e1835a6c44404fb54b8cc5530b9838a562cbbc06bca0d99e5f235d8", ['\x00', '\x00', '\x00', '\x00']}, 0x543) 16:32:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7) 16:32:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) (async) 16:32:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000001c0)={0x13, 0x20, &(0x7f0000000100)="10f4f6b0a2235e70bd4fda6c959600118a6dac501fc619370d51c183e10985f319116fc9c4dae97a26bfb3c2edc553e584830f1b882be6f89cc0e19534c50a6fd93d9a142d7dfba2facebdee0648478a6669031ef81de821034ae5ec774650aea99e9e053686c692a4a353e02ffab8d8c18e", {0x7, 0x0, 0x34565559, 0x1, 0x10001, 0x7, 0x3, 0x7fff}}) [ 602.539908][ T5091] Bluetooth: hci8: command 0x1003 tx timeout [ 602.549949][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 602.643625][ T49] Bluetooth: hci6: sending frame failed (-49) [ 602.650988][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 602.659058][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 602.666289][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 602.683287][ T3651] Bluetooth: hci8: sending frame failed (-49) 16:32:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x8, 0x8, 0x15, 0x1, 0x3, 0x3e, 0x7, 0x1a, 0x38, 0x224, 0x5, 0x6, 0x20, 0x1, 0xe8, 0x5, 0x1000}, [{0x2, 0x1, 0x4, 0xffff, 0x3, 0x401, 0x40, 0xcf6d}, {0x1, 0x14f4, 0x3, 0x4, 0xa2, 0x1, 0x0, 0x9}], "7c8c0be835a4af89b5043e85e74fc28e78b0a687004ab352ad8947a664115af5951ad58971cf1cc99e303f12b13c1c15a4c2c756043d6a9afa94773a2c607dbcb0f7f3a68bae1d6f9b1e6e077f2f6e44559b54fef297c435988c7b3202aa4bb2232039aba1e0b15ed47dc3613070fe117c65655ca7ddd47ab01b9b29d16b9aef0a296a6321cedfe673c2a1238529c311c4d89bcace477f83c3f77e5c87d1390896167f02ae6af657c94bc51e9656790e1835a6c44404fb54b8cc5530b9838a562cbbc06bca0d99e5f235d8", ['\x00', '\x00', '\x00', '\x00']}, 0x543) [ 602.690553][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:32:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000001c0)={0x13, 0x20, &(0x7f0000000100)="10f4f6b0a2235e70bd4fda6c959600118a6dac501fc619370d51c183e10985f319116fc9c4dae97a26bfb3c2edc553e584830f1b882be6f89cc0e19534c50a6fd93d9a142d7dfba2facebdee0648478a6669031ef81de821034ae5ec774650aea99e9e053686c692a4a353e02ffab8d8c18e", {0x7, 0x0, 0x34565559, 0x1, 0x10001, 0x7, 0x3, 0x7fff}}) 16:32:01 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcb_unregister\x00', r1}, 0x2) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7) 16:32:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x61) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) (async) 16:32:01 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcb_unregister\x00', r1}, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpcb_unregister\x00', r1}, 0x2) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) (async) [ 602.919068][T14811] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1a) 16:32:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xffffffffffffffff, 0x80141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x230280, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="02030000ee00000000000000000000000300060000000000020000000000000000000000000010000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 604.790171][ T5091] Bluetooth: hci9: command 0x1003 tx timeout [ 604.792519][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1a) 16:32:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xffffffffffffffff, 0x80141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x230280, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="02030000ee00000000000000000000000300060000000000020000000000000000000000000010000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xffffffffffffffff, 0x80141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x230280, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="02030000ee00000000000000000000000300060000000000020000000000000000000000000010000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) [ 604.852097][ T3641] Bluetooth: hci9: sending frame failed (-49) [ 604.860640][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -49 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1a) 16:32:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xffffffffffffffff, 0x80141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x230280, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="02030000ee00000000000000000000000300060000000000020000000000000000000000000010000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x302200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x1f) syz_open_pts(0xffffffffffffffff, 0x94900) [ 604.940060][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 604.950378][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 605.020255][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 605.028410][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x5) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfb) 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 16:32:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x302200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x1f) syz_open_pts(0xffffffffffffffff, 0x94900) [ 605.189017][T14862] mkiss: ax0: crc mode is auto. 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) (rerun: 64) 16:32:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x302200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x1f) (async) syz_open_pts(0xffffffffffffffff, 0x94900) 16:32:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x7f, r1, 0x80000}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000001c0)=0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) [ 605.408428][T14882] mkiss: ax0: crc mode is auto. [ 607.180271][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 607.186511][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:05 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x7f, r1, 0x80000}) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000001c0)=0x2) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 607.260432][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 607.261596][ T5091] Bluetooth: hci7: command 0x1003 tx timeout 16:32:05 executing program 0: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="aa1be326925e08393176507e787081d72f961d7d7426df221770067c7da17328b2f067303f32b9adc2c65cba70d36c0fd69df15d0a62a48baad8a7f45ee7f2f278ce5be04475a53b81edbe2462ef6b45b4728b1484ca44793ce81eeb98155b735dcf56ce2818a10f312c83894911f1eb7caa7915e73a97783832acb62a5a00fc4c018ff55f53d6b139477e") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0xfd) [ 607.312641][T14893] mkiss: ax0: crc mode is auto. 16:32:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x5) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfb) 16:32:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:05 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40014) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x7f, r1, 0x80000}) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000001c0)=0x2) (async, rerun: 64) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 64) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_INPUT(r0, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) openat(r0, &(0x7f0000001240)='./file0\x00', 0x1, 0x81) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x68957000) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) 16:32:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x5) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x5) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfb) (async) 16:32:06 executing program 0: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="aa1be326925e08393176507e787081d72f961d7d7426df221770067c7da17328b2f067303f32b9adc2c65cba70d36c0fd69df15d0a62a48baad8a7f45ee7f2f278ce5be04475a53b81edbe2462ef6b45b4728b1484ca44793ce81eeb98155b735dcf56ce2818a10f312c83894911f1eb7caa7915e73a97783832acb62a5a00fc4c018ff55f53d6b139477e") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0xfd) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="aa1be326925e08393176507e787081d72f961d7d7426df221770067c7da17328b2f067303f32b9adc2c65cba70d36c0fd69df15d0a62a48baad8a7f45ee7f2f278ce5be04475a53b81edbe2462ef6b45b4728b1484ca44793ce81eeb98155b735dcf56ce2818a10f312c83894911f1eb7caa7915e73a97783832acb62a5a00fc4c018ff55f53d6b139477e") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0xfd) (async) 16:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 607.642448][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 607.649516][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 607.691537][T14924] ptm ptm4: ldisc open failed (-12), clearing slot 4 16:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:06 executing program 0: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="aa1be326925e08393176507e787081d72f961d7d7426df221770067c7da17328b2f067303f32b9adc2c65cba70d36c0fd69df15d0a62a48baad8a7f45ee7f2f278ce5be04475a53b81edbe2462ef6b45b4728b1484ca44793ce81eeb98155b735dcf56ce2818a10f312c83894911f1eb7caa7915e73a97783832acb62a5a00fc4c018ff55f53d6b139477e") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0xfd) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000100)="aa1be326925e08393176507e787081d72f961d7d7426df221770067c7da17328b2f067303f32b9adc2c65cba70d36c0fd69df15d0a62a48baad8a7f45ee7f2f278ce5be04475a53b81edbe2462ef6b45b4728b1484ca44793ce81eeb98155b735dcf56ce2818a10f312c83894911f1eb7caa7915e73a97783832acb62a5a00fc4c018ff55f53d6b139477e") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)=0xfd) (async) 16:32:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_INPUT(r0, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0x1006) (async) openat(r0, &(0x7f0000001240)='./file0\x00', 0x1, 0x81) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x68957000) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r2, 0x5437, 0x0) 16:32:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$UHID_INPUT(r0, &(0x7f0000000200)={0x8, {"84a7674234c6df80f58243010b925a6493c976428c851d8e15bba6e52077eca6ab6384d27ed973a8d2092d817537214b31953d9321b76edabec26442e203bd94f30fb28c00acde1396c64c5766aa933b8f469ffa2881cedd6bbffec9ea3cf564e4caf85c01424c9b7f21054cf51b7794033e07d45d7376f7486f73bcbc8eb69a1b14d3a6f3de23f07357ef9d232a18745388d4828e00b6d7f9dfee426f2f3d73923833501e4e5a360177d4911dfab3826b0ea84005a494fe5ae429b6fb95c91eff3e79453f9eeaab1d06d3d55389a58bdc99dc53b2753536843eb62575556be79dab9e18c10d691088ceebb110228437a2b068f85d04c795842bff6f973989ce49d2da837c2d5faed0403e48a0b4b19d9a47d4ec20c77f5af30c61ad552326846dd239ac6b307f290a2147e09ad7eada65d54338114d21f6396252d222c60c3e17392a609b21dc9af081cfdee0cba556042b3d04fdbdc4bd668830a160859f5562af5e73c12b16cb5f809a5674d9cb4c60dde66d677d714f0f674336f04fbd52d98c7109efa41f45d8c45c31e0d1bcfff8b66c828156e887bd29844129e762bf18d7b5a81e78c0936043daac55c1a166ea00a0d954b4448d175161c7ed0512f3e5562676cb2202e013bbdebb6815fe47e500015d488126ea967f5d0755aa9693d4b8f24f375af830ef9725434663a5e3978a1bc71df0819a70cc1b15d715e8acff4843783f96daccd8793ba5bf8b119dc250b301c27f09863cd937c7dbdfe7972364bd049add659834cd82a1721a9673edbdcc86838ec837e2bc60005bd9dffc6459da84eef4275258a85450a47d122aba20f2baa5d823d2ed5fe221c1947e2afe6b6e71cbdc3dba40aa893b33bae9331ed8f1ebf8deb92c860566bace618077b0e4b06547db2544583ce9b96e119befe7171f93c05e7ede083d063f359d66b00fab426d2e5f6a7f4d0a81ebecbc22f105b7d1de2aec552c535e0cc4e84b268530e35da21ba04fc3ae1c9d56e2659a1631ec2a84ea411a4a4f87779b491faf195cb8a7f53b6b719941851d80316d1ee91ca93a8150ee32f210ddda957284d7381bcadb3a1578278212445e390f8a9754baa788491dd39535b10230363a88a910db3b95f3a0ad2b268c10af8b50806bc431ffb7707acf13e9d7eaf2f7f6de02341e8bd58e94ec9f5105ce6d7022df1182adcd523889b589ab7e5717eb892e4c5cfd94a36ee80586f3122ca783d672321871d2588f394a3630c7a257de5e5a3e570557845d1c7708c44ecee60191b83be54cf31dc1b268d15fa6aa0e0b807a50b2291278bbb49cf86e5fd81be70adbf46adc4caf402af31dd0077dace1708c1185a0642a930a40b8b4adedb5819eb49786631751c51f8def5e2bf2538da5a0b773a2a3f519280a87f20eacb9586c061ea8cfc83b284c24f32fc3c6c74667942c37c1d15159f910819235ea8a2f5613eac238bba32fee5a053ed3730b4c3f227d7daae11e536b1fb4a8f08fbd984c39cf8f10dd99de74c697c1a6ea180435e614407d234fefca73000381fc2d385b9cc199be3a53f37e16870f1d21e445860a8c10caf04691ce63826225b9fdd6779acb0eadb19665eef18bc3cd49f38262bd0a557d2fd7f26c9ee36bfe4943caf9f5cd2c15d1de08ece5afeb80aece41da71b5a03f26770bb6d9bb2a07fafbb38993a50ad31bcd1d93d76ee6cd42f9dc7c8805f2d54abe7a1c68ae5e7a90b9e09c5abf305d92502371c46d3eb913a883e21e2b476b147c98a045d1489a14acc19e41909f8ac236b678a7e88f3015ebeef6d2b62e5312356a88b6a3403944b1b4028a8532ee93af7c454f3dd4f042af737a7d991ba5955ebfd03e1db45a71caeeb1d938af69d565099585690330672a07b7fc532c48b8d2d44ae65fd947c36a497254d030e9b7a59fddfd6510e15c91a0bd32d4dc649a74696ba59899537c5bf3d01e5f46b8523963656498336455f0385e21aba74a43a436121a1718d47dd54303ce823b55359f51c17f88bb55f04139a8fb29ecb8eb6073f58b36b4b9ee1ff021ecf3626e925e01c13f853a821fe684e1d5efa29f768ab5221acb811275c5d04faea177c52ed9f7c553997600d26f183adbb2c588e2f06c9a7a88bb0c9f15393c1e04783a88d52e0172a478f3a91f2c3beef4b9b1027dea53701648674bfcf5c9ea3d927b0252605ea587abbde5262240140f26971926babcfd03eac2a5c34d271204fd33f65b7d4dc09d48a6adfe6f8f694dda525fef8e131c7877afe9bf970ed6a423f483e01ef83d15239f0e09d2de9f8b91013b109eb05f8f9afb6b8be8b4a7f40c9808ca63c371e36c0d5fc89a164e9b0927d7a6a582190d89c222ee3c722eb0bc84e32119fcaadbbd02ec820b2a170eff5fa5246ac4c18309b783299cd66a95e8270cdfde897c9a53d69d33a5fbadfdbd53b4232d6443a2abf47ff55e1fade49c5335dc78a7addd99ca05f8288e5a041ea69c204595a8be97c0439d680d0807c89767eadc514965086adbe1f0abf1be449eb2948b08bc9cac73ee5da9bfe1f9c7d47e2011c2c256e38a6128797ecfdd13dd397c6fc80c04023c77c6c27d00456db9e73d977e2a3cbdfe6a29a66c535a7011af8ffbc21e09375c526e9db11f08d89d89166735fbaca88d9ad7b56ac404f83629ed69d59c7e4e6751c30c5d63d27a24b1b756eeee347fddaade06664ec39aa2f7c89ba2e1253eded74e79734efd05df8de03c2bec1c3df1ed2aa638c55af87457b86cff5c8323816d36f45ffa47f8b7044502672ad264664924e6ceaa47f9839c754a842216eecf319103c35af4b6108d188991fd760601e4b7547fcb552fdff86bef93bfc6b117a049fbf61095595446eee1c51e631388017d466436f5bfb3f7dadf6788fe1ef68acb03dc9e542cd6fdb355cb8ef71ecb5a733f7eae83983e5f34422b8e4369594f3178272047a241b63141c2628304d4ab8f009d2fc5cd4fa954d71106e6485d13a465c470cb95f8e7de906e6797fce17c7eaa8ca5d8badb1a746ad84b4314f48a90a1a0a75780fa88894b0f5c473c348d7403216c8a69944b6b7454f1d9f624a0f806196b4cf690fe74155c3f29cbebdd47dde3c1295064ce1bf459a464cc26b185387cdde94f7b5575b1aa147f23328b401493ea8c4933c8a3f562f6c4cdcff132d88ec3b7e0024dff39bc688e234d98cba7525f641c8db7329aa29e873928ef202a822f87d9130112689a6f7dc89e99ab73120410f5ff79b0b3a349281b97b29e53b0f91f1ccb92d6635c02dcd4bc2a2fc7b1da5ca7e1fa2a18996d39eb9ec0b892ec634ad7ce1bd7dbf009280e6f5177c0d22b3fee3f61fcc6ea80fa434771139c09a5f85d343a85a621770f50233f034f5782b56a488d73e74d0b130aea3e253d8b866cad38fb2b362c2e2fce761c030f707dba34b977f85258135e83b3fa50f10466d94451d1e2ea9e90afd7614e46645973db5da61ffa37346576861e5a7bf8fdeb99c6da7b3550f0054df167fe67effc81d51f7869be4b4d2863e775f5979e786664b1fbeb1f91e49676a278adf89927515d5ad7cae9a11ae1a66cfa9b113ff64f6443a96ef35e87bfdc7826529559efdd27fb30cb6d12c51d92fe36d48d0a6e5afdc7fa447b17dd76ad8e65bb986dfef8f3a2b841dd5a8572f0ac064e2ef321a6906d34f984bc160f743acf5615375d42922ad03a0a6a9bb6ba3fafb84c6ed0688593342e43c2e54e948345c5b778d3ff65ab540f1aed2e209606daef43e0eeabaf8c67fce33f75442adf645d7da4ec0f1eab0c6d3d57c57098881ea8942b2fb71ffcebeab8bab5dc17322e42fbee21ca3329eda6a9f4f084d90ceb05b30ad52508d44584b0689fcb6158039d04089dd5a674e14ee50d9c331a417bf89f07975401cfa802b5cda795649875e9f9b90a02cff8fc675f7383bd8d9b4270b412047348ee584cdf45e044ac914a4279f5001fa0c911c5634c02eb8c0229ab8b1236d82ca250a67d17274541c48977e821f4fba430909d39de0ea2447d8098942730b6d9f5f0b87a99c214953e44d1f6805285c31e246794265b9e499d2af0809866e41ba52be2a2a5d9187f58d85a2c5f72e05d840ce5e1e70b0d692c35e3196871f21b303e2b7376ef0af552300ab6f5ba4a53918792147cadaf2fc8a01cf06a0837e6ecc6e4492d60ed7f07da966867566fa65f5de8b1a33bb01f5fa442df059319276864734cca6b00d5fd4cef540a8d8a905161b86bfd74b3d54b9728db908e0a83df6f0c85123ccb02905d7e0710845288bb47a0550de005191892c5dbfd1fe44721c9df51fd033295eee989d40d86dfd0ee0d538413aa57cacbecc53a76e099e57b44471653524fdcf300909b87940bf7a50c0ef1cb408a2cb6ba2115608759ad9f1baf2f1e758444bc2b7831bb798d11b0c0d95a957a688190da5611ecd0b6c86d8d18c61be6371670f0bf4a70758ee04b7199f568c26c16b52c66649aba70a857c888fdbf5db99bcfe7cd5018616595d4721c85f9e9e0b6fba15ffed79b4bb8878a0b4e2b8c21e9ff1fb5544eac9a61b726d14fe4e41b2c2ec0270438cfdc02da8da1aa96f1cf3364255cbab304f8c57b777e617beb0107b0ec8fd043b63d17f74d45f7e1429e923aa915cdc79facb5904cad644a82d5542038f2a937c8a44e73a6ff5b0beaf838475b8eb3fdc7530e34c772d44182dd3f81f49c94a9338fb41673bebc23de0bb0ce68f0cdd84c870dc6c92a55b2876c9158eba09732dc95dba0a8c1dc9860a523a1a0b4da20635751aa067b22b3db021f872ddf8b362ec17b69fda01e3bd927facbd2534b110b717fda32f065c8077339401c7bd28048a23130f2eeb11cad0431a02d158859965ea038f502660b61a1361b677cf480ce3a5b858cedb6480d7f1efbcd97df505d5e69ddef1f32a9c9d5be14f0a04dba32c8408d9ac97629fc63740588ec8777192d610ebf6f88b6a45bfb69483ec52ca61f2904a7eaf55086e05437baa3858a8e09ce9e8a62c1a590726733569980d5fe86997b7495dbc43701dd2eb6a05900a66e04ac5c58a296bc0958dd8a3a934717eebb73a8143d404257da8c7049a72134c3e016cedfbb30d6b45747f743815be2cf667dd34e3c927d89fceed7f3b01c8564512240fecfbd9e79bdb5667bb1fa05aa781b89577926e570f1091001ed1115ffb089bd81b3c893a4f3e6900dc92caaf1ecc4224843b718e4663ad0b703668c40473d3fe3b9f1a7d9baebc242750fb243fdbce72521db90a55e619499376e0edfeb1b5ee78231b18f0ff851de83af0726cbf6f5b53a18e1e046aed43a10c3481314b2268f3139951319a06ced8741e7c2852a97bd2ee56f3f2ae337985626913bf39b202ce3de313ddcf597b87b21d5469158a9d88d4ec67a7286e8aae72c70603dc04dc379bfdf642f9d55bad929dda849914d06ef9465ef6e7d3945ee973fdc6a33f2099029424907c61c408c5e5f4bbb2d5bc6c0fece69ee005cc40b2008985fb22b3899be67d2a934e1812a79c1d3d8f8229b09b9b5d7c119441a79794d14df408e5e99fb0325f1e6a5a4ab20a0ca15234779a592d443725bd75ee515b3b8b8b5ee77fbca23a93c52da68eadffc68e1f0fe1b7c1a97ca7a5a9f9d62d86703ed043709d8fcdeb02d8b401fcf662f8a49e8bb7d225c58ac5be24c9cef8f208700fee75b7e428b1a206229a6bb5965794306a0d7abde3dc7b446b6f4461d9f87fa7b2dfdc88f87a65b925f2b192560ecc18089d674f15e5038a98c7609d8803f2380", 0x1000}}, 0x1006) openat(r0, &(0x7f0000001240)='./file0\x00', 0x1, 0x81) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x68957000) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) write$UHID_INPUT(r0, &(0x7f0000000200)={0x8, {"84a7674234c6df80f58243010b925a6493c976428c851d8e15bba6e52077eca6ab6384d27ed973a8d2092d817537214b31953d9321b76edabec26442e203bd94f30fb28c00acde1396c64c5766aa933b8f469ffa2881cedd6bbffec9ea3cf564e4caf85c01424c9b7f21054cf51b7794033e07d45d7376f7486f73bcbc8eb69a1b14d3a6f3de23f07357ef9d232a18745388d4828e00b6d7f9dfee426f2f3d73923833501e4e5a360177d4911dfab3826b0ea84005a494fe5ae429b6fb95c91eff3e79453f9eeaab1d06d3d55389a58bdc99dc53b2753536843eb62575556be79dab9e18c10d691088ceebb110228437a2b068f85d04c795842bff6f973989ce49d2da837c2d5faed0403e48a0b4b19d9a47d4ec20c77f5af30c61ad552326846dd239ac6b307f290a2147e09ad7eada65d54338114d21f6396252d222c60c3e17392a609b21dc9af081cfdee0cba556042b3d04fdbdc4bd668830a160859f5562af5e73c12b16cb5f809a5674d9cb4c60dde66d677d714f0f674336f04fbd52d98c7109efa41f45d8c45c31e0d1bcfff8b66c828156e887bd29844129e762bf18d7b5a81e78c0936043daac55c1a166ea00a0d954b4448d175161c7ed0512f3e5562676cb2202e013bbdebb6815fe47e500015d488126ea967f5d0755aa9693d4b8f24f375af830ef9725434663a5e3978a1bc71df0819a70cc1b15d715e8acff4843783f96daccd8793ba5bf8b119dc250b301c27f09863cd937c7dbdfe7972364bd049add659834cd82a1721a9673edbdcc86838ec837e2bc60005bd9dffc6459da84eef4275258a85450a47d122aba20f2baa5d823d2ed5fe221c1947e2afe6b6e71cbdc3dba40aa893b33bae9331ed8f1ebf8deb92c860566bace618077b0e4b06547db2544583ce9b96e119befe7171f93c05e7ede083d063f359d66b00fab426d2e5f6a7f4d0a81ebecbc22f105b7d1de2aec552c535e0cc4e84b268530e35da21ba04fc3ae1c9d56e2659a1631ec2a84ea411a4a4f87779b491faf195cb8a7f53b6b719941851d80316d1ee91ca93a8150ee32f210ddda957284d7381bcadb3a1578278212445e390f8a9754baa788491dd39535b10230363a88a910db3b95f3a0ad2b268c10af8b50806bc431ffb7707acf13e9d7eaf2f7f6de02341e8bd58e94ec9f5105ce6d7022df1182adcd523889b589ab7e5717eb892e4c5cfd94a36ee80586f3122ca783d672321871d2588f394a3630c7a257de5e5a3e570557845d1c7708c44ecee60191b83be54cf31dc1b268d15fa6aa0e0b807a50b2291278bbb49cf86e5fd81be70adbf46adc4caf402af31dd0077dace1708c1185a0642a930a40b8b4adedb5819eb49786631751c51f8def5e2bf2538da5a0b773a2a3f519280a87f20eacb9586c061ea8cfc83b284c24f32fc3c6c74667942c37c1d15159f910819235ea8a2f5613eac238bba32fee5a053ed3730b4c3f227d7daae11e536b1fb4a8f08fbd984c39cf8f10dd99de74c697c1a6ea180435e614407d234fefca73000381fc2d385b9cc199be3a53f37e16870f1d21e445860a8c10caf04691ce63826225b9fdd6779acb0eadb19665eef18bc3cd49f38262bd0a557d2fd7f26c9ee36bfe4943caf9f5cd2c15d1de08ece5afeb80aece41da71b5a03f26770bb6d9bb2a07fafbb38993a50ad31bcd1d93d76ee6cd42f9dc7c8805f2d54abe7a1c68ae5e7a90b9e09c5abf305d92502371c46d3eb913a883e21e2b476b147c98a045d1489a14acc19e41909f8ac236b678a7e88f3015ebeef6d2b62e5312356a88b6a3403944b1b4028a8532ee93af7c454f3dd4f042af737a7d991ba5955ebfd03e1db45a71caeeb1d938af69d565099585690330672a07b7fc532c48b8d2d44ae65fd947c36a497254d030e9b7a59fddfd6510e15c91a0bd32d4dc649a74696ba59899537c5bf3d01e5f46b8523963656498336455f0385e21aba74a43a436121a1718d47dd54303ce823b55359f51c17f88bb55f04139a8fb29ecb8eb6073f58b36b4b9ee1ff021ecf3626e925e01c13f853a821fe684e1d5efa29f768ab5221acb811275c5d04faea177c52ed9f7c553997600d26f183adbb2c588e2f06c9a7a88bb0c9f15393c1e04783a88d52e0172a478f3a91f2c3beef4b9b1027dea53701648674bfcf5c9ea3d927b0252605ea587abbde5262240140f26971926babcfd03eac2a5c34d271204fd33f65b7d4dc09d48a6adfe6f8f694dda525fef8e131c7877afe9bf970ed6a423f483e01ef83d15239f0e09d2de9f8b91013b109eb05f8f9afb6b8be8b4a7f40c9808ca63c371e36c0d5fc89a164e9b0927d7a6a582190d89c222ee3c722eb0bc84e32119fcaadbbd02ec820b2a170eff5fa5246ac4c18309b783299cd66a95e8270cdfde897c9a53d69d33a5fbadfdbd53b4232d6443a2abf47ff55e1fade49c5335dc78a7addd99ca05f8288e5a041ea69c204595a8be97c0439d680d0807c89767eadc514965086adbe1f0abf1be449eb2948b08bc9cac73ee5da9bfe1f9c7d47e2011c2c256e38a6128797ecfdd13dd397c6fc80c04023c77c6c27d00456db9e73d977e2a3cbdfe6a29a66c535a7011af8ffbc21e09375c526e9db11f08d89d89166735fbaca88d9ad7b56ac404f83629ed69d59c7e4e6751c30c5d63d27a24b1b756eeee347fddaade06664ec39aa2f7c89ba2e1253eded74e79734efd05df8de03c2bec1c3df1ed2aa638c55af87457b86cff5c8323816d36f45ffa47f8b7044502672ad264664924e6ceaa47f9839c754a842216eecf319103c35af4b6108d188991fd760601e4b7547fcb552fdff86bef93bfc6b117a049fbf61095595446eee1c51e631388017d466436f5bfb3f7dadf6788fe1ef68acb03dc9e542cd6fdb355cb8ef71ecb5a733f7eae83983e5f34422b8e4369594f3178272047a241b63141c2628304d4ab8f009d2fc5cd4fa954d71106e6485d13a465c470cb95f8e7de906e6797fce17c7eaa8ca5d8badb1a746ad84b4314f48a90a1a0a75780fa88894b0f5c473c348d7403216c8a69944b6b7454f1d9f624a0f806196b4cf690fe74155c3f29cbebdd47dde3c1295064ce1bf459a464cc26b185387cdde94f7b5575b1aa147f23328b401493ea8c4933c8a3f562f6c4cdcff132d88ec3b7e0024dff39bc688e234d98cba7525f641c8db7329aa29e873928ef202a822f87d9130112689a6f7dc89e99ab73120410f5ff79b0b3a349281b97b29e53b0f91f1ccb92d6635c02dcd4bc2a2fc7b1da5ca7e1fa2a18996d39eb9ec0b892ec634ad7ce1bd7dbf009280e6f5177c0d22b3fee3f61fcc6ea80fa434771139c09a5f85d343a85a621770f50233f034f5782b56a488d73e74d0b130aea3e253d8b866cad38fb2b362c2e2fce761c030f707dba34b977f85258135e83b3fa50f10466d94451d1e2ea9e90afd7614e46645973db5da61ffa37346576861e5a7bf8fdeb99c6da7b3550f0054df167fe67effc81d51f7869be4b4d2863e775f5979e786664b1fbeb1f91e49676a278adf89927515d5ad7cae9a11ae1a66cfa9b113ff64f6443a96ef35e87bfdc7826529559efdd27fb30cb6d12c51d92fe36d48d0a6e5afdc7fa447b17dd76ad8e65bb986dfef8f3a2b841dd5a8572f0ac064e2ef321a6906d34f984bc160f743acf5615375d42922ad03a0a6a9bb6ba3fafb84c6ed0688593342e43c2e54e948345c5b778d3ff65ab540f1aed2e209606daef43e0eeabaf8c67fce33f75442adf645d7da4ec0f1eab0c6d3d57c57098881ea8942b2fb71ffcebeab8bab5dc17322e42fbee21ca3329eda6a9f4f084d90ceb05b30ad52508d44584b0689fcb6158039d04089dd5a674e14ee50d9c331a417bf89f07975401cfa802b5cda795649875e9f9b90a02cff8fc675f7383bd8d9b4270b412047348ee584cdf45e044ac914a4279f5001fa0c911c5634c02eb8c0229ab8b1236d82ca250a67d17274541c48977e821f4fba430909d39de0ea2447d8098942730b6d9f5f0b87a99c214953e44d1f6805285c31e246794265b9e499d2af0809866e41ba52be2a2a5d9187f58d85a2c5f72e05d840ce5e1e70b0d692c35e3196871f21b303e2b7376ef0af552300ab6f5ba4a53918792147cadaf2fc8a01cf06a0837e6ecc6e4492d60ed7f07da966867566fa65f5de8b1a33bb01f5fa442df059319276864734cca6b00d5fd4cef540a8d8a905161b86bfd74b3d54b9728db908e0a83df6f0c85123ccb02905d7e0710845288bb47a0550de005191892c5dbfd1fe44721c9df51fd033295eee989d40d86dfd0ee0d538413aa57cacbecc53a76e099e57b44471653524fdcf300909b87940bf7a50c0ef1cb408a2cb6ba2115608759ad9f1baf2f1e758444bc2b7831bb798d11b0c0d95a957a688190da5611ecd0b6c86d8d18c61be6371670f0bf4a70758ee04b7199f568c26c16b52c66649aba70a857c888fdbf5db99bcfe7cd5018616595d4721c85f9e9e0b6fba15ffed79b4bb8878a0b4e2b8c21e9ff1fb5544eac9a61b726d14fe4e41b2c2ec0270438cfdc02da8da1aa96f1cf3364255cbab304f8c57b777e617beb0107b0ec8fd043b63d17f74d45f7e1429e923aa915cdc79facb5904cad644a82d5542038f2a937c8a44e73a6ff5b0beaf838475b8eb3fdc7530e34c772d44182dd3f81f49c94a9338fb41673bebc23de0bb0ce68f0cdd84c870dc6c92a55b2876c9158eba09732dc95dba0a8c1dc9860a523a1a0b4da20635751aa067b22b3db021f872ddf8b362ec17b69fda01e3bd927facbd2534b110b717fda32f065c8077339401c7bd28048a23130f2eeb11cad0431a02d158859965ea038f502660b61a1361b677cf480ce3a5b858cedb6480d7f1efbcd97df505d5e69ddef1f32a9c9d5be14f0a04dba32c8408d9ac97629fc63740588ec8777192d610ebf6f88b6a45bfb69483ec52ca61f2904a7eaf55086e05437baa3858a8e09ce9e8a62c1a590726733569980d5fe86997b7495dbc43701dd2eb6a05900a66e04ac5c58a296bc0958dd8a3a934717eebb73a8143d404257da8c7049a72134c3e016cedfbb30d6b45747f743815be2cf667dd34e3c927d89fceed7f3b01c8564512240fecfbd9e79bdb5667bb1fa05aa781b89577926e570f1091001ed1115ffb089bd81b3c893a4f3e6900dc92caaf1ecc4224843b718e4663ad0b703668c40473d3fe3b9f1a7d9baebc242750fb243fdbce72521db90a55e619499376e0edfeb1b5ee78231b18f0ff851de83af0726cbf6f5b53a18e1e046aed43a10c3481314b2268f3139951319a06ced8741e7c2852a97bd2ee56f3f2ae337985626913bf39b202ce3de313ddcf597b87b21d5469158a9d88d4ec67a7286e8aae72c70603dc04dc379bfdf642f9d55bad929dda849914d06ef9465ef6e7d3945ee973fdc6a33f2099029424907c61c408c5e5f4bbb2d5bc6c0fece69ee005cc40b2008985fb22b3899be67d2a934e1812a79c1d3d8f8229b09b9b5d7c119441a79794d14df408e5e99fb0325f1e6a5a4ab20a0ca15234779a592d443725bd75ee515b3b8b8b5ee77fbca23a93c52da68eadffc68e1f0fe1b7c1a97ca7a5a9f9d62d86703ed043709d8fcdeb02d8b401fcf662f8a49e8bb7d225c58ac5be24c9cef8f208700fee75b7e428b1a206229a6bb5965794306a0d7abde3dc7b446b6f4461d9f87fa7b2dfdc88f87a65b925f2b192560ecc18089d674f15e5038a98c7609d8803f2380", 0x1000}}, 0x1006) (async) openat(r0, &(0x7f0000001240)='./file0\x00', 0x1, 0x81) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x68957000) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r2, 0x5437, 0x0) (async) 16:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 608.113114][ T12] Bluetooth: hci8: Frame reassembly failed (-84) 16:32:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000200200f0000000000000000b93eec7696035aeb97f4c75c66fbfd0daf8fc4108241e19f981385f69c185ef7093f71a657957141a850466fe75105d9b14d889e2bd5403cfe9a64753740beaf50a11969fd104520b6e4b10fd9c86e63d83d768aec213749b8b4b9b5c83a5aad91be087c28817c41d59041"], 0x10}, 0x1, 0x7}, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100000000, 0x3f) 16:32:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000200200f0000000000000000b93eec7696035aeb97f4c75c66fbfd0daf8fc4108241e19f981385f69c185ef7093f71a657957141a850466fe75105d9b14d889e2bd5403cfe9a64753740beaf50a11969fd104520b6e4b10fd9c86e63d83d768aec213749b8b4b9b5c83a5aad91be087c28817c41d59041"], 0x10}, 0x1, 0x7}, 0x0) (async) sendfile(r0, r1, &(0x7f0000000040)=0x100000000, 0x3f) 16:32:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000200200f0000000000000000b93eec7696035aeb97f4c75c66fbfd0daf8fc4108241e19f981385f69c185ef7093f71a657957141a850466fe75105d9b14d889e2bd5403cfe9a64753740beaf50a11969fd104520b6e4b10fd9c86e63d83d768aec213749b8b4b9b5c83a5aad91be087c28817c41d59041"], 0x10}, 0x1, 0x7}, 0x0) (async, rerun: 32) sendfile(r0, r1, &(0x7f0000000040)=0x100000000, 0x3f) (rerun: 32) 16:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x1c}]}, 0x60}, 0x1, 0x7}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x30280) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 609.669941][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e23, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) 16:32:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x30280) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x30280) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x6, 0x30280) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) [ 609.812136][ T56] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x1c}]}, 0x60}, 0x1, 0x7}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x1c}]}, 0x60}, 0x1, 0x7}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x1e5303) r1 = dup(r0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4049}, {r2, 0x2000}, {r0, 0x4000}, {r3, 0x10}, {r4, 0x4008}, {r5, 0x100}, {r1, 0x20}, {r1, 0x22}], 0x8, 0x1f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0x10000, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xcc9f, 0x6, 0x7f, 0x0, 0x1000, 0xf000, 0x3000, '\x00', 0x3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r6, 0x0) [ 609.979846][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 609.990970][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:08 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) 16:32:08 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x1e5303) r1 = dup(r0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4049}, {r2, 0x2000}, {r0, 0x4000}, {r3, 0x10}, {r4, 0x4008}, {r5, 0x100}, {r1, 0x20}, {r1, 0x22}], 0x8, 0x1f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0x10000, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xcc9f, 0x6, 0x7f, 0x0, 0x1000, 0xf000, 0x3000, '\x00', 0x3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r6, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x1e5303) (async) dup(r0) (async) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) poll(&(0x7f00000000c0)=[{r1, 0x4049}, {r2, 0x2000}, {r0, 0x4000}, {r3, 0x10}, {r4, 0x4008}, {r5, 0x100}, {r1, 0x20}, {r1, 0x22}], 0x8, 0x1f) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0x10000, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xcc9f, 0x6, 0x7f, 0x0, 0x1000, 0xf000, 0x3000, '\x00', 0x3}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r6, 0x0) (async) 16:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) [ 610.140227][ T3659] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 610.148238][ T3692] Bluetooth: hci8: command tx timeout 16:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x1c}]}, 0x60}, 0x1, 0x7}, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (rerun: 64) 16:32:08 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) 16:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) sendfile(r2, r1, 0x0, 0x80000000004) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 64) [ 611.819925][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 611.819964][ T5144] Bluetooth: hci7: command 0x1003 tx timeout 16:32:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e23, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) 16:32:10 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) 16:32:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x2, 0x6}) syz_open_pts(0xffffffffffffffff, 0x400) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) 16:32:10 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x1e5303) r1 = dup(r0) r2 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4049}, {r2, 0x2000}, {r0, 0x4000}, {r3, 0x10}, {r4, 0x4008}, {r5, 0x100}, {r1, 0x20}, {r1, 0x22}], 0x8, 0x1f) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0x10000, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xcc9f, 0x6, 0x7f, 0x0, 0x1000, 0xf000, 0x3000, '\x00', 0x3}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r6, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x1e5303) (async) dup(r0) (async) openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x15, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) poll(&(0x7f00000000c0)=[{r1, 0x4049}, {r2, 0x2000}, {r0, 0x4000}, {r3, 0x10}, {r4, 0x4008}, {r5, 0x100}, {r1, 0x20}, {r1, 0x22}], 0x8, 0x1f) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000200)={0x10000, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xcc9f, 0x6, 0x7f, 0x0, 0x1000, 0xf000, 0x3000, '\x00', 0x3}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4010, r6, 0x0) (async) 16:32:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x2, 0x6}) (async) syz_open_pts(0xffffffffffffffff, 0x400) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) [ 611.979516][T15036] can0: slcan on ptm0. 16:32:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x6, 0x2, 0x6}) (async) syz_open_pts(0xffffffffffffffff, 0x400) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) 16:32:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 612.117444][T15036] can0 (unregistered): slcan off ptm0. 16:32:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:10 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$l2tp(0x2, 0x2, 0x73) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x8}}, {@cache_mmap}, {@cache_loose}, {@access_user}, {@cache_none}, {@access_client}, {@access_uid={'access', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x30}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 612.274800][T15069] can0: slcan on ptm0. [ 612.400355][T15072] can0 (unregistered): slcan off ptm0. 16:32:12 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e23, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) 16:32:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="0100004cd2b4b20018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000", @ANYRES8=r2]) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xa) 16:32:12 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x8}}, {@cache_mmap}, {@cache_loose}, {@access_user}, {@cache_none}, {@access_client}, {@access_uid={'access', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x30}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 614.059845][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 614.060026][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:32:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="0100004cd2b4b20018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000", @ANYRES8=r2]) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xa) [ 614.202833][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 614.207705][T15123] can0: slcan on ptm2. [ 614.210169][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="0100004cd2b4b20018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000", @ANYRES8=r2]) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) dup(r0) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="0100004cd2b4b20018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000", @ANYRES8=r2]) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xa) (async) [ 614.336080][T15123] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x182) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) [ 614.391829][T15131] can0 (unregistered): slcan off ptm2. 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 614.477106][T15140] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$l2tp(0x2, 0x2, 0x73) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x8}}, {@cache_mmap}, {@cache_loose}, {@access_user}, {@cache_none}, {@access_client}, {@access_uid={'access', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x30}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$l2tp(0x2, 0x2, 0x73) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x8}}, {@cache_mmap}, {@cache_loose}, {@access_user}, {@cache_none}, {@access_client}, {@access_uid={'access', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x30}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) 16:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x1, 0x5, 0x3ff}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x200, 0x3, "259bdff8e39513534574cfdaa554d4711a7600"}) 16:32:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xfd) 16:32:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x182) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) (rerun: 64) 16:32:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xfd) 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x2) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x1, 0x5, 0x3ff}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x200, 0x3, "259bdff8e39513534574cfdaa554d4711a7600"}) 16:32:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (rerun: 32) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x182) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)) 16:32:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)=0xfd) 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:13 executing program 0: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02f0c96cbc55135d2a030000020000000000176b87ea0000"], 0x10}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) poll(&(0x7f0000000040)=[{r1}, {r2, 0x8570}], 0x2, 0x57) 16:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x1, 0x5, 0x3ff}) (rerun: 32) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x200, 0x3, "259bdff8e39513534574cfdaa554d4711a7600"}) 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:13 executing program 0: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02f0c96cbc55135d2a030000020000000000176b87ea0000"], 0x10}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) (async) poll(&(0x7f0000000040)=[{r1}, {r2, 0x8570}], 0x2, 0x57) 16:32:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/161) 16:32:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) 16:32:13 executing program 0: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02f0c96cbc55135d2a030000020000000000176b87ea0000"], 0x10}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) poll(&(0x7f0000000040)=[{r1}, {r2, 0x8570}], 0x2, 0x57) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02f0c96cbc55135d2a030000020000000000176b87ea0000"], 0x10}, 0x1, 0x7}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) (async) poll(&(0x7f0000000040)=[{r1}, {r2, 0x8570}], 0x2, 0x57) (async) 16:32:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockname$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) (async) [ 615.382057][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 615.389302][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/161) [ 615.464686][T15227] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/161) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/161) (async) 16:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 615.665150][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 615.672768][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) (async) 16:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:14 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendfile(r3, r1, &(0x7f0000000080)=0x4, 0x689f) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x195000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000280)) bind$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) read$fb(r5, &(0x7f0000000140)=""/232, 0xe8) 16:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 615.938138][T15269] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r1, 0x2}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) 16:32:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 64) 16:32:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r1, 0x2}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x10) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r1, 0x2}, 0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) (async) 16:32:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r1, 0x2}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x10) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r1, 0x2}, 0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) (async) 16:32:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:14 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendfile(r3, r1, &(0x7f0000000080)=0x4, 0x689f) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x195000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000280)) (async) bind$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) read$fb(r5, &(0x7f0000000140)=""/232, 0xe8) [ 616.352712][ T49] Bluetooth: hci7: sending frame failed (-49) [ 616.360014][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) 16:32:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x40000000) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) epoll_create1(0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = io_uring_setup(0x4fa9, &(0x7f0000000140)={0x0, 0x7828, 0x8, 0x0, 0x6f}) writev(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)="56a3be776dec447271d0c76472bb4eb81b4c8a93efeabcc339a70c3e2d11a0fd7ea36c02be6466949c02aa1d89465f03e5dc0c6c027feaa761ce1e4debb91d4cbeb854cb62c25a2dff2181940e5f7c72f6fec6a318f4d365e10fdc99e89c1157e81ccef6cab53856eade108310a9f05327b27a28f9665a3e79f2c810fd8d8f499ac3d74b53385af6550405337e287d8dc231df119ef43a86c32357c3201dd66e8a7b0647cee28b4f0c35a2d7089955132a5d7ac5b0347b747f640271966988642ff82c99", 0xc4}, {&(0x7f00000002c0)="297d64610af21df4c4230de47edf09ba80cfd8a503dc451de4e53e9d7b809c509d1219c5e48e34e61c436a76473f3d9ea70b56604300f21bccd96811d84842545becdafba3bca9bae028414b2134662d14ad13f08984109efceda39bd0bd02e8c06ad29f359e8be451c594404efb580e2c2f707ff70941d5d3ce68e3e261718858d551852b7f5ba43af0ad09920517864d56eb0dee0e1d3b39359b64197cb82320844b942228d5209dde8d312cbe7907a221ec9dd6", 0xb5}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f00000000c0)="c9d29f404a8ff090250ea4a4cb0a271dd411e17c8b8d58475489bc12f08b520d93061e5c9dfe03b263cca113ad558f54b1bab89f", 0x34}, {&(0x7f0000000480)="a2facdfbd67bce7bb692bb5cc88806", 0xf}, {&(0x7f00000004c0)="88afa9463119b279439da67b0d6e9048357f40bb2785706819f16c520c59da65f2adae72ac2a2c001eb49bd975e149b8d808cd46d47830888863b4c0d17d1daee173058bbe53555c85ddc5ffee46ee67104a6482617171f117bd2d03aefef12db7dd786cb3870dbe501aa9babffa00091f118fa1c9c0c9f79488c70ca0f359714fcd8e6f29135fe9b38f13", 0x8b}], 0x6) 16:32:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendfile(r3, r1, &(0x7f0000000080)=0x4, 0x689f) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x195000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000280)) (async) bind$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x24) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) read$fb(r5, &(0x7f0000000140)=""/232, 0xe8) 16:32:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "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", "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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {}, {r4}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r4, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {r4, r1}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r2}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {0x0, r1}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x80000009) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "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", "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"}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(r11, 0xc020660b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r12}, {r12}, {}, {}, {r13}, {r12}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {r13}, {0x0, r14}, {r13}, {}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {r12}, {}, {}, {r12}, {}, {0x0, r14}, {r12, r14}, {}, {r13, r14}, {}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r12, r14}, {r13, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r12}, {0x0, r14}, {r12, r14}, {r12}, {0x0, r14}, {}, {0x0, r14}, {r12}, {}, {r13}, {}, {}, {r12}, {r12, r14}, {}, {}, {0x0, r14}, {r12, r9}, {r12}, {r12, r14}, {}, {r13, r14}, {r13}, {r13}, {r13}, {}, {r13}, {0x0, r14}, {}, {r12}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12, r14}, {}, {r12, r14}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {r13}, {r12}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r10}, {r13, r14}, {r12}, {r13}, {r13}, {r13, r14}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {r13}, {r13, r14}, {0x0, r14}, {0x0, r14}, {r13}, {r13}, {0x0, r14}, {r13}, {r13}, {}, {}, {r13}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r12}, {r12, r14}, {r13, r14}, {0x0, r14}, {0x0, r9}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r13}, {r13}, {r13}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {r13, r14}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {r12}, {r13}, {r12}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {r13}, {r13, r14}, {}, {}, {}, {}, {r13, r14}, {r13, r14}, {}, {0x0, r14}, {r12, r14}, {}, {r12}, {}, {r12}, {r13}, {}, {r12}, {}, {r12, r14}, {}, {r12}, {r13, r14}, {}, {r13}, {}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12}, {r12}], 0x8, "a3fa374174c840"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052a80)={0x1c0000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r12}], 0x4, "d7830f9f37772d"}) [ 617.819907][ T5144] Bluetooth: hci6: command 0x1003 tx timeout [ 617.830835][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000140)="d55a14984cdd3219c9e866ef55f7e1ed196c4afaf81eb307d9e09fc44f4dbe6f9d79b7ddeee78e4e0cc99986e3b3ab492949069745df4cf0adbdac3e68b62bfa12a8ab3785bb6814730786483441acd3c45d7b94097a7f95a8d4fd877aa7c8a7c6a480424c66b4795ecf36a8ba05e08073d3980410328c4dd0658ff9a30c35601c58d5fd642755f415b7e9dcebf413af163f1afa7c2746d7356803123abb1c4332a1476054bb6f1cbd0f3172413c2e0f8d055e6b69855249837cd68defa442bc60c271cbc9b717d6e201adcfa38ec5dd3b6c54bb27c7940310f4f5bd8ec9783cc7de3835a14a0567a998068f95988d01a7535b8ae86cb33b7210581632d6fe05a028a79a7a8fd01f863a7326eec73d19952582cba34c83327e050fe8fc81c40deec23d0f1371e5ce16de8ae12d25f5c9d6e593f0bdca8102f76aee1a392dd93174ce669b830e4f80b5e89a08b1a8589544907d7b6b15c6c60d6f9c1dbcc9d8a2f1d840e9f1bcdba4e7cfc6c35b8c447da8951fe314847e44317787e15ed2fbd8f2dfedb5b235fbfcd2f5602b712ae1fb806b34a1bcf0bbfa04885fc997a63ec8c583a40846d9d000e40584f0a48e90ae6c59e192f533234cecb6f67752e2d8ee1bdaffc38671be68e92bd0bcfcbff5d1e7c4751987f0beece7098719c9993dfa6ab761329aa21e50721e59652417abd2f7b0b53c680cc33edd15671c1ff1c1dca8abd61f42d05e7afab2431fdfb7898a25102fd253b5a671a51e61cc339e807a8fa05a4c3be33bdf9e2fad6e600eadf0cecdbe180c6ecaea2ddba968e0fdf6ba47347f45f091688faf45c32f7c9450fba175461c6f67d527e6f09eafdca8302def5829c9589e2e8fae735ef2159db6f10e3bd33808a5c4b4848693161019fbe1f75f720ecba2d28b0dcbfd6a940a1c2521f8773395ff25a8b97e33c8e29d25f4a42ba2b95c25052f028bd0940a447a03264118ae82c66f78d4e28cfe976d365753ed9c2df9aaad821c225eb17d32634cc2b4df10f612be8ece792574c83220122abcc1da40dce5d3a4d0e6730ddc49543985b1dd59e17a54b976309421415bde743f1009f7d728814e0f87a9584e014fe1061740a49519e2f6d03f33c32274e94d97dbf88a6a8b887353ed045af97bbce6e35b8214cfe74bd493ec3b37d84a75ce07025f6212d57483346a3f016dfe9e0ea2be68b1a4ccdb9f075cf6057b99f023480fc1ac40865b615a168d771ac1c6537124cd16dcd1ac94be5b5b73d9aba5b44b4be7aaee73da930f68c13c06e3d2c68b5030d84da4caf6fce536976e3b90f48793fb42e57fdb915487e5703b32698421a60ecf22eb129e9ea88d5de2e76cdc662a096b5e6b56489ba5e78bdbebdeec73d0b0b277eedef9a303bd83790b552baf699145f10e91842ea5969eaa2ea07e5e5d7ecbfcd6e95c04997e194ca50fd7de8df8b729e25e593d66d422b2efc83756d2063d1a2415384587d98b313d1d29e1ca9db162fe030dc78c3cf2b9f35baec3b063e948577392fb6cb69e97f3e6734816f625332059692ef81153e3ab422584436b6b2650b389ea508a30c349a749e4c20039101ec78de3263cad8f06bf01531b637652b12b79c2264a2cf8945166aebd5fb052bb6fdc412cbc6920ca79727264585574d8a1b63d7848be32c12a0646d141c141dc5410b92b62cae769dd053aa40362170c65cb3004638da16821c2aeebffadfeb29a86fd90bd2a14d4f5a8af9f33ae2f13efdddcb2b60187bde23e5f819c538503fcaaf60e98c8a09f2c4ea3e3ff906b9ac810b7f78833c39ed2cc2018b9a3d02cd8742c98a4c39350cb50ef8d10bf26a2b740e63cfe42590943b5d484cbb0ea9c413796f6040cee7dffd108f1c1b06ff1cc7d323b556e12cb1d176f9df13fce1cfc43786e7993e8eb2d6b25256fd79f87d9d09ac21a52aec12082358d3a4294a89fc31193a9d832122bae6125679653f21598cd16ea5e21785356dd4ca5ce01db247e67c78043a8b47b34c230d22f989e9003c97d6495b396998075d2c76a2be95cd5207c79b6bdd0cfcdc4af82e58e1d7c5b6caf31dd64d88d2515fc5143e9726dc0e2bd7b7e4e68bc92e67b01db7eab4758e1580496d6b98841f39649212209a6ff459deebde459846e8e8f59e9f74ff9f98f2ca506043093b4e19e25e410462c1d979c67c3652d23f4722fe7dc8fe3ca771cb9f686aa002c317bf8f86f2a7dea52e6cec7da2d37f6b6868436439fc996e53b547a7e1744a9af3b9a36b3bf0175fa22c9daff9cb3497c75ee68ee15b87800ddf788c638f7c20bf91ddc99bafde117376fe5cc4277f977543bcb5567a9e0e44aeb1fda164f3c0d78ffd6ca9457ffdc250908a3527d2716074035ee26746d1feb1e6618368e27c34ab8550550f208bffcdad04841f5bb1dc3e13eedbbde734625abac3d00641ab490c5e9930456aa5f82a85dc0e323d9e0417972a4f515ec30e62cea73129fce6a50462c5397ee8789859ec125614f2cfba54becbefac3bfe3778e5c217e0f5fcb3fd0519bc64c60b324f1f78c70e136ce59e5003cf075115c21fb2a092c87efd1e071dce58e2969c708dae40b5b9fa8dcd0aea727821a5ac6049dcf4e980f76553722d7bc479c738cf3d41d1a1d44924c923a2ba14e87112df1abfc9e9e6f7f6a942f92391aee2ca59982ba1c160347b1980add033b713ec85335b13fd5862ccdfb1fecb5f2a8e176db4ff70d57152045fe3aaf45bb60d432187a771b6f709596b4f97f040a22b8e68e65b24e0363fa4ce9ba90f48d2ac2a281162d7f096178f0abfe24d3955aa284dacf84de502b127cd9f75c3c8519ee78766c067f39377ab62de747737f199354f8676f92278dd4919a2376c4f127f25006ea3375bbfad0a2ce6cb617a75698e05ff14419f14ddc247bc2b6e0b843a7cc6356cf5c65fe074ccaaa28eaaf5d36f31a9c797871e819d54de24d5b90d5824a200c71bac5e3e19b721ad0ca312819a064f35ab4a81d7e04e5910bcf0c409502b998db214bb0f873eab81e3be77aa5a9ca596e62cbc164f1997b0b211ce566495e9008641c4335c2aa9079078026c325961a10de76cc3cb25132638b7f888d1dcb55cd0f5200c45ce035ed6f47315bf7fbf27a14ceb9ec0a851de795bc822396de162bea45c66ff46ac6534af26e41f91167e270f602d8cc2c76548b7d753fec6ffaaa9a2d8c388b7bafc1f09485f613817e0f59fc604e82f762d56de8ed397f725e7fa6204f511f4aef28c6b6f9e7ee2bd732746b761794830c5a71f61b9dbe8c0c2e457e0c026cea6455ba3663a32974c116b3803edf49c53c4e1eff9b8e1c2004108b1840526a1b7936e44a175f08e9e231d20af2df86e75fd9ca8df10c912fc114d9c308e8bdd5362dd21b6cf4b9f4b0254c03817e5259ebf40eb1f9d7c6a4f4629be9ba93446376619a4b85ac6e24439c6404c41f067152b8fc21dbedc8c26569a8eeed2274d429eeaa27f21580f1e870ea53e44d57960bd63bf7585e4da3f89118834d23803917570284e927bc18983342ee8c7808ff47c98fbc3137952fc2a6b8f623d0d4ec182c47335eec1b3b660701b04ed237c52bf57d5169b70f8ef99a7fc992f7037b7667df8fa0d4c7e424ac820a1b9c3adadae4b5f1799c690459563cd6e366c292a7e0efcc989f788d10eb7e719088db6446a1dad425db19967b4150eafaf50c300cafce3793ef868390963719edd1ed8d923e270c3c6865f21c57ecccda94adf29e77812126d26b8274db0626a02d647f8b17e515c339580fc30c8a4a0acd48fd82d5a46ce7edf1631e6dd4830390e126b1d1f170cdd0cd7a95fd6147e6609221411ce9253b7b52bb1d1a12c66cf20706e0f9faebbcf5ce18cc0abb9b4c58370fb547beb69c0129a6125a5cdae83fbdfc453973e7ea33864d21fd4f85244f2299784f49b58056cdb040a01d8433d521064fa4abd0c17bb87108765a0274abb36cb39a3caeac61b302080d6838b59c7c20620c2462b336b2de100ff149791007002d25d7243373add0e7c94d3fafb09338e7335d650c850e7237ab190baa1c048a2537365fca385d98a6d53eb0397ced6f057a97bc701262e40236b7876a0c1bdcb658f521f32a933d2591c363e36e18ba4d0f6d9cbfe45e78b1b95912280d17c9d5464d48b8edae1a26778cc9295392854ca0d43ffa040df573aa8614d56eac5b5c951c09cfd5b9afac670853276c48f1fa0caada31cdab13d0f6dd1aae29c73e33b21567e076e97e3e190d3c199eb12204c4f8b88d62a61d09ad44176e2ca3335edf84f9945858c9e9850214a42ac07551757125a34819331ae98e0aa7a7aa4bf4facc9de5416da1e1f3c93e4fcc41be43ef91950dfa04ac932191b65c36d6947765910e8a704f4b1152fd7ec1820f4fcabde1095bc8a270779fc0700f839cab652e67bb5227c0757a395b67dee1e22f80a2889f17d9c65632259ed0a73cf764d6e50a389038f687918540d324a5e7f6c16b4a6ebe5c2fec936267a6caa601c09a3cdc063b37726f63302aea9b04715e6aaf1a7224d183295b766187bf35839f351ad8672f81879d8caac373e6c2fc3e9984a1587235c8d6069934e2e8d45fe6687b2ed0ac9d501feed61d7d4713a9535519c8d8a03886ad8bc863170a629b33f8a930dfa57ec5c48bde3047a84f5354054f4f51c961d3edc74bcde874364c02913b9aaca1f504364d2caffbfcaeae8a45efe58993b35a3aab9c8e159687dcf70501a52d9736a11607effb79f519331bcdeb4c7b4110bd704860d721cde31b889e1473615f2978e3119524f3453189ec5010ff28370a98c8ebd43cd013914d95cabc513500cbdbcf649b5d546d245d5a70fa47bd6e4316069783cfbae32ba6151b99907de26b2d16b6e1a116565ddee8f3f8a2e98b4aa9aa1a7c3bd407a08e9795a00fe4ab816a29ff99279b03aca4891acdd7497992658ad444322e80019fb2978fa695830572ee67c9fc1751018facf6d617edb50b1501d848e9458b5fdc7e99a36280c64e52ac2518928c6b9ce8e7d4cce82be3b374386f11f306b654aab0ea22591e2783108055cf9ff455bd27460e3b16cb794c08d52c2b465e24c4ede13d5a57c5007c329853b8d9a8b448aae1bbfeba32903e54abc34b076aa6994d91fb52e4e0d49adaa7f54b757b4c8e586dfd0f3916aa795d92cca0a0cb9bf07d7ee61cade46aa4ab7abbb5128b9c555091855b525f2f04776ff0f651b98b43b9d5bf0109d22dbd8e27599401903cf27a70d2fda2ec4584dca5b57751b19af30844175bb3f4114cbf23e476e41ab5e9cf0f391d4027be72d79c4e9d69cfd7fb107b6e24056881701af710151756d467f8611ee1fe65f1b2f20650ce70c6be52c229e9d2dd5324287a78310332854afcbd462eb31686524978ae23869f51c2ef3c1d02ac3418ac6b5101e33284d9c9b29344358b7acb54f059171989b288c9b4a390c23c0cc268c96bf6ab49a98e71ce1743fb0633f7fe862abe61b6d0e30a4f7ba28aecde5fb15502df89f493afb9faee53e14aa4ae41a887a2f2c334eab29890eaa897bcda0bafafaabf7b9b9d7a497bc26ecca54198c5de571749caa913794c56932a89e995d01b7e5eec7047d3be5f87c00b7d4be2eb2ed78830b6cf74587a1985455f0216be68ed3ad96b97e224df59541683ebffa914abf82046f7ac037f99cc8b5340f29a413c38acf1d7f335568175b6e274ab9877b17adfd0fa817b7c14fbaf5fe0d01fc8a9e7f2e5c7239d3bb6218cbc699dced395f46dd73925d8", 0x1000}, {&(0x7f0000001140)="3d98c208bc7377474a22a3fd667856ead9f5adab12f62545156105db69642ad4dc21fdd1c6dec0e116a1038958619966da2ac2ce7dcb443f958f34ed4d4cb0e65d86f94651334fd6f3433c80f3374f6f7317c213258d71f07cfa490364aad8753a69cb325228dd7191b889a7dadf9f26be6236271384dcd506d9c061672bb81dc592a5becb5e310ff0f17ff1bd5a07544d5c1927ea7bdeca655616e120505bd9a5ec52e5bd922423feac035dcdc57729bf5b0a7b7351348ddaa506875fa2c67502fbee8faa23d0600bace34cfc9504f51eea82456a0932338a667d1bad0a16837e8810323abfd0", 0xe7}], 0x2, 0x5, 0x101) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000001280)=0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x1f) 16:32:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x20002, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) [ 617.949392][T15342] mkiss: ax0: crc mode is auto. [ 617.967742][ T28] audit: type=1800 audit(1664037136.471:16): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1170 res=0 errno=0 16:32:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) epoll_create1(0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = io_uring_setup(0x4fa9, &(0x7f0000000140)={0x0, 0x7828, 0x8, 0x0, 0x6f}) writev(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)="56a3be776dec447271d0c76472bb4eb81b4c8a93efeabcc339a70c3e2d11a0fd7ea36c02be6466949c02aa1d89465f03e5dc0c6c027feaa761ce1e4debb91d4cbeb854cb62c25a2dff2181940e5f7c72f6fec6a318f4d365e10fdc99e89c1157e81ccef6cab53856eade108310a9f05327b27a28f9665a3e79f2c810fd8d8f499ac3d74b53385af6550405337e287d8dc231df119ef43a86c32357c3201dd66e8a7b0647cee28b4f0c35a2d7089955132a5d7ac5b0347b747f640271966988642ff82c99", 0xc4}, {&(0x7f00000002c0)="297d64610af21df4c4230de47edf09ba80cfd8a503dc451de4e53e9d7b809c509d1219c5e48e34e61c436a76473f3d9ea70b56604300f21bccd96811d84842545becdafba3bca9bae028414b2134662d14ad13f08984109efceda39bd0bd02e8c06ad29f359e8be451c594404efb580e2c2f707ff70941d5d3ce68e3e261718858d551852b7f5ba43af0ad09920517864d56eb0dee0e1d3b39359b64197cb82320844b942228d5209dde8d312cbe7907a221ec9dd6", 0xb5}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f00000000c0)="c9d29f404a8ff090250ea4a4cb0a271dd411e17c8b8d58475489bc12f08b520d93061e5c9dfe03b263cca113ad558f54b1bab89f", 0x34}, {&(0x7f0000000480)="a2facdfbd67bce7bb692bb5cc88806", 0xf}, {&(0x7f00000004c0)="88afa9463119b279439da67b0d6e9048357f40bb2785706819f16c520c59da65f2adae72ac2a2c001eb49bd975e149b8d808cd46d47830888863b4c0d17d1daee173058bbe53555c85ddc5ffee46ee67104a6482617171f117bd2d03aefef12db7dd786cb3870dbe501aa9babffa00091f118fa1c9c0c9f79488c70ca0f359714fcd8e6f29135fe9b38f13", 0x8b}], 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) (async) epoll_create1(0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) io_uring_setup(0x4fa9, &(0x7f0000000140)={0x0, 0x7828, 0x8, 0x0, 0x6f}) (async) writev(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)="56a3be776dec447271d0c76472bb4eb81b4c8a93efeabcc339a70c3e2d11a0fd7ea36c02be6466949c02aa1d89465f03e5dc0c6c027feaa761ce1e4debb91d4cbeb854cb62c25a2dff2181940e5f7c72f6fec6a318f4d365e10fdc99e89c1157e81ccef6cab53856eade108310a9f05327b27a28f9665a3e79f2c810fd8d8f499ac3d74b53385af6550405337e287d8dc231df119ef43a86c32357c3201dd66e8a7b0647cee28b4f0c35a2d7089955132a5d7ac5b0347b747f640271966988642ff82c99", 0xc4}, {&(0x7f00000002c0)="297d64610af21df4c4230de47edf09ba80cfd8a503dc451de4e53e9d7b809c509d1219c5e48e34e61c436a76473f3d9ea70b56604300f21bccd96811d84842545becdafba3bca9bae028414b2134662d14ad13f08984109efceda39bd0bd02e8c06ad29f359e8be451c594404efb580e2c2f707ff70941d5d3ce68e3e261718858d551852b7f5ba43af0ad09920517864d56eb0dee0e1d3b39359b64197cb82320844b942228d5209dde8d312cbe7907a221ec9dd6", 0xb5}, {&(0x7f0000000380)="9f7e2156c76ae15a44d13e665376ba60a44833a0ef099fa1f12cc080f43547c1a11f9bf7ae266719c69f349219816474acba10c7435331c5ca35ad080888ef76f300e4742aedf6064ef21688e3d9cf56a97bc106a20afb58a96c79ab038391f26af96443547d5244aaef105813b219d938ba8aae3a229167cfe9e74bbb0672b368852996baeb9bcb0080efda0868b28e34d614feb9778d60130aa895efca8bf79cd6401bf64e9f42b7fbc5e484daafa2886f2472bc21b2bb74a944842b02974ba9c5420456fb1daa9a6151588c1db0c1f0bccd028369d3849e8a9cfbd23e651ffbddaf25777f4989f81d1d4f80aa5cd65785c02e5404397b5cc791", 0xfb}, {&(0x7f00000000c0)="c9d29f404a8ff090250ea4a4cb0a271dd411e17c8b8d58475489bc12f08b520d93061e5c9dfe03b263cca113ad558f54b1bab89f", 0x34}, {&(0x7f0000000480)="a2facdfbd67bce7bb692bb5cc88806", 0xf}, {&(0x7f00000004c0)="88afa9463119b279439da67b0d6e9048357f40bb2785706819f16c520c59da65f2adae72ac2a2c001eb49bd975e149b8d808cd46d47830888863b4c0d17d1daee173058bbe53555c85ddc5ffee46ee67104a6482617171f117bd2d03aefef12db7dd786cb3870dbe501aa9babffa00091f118fa1c9c0c9f79488c70ca0f359714fcd8e6f29135fe9b38f13", 0x8b}], 0x6) (async) [ 618.060658][ T12] Bluetooth: hci8: Frame reassembly failed (-84) 16:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "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", "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"}) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) (async, rerun: 64) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {}, {r4}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r4, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {r4, r1}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r2}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {0x0, r1}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) (async) r7 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) (async) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x80000009) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "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", "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"}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$FS_IOC_FIEMAP(r11, 0xc020660b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r12}, {r12}, {}, {}, {r13}, {r12}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {r13}, {0x0, r14}, {r13}, {}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {r12}, {}, {}, {r12}, {}, {0x0, r14}, {r12, r14}, {}, {r13, r14}, {}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r12, r14}, {r13, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r12}, {0x0, r14}, {r12, r14}, {r12}, {0x0, r14}, {}, {0x0, r14}, {r12}, {}, {r13}, {}, {}, {r12}, {r12, r14}, {}, {}, {0x0, r14}, {r12, r9}, {r12}, {r12, r14}, {}, {r13, r14}, {r13}, {r13}, {r13}, {}, {r13}, {0x0, r14}, {}, {r12}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12, r14}, {}, {r12, r14}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {r13}, {r12}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r10}, {r13, r14}, {r12}, {r13}, {r13}, {r13, r14}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {r13}, {r13, r14}, {0x0, r14}, {0x0, r14}, {r13}, {r13}, {0x0, r14}, {r13}, {r13}, {}, {}, {r13}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r12}, {r12, r14}, {r13, r14}, {0x0, r14}, {0x0, r9}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r13}, {r13}, {r13}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {r13, r14}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {r12}, {r13}, {r12}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {r13}, {r13, r14}, {}, {}, {}, {}, {r13, r14}, {r13, r14}, {}, {0x0, r14}, {r12, r14}, {}, {r12}, {}, {r12}, {r13}, {}, {r12}, {}, {r12, r14}, {}, {r12}, {r13, r14}, {}, {r13}, {}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12}, {r12}], 0x8, "a3fa374174c840"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052a80)={0x1c0000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r12}], 0x4, "d7830f9f37772d"}) [ 618.191378][T15367] mkiss: ax0: crc mode is auto. 16:32:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x20002, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) [ 618.225175][T15367] ptm ptm1: ldisc open failed (-12), clearing slot 1 16:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "c9e8e2cddb6196aac4193447cc2e2bdb4e5c7556c8325704602f3e9d7dfbffe843e52c72838b77881f42d1f7db16618e3eff35c0cba98702b8a44d8204832b97ce27a72f6ed16a1138509d580fd1ff1fcecdeb563c2fe503244ae21c1bf1c49d9fc1c7d6ce3bab13967e42725282ec6018e5cc24cdaa47c2b71afbf40fff249d9c906a4ff386e15330e6d6783779c8aba2a4af6f3ea722ed434804535cfb07cdfd2cf5c0f3ee125266f2417a423603dc2caa598fd2da07056f88646fe4952e4db6ff543d0607f3359be25671674954564f0ee133515d66323ab9f474fbdf65c22b70f7eaeac04ea39841ec5f606fd83f792781dd05e0a22210477ab4757bcb36", "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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r4}, {r4}, {}, {}, {r5}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4}, {}, {r4}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {}, {r4}, {}, {0x0, r6}, {r4, r6}, {}, {r5, r6}, {}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r4}, {}, {r4, r6}, {r5, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r4}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {r4}, {r4, r6}, {}, {}, {0x0, r6}, {r4, r1}, {r4}, {r4, r6}, {}, {r5, r6}, {r5}, {r5}, {r5}, {}, {r5}, {0x0, r6}, {}, {r4}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4, r6}, {}, {r4, r6}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r2}, {r5, r6}, {r4}, {r5}, {r5}, {r5, r6}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4, r6}, {}, {}, {r5}, {r5, r6}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r5}, {r5}, {}, {}, {r5}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {}, {}, {}, {r4}, {r4, r6}, {r5, r6}, {0x0, r6}, {0x0, r1}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {r5}, {r5}, {r4}, {}, {}, {r5}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r4}, {r5}, {r4}, {r4, r6}, {r4}, {r5, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5, r6}, {}, {}, {}, {}, {r5, r6}, {r5, r6}, {}, {0x0, r6}, {r4, r6}, {}, {r4}, {}, {r4}, {r5}, {}, {r4}, {}, {r4, r6}, {}, {r4}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4}, {r4}], 0x8, "a3fa374174c840"}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x80000009) (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000004400)={0x0, 0x0, "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", "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"}) (async, rerun: 64) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r11, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$FS_IOC_FIEMAP(r11, 0xc020660b, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053680)={0x1, [{}, {}, {r12}, {r12}, {}, {}, {r13}, {r12}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {r13}, {0x0, r14}, {r13}, {}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {r12}, {}, {}, {r12}, {}, {0x0, r14}, {r12, r14}, {}, {r13, r14}, {}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r12}, {}, {r12, r14}, {r13, r14}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r12}, {0x0, r14}, {r12, r14}, {r12}, {0x0, r14}, {}, {0x0, r14}, {r12}, {}, {r13}, {}, {}, {r12}, {r12, r14}, {}, {}, {0x0, r14}, {r12, r9}, {r12}, {r12, r14}, {}, {r13, r14}, {r13}, {r13}, {r13}, {}, {r13}, {0x0, r14}, {}, {r12}, {r12}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r12, r14}, {}, {r12, r14}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {r13}, {r12}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r10}, {r13, r14}, {r12}, {r13}, {r13}, {r13, r14}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {r13}, {r13, r14}, {0x0, r14}, {0x0, r14}, {r13}, {r13}, {0x0, r14}, {r13}, {r13}, {}, {}, {r13}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {}, {}, {}, {r12}, {r12, r14}, {r13, r14}, {0x0, r14}, {0x0, r9}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r13}, {r13}, {r13}, {r12}, {}, {}, {r13}, {}, {0x0, r14}, {}, {0x0, r14}, {r13, r14}, {r13}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {r12}, {r13}, {r12}, {r12, r14}, {r12}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {r13}, {r13, r14}, {}, {}, {}, {}, {r13, r14}, {r13, r14}, {}, {0x0, r14}, {r12, r14}, {}, {r12}, {}, {r12}, {r13}, {}, {r12}, {}, {r12, r14}, {}, {r12}, {r13, r14}, {}, {r13}, {}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12}, {r12}], 0x8, "a3fa374174c840"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052a80)={0x1c0000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {r12}], 0x4, "d7830f9f37772d"}) [ 618.394120][ T28] audit: type=1800 audit(1664037136.901:17): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 619.899860][ T8189] Bluetooth: hci6: command 0x1003 tx timeout [ 619.899952][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1653c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) (async) epoll_create1(0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = io_uring_setup(0x4fa9, &(0x7f0000000140)={0x0, 0x7828, 0x8, 0x0, 0x6f}) writev(r1, &(0x7f0000000580)=[{&(0x7f00000001c0)="56a3be776dec447271d0c76472bb4eb81b4c8a93efeabcc339a70c3e2d11a0fd7ea36c02be6466949c02aa1d89465f03e5dc0c6c027feaa761ce1e4debb91d4cbeb854cb62c25a2dff2181940e5f7c72f6fec6a318f4d365e10fdc99e89c1157e81ccef6cab53856eade108310a9f05327b27a28f9665a3e79f2c810fd8d8f499ac3d74b53385af6550405337e287d8dc231df119ef43a86c32357c3201dd66e8a7b0647cee28b4f0c35a2d7089955132a5d7ac5b0347b747f640271966988642ff82c99", 0xc4}, {&(0x7f00000002c0)="297d64610af21df4c4230de47edf09ba80cfd8a503dc451de4e53e9d7b809c509d1219c5e48e34e61c436a76473f3d9ea70b56604300f21bccd96811d84842545becdafba3bca9bae028414b2134662d14ad13f08984109efceda39bd0bd02e8c06ad29f359e8be451c594404efb580e2c2f707ff70941d5d3ce68e3e261718858d551852b7f5ba43af0ad09920517864d56eb0dee0e1d3b39359b64197cb82320844b942228d5209dde8d312cbe7907a221ec9dd6", 0xb5}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f00000000c0)="c9d29f404a8ff090250ea4a4cb0a271dd411e17c8b8d58475489bc12f08b520d93061e5c9dfe03b263cca113ad558f54b1bab89f", 0x34}, {&(0x7f0000000480)="a2facdfbd67bce7bb692bb5cc88806", 0xf}, {&(0x7f00000004c0)="88afa9463119b279439da67b0d6e9048357f40bb2785706819f16c520c59da65f2adae72ac2a2c001eb49bd975e149b8d808cd46d47830888863b4c0d17d1daee173058bbe53555c85ddc5ffee46ee67104a6482617171f117bd2d03aefef12db7dd786cb3870dbe501aa9babffa00091f118fa1c9c0c9f79488c70ca0f359714fcd8e6f29135fe9b38f13", 0x8b}], 0x6) 16:32:18 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x20002, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000080)) 16:32:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{r0}, "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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000010c0)={'pim6reg\x00', 0x200}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 16:32:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 619.979881][ T8189] Bluetooth: hci7: command 0x1003 tx timeout [ 619.980033][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1653c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 620.059890][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 620.067724][ T8189] Bluetooth: hci8: command tx timeout [ 620.085070][ T3659] Bluetooth: hci6: sending frame failed (-49) [ 620.086702][T15396] Bluetooth: hci6: Frame reassembly failed (-84) [ 620.100390][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000140)="d55a14984cdd3219c9e866ef55f7e1ed196c4afaf81eb307d9e09fc44f4dbe6f9d79b7ddeee78e4e0cc99986e3b3ab492949069745df4cf0adbdac3e68b62bfa12a8ab3785bb6814730786483441acd3c45d7b94097a7f95a8d4fd877aa7c8a7c6a480424c66b4795ecf36a8ba05e08073d3980410328c4dd0658ff9a30c35601c58d5fd642755f415b7e9dcebf413af163f1afa7c2746d7356803123abb1c4332a1476054bb6f1cbd0f3172413c2e0f8d055e6b69855249837cd68defa442bc60c271cbc9b717d6e201adcfa38ec5dd3b6c54bb27c7940310f4f5bd8ec9783cc7de3835a14a0567a998068f95988d01a7535b8ae86cb33b7210581632d6fe05a028a79a7a8fd01f863a7326eec73d19952582cba34c83327e050fe8fc81c40deec23d0f1371e5ce16de8ae12d25f5c9d6e593f0bdca8102f76aee1a392dd93174ce669b830e4f80b5e89a08b1a8589544907d7b6b15c6c60d6f9c1dbcc9d8a2f1d840e9f1bcdba4e7cfc6c35b8c447da8951fe314847e44317787e15ed2fbd8f2dfedb5b235fbfcd2f5602b712ae1fb806b34a1bcf0bbfa04885fc997a63ec8c583a40846d9d000e40584f0a48e90ae6c59e192f533234cecb6f67752e2d8ee1bdaffc38671be68e92bd0bcfcbff5d1e7c4751987f0beece7098719c9993dfa6ab761329aa21e50721e59652417abd2f7b0b53c680cc33edd15671c1ff1c1dca8abd61f42d05e7afab2431fdfb7898a25102fd253b5a671a51e61cc339e807a8fa05a4c3be33bdf9e2fad6e600eadf0cecdbe180c6ecaea2ddba968e0fdf6ba47347f45f091688faf45c32f7c9450fba175461c6f67d527e6f09eafdca8302def5829c9589e2e8fae735ef2159db6f10e3bd33808a5c4b4848693161019fbe1f75f720ecba2d28b0dcbfd6a940a1c2521f8773395ff25a8b97e33c8e29d25f4a42ba2b95c25052f028bd0940a447a03264118ae82c66f78d4e28cfe976d365753ed9c2df9aaad821c225eb17d32634cc2b4df10f612be8ece792574c83220122abcc1da40dce5d3a4d0e6730ddc49543985b1dd59e17a54b976309421415bde743f1009f7d728814e0f87a9584e014fe1061740a49519e2f6d03f33c32274e94d97dbf88a6a8b887353ed045af97bbce6e35b8214cfe74bd493ec3b37d84a75ce07025f6212d57483346a3f016dfe9e0ea2be68b1a4ccdb9f075cf6057b99f023480fc1ac40865b615a168d771ac1c6537124cd16dcd1ac94be5b5b73d9aba5b44b4be7aaee73da930f68c13c06e3d2c68b5030d84da4caf6fce536976e3b90f48793fb42e57fdb915487e5703b32698421a60ecf22eb129e9ea88d5de2e76cdc662a096b5e6b56489ba5e78bdbebdeec73d0b0b277eedef9a303bd83790b552baf699145f10e91842ea5969eaa2ea07e5e5d7ecbfcd6e95c04997e194ca50fd7de8df8b729e25e593d66d422b2efc83756d2063d1a2415384587d98b313d1d29e1ca9db162fe030dc78c3cf2b9f35baec3b063e948577392fb6cb69e97f3e6734816f625332059692ef81153e3ab422584436b6b2650b389ea508a30c349a749e4c20039101ec78de3263cad8f06bf01531b637652b12b79c2264a2cf8945166aebd5fb052bb6fdc412cbc6920ca79727264585574d8a1b63d7848be32c12a0646d141c141dc5410b92b62cae769dd053aa40362170c65cb3004638da16821c2aeebffadfeb29a86fd90bd2a14d4f5a8af9f33ae2f13efdddcb2b60187bde23e5f819c538503fcaaf60e98c8a09f2c4ea3e3ff906b9ac810b7f78833c39ed2cc2018b9a3d02cd8742c98a4c39350cb50ef8d10bf26a2b740e63cfe42590943b5d484cbb0ea9c413796f6040cee7dffd108f1c1b06ff1cc7d323b556e12cb1d176f9df13fce1cfc43786e7993e8eb2d6b25256fd79f87d9d09ac21a52aec12082358d3a4294a89fc31193a9d832122bae6125679653f21598cd16ea5e21785356dd4ca5ce01db247e67c78043a8b47b34c230d22f989e9003c97d6495b396998075d2c76a2be95cd5207c79b6bdd0cfcdc4af82e58e1d7c5b6caf31dd64d88d2515fc5143e9726dc0e2bd7b7e4e68bc92e67b01db7eab4758e1580496d6b98841f39649212209a6ff459deebde459846e8e8f59e9f74ff9f98f2ca506043093b4e19e25e410462c1d979c67c3652d23f4722fe7dc8fe3ca771cb9f686aa002c317bf8f86f2a7dea52e6cec7da2d37f6b6868436439fc996e53b547a7e1744a9af3b9a36b3bf0175fa22c9daff9cb3497c75ee68ee15b87800ddf788c638f7c20bf91ddc99bafde117376fe5cc4277f977543bcb5567a9e0e44aeb1fda164f3c0d78ffd6ca9457ffdc250908a3527d2716074035ee26746d1feb1e6618368e27c34ab8550550f208bffcdad04841f5bb1dc3e13eedbbde734625abac3d00641ab490c5e9930456aa5f82a85dc0e323d9e0417972a4f515ec30e62cea73129fce6a50462c5397ee8789859ec125614f2cfba54becbefac3bfe3778e5c217e0f5fcb3fd0519bc64c60b324f1f78c70e136ce59e5003cf075115c21fb2a092c87efd1e071dce58e2969c708dae40b5b9fa8dcd0aea727821a5ac6049dcf4e980f76553722d7bc479c738cf3d41d1a1d44924c923a2ba14e87112df1abfc9e9e6f7f6a942f92391aee2ca59982ba1c160347b1980add033b713ec85335b13fd5862ccdfb1fecb5f2a8e176db4ff70d57152045fe3aaf45bb60d432187a771b6f709596b4f97f040a22b8e68e65b24e0363fa4ce9ba90f48d2ac2a281162d7f096178f0abfe24d3955aa284dacf84de502b127cd9f75c3c8519ee78766c067f39377ab62de747737f199354f8676f92278dd4919a2376c4f127f25006ea3375bbfad0a2ce6cb617a75698e05ff14419f14ddc247bc2b6e0b843a7cc6356cf5c65fe074ccaaa28eaaf5d36f31a9c797871e819d54de24d5b90d5824a200c71bac5e3e19b721ad0ca312819a064f35ab4a81d7e04e5910bcf0c409502b998db214bb0f873eab81e3be77aa5a9ca596e62cbc164f1997b0b211ce566495e9008641c4335c2aa9079078026c325961a10de76cc3cb25132638b7f888d1dcb55cd0f5200c45ce035ed6f47315bf7fbf27a14ceb9ec0a851de795bc822396de162bea45c66ff46ac6534af26e41f91167e270f602d8cc2c76548b7d753fec6ffaaa9a2d8c388b7bafc1f09485f613817e0f59fc604e82f762d56de8ed397f725e7fa6204f511f4aef28c6b6f9e7ee2bd732746b761794830c5a71f61b9dbe8c0c2e457e0c026cea6455ba3663a32974c116b3803edf49c53c4e1eff9b8e1c2004108b1840526a1b7936e44a175f08e9e231d20af2df86e75fd9ca8df10c912fc114d9c308e8bdd5362dd21b6cf4b9f4b0254c03817e5259ebf40eb1f9d7c6a4f4629be9ba93446376619a4b85ac6e24439c6404c41f067152b8fc21dbedc8c26569a8eeed2274d429eeaa27f21580f1e870ea53e44d57960bd63bf7585e4da3f89118834d23803917570284e927bc18983342ee8c7808ff47c98fbc3137952fc2a6b8f623d0d4ec182c47335eec1b3b660701b04ed237c52bf57d5169b70f8ef99a7fc992f7037b7667df8fa0d4c7e424ac820a1b9c3adadae4b5f1799c690459563cd6e366c292a7e0efcc989f788d10eb7e719088db6446a1dad425db19967b4150eafaf50c300cafce3793ef868390963719edd1ed8d923e270c3c6865f21c57ecccda94adf29e77812126d26b8274db0626a02d647f8b17e515c339580fc30c8a4a0acd48fd82d5a46ce7edf1631e6dd4830390e126b1d1f170cdd0cd7a95fd6147e6609221411ce9253b7b52bb1d1a12c66cf20706e0f9faebbcf5ce18cc0abb9b4c58370fb547beb69c0129a6125a5cdae83fbdfc453973e7ea33864d21fd4f85244f2299784f49b58056cdb040a01d8433d521064fa4abd0c17bb87108765a0274abb36cb39a3caeac61b302080d6838b59c7c20620c2462b336b2de100ff149791007002d25d7243373add0e7c94d3fafb09338e7335d650c850e7237ab190baa1c048a2537365fca385d98a6d53eb0397ced6f057a97bc701262e40236b7876a0c1bdcb658f521f32a933d2591c363e36e18ba4d0f6d9cbfe45e78b1b95912280d17c9d5464d48b8edae1a26778cc9295392854ca0d43ffa040df573aa8614d56eac5b5c951c09cfd5b9afac670853276c48f1fa0caada31cdab13d0f6dd1aae29c73e33b21567e076e97e3e190d3c199eb12204c4f8b88d62a61d09ad44176e2ca3335edf84f9945858c9e9850214a42ac07551757125a34819331ae98e0aa7a7aa4bf4facc9de5416da1e1f3c93e4fcc41be43ef91950dfa04ac932191b65c36d6947765910e8a704f4b1152fd7ec1820f4fcabde1095bc8a270779fc0700f839cab652e67bb5227c0757a395b67dee1e22f80a2889f17d9c65632259ed0a73cf764d6e50a389038f687918540d324a5e7f6c16b4a6ebe5c2fec936267a6caa601c09a3cdc063b37726f63302aea9b04715e6aaf1a7224d183295b766187bf35839f351ad8672f81879d8caac373e6c2fc3e9984a1587235c8d6069934e2e8d45fe6687b2ed0ac9d501feed61d7d4713a9535519c8d8a03886ad8bc863170a629b33f8a930dfa57ec5c48bde3047a84f5354054f4f51c961d3edc74bcde874364c02913b9aaca1f504364d2caffbfcaeae8a45efe58993b35a3aab9c8e159687dcf70501a52d9736a11607effb79f519331bcdeb4c7b4110bd704860d721cde31b889e1473615f2978e3119524f3453189ec5010ff28370a98c8ebd43cd013914d95cabc513500cbdbcf649b5d546d245d5a70fa47bd6e4316069783cfbae32ba6151b99907de26b2d16b6e1a116565ddee8f3f8a2e98b4aa9aa1a7c3bd407a08e9795a00fe4ab816a29ff99279b03aca4891acdd7497992658ad444322e80019fb2978fa695830572ee67c9fc1751018facf6d617edb50b1501d848e9458b5fdc7e99a36280c64e52ac2518928c6b9ce8e7d4cce82be3b374386f11f306b654aab0ea22591e2783108055cf9ff455bd27460e3b16cb794c08d52c2b465e24c4ede13d5a57c5007c329853b8d9a8b448aae1bbfeba32903e54abc34b076aa6994d91fb52e4e0d49adaa7f54b757b4c8e586dfd0f3916aa795d92cca0a0cb9bf07d7ee61cade46aa4ab7abbb5128b9c555091855b525f2f04776ff0f651b98b43b9d5bf0109d22dbd8e27599401903cf27a70d2fda2ec4584dca5b57751b19af30844175bb3f4114cbf23e476e41ab5e9cf0f391d4027be72d79c4e9d69cfd7fb107b6e24056881701af710151756d467f8611ee1fe65f1b2f20650ce70c6be52c229e9d2dd5324287a78310332854afcbd462eb31686524978ae23869f51c2ef3c1d02ac3418ac6b5101e33284d9c9b29344358b7acb54f059171989b288c9b4a390c23c0cc268c96bf6ab49a98e71ce1743fb0633f7fe862abe61b6d0e30a4f7ba28aecde5fb15502df89f493afb9faee53e14aa4ae41a887a2f2c334eab29890eaa897bcda0bafafaabf7b9b9d7a497bc26ecca54198c5de571749caa913794c56932a89e995d01b7e5eec7047d3be5f87c00b7d4be2eb2ed78830b6cf74587a1985455f0216be68ed3ad96b97e224df59541683ebffa914abf82046f7ac037f99cc8b5340f29a413c38acf1d7f335568175b6e274ab9877b17adfd0fa817b7c14fbaf5fe0d01fc8a9e7f2e5c7239d3bb6218cbc699dced395f46dd73925d8", 0x1000}, {&(0x7f0000001140)="3d98c208bc7377474a22a3fd667856ead9f5adab12f62545156105db69642ad4dc21fdd1c6dec0e116a1038958619966da2ac2ce7dcb443f958f34ed4d4cb0e65d86f94651334fd6f3433c80f3374f6f7317c213258d71f07cfa490364aad8753a69cb325228dd7191b889a7dadf9f26be6236271384dcd506d9c061672bb81dc592a5becb5e310ff0f17ff1bd5a07544d5c1927ea7bdeca655616e120505bd9a5ec52e5bd922423feac035dcdc57729bf5b0a7b7351348ddaa506875fa2c67502fbee8faa23d0600bace34cfc9504f51eea82456a0932338a667d1bad0a16837e8810323abfd0", 0xe7}], 0x2, 0x5, 0x101) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000001280)=0xff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x1f) [ 620.115222][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 620.122986][ T3659] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{r0}, "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"}) (rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000010c0)={'pim6reg\x00', 0x200}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) [ 620.180135][T15403] mkiss: ax0: crc mode is auto. 16:32:18 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x80000001) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xbc2a2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1653c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1653c3, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:32:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:18 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) sendfile(r3, r2, 0x0, 0x80000000004) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) [ 620.326096][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 620.326115][ T56] Bluetooth: hci7: Frame reassembly failed (-84) [ 620.346844][ T12] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 620.447187][ T28] audit: type=1804 audit(1664037138.951:18): pid=15426 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4157073716/syzkaller.1dyxgo/876/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 620.583245][ T3641] Bluetooth: hci9: sending frame failed (-49) [ 620.590731][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -49 16:32:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) [ 620.724611][ T12] Bluetooth: hci9: Frame reassembly failed (-84) [ 620.797576][T15442] ptm ptm5: ldisc open failed (-12), clearing slot 5 16:32:19 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x80000001) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xbc2a2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x80000001) (async) dup(r0) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xbc2a2, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) 16:32:19 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2}, 0x80000001) (async) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xbc2a2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:19 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) sendfile(r3, r2, 0x0, 0x80000000004) (async) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) 16:32:19 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x50) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) sendfile(r3, r2, 0x0, 0x80000000004) (async) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) [ 621.315567][ T28] audit: type=1804 audit(1664037139.821:19): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4157073716/syzkaller.1dyxgo/878/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 16:32:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="3d98c208bc7377474a22a3fd667856ead9f5adab12f62545156105db69642ad4dc21fdd1c6dec0e116a1038958619966da2ac2ce7dcb443f958f34ed4d4cb0e65d86f94651334fd6f3433c80f3374f6f7317c213258d71f07cfa490364aad8753a69cb325228dd7191b889a7dadf9f26be6236271384dcd506d9c061672bb81dc592a5becb5e310ff0f17ff1bd5a07544d5c1927ea7bdeca655616e120505bd9a5ec52e5bd922423feac035dcdc57729bf5b0a7b7351348ddaa506875fa2c67502fbee8faa23d0600bace34cfc9504f51eea82456a0932338a667d1bad0a16837e8810323abfd0", 0xe7}], 0x2, 0x5, 0x101) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000001280)=0xff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x1f) 16:32:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{r0}, "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"}) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000010c0)={'pim6reg\x00', 0x200}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) 16:32:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) 16:32:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @multicast2}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001100)=ANY=[@ANYBLOB="0900000000000000ff03000000000000040000000000000006000003ad39000000000000050000000000000028000000000000000000000000001888d317aa34c1858000011400000000000000000000000000001a00000000000000400000000000000000dfffffff0000000000000000ff00000000000004000000000000000000000000000006000000a1db3bc40200634751490000050000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000ff0300000000000001000000000000000000000000000000000000000000000000000000000000000001000000000000000400000000000000a1000000000000000000000008e40000000000000000000000000000000000000000000000000900000000000000000000000000fdffffff000000000000000000000000bd000000000000000000000600"/356]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x2, @unused=[0x5, 0x6, 0xff, 0x2], @name="baceaefee1414d0e031104858e8ed19cc752ceeb19552d81578c1eb11bc987fc4328da6b8f3399b333d99481a205ba1fe74864e54bd7564698ebe173c4615956b8f48aba2083ac458a95dc20d0e2ddb44ea9013abec63f0bbb11eeecec9435c4145b7c1dcbd0dc5d68663d35f730bb621abaa1fc6cde511239859f70132c0a37c51d292988a1c6b38aac1ef544c4ab401a7842edd001a19371532be379db71483aa493393aa35128d39dd3349791c275df40504c4fcf5b3434a9d293e6964ed9e41fe514007509e2ec3de2fc2125e2068a987eff3d3cbdab2d9f2c7b0a4c153a70457c1ddfcde4bd26b7c506413e96935a54f1d2159bf7e7623779b83b590f4c2484c12241755e335808e0ea3358ddf20a35619caa209fb3de0084da78ec4c818a3753491e98d68727821ffbfb536850d0964c3060728169b97e7d84511f69fa6b094ebdb8ddd1ff71ee476f29bf80f2bb3b99508a738f2787cce15923cf2fe63e6c17d2913b377e3f93bfe3c2f87ba4f5d6744575a7fe05a9e2719a3511d2182dd2bf4edfeb32520baceb5455e0ed783d0c81f09a4274d6fa2af931559a833169caa460dedf909e911e0a8f2be983ecd7b6eed630fb1fb35e6fd9985745d4c243973ea5ad367e27c4e878a52f564fcf9fdecc288090093a88f8fcf28756b748e34971797bb206b1c810c35490839457781b3a07c26d7fc37a0d0d6d0a21fcb4ef330250d63ffc3d69fb8ddc6d0cd0faa51829c61010851bee2368bc97abaf9f06753388e179b23a1b261e7c32da5a678ae47a49184e50806391f3cac3cda33e755e9b66844dda717b555a242669cedc05a7247b055f2cffd85816ad0d1e313bc069397b91d78293388c516fe8f46bf7390d573127bebc8f0a5d45dbac49f5becdd04203790f5b32de3d6413a0f031ba6192b70b263531ca3eed1fafb5af37a66dc7c6a2734688fe6bd74ac914324ed1da6b0563271deb4caf800bf62460ae984854d4b9a60c5988199ba4d1c813a8ef7de494ab83fe49b8ac63588bd23a8d14ecc90854ca474494e6a7ed41b63296d1c12636427b1d457804f3f33c2f01cbcffc0b5474aa149652614e42a4fecc96dbf4407f511f327330e63b8f7472bbe5b4198a2d2a3b19f37258d01f89e279b23a37857471c59e24dfd948a228c84815cbac06025916fd0b7738299835095a60fe936730b0027c353ca8f40e967e35b6f360c7ca65f063938407b8424905ea113c712106e39b308b6093bc66ca5c3476f62e8c5776c9fe46e4112a59412f1499c5551900a376fb7814b15cc2b53309ea9cc4af4f6fe8f834a2b9865c496e36a1f2e106175016026d10cb4c306d9843198d3ef13d979f5f9c2ae06f63cdef9f05a36fbc9a4961a512026a8b36d9e29b2cd5c13c337396b551546498b7ae6cc0b3cb216eb9a2973e1d3ebedfd942db3963009c658615220cbbd7960f821f25b3eea386eae18470cac7f4c23be699ead38fda7333e62c889e5937195fe1bfcbc18a8593e5b2aeba45547b6a55c2a7e09ac29683a9fff024cb50ecef9d9c32ac5d9f8de6e70dc5c696c186844596a256050e503195b707f0ffb99e3836d07ba24e2f5b0b898dda76767f81a86f75daf4b58918b1a5aae75d4d6ba786b13999a4b69b00daa8d56fc41a7ea97505f41c0ed2530f23f08085f1506cf4690b80e91e02e5f044e82a55cf14f70cfbcf336967a072625c1b82a9289896a69c1dbc1862033a529a952365555ceea688254b1016e45ed273b1c01359bcd7f140cf9ed6ca13568d6779485aa9c8808f4183476d5da3662092e8112de9203d881508a8ed75290b3e6ba2c9ad330d586b57a106a680d44c36f85aa48891c952e190660cafac92c20cbe07df692bd156069b72ebb3f959d6774e9c3a7cf5ffd93a23579679d9766c83bcbaeb7a0d6a4455dfe3d9cc33782c9b983a5cb8da5ce922d4c6ea956fede10391b1e7d7396430a0dac7aa4337880348e539b4c9f469e9d752c8f95753a6efc19e26166f86822d45f028da02e1ba824706dd02ec6dd091b7d20d3afd766fd1e67654a18202268c15e878a1fe1fd5f546b70e4d1bb96299ffc53e18395378dce38462ff1dd9b4f9296203e7184dd8f969dff20cec639c40ffd0e1667a25b0aab3ec7454360fd1d0884d0384d2e0b5b01a3cb7e93052dd6a39159ecdb6a4ff964827aa392730573009d5467641318eb74930a839680ccf3838dbbb6ff5458578bbf392a4052ea3ccbd6cc640ef4ad9688449f27a751f7c26bb9e52205873ad24f7e5083ed1bb123d971afc9a71b33c7709e943cf0d87c941da656203ff7f221cb3867abecc83a251ab5dbb60d468ffc7543777de6f76939b4900bb877605c10d972e98e76e0e48e4532d156fd9f1153c726b9d163b3bd76f1de28c5b875f8147682f14a2c8822e5615fc69b0900385bf027c2e5b9182bbc5c54bb9f3444d4f3001cf45e8c39138e4416e3a180deedd918d892e4a5c6b455c80db9c9d8ccfe8d9d411b562d107e145b504c4fe744d78bfcda46cf945867bc53a94cdeca3d4c6a5f402670db84549ea6609490834561661f263a95362c0c6fdcd26925fd9456ce151df530d8fc4fa75c05e27cc86daa458eb6cb3a6fdc105940d8c0b9d0a03a066cffd914c233d9f0c683fe6c07efcdacdb6e0f73527f1f89b53a0c3ea0f9bbe7be2abb2f0021bdf35997c6b0883d4cc58140d2a034f96d583e112696a0d662a0c865c16e00941cd9936bbec6f80cfdb395c336814dc6ee78308abc38e48505e99f92c561824a57f2c4f00bc588eff8c1de0a38bcd7c256c502bdce6fe207de48951b4630595f5b25ca08cf6fc2acc5197153a830edc2c7a10360968916cb4dd9f2fb49f9dd1de998a4ca9b69e7f465130e0b113a1cfa1989818c33fc275e31e5f352245effc6c1390aeb236cc0b78ca0c5c025082c61bde48afa521825cad33fae55562c72c16b9ef5fd00daaacb13fd5c144ec40702b04fa45a2c4a1f1368457445fc1e9b5cf928ee11010de7dbfb3baa387e6c29e01a8d921070c9c647e9222f560191e657e2201709916041c9e5208ab8be51bfdd153171155ec614e094c874ca6b23031f36393f0a75259b5e6ceaf5578d68c008668883889dc44e22ef3d31f65723ad0efab7f9d0445354185c767823cfb649fede75a91b104bcd8b11b40a35b6258501e7617ade63cbb671f4539c0c892d37c2891fb5c5b146c01ecdae8c6ae22f21d2511ce3d4c78428382f14f0acccadbd8a84eb66dd9043dfe008eba5ff454dc24fdf8ae958174cfc5faa321dc637dd771b832d8dc68a67a1a5aa8cbdca1eb1314ff0020b7eabd2f713a3ec183139fbf33727339cbfb6d997a948b13e776a6bd475271baff0aa139ee6af552fbb15906703195cd22affcb4b34365a8bd0a949f07e8ec0fe26b0f40f37adf85859fb47bde2b7bef2802f8ef49887fa4e8fe9875dff84714753821723bf26237f4004daff23788701ffc445d5c554c9eace7c5facaa092d0c71e4a5a40bcfcaab3169a9a2cc98afe1f60ef54d10000aa13352dfe7f7e2380d6fdba8790a4092f4ece5eb2ee26a2582917514a22922bcb95d7a99b1449c2c8b648ca943bdd26361c2ec3ff6005a8197901dac193e11bea7c61e4ef8058d59db72a32933c8b1d6f5eeac2d002914e238a7c80944daa83f4d53f6913cd2314d265d364d1476bf2be0660b0c8408e10372a1f7c2ae34ed96d7523b1719eccfdc0e3819aece0ccc56bc5fb18755fdfeb897e3ecd161d0dc92a7441a0557384c14380597c082c7d50c1ab0d8c5bbae6319cb404ed6bee2675c4dae867e092981bdbc035ada4a1885e40e9d43e09a0e4f38db63ad913a8c04aa697b5e9037f85c66a8030dac21d1010f02692aa64fc7379b4d7d4baaed8d3def10bcd3400194ecbfb9836650bf22409ab35f8512bcfd39634d6c35e0991dc2c56d600ff90a552b992ff7c710630f04181446c63aa217cd1fa52928dadc32fb1459b8f6893ee0c85461ebe361c465b499e2777c684dd67b2664ebbe60a4458cbc1cac04312ef79a8fc0ac737e7b492e344bd6712e53c5f1e712d794066be2154b86c2853ceed525d4e83a362ffacd59ee43940fe8a19ec836a99e7be98ed6f87256019d73d72578d810bf20e9311c02ea68ef218110da55c9eab27d39662d5482c639621a05bbb07e88672335ea52ce7f8d87aa79a5306d2e6d72ecf27392c9c45b78f91855c119ff3975873c87d9d124557f1bc5a341452e9197de48d0582b8cefabb32b24de9825c1fe714ae29b8586491bf48132c953ef3fe9126ae9472c9f1aace6e312417e70c6df73599fbf314205624b0f1c82ec2d98e44dacd5c7d8fed6909672e4ab44d99199cedcd6abfd9645b3629945c790ba4a70d13081d47055cd45475450300e88964084376af4e881a902973313891d1d2145b115979df5d781b6703272efe28d5baf80e7c44e45771e72f27b4d4966cd64f5e64f5e1c8c01a451e2f7fe2ee893a94cb7afa240bdee50f22e9dacec17a17fd8b865b3d94b503e6f705e6342277c27210f81a0255934f8c135e622f6cf23108029c17ad7f995c1b8aeb456750c6b568711bb0f4ff986141d004f065479b1d32656e91d547c88786f7472fdef658d3429685100a554463dc8717ed987e8537600d5202d49e7d324cf8a0dbac4870fe29ac35c837f2b3b2c5e9d80e1517a49e46460bdd59469aabd540272f768e98430a6906f7de6d6db580136e63a1c468256dd44ac6a049b0e431903742e32774a3db0c19062c26f33a55258045189935be4cc211d453dba45f1a8fba1983f224d04f8562414aba61a2e47f1124a400f97a6747a5d1abf529f30050c315c059dd8b95867bab502b67e7920ba30ce69555d7f67bd6be53f0cca9a65334d95377bd84df35733aee21d9736bf8dd41455393a53bb277b73b560d0077e0e24cb58cba75d46a0248ed4b63d39c1a140432eabb5f9c260a081f7b24f87a190d7747f2c9a60f40f87f5103ed56799f0955d43b9403fa162ce8e65382a7f9fd2772a89f660ca9946cf82fbc9755adf492f3e17e2f482cf9d46ff5d3386a41566f3420b40b3cf6ba0f887b6c8bf19d919b5c43c977b2c0eef60c7a963c6771b2c5bb4c2420870c8282747ef8ad42a37aa463d7211b723401bbad78f5179d09c356a45c00a6a2b6825b0dc767fbfa83ca80824746ccb3152953bebfdaa7cbac4bad5cd8f19a131655141090855a852a2ae41f8eccfe8598a88e98f255883b3c0851a60dcf1eb9e039f1860cdb0a5dd319846d6b244ad1e0f08fec1a4c9af4da6e200b406d284d9d4a2ebb9b93c8f5309f94b6e2216309d33860e311ad66a9f2cb99f7f3bb254f2b16212f13fe61341a64f3dc38c20ac632959c36140707d34e7e863e774cfd0714f3302f3d79a20fbb586057df9ad16f0e46ac1978c918b2e09839fa43a73497ba47a9c86f8d34793b4647d47cbbd13da1644be5d044f312e9e4c179529b9cba4846ff0062befa18ef889f5e39d25c81945f855613fb2bfa3a435650ac481f441e6acaf2a02ca8dc86e1d26cbc019eece9c15fb5536213d13babfaf711df89d61c1c20312c2c9027df1aaf4f20411708e7611bb55941698c15616cc8470370d991b2afbbbfe590dd61bc4d6a40428d6b7bf20d4462b03a24ec8e32086090f599564232daa67cee7e74ec93c50c3ae89095"}) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1db541) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x22906000) 16:32:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 622.380020][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 622.390104][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 622.391009][ T3692] Bluetooth: hci8: command 0x1003 tx timeout [ 622.397999][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 622.408553][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 622.467116][ T47] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) [ 622.524623][T15479] Bluetooth: hci7: Frame reassembly failed (-84) [ 622.533519][ T56] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000040)) [ 622.565865][T15484] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.573122][ T3641] Bluetooth: hci8: sending frame failed (-49) [ 622.582824][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 622.597317][T15484] device gretap0 entered promiscuous mode [ 622.667316][T15481] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.690178][T15481] 0ªX: renamed from gretap0 [ 622.698242][T15481] device 00ªX left promiscuous mode [ 622.706387][T15481] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. 16:32:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) fcntl$setstatus(r1, 0x4, 0x0) 16:32:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @multicast2}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/356]) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) (async, rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x2, @unused=[0x5, 0x6, 0xff, 0x2], @name="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"}) (async, rerun: 64) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1db541) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x22906000) [ 622.780158][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 622.836640][ T1133] Bluetooth: hci8: Frame reassembly failed (-84) [ 622.868157][T15500] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 16:32:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x0) [ 622.905548][T15500] device 00ªX entered promiscuous mode [ 624.061090][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.067484][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 16:32:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @multicast2}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/356]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x2, @unused=[0x5, 0x6, 0xff, 0x2], @name="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"}) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1db541) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x22906000) [ 624.460163][ T3659] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 624.467641][ T5059] Bluetooth: hci6: command tx timeout [ 624.494865][T15512] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.516422][T15514] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.526089][T15514] 1ªX: renamed from 00ªX [ 624.534459][T15514] device 01ªX left promiscuous mode [ 624.540096][ T27] Bluetooth: hci7: command 0x1003 tx timeout [ 624.542797][T15514] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. 16:32:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x90000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) fcntl$setstatus(r1, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x0) (async) 16:32:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x5, 0x7f, 0x401, 0x4000, 0x5, "242a1f2dc5d2ae5b"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 624.546312][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:23 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = syz_io_uring_setup(0x43e3, &(0x7f0000000040)={0x0, 0x4b93, 0x20, 0x2, 0x17b}, &(0x7f0000399000/0x1000)=nil, &(0x7f00000b4000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x1000, 0x4000}) signalfd(r3, &(0x7f0000000240)={[0x6]}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendfile(r4, r5, &(0x7f0000000280)=0xfffffffffffffff8, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, 0xffffffffffffffff, 0x0) [ 624.658716][ T1133] Bluetooth: hci7: Frame reassembly failed (-84) [ 624.658784][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 624.678701][T15521] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x154b42, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x154b42, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) [ 624.712400][T15525] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 624.860013][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x154b42, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x154b42, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) (async) 16:32:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) [ 624.940088][ T3692] Bluetooth: hci9: command 0x1003 tx timeout [ 624.946272][ T49] Bluetooth: hci9: Opcode 0x1003 failed: -110 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5ffbc1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000010000000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x2b, &(0x7f0000000280)=""/43, 0x40f00, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x8, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r0, r5]}, 0x80) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x501001, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x82102, 0x0) ioctl$KDADDIO(r7, 0x400455c8, 0x5) ioctl$TIOCSTI(r6, 0x5437, 0x0) 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5ffbc1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5ffbc1, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5ffbc1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5ffbc1, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x90000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r0, 0x90000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:32:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x8, 0x3, 0x80000000, 0x7, 0x5, "e78b18e809cebe22c6bf03b0f516c0ed1aceac"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) 16:32:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) r1 = syz_io_uring_setup(0x43e3, &(0x7f0000000040)={0x0, 0x4b93, 0x20, 0x2, 0x17b}, &(0x7f0000399000/0x1000)=nil, &(0x7f00000b4000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x1000, 0x4000}) signalfd(r3, &(0x7f0000000240)={[0x6]}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) sendfile(r4, r5, &(0x7f0000000280)=0xfffffffffffffff8, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, 0xffffffffffffffff, 0x0) 16:32:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000010000000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x2b, &(0x7f0000000280)=""/43, 0x40f00, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x8, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r0, r5]}, 0x80) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') (async, rerun: 32) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x501001, 0x0) (rerun: 32) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 64) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x82102, 0x0) ioctl$KDADDIO(r7, 0x400455c8, 0x5) ioctl$TIOCSTI(r6, 0x5437, 0x0) 16:32:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async, rerun: 32) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x5, 0x7f, 0x401, 0x4000, 0x5, "242a1f2dc5d2ae5b"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 626.699866][ T5059] Bluetooth: hci7: command 0x1003 tx timeout [ 626.699874][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 626.705979][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x8, 0x3, 0x80000000, 0x7, 0x5, "e78b18e809cebe22c6bf03b0f516c0ed1aceac"}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) 16:32:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000010000000000", @ANYRES32=r1, @ANYBLOB="00000100000000002e2f66696c653000"]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x2b, &(0x7f0000000280)=""/43, 0x40f00, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x8, 0x8, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r0, r5]}, 0x80) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) sendfile(r2, r1, 0x0, 0x80000000004) (async) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') (async, rerun: 32) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x501001, 0x0) (rerun: 32) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x82102, 0x0) ioctl$KDADDIO(r7, 0x400455c8, 0x5) (async) ioctl$TIOCSTI(r6, 0x5437, 0x0) [ 626.874247][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 626.881328][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 626.887011][T15572] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) 16:32:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x6) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x8, 0x3, 0x80000000, 0x7, 0x5, "e78b18e809cebe22c6bf03b0f516c0ed1aceac"}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r3, r2, 0x0, 0x80000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) 16:32:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x90000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc6183, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x2, 0x1, 0xfffffff8, 0x5, 0x7, "0d85254f9138b7aa790a864235d74d9eb304ba"}) [ 627.100228][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:32:25 executing program 0: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)=0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x585401, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0x87}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 627.186372][T15593] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc6183, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x2, 0x1, 0xfffffff8, 0x5, 0x7, "0d85254f9138b7aa790a864235d74d9eb304ba"}) [ 627.254957][ T42] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:25 executing program 0: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)=0x80) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x585401, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0x87}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f00000000c0)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 627.318737][ T42] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:25 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = syz_io_uring_setup(0x43e3, &(0x7f0000000040)={0x0, 0x4b93, 0x20, 0x2, 0x17b}, &(0x7f0000399000/0x1000)=nil, &(0x7f00000b4000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) r3 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x1000, 0x4000}) signalfd(r3, &(0x7f0000000240)={[0x6]}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendfile(r4, r5, &(0x7f0000000280)=0xfffffffffffffff8, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) syz_io_uring_setup(0x43e3, &(0x7f0000000040)={0x0, 0x4b93, 0x20, 0x2, 0x17b}, &(0x7f0000399000/0x1000)=nil, &(0x7f00000b4000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) write$6lowpan_enable(r1, &(0x7f00000001c0)='1', 0x1) (async) dup(r0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x103000, 0x0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000200)={r2, 0x0, 0x1000, 0x4000}) (async) signalfd(r3, &(0x7f0000000240)={[0x6]}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) sendfile(r4, r5, &(0x7f0000000280)=0xfffffffffffffff8, 0x7) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, 0xffffffffffffffff, 0x0) (async) 16:32:26 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_generic(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x41c, 0x37, 0x8, 0x70bd2c, 0x25dfdbfb, {0x14}, [@generic="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", @nested={0x41, 0x4c, 0x0, 0x1, [@generic="54e5edb4d248a2f54dcc1aa8f5b1c75222262d928a0b933731257b66f1287cb278d0c74ae26a7a2143fef133d058f84aa7eae455cbbe569715f71ee335"]}, @nested={0x107, 0x72, 0x0, 0x1, [@generic="fc89bcea035e4853476c3611a9f7b04ac8d6f113814060f23bedfe9dba1d0f4a5dd106e5a6818a3404b7fcff071dad44bbaa1ce135d96897cd707ec6fa7fb2a9062d29d6cc0f1d7167c774dbc259700d0d5ee6a7a3bee93b31d99c54495e981b7cf8e053d7cfd0bb8baccb50977e0518cc4d583a2da896dd2eeb1ff2639ade30779e22b216afea5a0f2788863e8d24e0b29fba467caea815b2b45ca5e737889355a08311f522d82148687622b89e09b47ba10c0fb97ef8aaf406cce773bbd9e586372c59d86f9803edd5d81db87cde134a463e2703292e91cd25cb6e4475b378c56c4d67174425b10bca3d6f9db9b1", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x101, 0x1, 0x0, 0x1, [@generic="7430a2a4a9bc24e5909acbcf9620ce2a2793f84c6eed4d71640b7fa93f6dc4cbc82692162802cef95b56603ea1dec79b422ebad45e3d6c340c69a96da95f5a459a7627db655f1d3d70eed9f77768e36f7df7b5faf046c5db953b9a816d3c44620c63fa3c32b68e144a09fdc64b5b5d4949cb25ed8131ca8e2159375310e13302e52cf2b4e0d0fa9844206e0037a7b0269379c227d9d56fef40e55c412ddaf805f843160f4699de7bda502496a65f868720bc81cf4b280e45efe595ea9fd103925ed59c469a99b4789611f103dbed6446700545784d64720f21a2f19ca5a8a14d72529adfae175b62178d5ebf8a735a2161", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x6c9}]}, @generic="f3050c1d26546bfcdf4a132324d763cd52f4a68d8521c821651e39afeee92361b1c3bdfbf7eb0e73a9b9ddb1211e9539f4bfb9266388d805daa47acb33ef4a577f63359700e3c568bd6690b85b0f09205f93b945cea70e728626ced128981f275954ad69340022d93819484fc0f9c552790b8e047641ceb60a3225efcab61a0b61e5abec591b8baddf180aabe7e3dcfa012133a1d7a8cf7c93592a71bff99576389121743cf6631e68ae3665fcefe63dde8c9fed09d90979d1a522"]}, 0x41c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0xb}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xab, &(0x7f0000000140)=""/171, 0x82000, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x33d, 0xc23}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r2, r1, r1, r1, 0xffffffffffffffff, r1, r1, r3, r1]}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '\'*:\'+\'\'%^'}, {0x20, '/dev/fb0\x00'}], 0xa, "b92dfcf058c61e1f6eb5c896c5dd59c81c35b892bf463082f0d4d3dc34faea26569d6f91bfe03d9692610698105572f58d602e3a996432df6e1a3545a3a232033c6cea6e840522d6a346f1cd087861b925d64e18ed68c834fad267ff035582564c67899c70b930a8fcd612b007cd2d195ffe40190c2cd6466afb552559b6799a727a"}, 0xc8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) [ 628.860039][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 628.860362][ T23] Bluetooth: hci6: command 0x1003 tx timeout [ 628.884652][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 628.896291][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x5, 0x7f, 0x401, 0x4000, 0x5, "242a1f2dc5d2ae5b"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 16:32:27 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x41c, 0x37, 0x8, 0x70bd2c, 0x25dfdbfb, {0x14}, [@generic="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", @nested={0x41, 0x4c, 0x0, 0x1, [@generic="54e5edb4d248a2f54dcc1aa8f5b1c75222262d928a0b933731257b66f1287cb278d0c74ae26a7a2143fef133d058f84aa7eae455cbbe569715f71ee335"]}, @nested={0x107, 0x72, 0x0, 0x1, [@generic="fc89bcea035e4853476c3611a9f7b04ac8d6f113814060f23bedfe9dba1d0f4a5dd106e5a6818a3404b7fcff071dad44bbaa1ce135d96897cd707ec6fa7fb2a9062d29d6cc0f1d7167c774dbc259700d0d5ee6a7a3bee93b31d99c54495e981b7cf8e053d7cfd0bb8baccb50977e0518cc4d583a2da896dd2eeb1ff2639ade30779e22b216afea5a0f2788863e8d24e0b29fba467caea815b2b45ca5e737889355a08311f522d82148687622b89e09b47ba10c0fb97ef8aaf406cce773bbd9e586372c59d86f9803edd5d81db87cde134a463e2703292e91cd25cb6e4475b378c56c4d67174425b10bca3d6f9db9b1", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x101, 0x1, 0x0, 0x1, [@generic="7430a2a4a9bc24e5909acbcf9620ce2a2793f84c6eed4d71640b7fa93f6dc4cbc82692162802cef95b56603ea1dec79b422ebad45e3d6c340c69a96da95f5a459a7627db655f1d3d70eed9f77768e36f7df7b5faf046c5db953b9a816d3c44620c63fa3c32b68e144a09fdc64b5b5d4949cb25ed8131ca8e2159375310e13302e52cf2b4e0d0fa9844206e0037a7b0269379c227d9d56fef40e55c412ddaf805f843160f4699de7bda502496a65f868720bc81cf4b280e45efe595ea9fd103925ed59c469a99b4789611f103dbed6446700545784d64720f21a2f19ca5a8a14d72529adfae175b62178d5ebf8a735a2161", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x6c9}]}, @generic="f3050c1d26546bfcdf4a132324d763cd52f4a68d8521c821651e39afeee92361b1c3bdfbf7eb0e73a9b9ddb1211e9539f4bfb9266388d805daa47acb33ef4a577f63359700e3c568bd6690b85b0f09205f93b945cea70e728626ced128981f275954ad69340022d93819484fc0f9c552790b8e047641ceb60a3225efcab61a0b61e5abec591b8baddf180aabe7e3dcfa012133a1d7a8cf7c93592a71bff99576389121743cf6631e68ae3665fcefe63dde8c9fed09d90979d1a522"]}, 0x41c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0xb}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xab, &(0x7f0000000140)=""/171, 0x82000, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x33d, 0xc23}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r2, r1, r1, r1, 0xffffffffffffffff, r1, r1, r3, r1]}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '\'*:\'+\'\'%^'}, {0x20, '/dev/fb0\x00'}], 0xa, "b92dfcf058c61e1f6eb5c896c5dd59c81c35b892bf463082f0d4d3dc34faea26569d6f91bfe03d9692610698105572f58d602e3a996432df6e1a3545a3a232033c6cea6e840522d6a346f1cd087861b925d64e18ed68c834fad267ff035582564c67899c70b930a8fcd612b007cd2d195ffe40190c2cd6466afb552559b6799a727a"}, 0xc8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) 16:32:27 executing program 0: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)=0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x585401, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0x87}) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)=0x80) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x585401, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0x87}) (async) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, 0x0) 16:32:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x51fb, @local, 0x7}}]}, 0x60}, 0x1, 0x7}, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797e318a"], 0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0xe, 0xff, 0x0, 0x7, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x27, 0x4, 0x14}]}, 0x38}}, 0x80) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:27 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$nl_generic(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x41c, 0x37, 0x8, 0x70bd2c, 0x25dfdbfb, {0x14}, [@generic="605c425427b2a71f0039e23251788729eabc8130e3ae8498fb39f023ab8d6e526f2611aa1748b957fbe852dacb2c39eae2c89324807518b3208afe330011a038e0934a1bc47ed43835477061d16790aff307ac2486a8ec925f1e38d7515f50939ff019adcadfbf39d63a3c7b38413b9e900cb2cac60c2033d8906079c3592525c1409e4b4dc13c42ad4782953513f1101f29e70654e174391b2972913c478e787d531ec0ba83b9a615cd85b877024d3de964ce82b3cc53a91cfe8c71edebf599051b1ea3fcb7c0636d5a9f2779ed150615478df427312d06254a0cf8745fce7fdc3209fc9e211941c9f44ad367adb4c035eb84a7fb07b5d8c0b5398c", @nested={0x41, 0x4c, 0x0, 0x1, [@generic="54e5edb4d248a2f54dcc1aa8f5b1c75222262d928a0b933731257b66f1287cb278d0c74ae26a7a2143fef133d058f84aa7eae455cbbe569715f71ee335"]}, @nested={0x107, 0x72, 0x0, 0x1, [@generic="fc89bcea035e4853476c3611a9f7b04ac8d6f113814060f23bedfe9dba1d0f4a5dd106e5a6818a3404b7fcff071dad44bbaa1ce135d96897cd707ec6fa7fb2a9062d29d6cc0f1d7167c774dbc259700d0d5ee6a7a3bee93b31d99c54495e981b7cf8e053d7cfd0bb8baccb50977e0518cc4d583a2da896dd2eeb1ff2639ade30779e22b216afea5a0f2788863e8d24e0b29fba467caea815b2b45ca5e737889355a08311f522d82148687622b89e09b47ba10c0fb97ef8aaf406cce773bbd9e586372c59d86f9803edd5d81db87cde134a463e2703292e91cd25cb6e4475b378c56c4d67174425b10bca3d6f9db9b1", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x101, 0x1, 0x0, 0x1, [@generic="7430a2a4a9bc24e5909acbcf9620ce2a2793f84c6eed4d71640b7fa93f6dc4cbc82692162802cef95b56603ea1dec79b422ebad45e3d6c340c69a96da95f5a459a7627db655f1d3d70eed9f77768e36f7df7b5faf046c5db953b9a816d3c44620c63fa3c32b68e144a09fdc64b5b5d4949cb25ed8131ca8e2159375310e13302e52cf2b4e0d0fa9844206e0037a7b0269379c227d9d56fef40e55c412ddaf805f843160f4699de7bda502496a65f868720bc81cf4b280e45efe595ea9fd103925ed59c469a99b4789611f103dbed6446700545784d64720f21a2f19ca5a8a14d72529adfae175b62178d5ebf8a735a2161", @typed={0xc, 0x8c, 0x0, 0x0, @u64=0x6c9}]}, @generic="f3050c1d26546bfcdf4a132324d763cd52f4a68d8521c821651e39afeee92361b1c3bdfbf7eb0e73a9b9ddb1211e9539f4bfb9266388d805daa47acb33ef4a577f63359700e3c568bd6690b85b0f09205f93b945cea70e728626ced128981f275954ad69340022d93819484fc0f9c552790b8e047641ceb60a3225efcab61a0b61e5abec591b8baddf180aabe7e3dcfa012133a1d7a8cf7c93592a71bff99576389121743cf6631e68ae3665fcefe63dde8c9fed09d90979d1a522"]}, 0x41c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0xb}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x3, 0xab, &(0x7f0000000140)=""/171, 0x82000, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xd, 0x33d, 0xc23}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r2, r1, r1, r1, 0xffffffffffffffff, r1, r1, r3, r1]}, 0x80) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '\'*:\'+\'\'%^'}, {0x20, '/dev/fb0\x00'}], 0xa, "b92dfcf058c61e1f6eb5c896c5dd59c81c35b892bf463082f0d4d3dc34faea26569d6f91bfe03d9692610698105572f58d602e3a996432df6e1a3545a3a232033c6cea6e840522d6a346f1cd087861b925d64e18ed68c834fad267ff035582564c67899c70b930a8fcd612b007cd2d195ffe40190c2cd6466afb552559b6799a727a"}, 0xc8) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) 16:32:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x20, 0x8, 0x8}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 629.259898][ T7] Bluetooth: hci8: command 0x1003 tx timeout [ 629.260095][ T3641] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 629.272401][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc6183, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x2, 0x1, 0xfffffff8, 0x5, 0x7, "0d85254f9138b7aa790a864235d74d9eb304ba"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc6183, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x2, 0x1, 0xfffffff8, 0x5, 0x7, "0d85254f9138b7aa790a864235d74d9eb304ba"}) (async) 16:32:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x20, 0x8, 0x8}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 629.340195][ T3659] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 629.360152][ T42] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x20, 0x8, 0x8}) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (rerun: 64) 16:32:28 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 629.466791][ T3659] Bluetooth: hci7: sending frame failed (-49) [ 629.476508][ T3641] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 629.483591][ T1133] Bluetooth: hci8: Frame reassembly failed (-84) [ 629.493205][ T1133] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) syz_open_pts(r0, 0x482c80) 16:32:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) syz_open_pts(r0, 0x482c80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x482c80) (async) [ 629.626230][ T42] Bluetooth: hci7: Frame reassembly failed (-84) [ 631.419868][ T5059] Bluetooth: hci6: command 0x1003 tx timeout [ 631.429861][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x51fb, @local, 0x7}}]}, 0x60}, 0x1, 0x7}, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797e318a"], 0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0xe, 0xff, 0x0, 0x7, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x27, 0x4, 0x14}]}, 0x38}}, 0x80) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) syz_open_pts(r0, 0x482c80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x482c80) (async) 16:32:30 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040037000a00030001302564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @multicast2}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/356]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x10, @unused=[0x3, 0x166, 0x24edff3e, 0x41c], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000100)={{}, r3, 0x2, @unused=[0x5, 0x6, 0xff, 0x2], @name="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"}) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1db541) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x22906000) [ 631.500049][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 631.510227][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -110 16:32:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 631.564485][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 631.572967][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x280800) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x341, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4208c0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "5a7d117af9958449f393d73ca9a0ea4e4e005c88f130d74a8627b2923d945ce4eb314d7b6806e4f3217b3f7f5c03f0d2936fa88d62d88dedbc3948d8d57f3aea179ccf5d73157451fb5cd2c8bf7ba8ea5007e3a35e4bbf697e18e99cc8ef94582995c4f32c35d9d945f41bb16eadf132b2b7332c484a43872757c4da8b0bd407f3fe5a71e1971004520eb58b558ff4488dbe41a770223b400f03e84b7ed42eb8530081158428", ["", "", "", ""]}, 0xb8}}, 0x4004000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) [ 631.660032][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 631.660665][ T27] Bluetooth: hci7: command 0x1003 tx timeout [ 631.690865][T15706] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 16:32:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r0, r0, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x51fb, @local, 0x7}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797e318a"], 0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0xe, 0xff, 0x0, 0x7, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x27, 0x4, 0x14}]}, 0x38}}, 0x80) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 631.780938][T15706] device gretap0 entered promiscuous mode [ 631.864461][T15703] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.903208][ T3651] Bluetooth: hci7: sending frame failed (-49) 16:32:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x280800) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x341, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4208c0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "5a7d117af9958449f393d73ca9a0ea4e4e005c88f130d74a8627b2923d945ce4eb314d7b6806e4f3217b3f7f5c03f0d2936fa88d62d88dedbc3948d8d57f3aea179ccf5d73157451fb5cd2c8bf7ba8ea5007e3a35e4bbf697e18e99cc8ef94582995c4f32c35d9d945f41bb16eadf132b2b7332c484a43872757c4da8b0bd407f3fe5a71e1971004520eb58b558ff4488dbe41a770223b400f03e84b7ed42eb8530081158428", ["", "", "", ""]}, 0xb8}}, 0x4004000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="e54232e6d4d0ec7b8cc930e1b809612ec5a54dfee7ed17e0cb296d6804e2d9d4d8cfc0786595eb005460b19bad937964e9280c2166526d728ff72ea71a121c9a321c55c6839989e0c05001417d28b0294f005e13361716ff2cc343c94f3cf6a9c8171f5c25f8e74853e7b7f095b8fa0056980d3463e428e32d12910cb7850ed28c95378e7157fc7e") ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x113}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 16:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) [ 631.903393][T15721] Bluetooth: hci7: Frame reassembly failed (-84) [ 631.916507][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 631.993091][T15703] 0ªX: renamed from gretap0 16:32:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x280800) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x341, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4208c0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "5a7d117af9958449f393d73ca9a0ea4e4e005c88f130d74a8627b2923d945ce4eb314d7b6806e4f3217b3f7f5c03f0d2936fa88d62d88dedbc3948d8d57f3aea179ccf5d73157451fb5cd2c8bf7ba8ea5007e3a35e4bbf697e18e99cc8ef94582995c4f32c35d9d945f41bb16eadf132b2b7332c484a43872757c4da8b0bd407f3fe5a71e1971004520eb58b558ff4488dbe41a770223b400f03e84b7ed42eb8530081158428", ["", "", "", ""]}, 0xb8}}, 0x4004000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x280800) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x80800, 0x0) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380), 0x341, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000300)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4208c0, 0x0) (async) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "5a7d117af9958449f393d73ca9a0ea4e4e005c88f130d74a8627b2923d945ce4eb314d7b6806e4f3217b3f7f5c03f0d2936fa88d62d88dedbc3948d8d57f3aea179ccf5d73157451fb5cd2c8bf7ba8ea5007e3a35e4bbf697e18e99cc8ef94582995c4f32c35d9d945f41bb16eadf132b2b7332c484a43872757c4da8b0bd407f3fe5a71e1971004520eb58b558ff4488dbe41a770223b400f03e84b7ed42eb8530081158428", ["", "", "", ""]}, 0xb8}}, 0x4004000) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) [ 632.031688][T15703] device 00ªX left promiscuous mode [ 632.045831][T15703] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 632.087465][T15743] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 632.119248][T15740] Bluetooth: hci8: Frame reassembly failed (-84) 16:32:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1a) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) [ 632.190499][ T12] Bluetooth: hci8: Frame reassembly failed (-84) [ 632.283329][ T1133] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:32 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4a4004) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x549081, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x151083, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0x6, 0x1b, "163a84266a2aa82d"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x549081, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x151083, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0x6, 0x1b, "163a84266a2aa82d"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 633.819812][ T27] Bluetooth: hci6: command 0x1003 tx timeout [ 633.820118][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:32 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4a4004) (async) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 634.139883][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 634.140019][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 634.147834][ T27] Bluetooth: hci8: command 0x1003 tx timeout [ 634.152695][ T5059] Bluetooth: hci7: command tx timeout 16:32:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 32) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="e54232e6d4d0ec7b8cc930e1b809612ec5a54dfee7ed17e0cb296d6804e2d9d4d8cfc0786595eb005460b19bad937964e9280c2166526d728ff72ea71a121c9a321c55c6839989e0c05001417d28b0294f005e13361716ff2cc343c94f3cf6a9c8171f5c25f8e74853e7b7f095b8fa0056980d3463e428e32d12910cb7850ed28c95378e7157fc7e") (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x113}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 16:32:32 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4a4004) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x549081, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x151083, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0x6, 0x1b, "163a84266a2aa82d"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x549081, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x151083, 0x0) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x6, 0x6, 0x1b, "163a84266a2aa82d"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 634.239255][T15783] Bluetooth: hci7: Frame reassembly failed (-84) [ 634.262535][ T56] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x254) 16:32:32 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) io_uring_enter(r3, 0x34a6, 0xf43d, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) dup(r4) ioctl$KDDELIO(r2, 0x4b35, 0x9) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) fsetxattr$security_smack_transmute(r6, &(0x7f0000000100), &(0x7f0000000140), 0x4, 0x2) [ 634.300789][ T27] Bluetooth: hci9: command 0x1003 tx timeout [ 634.306951][ T49] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 634.513391][ T3646] Bluetooth: hci9: sending frame failed (-49) [ 634.520850][ T49] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 634.532641][T15798] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x254) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) (async) ioctl$KDADDIO(r1, 0x4b34, 0x254) (async) 16:32:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 634.652130][ T3646] Bluetooth: hci9: sending frame failed (-49) [ 634.659340][ T49] Bluetooth: hci9: Opcode 0x1003 failed: -49 16:32:33 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) io_uring_enter(r3, 0x34a6, 0xf43d, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) dup(r4) ioctl$KDDELIO(r2, 0x4b35, 0x9) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) fsetxattr$security_smack_transmute(r6, &(0x7f0000000100), &(0x7f0000000140), 0x4, 0x2) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) (async) io_uring_enter(r3, 0x34a6, 0xf43d, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) dup(r4) (async) ioctl$KDDELIO(r2, 0x4b35, 0x9) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) fsetxattr$security_smack_transmute(r6, &(0x7f0000000100), &(0x7f0000000140), 0x4, 0x2) (async) 16:32:33 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) sendfile(r3, r2, 0x0, 0x80000000004) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) [ 634.818750][T15805] ptm ptm5: ldisc open failed (-12), clearing slot 5 [ 634.879840][ T28] audit: type=1804 audit(1664037153.391:20): pid=15808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1205566288/syzkaller.lhVbyz/811/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 16:32:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) syz_open_pts(r1, 0x200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x200, 0x4) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 635.979941][ T27] Bluetooth: hci6: command 0x1003 tx timeout [ 635.980059][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 636.033752][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 64) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="e54232e6d4d0ec7b8cc930e1b809612ec5a54dfee7ed17e0cb296d6804e2d9d4d8cfc0786595eb005460b19bad937964e9280c2166526d728ff72ea71a121c9a321c55c6839989e0c05001417d28b0294f005e13361716ff2cc343c94f3cf6a9c8171f5c25f8e74853e7b7f095b8fa0056980d3463e428e32d12910cb7850ed28c95378e7157fc7e") (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x113}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) 16:32:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x254) 16:32:34 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async, rerun: 32) r3 = signalfd(r1, &(0x7f0000000040)={[0x8]}, 0x8) io_uring_enter(r3, 0x34a6, 0xf43d, 0x2, &(0x7f0000000080)={[0x7]}, 0x8) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) dup(r4) ioctl$KDDELIO(r2, 0x4b35, 0x9) (async, rerun: 32) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r5, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) fsetxattr$security_smack_transmute(r6, &(0x7f0000000100), &(0x7f0000000140), 0x4, 0x2) 16:32:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 636.300029][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 636.300213][ T27] Bluetooth: hci8: command 0x1003 tx timeout [ 636.314027][ T3654] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 636.416308][ T1133] Bluetooth: hci7: Frame reassembly failed (-84) [ 636.431693][ T49] Bluetooth: hci8: sending frame failed (-49) [ 636.440200][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 636.464129][T15836] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:35 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0xb7106000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000584000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r3, 0x8000000) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r3, 0x7, 0x0, 0x3, 0x1}, 0x7) [ 636.492951][ T1133] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x800203) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x80, 0x8, 0xffff, 0x6, 0x2, "1e3378e1c294c531ce36facd8ea9699331d038"}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KDENABIO(r1, 0x4b36) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r3 = memfd_secret(0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/15}) 16:32:35 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0xb7106000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000584000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r3, 0x8000000) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r3, 0x7, 0x0, 0x3, 0x1}, 0x7) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0xb7106000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000584000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r3, 0x8000000) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r3, 0x7, 0x0, 0x3, 0x1}, 0x7) (async) [ 636.601633][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 636.608732][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:32:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) 16:32:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x800203) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x80, 0x8, 0xffff, 0x6, 0x2, "1e3378e1c294c531ce36facd8ea9699331d038"}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KDENABIO(r1, 0x4b36) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r3 = memfd_secret(0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/15}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_pts(r0, 0x800203) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x80, 0x8, 0xffff, 0x6, 0x2, "1e3378e1c294c531ce36facd8ea9699331d038"}) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$KDENABIO(r1, 0x4b36) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) memfd_secret(0x0) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/15}) (async) [ 636.743057][ T3646] Bluetooth: hci8: sending frame failed (-49) [ 636.750320][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 636.790788][T15863] ptm ptm5: ldisc open failed (-12), clearing slot 5 16:32:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) syz_open_pts(r1, 0x200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x200, 0x4) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 638.060058][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 638.060174][ T3693] Bluetooth: hci6: command 0x1003 tx timeout 16:32:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_pts(r0, 0x800203) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x80, 0x8, 0xffff, 0x6, 0x2, "1e3378e1c294c531ce36facd8ea9699331d038"}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$KDENABIO(r1, 0x4b36) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) dup3(r2, r1, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r3 = memfd_secret(0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/15}) 16:32:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0xb7106000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000584000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r3, 0x8000000) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r3, 0x7, 0x0, 0x3, 0x1}, 0x7) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r2, 0xb7106000) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000584000/0x4000)=nil, 0x4000, 0x2000009, 0x50, r3, 0x8000000) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r3, 0x7, 0x0, 0x3, 0x1}, 0x7) (async) 16:32:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e23, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000000)) 16:32:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x100000001, 0x58000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 638.459891][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 638.460165][ T3651] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 638.467812][ T27] Bluetooth: hci9: command 0x1003 tx timeout [ 638.472611][ T5091] Bluetooth: hci7: command tx timeout 16:32:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x10000, 0x400, 0xc3, 0x4, 0x5, "4ef2f395a2ac0acd637296243556397078f004"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="2dec34e3a72cf7eafed5f874e65fd39c958c2665d6fa6805b7b0d40c9ac10561fe09e3dd5ac3a030009afe1a0340a188cb6e1043aa26231df374b645") 16:32:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r4 = fspick(r3, &(0x7f0000000200)='./file0\x00', 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff00100000bc0f000051aa0000ffffffff180000002000000000000000010000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x8000, 0x63, &(0x7f0000000340)=""/99, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x5, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3]}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000500)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0x3, 0x0, 0xff, 0x7, &(0x7f0000000240)=[{0x0, 0x3, 0x1, 0x7}, {0x400, 0x8000, 0x9f}, {0x1f, 0x6, 0x8, 0x33}, {0x8000, 0xff, 0xffc0, 0x5}, {0x8, 0x1, 0xbe63, 0x6}, {0x7f, 0x2, 0x7, 0xfff7}, {0x0, 0x2, 0xfff8, 0x3}]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r7, 0x0, r8, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7], 0x6}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x0) 16:32:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="2dec34e3a72cf7eafed5f874e65fd39c958c2665d6fa6805b7b0d40c9ac10561fe09e3dd5ac3a030009afe1a0340a188cb6e1043aa26231df374b645") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="2dec34e3a72cf7eafed5f874e65fd39c958c2665d6fa6805b7b0d40c9ac10561fe09e3dd5ac3a030009afe1a0340a188cb6e1043aa26231df374b645") (async) [ 638.622975][ T12] Bluetooth: hci8: Frame reassembly failed (-84) [ 638.633987][ T3749] Bluetooth: hci9: Frame reassembly failed (-84) [ 638.648911][T15889] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="2dec34e3a72cf7eafed5f874e65fd39c958c2665d6fa6805b7b0d40c9ac10561fe09e3dd5ac3a030009afe1a0340a188cb6e1043aa26231df374b645") 16:32:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r4 = fspick(r3, &(0x7f0000000200)='./file0\x00', 0x1) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff00100000bc0f000051aa0000ffffffff180000002000000000000000010000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x8000, 0x63, &(0x7f0000000340)=""/99, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x5, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3]}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000500)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0x3, 0x0, 0xff, 0x7, &(0x7f0000000240)=[{0x0, 0x3, 0x1, 0x7}, {0x400, 0x8000, 0x9f}, {0x1f, 0x6, 0x8, 0x33}, {0x8000, 0xff, 0xffc0, 0x5}, {0x8, 0x1, 0xbe63, 0x6}, {0x7f, 0x2, 0x7, 0xfff7}, {0x0, 0x2, 0xfff8, 0x3}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r7, 0x0, r8, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7], 0x6}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x0) 16:32:37 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r4 = fspick(r3, &(0x7f0000000200)='./file0\x00', 0x1) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdffffff00100000bc0f000051aa0000ffffffff180000002000000000000000010000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x8000, 0x63, &(0x7f0000000340)=""/99, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x6, 0x5, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r3]}, 0x80) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000500)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000280)={0x3, 0x0, 0xff, 0x7, &(0x7f0000000240)=[{0x0, 0x3, 0x1, 0x7}, {0x400, 0x8000, 0x9f}, {0x1f, 0x6, 0x8, 0x33}, {0x8000, 0xff, 0xffc0, 0x5}, {0x8, 0x1, 0xbe63, 0x6}, {0x7f, 0x2, 0x7, 0xfff7}, {0x0, 0x2, 0xfff8, 0x3}]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[r7, 0x0, r8, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x5, 0x7], 0x6}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r6, 0x0) 16:32:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) syz_open_pts(r1, 0x200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x200, 0x4) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) (async) syz_open_pts(r1, 0x200) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x200, 0x4) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:32:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 16:32:38 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x145141) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000007fa2c6b9bf0c55ab7be9c9d7f193650309716db760a62fcebde743c3b961d64019577702961dde2654241c68c110a7243cef44a5f4f117b9887dc22ca016c34e58d86152efcf3915a15fb069d3136227f7ffc3bc30ae85b0dea561d3dc1cf6539b3f81d803fc30c86fdc45f42b5cbe497267ec149e15b1fad26c0a322ed113e2e69b2a693f1b6d0f6e0c43c8b2351d4e33", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254400000008000c00640000000400080112002400b70260b6c830601b01818992ece0000020007000050002000100000004000500050006000000000005000100000000001600240083a489486c18040b8cec021b03811b8c2e6c00000800220108000000050019010a000000050019010f0000000800260011170000080026006c090000080022013f03000008002201c9020000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x38b780, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) [ 640.140106][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 640.220568][ T3646] Bluetooth: hci6: sending frame failed (-49) [ 640.227741][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 640.620101][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 640.620145][T12528] Bluetooth: hci7: command 0x1003 tx timeout [ 640.620365][ T3651] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:32:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x100000001, 0x58000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) (async) 16:32:39 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x145141) r1 = dup(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000007fa2c6b9bf0c55ab7be9c9d7f193650309716db760a62fcebde743c3b961d64019577702961dde2654241c68c110a7243cef44a5f4f117b9887dc22ca016c34e58d86152efcf3915a15fb069d3136227f7ffc3bc30ae85b0dea561d3dc1cf6539b3f81d803fc30c86fdc45f42b5cbe497267ec149e15b1fad26c0a322ed113e2e69b2a693f1b6d0f6e0c43c8b2351d4e33", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254400000008000c00640000000400080112002400b70260b6c830601b01818992ece0000020007000050002000100000004000500050006000000000005000100000000001600240083a489486c18040b8cec021b03811b8c2e6c00000800220108000000050019010a000000050019010f0000000800260011170000080026006c090000080022013f03000008002201c9020000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x38b780, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7f) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x10000, 0x400, 0xc3, 0x4, 0x5, "4ef2f395a2ac0acd637296243556397078f004"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (rerun: 64) [ 640.699618][T15938] mkiss: ax0: crc mode is auto. [ 640.704985][T12528] Bluetooth: hci9: command 0x1003 tx timeout [ 640.709959][ T49] Bluetooth: hci9: Opcode 0x1003 failed: -110 16:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7f) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) (rerun: 64) 16:32:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x100000001, 0x58000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7f) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 640.814959][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) [ 640.823592][T15952] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x10000, 0x400, 0xc3, 0x4, 0x5, "4ef2f395a2ac0acd637296243556397078f004"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:39 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x145141) r1 = dup(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="a40000007fa2c6b9bf0c55ab7be9c9d7f193650309716db760a62fcebde743c3b961d64019577702961dde2654241c68c110a7243cef44a5f4f117b9887dc22ca016c34e58d86152efcf3915a15fb069d3136227f7ffc3bc30ae85b0dea561d3dc1cf6539b3f81d803fc30c86fdc45f42b5cbe497267ec149e15b1fad26c0a322ed113e2e69b2a693f1b6d0f6e0c43c8b2351d4e33", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf254400000008000c00640000000400080112002400b70260b6c830601b01818992ece0000020007000050002000100000004000500050006000000000005000100000000001600240083a489486c18040b8cec021b03811b8c2e6c00000800220108000000050019010a000000050019010f0000000800260011170000080026006c090000080022013f03000008002201c9020000"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x38b780, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) [ 640.908393][T15747] Bluetooth: hci7: Frame reassembly failed (-84) [ 640.923405][T15964] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x3, 0xfffc, 0x100, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 16:32:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x100000001, 0x58000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r3, r2, 0x0, 0x80000000004) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x201001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x759}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000980)={0x1, 0x6, 0xffffffff, 0x5, 0xf, "2117047627b367f0fa8c49f799e172eb55782d"}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x53) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) 16:32:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) syz_open_pts(r0, 0x40040) 16:32:41 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x4, 'rr\x00', 0x38, 0xbee, 0x7d}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x2, 0x8000, 0x8000, 0x3}}, 0x44) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x4, 0x7da5, 0x5, 0x311, 0x8ca2}) r3 = mq_open(&(0x7f0000000140)='-*[\")[[#\x00', 0x40, 0x4, &(0x7f0000000180)={0x7fff, 0xffffffffffffffff, 0x1, 0x7ff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wftno=', @ANYRESHEX=r3, @ANYRESDEC=r1]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) r5 = syz_io_uring_complete(0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_TENBIT(r5, 0x704, 0x1) 16:32:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x3, 0xfffc, 0x100, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) [ 642.859866][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 642.860189][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x201001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x759}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000980)={0x1, 0x6, 0xffffffff, 0x5, 0xf, "2117047627b367f0fa8c49f799e172eb55782d"}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x53) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) [ 642.940295][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) (async, rerun: 64) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) (async, rerun: 64) syz_open_pts(r0, 0x40040) (rerun: 64) 16:32:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x10000, 0x400, 0xc3, 0x4, 0x5, "4ef2f395a2ac0acd637296243556397078f004"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x3, 0xfffc, 0x100, 0x5}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8000000000000001) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x3, 0xfffc, 0x100, 0x5}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) 16:32:41 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x4, 'rr\x00', 0x38, 0xbee, 0x7d}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x2, 0x8000, 0x8000, 0x3}}, 0x44) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x4, 0x7da5, 0x5, 0x311, 0x8ca2}) r3 = mq_open(&(0x7f0000000140)='-*[\")[[#\x00', 0x40, 0x4, &(0x7f0000000180)={0x7fff, 0xffffffffffffffff, 0x1, 0x7ff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wftno=', @ANYRESHEX=r3, @ANYRESDEC=r1]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) r5 = syz_io_uring_complete(0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_TENBIT(r5, 0x704, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x4, 'rr\x00', 0x38, 0xbee, 0x7d}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x2, 0x8000, 0x8000, 0x3}}, 0x44) (async) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x4, 0x7da5, 0x5, 0x311, 0x8ca2}) (async) mq_open(&(0x7f0000000140)='-*[\")[[#\x00', 0x40, 0x4, &(0x7f0000000180)={0x7fff, 0xffffffffffffffff, 0x1, 0x7ff}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wftno=', @ANYRESHEX=r3, @ANYRESDEC=r1]) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$I2C_TENBIT(r5, 0x704, 0x1) (async) 16:32:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="67d97e6aaacaa95d7c98ce99b250bcaeb663fc08c8166c7c48c03dcd75b691efc88c721c7dee25495418edbd9e2993c238f1865d60387aa7f14a15e69c2f765e14a700c58d7ef82351441bea9671ce982ff0b56c3471e7983058215091e9795f") 16:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x201001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x759}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000980)={0x1, 0x6, 0xffffffff, 0x5, 0xf, "2117047627b367f0fa8c49f799e172eb55782d"}) r5 = dup(r0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x53) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000009c0), 0x103100, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x201001, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x759}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000980)={0x1, 0x6, 0xffffffff, 0x5, 0xf, "2117047627b367f0fa8c49f799e172eb55782d"}) (async) dup(r0) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x53) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) (async) 16:32:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) sendfile(r2, r1, 0x0, 0x80000000004) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) (async) syz_open_pts(r0, 0x40040) [ 643.192786][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 643.200050][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 643.200905][T16018] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:41 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x4, 'rr\x00', 0x38, 0xbee, 0x7d}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x2, 0x8000, 0x8000, 0x3}}, 0x44) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x4, 0x7da5, 0x5, 0x311, 0x8ca2}) r3 = mq_open(&(0x7f0000000140)='-*[\")[[#\x00', 0x40, 0x4, &(0x7f0000000180)={0x7fff, 0xffffffffffffffff, 0x1, 0x7ff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wftno=', @ANYRESHEX=r3, @ANYRESDEC=r1]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) r5 = syz_io_uring_complete(0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_TENBIT(r5, 0x704, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000002c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x4, 'rr\x00', 0x38, 0xbee, 0x7d}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x2, 0x8000, 0x8000, 0x3}}, 0x44) (async) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x4, 0x7da5, 0x5, 0x311, 0x8ca2}) (async) mq_open(&(0x7f0000000140)='-*[\")[[#\x00', 0x40, 0x4, &(0x7f0000000180)={0x7fff, 0xffffffffffffffff, 0x1, 0x7ff}) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240), 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wftno=', @ANYRESHEX=r3, @ANYRESDEC=r1]) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) syz_io_uring_complete(0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$I2C_TENBIT(r5, 0x704, 0x1) (async) 16:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1392185f, @remote, 0x35}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) pwritev(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000000)="b000fc219ef1c55245c4894676ecaaf0e76a", 0x12}, {&(0x7f00000020c0)="050d8620c2950ba7b12b56c2922854c336f789bf07886ab2fb26202f408ec57c396e78bf560595bfbb1581c9dad7d746522b5e2baf7b94712a59f2d317f5c3d112493facfa4942e3bda9a29096cc673a7ebde3bfb0d23ed8fce6fefaf9ca470b005a72afdb459d58d9654e8232aea8f90ceee765", 0x74}], 0x4, 0x9f53bf0, 0x80000000) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x5) 16:32:41 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x8) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7f}, 0xc) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x80000001, 0x1, 0x1}) 16:32:42 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(r1, 0x0, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x0) 16:32:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="67d97e6aaacaa95d7c98ce99b250bcaeb663fc08c8166c7c48c03dcd75b691efc88c721c7dee25495418edbd9e2993c238f1865d60387aa7f14a15e69c2f765e14a700c58d7ef82351441bea9671ce982ff0b56c3471e7983058215091e9795f") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_pts(r0, 0x20001) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) (async) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="67d97e6aaacaa95d7c98ce99b250bcaeb663fc08c8166c7c48c03dcd75b691efc88c721c7dee25495418edbd9e2993c238f1865d60387aa7f14a15e69c2f765e14a700c58d7ef82351441bea9671ce982ff0b56c3471e7983058215091e9795f") (async) 16:32:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) [ 643.559797][ T1133] Bluetooth: hci8: Frame reassembly failed (-84) [ 643.583971][ T3646] Bluetooth: hci9: sending frame failed (-49) [ 643.591214][ T3654] Bluetooth: hci9: Opcode 0x1003 failed: -49 [ 643.601252][T16083] Bluetooth: hci9: Frame reassembly failed (-84) 16:32:43 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x8) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7f}, 0xc) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x80000001, 0x1, 0x1}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28012, r0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7f}, 0xc) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x80000001, 0x1, 0x1}) (async) 16:32:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r1, r0, 0x0, 0x80000000004) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5414, &(0x7f0000000000)) 16:32:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(r1, 0x0, 0x6) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x0) 16:32:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="67d97e6aaacaa95d7c98ce99b250bcaeb663fc08c8166c7c48c03dcd75b691efc88c721c7dee25495418edbd9e2993c238f1865d60387aa7f14a15e69c2f765e14a700c58d7ef82351441bea9671ce982ff0b56c3471e7983058215091e9795f") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_pts(r0, 0x20001) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) getpid() (async) sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) (async) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000100)="67d97e6aaacaa95d7c98ce99b250bcaeb663fc08c8166c7c48c03dcd75b691efc88c721c7dee25495418edbd9e2993c238f1865d60387aa7f14a15e69c2f765e14a700c58d7ef82351441bea9671ce982ff0b56c3471e7983058215091e9795f") (async) [ 645.179835][ T27] Bluetooth: hci6: command 0x1003 tx timeout [ 645.180071][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 645.259559][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 645.266492][T16101] Bluetooth: hci6: Frame reassembly failed (-84) [ 645.266852][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:43 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x8) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28012, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x7f}, 0xc) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000100)={0x80000001, 0x1, 0x1}) 16:32:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1392185f, @remote, 0x35}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) pwritev(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000000)="b000fc219ef1c55245c4894676ecaaf0e76a", 0x12}, {&(0x7f00000020c0)="050d8620c2950ba7b12b56c2922854c336f789bf07886ab2fb26202f408ec57c396e78bf560595bfbb1581c9dad7d746522b5e2baf7b94712a59f2d317f5c3d112493facfa4942e3bda9a29096cc673a7ebde3bfb0d23ed8fce6fefaf9ca470b005a72afdb459d58d9654e8232aea8f90ceee765", 0x74}], 0x4, 0x9f53bf0, 0x80000000) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1392185f, @remote, 0x35}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) pwritev(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000000)="b000fc219ef1c55245c4894676ecaaf0e76a", 0x12}, {&(0x7f00000020c0)="050d8620c2950ba7b12b56c2922854c336f789bf07886ab2fb26202f408ec57c396e78bf560595bfbb1581c9dad7d746522b5e2baf7b94712a59f2d317f5c3d112493facfa4942e3bda9a29096cc673a7ebde3bfb0d23ed8fce6fefaf9ca470b005a72afdb459d58d9654e8232aea8f90ceee765", 0x74}], 0x4, 0x9f53bf0, 0x80000000) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x5) (async) 16:32:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_open_pts(r1, 0xdc7f6154038568b5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x9, 0x80240) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000001c0)={0x2, 0x8, [0xb1, 0x2, 0x5], &(0x7f0000000180)=[0x0]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) 16:32:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(r1, 0x0, 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) fsmount(r1, 0x0, 0x6) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x0) (async) [ 645.580127][T15665] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 645.587052][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 645.589964][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) (async) 16:32:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x1ab, 0x6, 0x8000, 0x6, 0xe, "f2c05e52dc8ad5e405324288e63c6f33635b3c"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x1f, 0x0, 0x1, 0x7, 0x0, 0x1}, &(0x7f0000000200)=0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) syz_clone3(&(0x7f00000004c0)={0x404400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x36}, &(0x7f0000000300)=""/185, 0xb9, &(0x7f00000003c0)=""/130, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="4568fbfbfdc21893adea654eeb351991ee7abd422221d7e558e5c137a0774bbde852a659c3343aa2241ced13e5f4e9db73aaa45a8231bd4f066ee0b34c4530c923e9c6def353e7ad4d9a32836122e7a2dacfe18f5d3f53418f67", 0x5a, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) [ 645.675281][T15665] Bluetooth: hci6: sending frame failed (-49) [ 645.676255][T16129] Bluetooth: hci6: Frame reassembly failed (-84) [ 645.688004][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 645.717085][T15665] Bluetooth: hci7: sending frame failed (-49) [ 645.724589][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_open_pts(r1, 0xdc7f6154038568b5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x9, 0x80240) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000001c0)={0x2, 0x8, [0xb1, 0x2, 0x5], &(0x7f0000000180)=[0x0]}) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) (rerun: 64) 16:32:44 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0x1e0, 0x600, 0xa4c6, 0x4, 0x2, 0x2, {0xfffffc21, 0x2}, {0x8000, 0x7}, {0x5c, 0x4}, {0x30a, 0x8000}, 0x3, 0x100, 0x6, 0xfffffff9, 0x1, 0x32, 0x1f, 0x7fff, 0x4, 0x8, 0x5, 0x69, 0x0, 0x4, 0x0, 0xb}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 645.777943][T15747] Bluetooth: hci8: Frame reassembly failed (-84) [ 645.805548][T16150] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x1ab, 0x6, 0x8000, 0x6, 0xe, "f2c05e52dc8ad5e405324288e63c6f33635b3c"}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x1f, 0x0, 0x1, 0x7, 0x0, 0x1}, &(0x7f0000000200)=0x20) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) syz_clone3(&(0x7f00000004c0)={0x404400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x36}, &(0x7f0000000300)=""/185, 0xb9, &(0x7f00000003c0)=""/130, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) sendto$inet6(r3, &(0x7f0000000100)="4568fbfbfdc21893adea654eeb351991ee7abd422221d7e558e5c137a0774bbde852a659c3343aa2241ced13e5f4e9db73aaa45a8231bd4f066ee0b34c4530c923e9c6def353e7ad4d9a32836122e7a2dacfe18f5d3f53418f67", 0x5a, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) 16:32:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1392185f, @remote, 0x35}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) pwritev(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="357b6788a6c09088be0aa9d214c90d00b7f80c52ee9a6245e412b515bd12cbbb3ef285b39229e69e3f0bb533879ae7b8018f9306a84ad8701b86706c63de7ee7bba33e2d0b6d4f3de97912cf53dffb0f1b4e82546871af597d9955f7c1ead8dbafa5de7add5459e6ecd738c4fe371c8fb230dba84bf5d14447d370be461813209cbd85d25d6e42a065e787076f6f7f5b542e05190de7c33a275727c22252f31150d2a9d39e740fed786bcdf6dc020acfa6c77f69ff9868f125976e56a74734db2f87fb44db24c7bd2ac2a96d556aeca8303efd2a11ddb37222b19999539d9fead191714bb9fa212bf3de88cf7925f2d493393d32c9a68e6168b3f6090a7b6be9e48d30e21a249409990eabeca55d123ac1545a07244184b31623f4757fbc8189a223d9ea0b6d1660952a6ffaf6289620cc218a288f3c6aedabe1131ffff0e5f385dc90bb036e2834746a2490688e891eb7e833f642edd81b91f1c513de7e39a7e2f4edf278706cb7b29b29c9f91dfec69937deb0f55876f257937fa39870604664d7a131c0412e3d2c791f122a9f17eac4be9d319e755160d78aa768f669dacc30ce55339cc363374709bb1e125c2a1ae42a0a65ea4ab68a6b50ce21d8071459727e9efb76bb591041a3e4cbf8eed7b9f11918520c991fddd3a5b1b88cdb66d835fc4ed16e62543e898ad1b771764d28d3b1179641d2105d4ee92476aa6feb93eb415c9b76e6fd5733283c5dff87f8b1b3298b92a381e9887648a44701097001537b1549518b9bf7178e8a0d37b9be8f9c17b4b2a556a7d3deb348f6dbf9125412eb7819ea034debcc5c2928ea5284998058a782b7e6efa6787f1b442c5dfabf991e70dab6d27596253bc3daddeb7ef09fef47db8ddab651c967b0e7dbc4d83cb91fea70dadbf7b6fd0dc7063d802961d6f8de497c99b149c39ce582f1a887d28e03eca89eeeb33adae959fb47f279f51ab222bda54b1de0d09d007d08eb37d9c0c2a5e7b94430a262a314cc58f497c7894e26eaf047ffa1e4b1612be40c0e737777ec75c14e3985c55bad21270c37bb063b165cb9329c7b95b04df30a65889efa7c84b60b51c088c81bdf0179b53e925b6aaa5c34ded822efa17ee4a434632839af6e66b76a3e144b1fb6f9b2edb1a03f51a6272605fdbda8b027ddaad6a48f210e636eadc7829bb26783c11bcdcda58d4f1e42bf7865b59ec26533a4563c6927b03bc2a64bef88b4246bc0a23e98bb13f326951c3a868cba1ab043965f74211478d95249a33a4b7c3962a60f71e5a55d43477aad44c9a398112cc7f72373af3d66b3e2b7a4cd25b4e82c4e117bc73ebbc1f92e967709442b9ffd377980995bea07a59a2e1203cf7cf967fa9a06b1d0119e739a4030368836e146ad3db83bfc9f2a7fe62b1f842b1a04c48ccbfbf6d33114a98beb12af100f6cc3a38a01d867895c6eb2201d69e48551cf604f35806cc905e16f00c1db2bd9973cb8098d0eb010fa6521188dee19c6d46d77d27cee554252027affd64812b9fdd743d518c6e79d8e2314897a43864879689953f8ff784138a5a541bd24d084d7dd2d300761b9e6eaeb9429bdd098dedb2065bb9c08f092b342df4490d465d0596b6cca1240eb37293c7720b8319e1b4427e8fd55ee1138c92b7ea8f17719ffc42f3ea022c5f791d65d317efa2f96ffc13917197cbcf307e5e86ac8a74b46a4cf2d58ab0c3a605d2c9bb0010b0d2f7fee7adb23f871384a31e33275e463cd372de042bf73436bf0fb0f4d7638e63395fde8842e661912f47d74fb7fdd6948c80086b63552ce84d71ebc47799e4d89fa68680b9504f7f31aac1a13fe3dfe3a8286ced74b870f412f6eec9bb330643dceee6394ada15598fe36e45668182fd3cb27ff5183e1ef65cc2ec8c4c9385b0d6e671ffe4f0cd4cd22b3ebdc4726f6d837956d73fedc97f9f5c5eeb0f60145ecec63d856e36f99bc2491471f7301e0bf3a5dbfc5991ec5419f0019fa4a83a4208587531e597cb2803ddd50637c1e75da4f4322d2bfa1e50f1f9c38d8452b8c298082864a0c6dc85347af181ca9e3b0ce5865f5de6e56e5e4a443a88fb6b72fff6a1090cf9743c74d5483c1b7eb8798c8493031103a981985b124832cd5b030df0699d4f0b4a419a0ae3776bc9140dc7f45c1c4e0a8a1155778a8602ca04d021d30f44e9831fc918945d14c53bf82e27829f7a0e28c2f5fe1fbbf474825010c7a33e98069defd5820e0a2092dcbe9b99a1f159ba04de99df4c37e1d1076ed4349d78fb3ca4c79b5217a76b9b3d778496b7a320ba90028735e2991660cfab10b7c2906f5bda97e4860fed635ef72d22c1f84281ce2e4f120aab689b35fad621aa693a7d4924188730794a27b19d192955e1e5dca28362064500e61f2dadebfa5be54b8dc76cbbe192647c441799569fb11005eb0b7516d27af3e324441d9797c8ea979cab07a76467897e722ec1f8b1d0058d67c5be1d72fff7691fbe16f1c26b30d70182f6628a9524fdda22c1d4dc92fa436d874137a9caa770b68f4b7c0d6dc417ed8de5c65951d3c611328d3eb93a7ec5d4dfaa46b5deeb5e1814d5fcdb26267a3d3c4dbfd68aa13dff2bc2d89cf44a8142b40dc2168481cefef7f66b21d4e980899ca0767fb9272377a9deddf350c4a5e46e91c1afe8c3f37be3352240243d4e33da1aef71c8e0a44a56449f8eb8d02f8de4144b8c078ceeb72e920d610fa0de7bdc9833a891fe19ae01b77dd35e5ce92f8577330ed3f365c6644522ca004c53d5c19340bed8603fa3e3901d498dc53c12bdb5262b80eec3675377adb56e775d9b59326eb294b408552b742ba39b6ec693e63ce40b8e679b1e16c6fc4aba287abf4d6d794576ddcc7f577ffe5f775f72f43d8d04b38c9ee87b5e758aa764ab12a81e4e2dbcde3598f2812d7688f2f41365c463542493960e5f0c9e002ebfeb77d2ce53e6cb9b27176996cd5f795fb9299b40d5cf58319ce970cc86c5d68d5de7c05e0e4f5c2177f92ac81bf4331620f5de8426c1dbe743bd2631beaeffc650199f777e5aea4445d8b8a7db6359d2c3b75c6c9d00dd9174d518dca6656721f768361bc3e9dd9a01ad7193dd3d971300fa9880ab2212e4c9dfeaa5609bb260d75825c45d1285267b6f00f3dbd9b981b36d1e75c42a86916186a0638ea0c51c1e3497fd45a9bc3b6e52126e70aa7fada1091bb9a844695dfd4f4e400195d60cc5dc0fb80ec41474c88f4cab2ff0522caff51d42bf63be466cecea1d337a4a44b2dd3a50e96ea71808e30004b5153bb77a962e1d252098a0b159ed1028c53f638a80be7d7bd7bbae02082d21055fd0244d534d80ebc6e6b30436c580989fbaba36cabc81a350647d2f671c42915368c0c0cb6f1185a819f3923e8866442951f72e1e83c45a7013afbd54efa37067e97e8c34e939ce3429c5925dfd9e94a689704cf0e39a1c738b8ecf63f0eba54359a1b34a2c33edea7e5f6900a5780eff0270a38a9739071adb3a184189b98363ec7716bbc6b795fcfb5919f74236262bfdf6dff737295545e36745bbdcf5030d69954bac18ac38d1a1391a2570a46be1aa107c2cd5a3fd40e65767ab5105cdd4f432f5f55186fb1d9817ea8ee391cdfa00ae8075b6b0936e3c2e8610d07a3a8d081f80d58aef7714ef95db603677b26a83b31515ef507be7b54cb91685614bcc509e2a2e76fb5187561339102ef41d5009f89f0ca0aafa214db47f739e458ef8170a2d2af8398656dd03659ac591cd48c803e368d9bd4f32864f9c94bfb5eccd1c561a93e2f7187f03b9be0c618db39f27d4e66f033d2089df40ed0bf4cafe0e064299d841c96964a52868402087a17bc0b78973983a833a1be65883d8b17c32153376721ebdfad3022ee73e733868832a4c90a623450270413131d29f1da97ffec1be2c53d43a32d7684c5e88836a7a2f510d71b7ec86066ba2e69bb95dd1f2f4bb1b04bd80d60035a0375250c1918045cb9b1bc9ae9980341376eb82cf6b877bc40b9eeb8adb1a0fada526845f2aff99264418c2d08923405df7fddeb722221824cc20cf87a4e535b29bf766870711d9267a39d675bf760c2e9285cb4ee47f7ca9fdbc4f501eb877baa16990c1cfd93cc9e7678be1983d7ee5e665af7aa70900329a01860edde7e347a989b4e88b1c3096d6c9016edec42d15c1db2d76dd83c3652823efef04074cd387b28c8d6ab8c83d0d4669e529cde1c49f7482c1db1a4c9172f8952de29d3dbe24e0fa1cdace3943420a46692e1e72bf73d6e1e39051f1b67179efe1793c45e39f2f7123c422e03bc2a1b66047c5b1a6dc4d4a2dc6b42be29b39b595d70465c4a39c13c85ce4739835a24db4aba13a4df1b11bd4257df75c8751c35fab84d94e0ac921a8eb698e4bbb42c840c0ce814569822b875c8494d4c26cb50ba22a6c6a7368a23a98dc328451a1d4ccd88b3cad6dfcfd245bfb54cf1bcbb0d183579de6bd86279948e51e0d2fb46cd2ce5ad6fdcb71e3cb5ed7e8bdaf7246f2f687c35a462ced51e52abc15588961f1e693249c5e2eeaf0b4dbba6ab54dc462e624e76625e0df4ac6e78c6261c8deda1051cbcc5716080b7571c2f558058ff04c06d1476f5516401a931e200a5cb5d45068ecda52d496d6e9f72443d724f15ee831d820cbe5549582c826d81574b7007b588d22ef83fa6f31ca658a14046b1fc4ecee29e70cc4fba9977bb556337448dfe2eabe587c4d8ffa6217ea1a44603887adc0218c74e974575fca87f2aa96d5dffcb60b10a9e6cb28ea2b3c780f16f2739826cda3e20585f18be5a2567a594b121ddd42f63cc6843d8d875d990f22aacd0e3b73ffbece8ea491c6efead57a4a51b77b14d230558310c4b929ac1b3f37fcce088c244fd10ecae7fe3cc66242d02636d5bb4824d40f73fd5f8846281106e72c55c083b4b5e2128e0224949bc383d8e25389fbf13fc3ca43917a1ea128fd82880c7d25e7e7d7d4a24baa5cd3e7182dcaecb7ad0edfbd491ad5b831805b83bc33b0966407cd11e31a8dfb0ce893c02315479a0bf96c3219462d5f0bf563cb17c83c04d57c01552809f772d07df994edb6b17dae69ce9005f638feadfb5156d61d911f9f4299285e23a569e450bd8e570a6d44087e6889d659064c01e29c100225d0453a91cdaafe1915edee2e7f6ec8253ef31aee1fcc4a2d6e70dc0c10205f77e280df1a051368a125bcffd6c3de5c075c2d250b92f40cabee4e41ae3525df3b0575ddf3e940fcaf10646c645c0ff68e13620e4fd72d935fccb0a98b6df50a92915923fa5f7cdbb681a12a1ae4e99213d9b3cd70e901ed775d1df0457d46db76d90110138a78b8e840b13e7b83f7486985d7ff09b336afcd6feb1ca3d6ed9ff11532e49a60c4e805302e4193823226e0d00ec54f0871fdad854348d14b79f51a7b7d8aeb343319a5a89f27eadf741cd384832aed8776d6eaff5f78506e359bcefe20d2b4b9e9332426334b53cfb1bfc2f7f3f43629831f72778c8ee5bfa5b02f3b29396d03eb420d211bc0c8e307688f48bfd935010f75539339f2494e444ba64f25ffdfd9b963b5d2c4a44054e0134a364b0d2c99ff75809b4001601f5b8c2c28d8920e8fea43c733e0f8d87415129546262fb4cf022b27db88738366dfa82d4bb74403c5c8b978f2133af2d67012d7d59795ea7e9d0a63042ab05cc5a1f7cd97c9628c0f8d93a46737f37a9fdf0e468bab3165a6ab4d6201ecdc7db380c550e5aa17c0187e2e9e0a365d5f740d2475bc5d57c8a9d4b2378d7646529a696e7cb153c", 0x1000}, {&(0x7f0000000000)="b000fc219ef1c55245c4894676ecaaf0e76a", 0x12}, {&(0x7f00000020c0)="050d8620c2950ba7b12b56c2922854c336f789bf07886ab2fb26202f408ec57c396e78bf560595bfbb1581c9dad7d746522b5e2baf7b94712a59f2d317f5c3d112493facfa4942e3bda9a29096cc673a7ebde3bfb0d23ed8fce6fefaf9ca470b005a72afdb459d58d9654e8232aea8f90ceee765", 0x74}], 0x4, 0x9f53bf0, 0x80000000) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x5) [ 645.869257][T16159] Bluetooth: hci6: Frame reassembly failed (-84) [ 645.887565][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 645.959643][ T3654] Bluetooth: hci7: sending frame failed (-49) [ 645.967677][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x1ab, 0x6, 0x8000, 0x6, 0xe, "f2c05e52dc8ad5e405324288e63c6f33635b3c"}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x1f, 0x0, 0x1, 0x7, 0x0, 0x1}, &(0x7f0000000200)=0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) syz_clone3(&(0x7f00000004c0)={0x404400, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x36}, &(0x7f0000000300)=""/185, 0xb9, &(0x7f00000003c0)=""/130, &(0x7f0000000480)=[0x0], 0x1, {r1}}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) sendto$inet6(r3, &(0x7f0000000100)="4568fbfbfdc21893adea654eeb351991ee7abd422221d7e558e5c137a0774bbde852a659c3343aa2241ced13e5f4e9db73aaa45a8231bd4f066ee0b34c4530c923e9c6def353e7ad4d9a32836122e7a2dacfe18f5d3f53418f67", 0x5a, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xa) [ 646.038061][T16170] mkiss: ax0: crc mode is auto. 16:32:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x250a00, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000140)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000180)=0x7fff) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async, rerun: 64) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (rerun: 64) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) 16:32:46 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 16:32:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0x1e0, 0x600, 0xa4c6, 0x4, 0x2, 0x2, {0xfffffc21, 0x2}, {0x8000, 0x7}, {0x5c, 0x4}, {0x30a, 0x8000}, 0x3, 0x100, 0x6, 0xfffffff9, 0x1, 0x32, 0x1f, 0x7fff, 0x4, 0x8, 0x5, 0x69, 0x0, 0x4, 0x0, 0xb}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0x1e0, 0x600, 0xa4c6, 0x4, 0x2, 0x2, {0xfffffc21, 0x2}, {0x8000, 0x7}, {0x5c, 0x4}, {0x30a, 0x8000}, 0x3, 0x100, 0x6, 0xfffffff9, 0x1, 0x32, 0x1f, 0x7fff, 0x4, 0x8, 0x5, 0x69, 0x0, 0x4, 0x0, 0xb}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) dup3(0xffffffffffffffff, r0, 0x80000) (async) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) (async) [ 647.819964][ T5059] Bluetooth: hci8: command 0x1003 tx timeout [ 647.832385][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:32:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_open_pts(r1, 0xdc7f6154038568b5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x9, 0x80240) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000001c0)={0x2, 0x8, [0xb1, 0x2, 0x5], &(0x7f0000000180)=[0x0]}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) 16:32:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000004c0)={0x3, 0x2e56}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x18, 0x0, 0x24, &(0x7f00000000c0)="ba18a041e22fd3cfdc066b6e957965775196efda0df960131a459e03751a6e3161cf2055b2bd3ffb867b2a172b41f72a30cca52c9062d5626d31c770cd49a18ac099a6eb589d97c13e50a211f46ea62b1c62aa1af87c14ffd6581f7b662d8509fc679fa8057994878e58c9aec5fa5526bbccab18397fd27baeeb8ff9b17e42565f25b53475b430f507262f9b66c137abbca1ab1c95a02c1e14b72ca2f9229005757f68f5bdaa06ad967d42feb20b73c1c1f45b9285158d67429f800db9ebaad4a8d038a545530c4fa843563329ec09398986b8044ccbd68d547753e17390ff9dd9f3f995f60e38acd44a81598823d40cac76f0aabe22e808cb21dc215d6a5890fbea5ba7a835e32982b4575444b7ec93a845c1e5e78a5ea2664990c21b178e0b6e0b28766af79903dad06b0deee0db00b2bcf81ab1729ff8c04f817822f3bff3af2d6fd946df921b6f80c318e15e7a820b966fd36a141df4d8d55f3920ec743a4fd29aff5814c20940043d9b0c0b3b4665efbeb1cc24a61b421793d6dbaba750e95110a452e9b6053e66a3d82b2f31dc4b36c3d653254271e64add564027544e85ef34bca90cbcdbb92b8a20eb82c91f2a8d49558ba13057660157f48677a969ffad007da4e5b4ba65a061c7e541a54119caf8c67a6091ec8ba74488f6ffeafe7e03887796054beedea4784aa4ed6d60fce3722f8db6bb04a73f0b7efa507d4305ebd0cedd59ec9392bc3134864178ba6fd9cf35c3a92d78a4395662f65752370fea6ed779c3e6d4dae908d3e48babcba13031cd16f2f545c16ae395e3df955743cef69d64e60b6017dc752120dea5d565976bfec4004b4b931d6b526a2bbb359bacd751023ee3f9fb4343f5b38564c6d03fada7f9b928dd4ede08b3b57a3c9d158645716e0c1f2d966c2ebf18d2d5d71c8e7da007274b243706d67022cdb9f175f1211b74eae681c1895cd1c4e65270b12f092c39be0c9334d9a6f14d708bc687ca354fcf1f28bfb030af1ceedc9d6436abc639fc776162a5f59a124528970567cfff6e7aaa569813bb42aa4a2daaa7a0291f1e18c32460a60b47726c34f2e3e065d92fd994645181ea3ebe896e123f38607e56e36bc12e3212caeb203015208ba87e1588d0f9d5bcfb6c804fff91dcbdc8efbaa250503a4c2dcb7c64e42984bf9bc628db4f9eca9042c36cb8b7eb41cd3478b4bf4defd781f4fed38b796ea0c0c13f1434a72ace00eb72b00957be637a5d91bedc61e049428b065f0d4191d2d1f9b5179f92bd02aebaecf694917bee5a0ea0f6e40d04e07c18e551b2d8c584048c68c47f9942bba4fb1fb7cf9d50c487e5c48c2f91dfbf5721c37cbe3921a2434b2f6241fcc74c987274b3fc89b6f1b5457b0273753a6ad644068ac8952c87b5464f1823b37da0c949cdc6427704e33b2ba55293bd1b3de3f01182d19f7c30"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x250a00, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000140)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000180)=0x7fff) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:46 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 647.886851][ T3651] Bluetooth: hci7: sending frame failed (-49) [ 647.894132][ T49] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 647.899927][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 647.904058][ T8189] Bluetooth: hci6: command 0x1003 tx timeout 16:32:46 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 16:32:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0x1e0, 0x600, 0xa4c6, 0x4, 0x2, 0x2, {0xfffffc21, 0x2}, {0x8000, 0x7}, {0x5c, 0x4}, {0x30a, 0x8000}, 0x3, 0x100, 0x6, 0xfffffff9, 0x1, 0x32, 0x1f, 0x7fff, 0x4, 0x8, 0x5, 0x69, 0x0, 0x4, 0x0, 0xb}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0x1e0, 0x600, 0xa4c6, 0x4, 0x2, 0x2, {0xfffffc21, 0x2}, {0x8000, 0x7}, {0x5c, 0x4}, {0x30a, 0x8000}, 0x3, 0x100, 0x6, 0xfffffff9, 0x1, 0x32, 0x1f, 0x7fff, 0x4, 0x8, 0x5, 0x69, 0x0, 0x4, 0x0, 0xb}) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) dup3(0xffffffffffffffff, r0, 0x80000) (async) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) (async) [ 647.983129][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 647.991071][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 648.019492][T16203] ptm ptm2: ldisc open failed (-12), clearing slot 2 16:32:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$dupfd(r1, 0x406, r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) write(r1, &(0x7f0000000100)="04fe044524967fa0cb08c3d33b04caed576a5967c5844e616e3ace38a865329f526f97df0a519695d4bd7494f431944e205502c08e93f5d851343eb2d31e4524ab95d43c462eb4028f639bfa2daa61d7c0485438bf17fa48542e1bee8b6878a3618e56a3a000d607b168bdcaa43d0e8e8525b0ce7cd03dc05c", 0x79) 16:32:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x44041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:32:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x250a00, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000140)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000180)=0x7fff) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000004c0)={0x3, 0x2e56}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (rerun: 32) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x18, 0x0, 0x24, &(0x7f00000000c0)="ba18a041e22fd3cfdc066b6e957965775196efda0df960131a459e03751a6e3161cf2055b2bd3ffb867b2a172b41f72a30cca52c9062d5626d31c770cd49a18ac099a6eb589d97c13e50a211f46ea62b1c62aa1af87c14ffd6581f7b662d8509fc679fa8057994878e58c9aec5fa5526bbccab18397fd27baeeb8ff9b17e42565f25b53475b430f507262f9b66c137abbca1ab1c95a02c1e14b72ca2f9229005757f68f5bdaa06ad967d42feb20b73c1c1f45b9285158d67429f800db9ebaad4a8d038a545530c4fa843563329ec09398986b8044ccbd68d547753e17390ff9dd9f3f995f60e38acd44a81598823d40cac76f0aabe22e808cb21dc215d6a5890fbea5ba7a835e32982b4575444b7ec93a845c1e5e78a5ea2664990c21b178e0b6e0b28766af79903dad06b0deee0db00b2bcf81ab1729ff8c04f817822f3bff3af2d6fd946df921b6f80c318e15e7a820b966fd36a141df4d8d55f3920ec743a4fd29aff5814c20940043d9b0c0b3b4665efbeb1cc24a61b421793d6dbaba750e95110a452e9b6053e66a3d82b2f31dc4b36c3d653254271e64add564027544e85ef34bca90cbcdbb92b8a20eb82c91f2a8d49558ba13057660157f48677a969ffad007da4e5b4ba65a061c7e541a54119caf8c67a6091ec8ba74488f6ffeafe7e03887796054beedea4784aa4ed6d60fce3722f8db6bb04a73f0b7efa507d4305ebd0cedd59ec9392bc3134864178ba6fd9cf35c3a92d78a4395662f65752370fea6ed779c3e6d4dae908d3e48babcba13031cd16f2f545c16ae395e3df955743cef69d64e60b6017dc752120dea5d565976bfec4004b4b931d6b526a2bbb359bacd751023ee3f9fb4343f5b38564c6d03fada7f9b928dd4ede08b3b57a3c9d158645716e0c1f2d966c2ebf18d2d5d71c8e7da007274b243706d67022cdb9f175f1211b74eae681c1895cd1c4e65270b12f092c39be0c9334d9a6f14d708bc687ca354fcf1f28bfb030af1ceedc9d6436abc639fc776162a5f59a124528970567cfff6e7aaa569813bb42aa4a2daaa7a0291f1e18c32460a60b47726c34f2e3e065d92fd994645181ea3ebe896e123f38607e56e36bc12e3212caeb203015208ba87e1588d0f9d5bcfb6c804fff91dcbdc8efbaa250503a4c2dcb7c64e42984bf9bc628db4f9eca9042c36cb8b7eb41cd3478b4bf4defd781f4fed38b796ea0c0c13f1434a72ace00eb72b00957be637a5d91bedc61e049428b065f0d4191d2d1f9b5179f92bd02aebaecf694917bee5a0ea0f6e40d04e07c18e551b2d8c584048c68c47f9942bba4fb1fb7cf9d50c487e5c48c2f91dfbf5721c37cbe3921a2434b2f6241fcc74c987274b3fc89b6f1b5457b0273753a6ad644068ac8952c87b5464f1823b37da0c949cdc6427704e33b2ba55293bd1b3de3f01182d19f7c30"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3840, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x13, r2, 0x5d310000) [ 648.171127][T16220] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x44041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x44041, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffc) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 16:32:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 648.293523][T16228] Bluetooth: hci6: Frame reassembly failed (-84) [ 648.315559][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:46 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3840, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x13, r2, 0x5d310000) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3840, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x13, r2, 0x5d310000) (async) 16:32:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x44041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffc) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x44041, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) finit_module(r1, &(0x7f0000000100)='\x00', 0x1) (async) ioctl$TCFLSH(r0, 0x540b, 0xfffffffffffffffc) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 648.425990][T15665] Bluetooth: hci7: sending frame failed (-49) [ 648.434084][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:32:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$dupfd(r1, 0x406, r2) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async, rerun: 32) write(r1, &(0x7f0000000100)="04fe044524967fa0cb08c3d33b04caed576a5967c5844e616e3ace38a865329f526f97df0a519695d4bd7494f431944e205502c08e93f5d851343eb2d31e4524ab95d43c462eb4028f639bfa2daa61d7c0485438bf17fa48542e1bee8b6878a3618e56a3a000d607b168bdcaa43d0e8e8525b0ce7cd03dc05c", 0x79) (rerun: 32) 16:32:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:48 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3840, 0x0) (async) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x13, r2, 0x5d310000) 16:32:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000004c0)={0x3, 0x2e56}) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x18, 0x0, 0x24, &(0x7f00000000c0)="ba18a041e22fd3cfdc066b6e957965775196efda0df960131a459e03751a6e3161cf2055b2bd3ffb867b2a172b41f72a30cca52c9062d5626d31c770cd49a18ac099a6eb589d97c13e50a211f46ea62b1c62aa1af87c14ffd6581f7b662d8509fc679fa8057994878e58c9aec5fa5526bbccab18397fd27baeeb8ff9b17e42565f25b53475b430f507262f9b66c137abbca1ab1c95a02c1e14b72ca2f9229005757f68f5bdaa06ad967d42feb20b73c1c1f45b9285158d67429f800db9ebaad4a8d038a545530c4fa843563329ec09398986b8044ccbd68d547753e17390ff9dd9f3f995f60e38acd44a81598823d40cac76f0aabe22e808cb21dc215d6a5890fbea5ba7a835e32982b4575444b7ec93a845c1e5e78a5ea2664990c21b178e0b6e0b28766af79903dad06b0deee0db00b2bcf81ab1729ff8c04f817822f3bff3af2d6fd946df921b6f80c318e15e7a820b966fd36a141df4d8d55f3920ec743a4fd29aff5814c20940043d9b0c0b3b4665efbeb1cc24a61b421793d6dbaba750e95110a452e9b6053e66a3d82b2f31dc4b36c3d653254271e64add564027544e85ef34bca90cbcdbb92b8a20eb82c91f2a8d49558ba13057660157f48677a969ffad007da4e5b4ba65a061c7e541a54119caf8c67a6091ec8ba74488f6ffeafe7e03887796054beedea4784aa4ed6d60fce3722f8db6bb04a73f0b7efa507d4305ebd0cedd59ec9392bc3134864178ba6fd9cf35c3a92d78a4395662f65752370fea6ed779c3e6d4dae908d3e48babcba13031cd16f2f545c16ae395e3df955743cef69d64e60b6017dc752120dea5d565976bfec4004b4b931d6b526a2bbb359bacd751023ee3f9fb4343f5b38564c6d03fada7f9b928dd4ede08b3b57a3c9d158645716e0c1f2d966c2ebf18d2d5d71c8e7da007274b243706d67022cdb9f175f1211b74eae681c1895cd1c4e65270b12f092c39be0c9334d9a6f14d708bc687ca354fcf1f28bfb030af1ceedc9d6436abc639fc776162a5f59a124528970567cfff6e7aaa569813bb42aa4a2daaa7a0291f1e18c32460a60b47726c34f2e3e065d92fd994645181ea3ebe896e123f38607e56e36bc12e3212caeb203015208ba87e1588d0f9d5bcfb6c804fff91dcbdc8efbaa250503a4c2dcb7c64e42984bf9bc628db4f9eca9042c36cb8b7eb41cd3478b4bf4defd781f4fed38b796ea0c0c13f1434a72ace00eb72b00957be637a5d91bedc61e049428b065f0d4191d2d1f9b5179f92bd02aebaecf694917bee5a0ea0f6e40d04e07c18e551b2d8c584048c68c47f9942bba4fb1fb7cf9d50c487e5c48c2f91dfbf5721c37cbe3921a2434b2f6241fcc74c987274b3fc89b6f1b5457b0273753a6ad644068ac8952c87b5464f1823b37da0c949cdc6427704e33b2ba55293bd1b3de3f01182d19f7c30"}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000004c0)={0x3, 0x2e56}) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x18, 0x0, 0x24, &(0x7f00000000c0)="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"}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:32:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@deltaction={0x244, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x683}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x817}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fdb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x244}}, 0x40080) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="628af9f40b6dc70000004ad5e3f227"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x2) r6 = dup3(r0, r2, 0x80000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x10a443, 0x48) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) [ 650.300078][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:32:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:49 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$dupfd(r1, 0x406, r2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) write(r1, &(0x7f0000000100)="04fe044524967fa0cb08c3d33b04caed576a5967c5844e616e3ace38a865329f526f97df0a519695d4bd7494f431944e205502c08e93f5d851343eb2d31e4524ab95d43c462eb4028f639bfa2daa61d7c0485438bf17fa48542e1bee8b6878a3618e56a3a000d607b168bdcaa43d0e8e8525b0ce7cd03dc05c", 0x79) [ 650.532144][T16294] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 650.595560][T16308] ptm ptm5: ldisc open failed (-12), clearing slot 5 16:32:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:32:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 650.698568][T16318] Bluetooth: hci8: Frame reassembly failed (-84) [ 650.705561][ T56] Bluetooth: hci8: Frame reassembly failed (-84) 16:32:49 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000040)) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:32:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@deltaction={0x244, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x683}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x817}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fdb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x244}}, 0x40080) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="628af9f40b6dc70000004ad5e3f227"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x2) r6 = dup3(r0, r2, 0x80000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x10a443, 0x48) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@deltaction={0x244, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x683}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x817}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fdb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x244}}, 0x40080) (async) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) socket$xdp(0x2c, 0x3, 0x0) (async) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="628af9f40b6dc70000004ad5e3f227"]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) (async) ioctl$KDADDIO(r3, 0x4b34, 0x2) (async) dup3(r0, r2, 0x80000) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x10a443, 0x48) (async) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000005c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) 16:32:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 652.460079][ T5059] Bluetooth: hci6: command 0x1003 tx timeout [ 652.466400][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x13, 0x192, &(0x7f0000000080)="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"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc02, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @loopback}, @vsock={0x28, 0x0, 0xffffd8ef, @host}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x58, 0x114}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x600100, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000540)={0x9, 0xffffffff, 0x6, 0x8f2b3565dd01fe07, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r4}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001e00)={r4, 0x1000000000202, 0x3}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={r4, 0x5, 0x100, 0x1}) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:51 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) 16:32:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 652.540068][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 652.547082][ T7] Bluetooth: hci7: command tx timeout 16:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc02, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @loopback}, @vsock={0x28, 0x0, 0xffffd8ef, @host}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x58, 0x114}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x600100, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000540)={0x9, 0xffffffff, 0x6, 0x8f2b3565dd01fe07, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r4}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001e00)={r4, 0x1000000000202, 0x3}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={r4, 0x5, 0x100, 0x1}) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:32:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0xc02, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @loopback}, @vsock={0x28, 0x0, 0xffffd8ef, @host}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0x58, 0x114}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x600100, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000540)={0x9, 0xffffffff, 0x6, 0x8f2b3565dd01fe07, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r4}) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001e00)={r4, 0x1000000000202, 0x3}) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000000c0)={r4, 0x5, 0x100, 0x1}) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@deltaction={0x244, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x683}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x817}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fdb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x244}}, 0x40080) r2 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) r5 = socket$xdp(0x2c, 0x3, 0x0) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="628af9f40b6dc70000004ad5e3f227"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x2) r6 = dup3(r0, r2, 0x80000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x10a443, 0x48) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}, {}, {0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x20000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001540)=@deltaction={0x244, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x683}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x817}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fdb}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x244}}, 0x40080) (async) accept(0xffffffffffffffff, &(0x7f00000000c0)=@nl, &(0x7f0000000140)=0x80) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) socket$xdp(0x2c, 0x3, 0x0) (async) fremovexattr(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="628af9f40b6dc70000004ad5e3f227"]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x200, 0x0) (async) ioctl$KDADDIO(r3, 0x4b34, 0x2) (async) dup3(r0, r2, 0x80000) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x10a443, 0x48) (async) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f00000005c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) [ 652.699857][ T27] Bluetooth: hci8: command 0x1003 tx timeout [ 652.700049][T15665] Bluetooth: hci8: Opcode 0x1003 failed: -110 16:32:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x408001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300000a00000000000000000000005c3feddb889ce8ac1dd182422f01e5a10300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x0) r4 = eventfd(0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r0, 0xc5a0}, {0xffffffffffffffff, 0x1000}, {r2, 0xa480}, {r3}, {r0}, {r4, 0x1000}], 0x7, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000200)={[0x63]}, 0x8) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 16:32:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 652.871360][T16367] Bluetooth: hci7: Frame reassembly failed (-84) [ 652.920401][T15747] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x13, 0x192, &(0x7f0000000080)="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"}) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x13, 0x192, &(0x7f0000000080)="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"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:32:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x408001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300000a00000000000000000000005c3feddb889ce8ac1dd182422f01e5a10300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x0) (async) r4 = eventfd(0x4) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r0, 0xc5a0}, {0xffffffffffffffff, 0x1000}, {r2, 0xa480}, {r3}, {r0}, {r4, 0x1000}], 0x7, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000200)={[0x63]}, 0x8) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:32:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) fallocate(r2, 0x20, 0x3, 0x6e5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x10, 0xc5, 0x7, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x2a, 0x10}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_lifetime={0x4, 0x4, 0xea, 0x6, 0x40, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bc0, 0xe41, {0x6, 0x33, 0x8, 0x20, 0x0, 0x1, 0x0, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x1f, 0x8, 0x2c, 0x0, 0x40000000}]}, 0xc8}}, 0x1) dup(0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) [ 654.700003][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 654.706133][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:32:53 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000140)=@name={0x2}, 0x10) 16:32:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x408001) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300000a00000000000000000000005c3feddb889ce8ac1dd182422f01e5a10300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) (async) r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x0) r4 = eventfd(0x4) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r0, 0xc5a0}, {0xffffffffffffffff, 0x1000}, {r2, 0xa480}, {r3}, {r0}, {r4, 0x1000}], 0x7, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000200)={[0x63]}, 0x8) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) [ 654.815848][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 654.823196][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 654.887691][T16399] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 654.939968][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 654.946979][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 654.955923][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:53 executing program 4: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/206, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) close(r3) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 16:32:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000480)={0x0, 0x1, 0x5, 0x13, 0x192, &(0x7f0000000080)="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"}) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:53 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="d63d2bf11adfb98efe5eda0785", 0xd}}, 0x0) 16:32:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0xcc6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5414, &(0x7f0000000000)) 16:32:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) fallocate(r2, 0x20, 0x3, 0x6e5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x10, 0xc5, 0x7, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x2a, 0x10}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_lifetime={0x4, 0x4, 0xea, 0x6, 0x40, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bc0, 0xe41, {0x6, 0x33, 0x8, 0x20, 0x0, 0x1, 0x0, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x1f, 0x8, 0x2c, 0x0, 0x40000000}]}, 0xc8}}, 0x1) (async) dup(0xffffffffffffffff) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) 16:32:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (rerun: 64) 16:32:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0xcc6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5414, &(0x7f0000000000)) [ 655.055665][T16413] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.072440][ T49] Bluetooth: hci6: sending frame failed (-49) [ 655.079428][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:32:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0xcc6}}, './file0\x00'}) ioctl$TIOCSTI(r1, 0x5414, &(0x7f0000000000)) 16:32:53 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x800, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x3342, 0x8, 0x7, 0x1, 0x16, "cfd4c154dd3800"}) 16:32:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x4000007, 0x158, 0x138, 0x0, 0x200, 0x240, 0x240, 0x200, 0x21a, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'virt_wifi0\x00', {}, {}, 0x3a}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c600"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0xc001, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="74756e6c300000000000000000000000f2970167a24701eaad2976b221ff1b", @ANYRES32=0x0, @ANYBLOB="80000040fffffff78000000047c9009c00680000202f9078ac1414bbac1e0101442488a1e000000200000006ac1e010100000003e0000002000000090a010100000001ff83073ee1ff220500440c8d410a0101000000000744242cc37f00000100000003ac1414230000007fe000000200000002ac1414aa000000d8830e81f09cd1fcc12b9630897283940f4d4f436e0d2da9f8e93da92fec440c9c43ac14142c00000008000000"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 655.173512][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 655.181243][ T49] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 655.202880][T16422] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:53 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x80) [ 655.252493][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.259106][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.265749][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.273426][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.281301][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.287838][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.294429][T16422] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) fallocate(r2, 0x20, 0x3, 0x6e5) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x10, 0xc5, 0x7, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x2a, 0x10}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_lifetime={0x4, 0x4, 0xea, 0x6, 0x40, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bc0, 0xe41, {0x6, 0x33, 0x8, 0x20, 0x0, 0x1, 0x0, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x1f, 0x8, 0x2c, 0x0, 0x40000000}]}, 0xc8}}, 0x1) dup(0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) (async) fallocate(r2, 0x20, 0x3, 0x6e5) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x10, 0xc5, 0x7, 0x19, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd25, 0x3503}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x2a, 0x10}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd26, 0x3503}, @sadb_lifetime={0x4, 0x4, 0xea, 0x6, 0x40, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bc0, 0xe41, {0x6, 0x33, 0x8, 0x20, 0x0, 0x1, 0x0, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x1f, 0x8, 0x2c, 0x0, 0x40000000}]}, 0xc8}}, 0x1) (async) dup(0xffffffffffffffff) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) [ 655.301028][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.317462][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.324562][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.333761][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.351090][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.373085][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.410933][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.429397][T16435] xt_CT: No such helper "snmp_trap" [ 655.444019][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.460106][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.500035][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.508025][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.531179][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.537658][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.555743][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.563750][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.588392][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.602718][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.617146][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.628636][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.639266][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.649421][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.666605][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.676122][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.689400][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.698771][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.709498][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.718769][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.728646][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.736998][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.747069][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.755236][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.765151][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.773376][T16422] Bluetooth: hci6: Frame reassembly failed (-84) [ 655.783505][T16422] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:55 executing program 4: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/206, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) close(r3) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 16:32:55 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x80) 16:32:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 16:32:55 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x800, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x3342, 0x8, 0x7, 0x1, 0x16, "cfd4c154dd3800"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x800, 0x0) (async) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r1, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x3342, 0x8, 0x7, 0x1, 0x16, "cfd4c154dd3800"}) (async) 16:32:55 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x618acf3a999d5718, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x72b540, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) dup3(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x64, r6, 0x1, 0x70bd2d, 0x0, {{0x13}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb3, 0x72}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0800}, 0x40) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000540)={{}, 0x0, 0x4, @unused=[0x5, 0x0, 0xffffffffffffffff, 0x2], @subvolid=0xfffffffffffffffa}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x47d082799c6e1edc, r1, 0x2000) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@default, @bcast, 0x2, [@null, @bcast, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 16:32:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) fcntl$dupfd(r0, 0x406, r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 657.179876][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 657.180028][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:55 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5414, &(0x7f0000000000)=0x80) (async) 16:32:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) [ 657.350322][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 657.357580][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 657.360439][T16463] Bluetooth: hci6: Frame reassembly failed (-84) [ 657.384630][ T1133] Bluetooth: hci7: Frame reassembly failed (-84) 16:32:55 executing program 3: syz_init_net_socket$802154_raw(0x24, 0x2, 0x0) 16:32:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 16:32:56 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_getvlan={0x28, 0x72, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x800, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x3342, 0x8, 0x7, 0x1, 0x16, "cfd4c154dd3800"}) 16:32:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) fcntl$dupfd(r0, 0x406, r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x1c) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) fcntl$dupfd(r0, 0x406, r1) (async) pipe2(&(0x7f0000000100), 0x80080) (async) ioctl$TCFLSH(r2, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) [ 657.752786][ T49] Bluetooth: hci6: sending frame failed (-49) [ 657.759972][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 657.773636][T16489] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:57 executing program 4: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/206, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) close(r3) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f00000000c0)=""/206, 0x2}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x10080, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) close(r3) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) 16:32:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) 16:32:57 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), r0) 16:32:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:57 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x618acf3a999d5718, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x72b540, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) dup3(r4, r5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x64, r6, 0x1, 0x70bd2d, 0x0, {{0x13}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb3, 0x72}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0800}, 0x40) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000540)={{}, 0x0, 0x4, @unused=[0x5, 0x0, 0xffffffffffffffff, 0x2], @subvolid=0xfffffffffffffffa}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x47d082799c6e1edc, r1, 0x2000) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@default, @bcast, 0x2, [@null, @bcast, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 16:32:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) fcntl$dupfd(r0, 0x406, r1) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$TCFLSH(r2, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 659.420021][T12528] Bluetooth: hci7: command 0x1003 tx timeout [ 659.420015][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:32:58 executing program 3: socketpair$unix(0x2, 0x0, 0x0, &(0x7f0000003240)) 16:32:58 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x618acf3a999d5718, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x72b540, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r3, r2, 0x0, 0x80000000004) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) dup3(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x64, r6, 0x1, 0x70bd2d, 0x0, {{0x13}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb3, 0x72}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0800}, 0x40) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000540)={{}, 0x0, 0x4, @unused=[0x5, 0x0, 0xffffffffffffffff, 0x2], @subvolid=0xfffffffffffffffa}) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x47d082799c6e1edc, r1, 0x2000) (async) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@default, @bcast, 0x2, [@null, @bcast, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 16:32:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x4) [ 659.562325][T15665] Bluetooth: hci6: sending frame failed (-49) [ 659.569400][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 659.606164][T16509] Bluetooth: hci6: Frame reassembly failed (-84) [ 659.639387][ T49] Bluetooth: hci7: sending frame failed (-49) [ 659.647293][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 659.648047][T15747] Bluetooth: hci6: Frame reassembly failed (-84) 16:32:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:32:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x81, 0x8, 0xe24}) 16:32:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="62c92f265b7a978ba11e2368d7eea626e1f000a1c87fc40c42b26a98cfcc4d7ace2f2fb1a3ac7d284919556b7b6a3ac20ec03d6c58a7edcd83b0c4a82b7689541235cd958543372bdd4c05"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48087) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xbf, &(0x7f0000000240)="26b957d4600fe0e3068b2812a933096b0e11731908e7cb910beb1cce38a742adcf3008542f656e6e009b1437f4fe7cb763507f04bbc3cabb0075fb54f8d27b683239b407408af80bfddec61f67685146b515cf54aac6370a8c8dfd017694500bcb98f9f02b478cb3cf42dd00ca81c4a884d78d2980425a83198954a7f644fec5968474133ee436263254ffcfac6ffc51f238ebfad97eb6fec4079af80b742a9960d5c158a458499017d4d5370c52d799db6079a138fb54179f490e33a5aeec", 0x57, 0x0, &(0x7f0000000300)="a8905e2639463387b488c2222127929b66209bdfcae8437b941d40bbdb11455ed6473c0c127f489335f1df158f3c19196fc8f49a44555cc26dfea60c030389697eb347ed1d193a8813e983c1d1c3b0db9adbbbcb4b325f"}) [ 659.770676][T16531] ptm ptm0: ldisc open failed (-12), clearing slot 0 16:32:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x81) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x177183, 0x0) fcntl$setsig(r1, 0xa, 0x15) 16:32:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x81, 0x8, 0xe24}) [ 659.853209][ T1133] Bluetooth: hci7: Frame reassembly failed (-84) [ 659.884678][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 659.892379][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:32:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000480)=""/131, 0x26, 0x83, 0x1}, 0x20) [ 659.904208][T16549] Bluetooth: hci8: Frame reassembly failed (-84) 16:32:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="62c92f265b7a978ba11e2368d7eea626e1f000a1c87fc40c42b26a98cfcc4d7ace2f2fb1a3ac7d284919556b7b6a3ac20ec03d6c58a7edcd83b0c4a82b7689541235cd958543372bdd4c05"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48087) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xbf, &(0x7f0000000240)="26b957d4600fe0e3068b2812a933096b0e11731908e7cb910beb1cce38a742adcf3008542f656e6e009b1437f4fe7cb763507f04bbc3cabb0075fb54f8d27b683239b407408af80bfddec61f67685146b515cf54aac6370a8c8dfd017694500bcb98f9f02b478cb3cf42dd00ca81c4a884d78d2980425a83198954a7f644fec5968474133ee436263254ffcfac6ffc51f238ebfad97eb6fec4079af80b742a9960d5c158a458499017d4d5370c52d799db6079a138fb54179f490e33a5aeec", 0x57, 0x0, &(0x7f0000000300)="a8905e2639463387b488c2222127929b66209bdfcae8437b941d40bbdb11455ed6473c0c127f489335f1df158f3c19196fc8f49a44555cc26dfea60c030389697eb347ed1d193a8813e983c1d1c3b0db9adbbbcb4b325f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="62c92f265b7a978ba11e2368d7eea626e1f000a1c87fc40c42b26a98cfcc4d7ace2f2fb1a3ac7d284919556b7b6a3ac20ec03d6c58a7edcd83b0c4a82b7689541235cd958543372bdd4c05"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48087) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r2) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xbf, &(0x7f0000000240)="26b957d4600fe0e3068b2812a933096b0e11731908e7cb910beb1cce38a742adcf3008542f656e6e009b1437f4fe7cb763507f04bbc3cabb0075fb54f8d27b683239b407408af80bfddec61f67685146b515cf54aac6370a8c8dfd017694500bcb98f9f02b478cb3cf42dd00ca81c4a884d78d2980425a83198954a7f644fec5968474133ee436263254ffcfac6ffc51f238ebfad97eb6fec4079af80b742a9960d5c158a458499017d4d5370c52d799db6079a138fb54179f490e33a5aeec", 0x57, 0x0, &(0x7f0000000300)="a8905e2639463387b488c2222127929b66209bdfcae8437b941d40bbdb11455ed6473c0c127f489335f1df158f3c19196fc8f49a44555cc26dfea60c030389697eb347ed1d193a8813e983c1d1c3b0db9adbbbcb4b325f"}) (async) 16:32:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x81) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x177183, 0x0) fcntl$setsig(r1, 0xa, 0x15) [ 660.103254][ T3654] Bluetooth: hci8: sending frame failed (-49) [ 660.106261][T16563] Bluetooth: hci8: Frame reassembly failed (-84) [ 660.116407][ T49] Bluetooth: hci8: Opcode 0x1003 failed: -49 16:33:00 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x2) close(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:33:00 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000280)=@framed={{}, [@cb_func]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 16:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r5, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) (async) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x81, 0x8, 0xe24}) 16:33:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="62c92f265b7a978ba11e2368d7eea626e1f000a1c87fc40c42b26a98cfcc4d7ace2f2fb1a3ac7d284919556b7b6a3ac20ec03d6c58a7edcd83b0c4a82b7689541235cd958543372bdd4c05"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x48087) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xbf, &(0x7f0000000240)="26b957d4600fe0e3068b2812a933096b0e11731908e7cb910beb1cce38a742adcf3008542f656e6e009b1437f4fe7cb763507f04bbc3cabb0075fb54f8d27b683239b407408af80bfddec61f67685146b515cf54aac6370a8c8dfd017694500bcb98f9f02b478cb3cf42dd00ca81c4a884d78d2980425a83198954a7f644fec5968474133ee436263254ffcfac6ffc51f238ebfad97eb6fec4079af80b742a9960d5c158a458499017d4d5370c52d799db6079a138fb54179f490e33a5aeec", 0x57, 0x0, &(0x7f0000000300)="a8905e2639463387b488c2222127929b66209bdfcae8437b941d40bbdb11455ed6473c0c127f489335f1df158f3c19196fc8f49a44555cc26dfea60c030389697eb347ed1d193a8813e983c1d1c3b0db9adbbbcb4b325f"}) [ 661.659882][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 661.667700][ T8189] Bluetooth: hci6: command tx timeout 16:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x81) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)=0x1) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x177183, 0x0) fcntl$setsig(r1, 0xa, 0x15) 16:33:00 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x2) (async) close(r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) 16:33:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002500)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000080)="84dbb4bfa9b3470abb7e3cbd98177d08cc323443d845eb146839200104e8fe31beff55f1f5487fc240fe68143b13252d28d58877", 0x34}, {&(0x7f00000000c0)="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", 0xe8d}], 0x2}, 0x0) 16:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:00 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x4017d4, 0x6d7a, 0x1, &(0x7f0000000140)={[0x101]}, 0x8) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x24000, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r6, 0x7f, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x400) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r7, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x5}) r8 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r9, 0xffffffffffffffff, 0x0, 0x80000000004) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=[@s={0x5, @SEQ_MIDIPUTC=0x2, 0x1, 0x1}, @e={0xff, 0x1, 0x3, 0x4, @generic=0x8, 0x7f, 0x3, 0x51}, @n={0x1, 0x0, @SEQ_NOTEON=@note=0x40, 0x3}, @t={0x0, 0x1, 0x3, 0x81, @generic}, @s={0x5, @generic=0x8}, @n={0x3, 0x0, @generic, 0x8}, @raw={0xc, 0x4, "1a735a4f1538"}], 0x28) [ 661.909858][ T8189] Bluetooth: hci7: command 0x1003 tx timeout [ 661.909927][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6d) 16:33:00 executing program 3: socketpair$unix(0x300, 0x0, 0x0, &(0x7f0000003240)) 16:33:00 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x2) close(r0) (async, rerun: 64) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) (rerun: 64) 16:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x106) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='=', 0x1}], 0x1}, 0x24c5) 16:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x40) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) [ 662.083225][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 662.090773][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6d) 16:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x40) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x8, 0x2e}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:00 executing program 3: ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) 16:33:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/97, 0x61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2c2, 0x9, 0x3, 0x0, 0x16, "e748d39fa076e71580815d8585793e07c41e73"}) syz_open_dev$vcsa(&(0x7f0000000040), 0x7fffffff, 0x121400) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:00 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x4017d4, 0x6d7a, 0x1, &(0x7f0000000140)={[0x101]}, 0x8) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x24000, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r6, 0x7f, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x400) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r7, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x5}) r8 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r9, 0xffffffffffffffff, 0x0, 0x80000000004) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=[@s={0x5, @SEQ_MIDIPUTC=0x2, 0x1, 0x1}, @e={0xff, 0x1, 0x3, 0x4, @generic=0x8, 0x7f, 0x3, 0x51}, @n={0x1, 0x0, @SEQ_NOTEON=@note=0x40, 0x3}, @t={0x0, 0x1, 0x3, 0x81, @generic}, @s={0x5, @generic=0x8}, @n={0x3, 0x0, @generic, 0x8}, @raw={0xc, 0x4, "1a735a4f1538"}], 0x28) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_enter(r1, 0x4017d4, 0x6d7a, 0x1, &(0x7f0000000140)={[0x101]}, 0x8) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x24000, 0x0) (async) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r6, 0x7f, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x400) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r7, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x5}) (async) openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x1) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r9, 0xffffffffffffffff, 0x0, 0x80000000004) (async) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=[@s={0x5, @SEQ_MIDIPUTC=0x2, 0x1, 0x1}, @e={0xff, 0x1, 0x3, 0x4, @generic=0x8, 0x7f, 0x3, 0x51}, @n={0x1, 0x0, @SEQ_NOTEON=@note=0x40, 0x3}, @t={0x0, 0x1, 0x3, 0x81, @generic}, @s={0x5, @generic=0x8}, @n={0x3, 0x0, @generic, 0x8}, @raw={0xc, 0x4, "1a735a4f1538"}], 0x28) (async) 16:33:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x8, 0x2e}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 662.290193][ T3749] Bluetooth: hci6: Frame reassembly failed (-84) [ 662.326321][T16674] ptm ptm2: ldisc open failed (-12), clearing slot 2 16:33:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$TIOCSTI(r0, 0x5437, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000029a34be6d3eaae0e287ed2701c41ae75ad05d8b67269a124601579f9c8f8ba59a3740000000000000005a3253ea4ad064ef60df963ec200d4eb904000000000000008b0ec0c9cadf2f97b07b6f"], 0x50}, 0x1, 0x7}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001180)={0x1, 0x2, 0x1000, 0xac, &(0x7f00000000c0)="fed0741b28fc6edc8133934ab49a12e1f504ce498433a561113b33fcc5700f0f37e62384e7d3ae8179a7b3ea5e90d20816954c33e9d3cd9a957a67336cd06ad99deab9c269dd29b6ed658d8f84dff258684c8eb959db1ad5ddddc1c490467e731095c03085168af79e8f66a3bf33575d2fc50a6486fa06c1c22029bf396dbb9dba63f1bdd14a07476aee481eb52fda83677094df03ffd596e8fea884536f0c4354b790d0e93e7d44bcfa7e43", 0x1000, 0x0, &(0x7f0000000180)="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"}) 16:33:00 executing program 3: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) 16:33:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x8, 0x2e}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x8, 0x2e}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:33:00 executing program 3: statx(0xffffffffffffffff, &(0x7f00000065c0)='./file0\x00', 0x0, 0x0, 0x0) 16:33:01 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) io_uring_enter(r1, 0x4017d4, 0x6d7a, 0x1, &(0x7f0000000140)={[0x101]}, 0x8) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb25f17e63a5dad7a}, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x24000, 0x0) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4000, @fd=r6, 0x7f, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x400) (async) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r7, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, &(0x7f0000000100)={0x1, 0x3, 0x5}) (async) r8 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000080), 0x442, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r9, 0xffffffffffffffff, 0x0, 0x80000000004) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=[@s={0x5, @SEQ_MIDIPUTC=0x2, 0x1, 0x1}, @e={0xff, 0x1, 0x3, 0x4, @generic=0x8, 0x7f, 0x3, 0x51}, @n={0x1, 0x0, @SEQ_NOTEON=@note=0x40, 0x3}, @t={0x0, 0x1, 0x3, 0x81, @generic}, @s={0x5, @generic=0x8}, @n={0x3, 0x0, @generic, 0x8}, @raw={0xc, 0x4, "1a735a4f1538"}], 0x28) 16:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r1, 0x5423, &(0x7f0000000000)=0x6d) 16:33:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/97, 0x61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2c2, 0x9, 0x3, 0x0, 0x16, "e748d39fa076e71580815d8585793e07c41e73"}) syz_open_dev$vcsa(&(0x7f0000000040), 0x7fffffff, 0x121400) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/97, 0x61) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2c2, 0x9, 0x3, 0x0, 0x16, "e748d39fa076e71580815d8585793e07c41e73"}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7fffffff, 0x121400) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x3) (async) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) (async) 16:33:02 executing program 3: pipe(&(0x7f0000003c80)) 16:33:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) ioctl$KDADDIO(r0, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000029a34be6d3eaae0e287ed2701c41ae75ad05d8b67269a124601579f9c8f8ba59a3740000000000000005a3253ea4ad064ef60df963ec200d4eb904000000000000008b0ec0c9cadf2f97b07b6f"], 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001180)={0x1, 0x2, 0x1000, 0xac, &(0x7f00000000c0)="fed0741b28fc6edc8133934ab49a12e1f504ce498433a561113b33fcc5700f0f37e62384e7d3ae8179a7b3ea5e90d20816954c33e9d3cd9a957a67336cd06ad99deab9c269dd29b6ed658d8f84dff258684c8eb959db1ad5ddddc1c490467e731095c03085168af79e8f66a3bf33575d2fc50a6486fa06c1c22029bf396dbb9dba63f1bdd14a07476aee481eb52fda83677094df03ffd596e8fea884536f0c4354b790d0e93e7d44bcfa7e43", 0x1000, 0x0, &(0x7f0000000180)="27d314f7178a644356cb067af10c1c7136b608b630df248df7669709115e1904777cdced1158a2ea9cd9346d008ed3c654ba84686e0393be21b059a62f72f637f39183003d22b92fb9486dc261f981c477ef2e6bdfabf395e307982a81081144bd72d4f40609503674ccfcf76f3c8ad045eb5953d7fb51e47e7435835ba5f37d12b791e28f7dd0f27fe7234ca368abf7274a068c0074ce9ff99e137f9369e72cb64cd1f41287e9cd7b81e2ff8421f9020dd04453df1c423682f0fc0e9afd84c713dcd239c2f669e30fc495abbae6fe2e5ad7bf403dccefbc9234122e762a67c9178b47c1cd10f862ccabc3f809bda4da1043a8c5dfc3346c0bf3d5613171e557b3e930eff162ed9a3c6098b9015f6eee275e27bdcd6bb5ae39e5cf5d22ec15f193dfcfdd367366afdc9d290441bad36eecc38dc2c7a76ee49ff2388eb63eeb804dfe3c441a1b3fbfa66436297ca05ea920c84aae97167c9446a6d3049c45cafe5ab943df1ebf6fa14ee8180a37b8c4a04f17fd7fee20d1fd7de416ad08b36a6dced962c2183ce7dfc1fd2eb9cd6f980f047002045fbeea9aabe58f00a35e511e77c175f924c3673dc7e6d019217d41942b87c1ec1d0ef5c64eaf152cb31f33daf7129f8dd812c1a448bd24f9d30a0d93fff9ff562095a5eb5cb7787f094bb90645ef23f229109989520d9c469a479440670144092bab39af4f3239527ce9affc435cd2621fbbdd0a4ae9b49af178f0586749a9607408ece539cbc63c7935b7cc1ded698b43c7727771590f8e9790a7b3acf7d18caf817aae19cbe547b9719557d65c586dc6c67d04cd9d9abde1254b2fd4048f0d2e5899847ba0e279201076857c35c06138fb59d3604c20c510b9b600b5636f74be434c6608e5f1296851bd3b1d2b050fd7900b6ed7b151163bdb7abf285242d1c6acfa09901aa35d2cc4a68ba188713f2718eda4e219a8f0f92422c80da52d55a418584b455f10522232c1ff07ff7bc8f66d456a934ba684683eef78c65066778929f73f187e417f9ec6871f4a90db8fd3f18824d37f031ce8b543e0504b7c2367f8b09227668c2fb082744a8d38f657901479b5303132bd7376ebbdcd87b0b27e61f15ffa47f74e97753f033539826b57deebfcaace768123776311a3dc2da758338304ab838885b8fe59bf3ef3b99e9ca8e3475addc3ef045d4ca59a7f223831fb3388f7a2fecc2ec67dfe1805f3806f1cf3d5e4135ae4d98ffe9de4a4f38dcceeaa92b82faa43b126ab4ae08440a6e724f2290331e932e43bbfa9ffaaeeccb64575aa6010400854275cc7bd64965ced066ba16dc64420fd8a6ec754eb370855a3ad334ab61e4436c3227d8251844b1513b9a6335d69480be6d21017047e6ae9c76bc34ea9f8af38d3abbe5229137fb37109b83c46370fee37d68c904c953a4dbe8c340a627fa67a39d3baa1c644a1e6cf367878f87fadadf2169fd24f24136686dac864455de6dca751e2d06c1588c43f053a1d1e40cb59a4093efc3590a301fdc948b3224e80cddc7da901c7cf56b8f2bcd51247ca22cc4c3fc0c183fde44ad657337a933040d8b45a8f016de141f30e057e71ac3cf0441e1fe547c26668885c012da1ab50d31a905b1b8a4d3037543f651becc8be41d358d95742b110ef2762d30cf4e979a3a4799396065818b493344a4348fbcd222ea05631cc4d72c5b5868ae642503f64317310ebfd144c6f04af760d806b7c2efeedc4d8e0f2c5438f627ac28c2487d299c822ef3c1c1456fbf4354275a0bf348bb292d41094fada2bae7a9ad3e0a464d395c37715028cbc523b636f4db25379cb9c02e160cf1be9b93f1a7bd8894ba2e06ef11e9e4e171b81acf16d130bcac624cc20183336e39fb2bc7f1eb85f9edf91e1c454cfd8c4639489219dc7b73e363510bdcef47deb364f6884e43b9e777aa54097ccf9b7db8df8c38b8865ac51a3b6c3722717b21f5fa3e46e00c569fad4668422541fca2ebd467459abfb182d744a7ea1fff8b7f5886ad743119f744d76402c18184bfb50ac970baa2deab8d87e01f01f2d15289049afc7bc42e547c7fbe9ac9e6e36bfcee2e1a95c6ffa9c3518f42f11f48ff0a1195eae422f3d2bae2d55a938a55c2099ad67818b7ef475576b0e5971219a2ae9cb9c709f9652b5a9145be77a5038a7f1e7e0964fe8611701a1ef425d17624c0ae260006fae256cf7893cee1a8532e51a30fd73e64dd841d25688b27f09221db800e2ec6f3f160cba0299d08a724147b59710bb75bc64f06e8c16686d55a06512122221bd2cff475db86f09cb5f94391ed20685e1fddcbb4c256cbce06a1b1ecb4214d28befcec3922e4b08a642942d3ae49fa81f8c1f0634547970c31e89af6d2fbb10bc0ccd4999fa51c827a2c7c80ead7a27ad565969971ac37fedd99b48e09a82ef3f24c11af8b0325b80219bf66a8358b5452eee22380b1a0892e6319d27563ee3d6fe1b4a704fa8504b9b42bf27f558c3ca2ff7fb6c81862f007a566c10c00f3b8e80686d19fbe5a1ef787ab3df7dffe6b4e8911fd8d8b4b119469dab6ca66e6a7c9238a07c3215ff2d5a2bafbc0f91d70df019a29bf67601c6fa77f828aa92773572725f146c1eaba2bb263773b3f5182fe5e0d64045b52ba49b073b21e1458a56499d09544222dadf82572d21654e85900bdf52c0295572eb2b2eaf22d8112000b987275d2c935eda7eb833394cee05409ffb9889b6fa6b20d97978cceca01fc7d7ebbde5c6353dc492f64e1302b9dcad84c40c80cf0b0e961b20b2fe5e16ff0be8f4d1e43d5b5b4ce69077d6d95e0e77a4d012bdae74a48297d3ba560d68c7b50b97e9f69e8f3c5db1b05f5b6eca978ed21748bfbacd4a4f4452374891cd9cd569a44572adae9e474c76a719a8ccba69783840eb1aec05cf05a10afc8f45bb29992f581bc28453204f066b8d4e4fcbda772e6db9716226f4bc4accc91abed4074a1bc8cff09faea6221b10a6902b1ef629e7cacb22c590cc3de60f020f2495af819a89ea9b2d307cdd42f82301779572b7619eab44857ff142cf610f8266be34b678d6dcfd176ff71d1149e01f4bf86ed9fb597ee6df1367fd9c70341c395e4556acb59b228785dd61202e0fdca816dc2bc85a4afc2ea29265f7096136237709adcb22c5efd8d66d2b553f8504e3f7fde8a441f651f93bc568055bb9eaaceafe4567624008b61ae717c40d9ff6b68853d512cb3d6f0e525be6611e8f167e86a45c1bb0431083f5ec170c61e5c2b87af32ed33b60352c9c77e39456429c970bde2a9230f11e766c266afb0b8e55448bea17bb676436cb173951ed2ec2cb3126c9f6c29ebd62c1adc2377c72c222de8803ff46884a551fa029fd8f2bd1b6cbba9e5e9601c6b1c3b50947f0c58d01f6d87d40a073629f4d46771988af9f916cf427ab58ddd1c043b2da1cf18b71a15973ae4e5813cc52ffdd6a6e1639f37397806ae0380fc59d9181ce8d340f232a346843262decfa504e2b21e49d420f5466fe5f79351d9d6cd70d25e992196fafbcb383e8ff8c4b1b61c3019bdb77179625e4b08410016e8aafd3ba7d9b3ea8a7f0ec8af9def1193b73d7f4608f90fa40157d5f3f92f89173add3e55235752149f32b0a68699b7f4e1e1a100dc90bbffbc2c463e7ffb779bc917983075a6a2fa1aa0fb0ae3c50df66c2f804f9255218f71cfa968101b206f47328c8eab1489c8d63c0f8e03e81598bac11f2146fc4048fbfb3f1a744b836f9f367eca0a4a8d49e703532d79f821bb2b692baaa51ed54d2bd1f72ad99bc35e6f26d967e8516feee5c466b5618124f33e7386f25e9bba52f7560beca1727036c01a600857fbdca1e918daa52ab04318b2e5ebfb59d371f48bfe3e9deaf17882781ca0864ddc14387e9d9b6c018e06122ecc84ff44ba19bd56df06afbbfdc8a628b58e113e4bb97628e93bdabdd8ee84d9d17d056eed05ae106364336ae7914a0c15139148f9e6da256f1a9289addf5c0164038dd5c96ab44c0fcd9d68a2e8b58258c45654c4e10a3f2bfac0729f60872f757e188631455dc8ba85518117d599680aa0fc907c448cf7f70cfa94c3f221547ce0f2a08415f1b13071d14918291dd809928fe765487bc09b2e2c4e3a5ee62966a4b80f7e7456caa4e5fc50790a0911fdcfcb6b6e042995ea7372d15fdf200fd2cbf83ac47e13014263c2df5d67410e0a96feb98abdd83b7795f0453617c230c2ba38fb1517396d930eb415371b5f44137a5af7a2b3815203c248a5211b7d66df8e491137c52af7c10840e9ee9a1a5d4c7e5417fbc43f5491c3ec20e8b2f893ff5c7f84cd72e2fe3f974f6bba32c79cf6ca5056611fa8f494a5c7023a9ca63cce236d6569ff2d4a1b66bde45374acccd3b2acaf6cb4567f844e4d963d549ed1c272721dd63e53587a343bc099780b746b2d47dc60cbb46c816a133092bb9cd6d740a9f5901045d4cdfb062a1deb2cfe82c20449f2a8a52471e7086b011d1b0f890a6f109354f49806c9ae27c5d617fdc1972a6eb2788ef7b5afd9c16e7f6638a23d62108cfd85f93f42938e01bf26529c61771cb49d545f00c077baf4f612121d2bedfaf9c3a9d37a921a4bc895b708bf9cb483885f0e3cb0b078ac36e246b87fce2f79ccffef63492e9bd4787f8aa4303766aa7126baff6e7679d20ee1c88dd43edcefc25ecb95507e755e912f83030407a47b517f6c0bc8d4b20faec2f5ad88e21423c8559b97233280c88abd04c2dd54613979a26dcad577784bea75a37941d30766c92a1b357623fa4b5ee38d546fd3a0bdc75c674c9454f214bf1e51dce1709c34d21eec27c0b4c50ad1dcc7a1fa789993dc7a45a4ff5074a3f969ec91021097dda4a6e4b4f20f5fbb43b69f63c3ef6f34019d842082c74c3d884cf59d6bda1d6ba40031498d1720e196f7d770d9aecdee6509e57d0639e76770231393438f120b32a64e94d0e2198fe402ce1bb49d1343336584450196d0549abecf1dad77ac22f7df19a322ad10f1b6400434883b298d8df685c9e6bc0febb3988f6d7038723b2894380d533155c7395fefd324d2f8579daa8a332b50c3ab76635055cd3d02c9928adcff0a8ce9e91b0e171927e3d9c6e759b7af697be7a1e3f813e4412665a90ea49a2ed3166166d604c2ffe795fb033af87ebd096244e30e47878ca0ef686e30ba5aa6d3e3b0ac5776bb48a731c70d448b0380cd97b70f97880985d557de038309b4510bbd44d828a626c043aeb004820b1679033f959d1fe28851d635fd457264f5fe64ce97e5b583c150cab3a68e27686cb2a39047c3ad33cebec183946dfeaaeeb3780c63f542ad21a65557c904a3d7dac07bd94d1aacff02472623bdb698380d9b1eafbe962ab2ac80a4d7d65e9b86d6df52fc7e7f612c78a671ea5bb68b03efc51c7a4a01aad9fb1bdee75536d87ce338ddcaec4abd5b71fd0f02cde21b478df4c5459c9c412d6c1fe271c08b18a0c79dbf733920db61b686d7476da6b6c6ccf0ddf54050217e9c542bb7c0d6dfb99408a54cf86048ae82a73eb475cd51f68ddf2b7ec0e602815a8b84556ab9ed9cc6237b95e36f7f4d14443abb659f52e01236b35e6031bc9c4ae6da369157a5f0c489d883f93f4dcc1f68a35b05892ead409cacfd7ae4709d36f83576f3c4a1e9b19a5366d347040760b2d156e888ad13803d67789b29a064d5c9275b1760e8445fde03fcb06d5f3f3e23b6fd257dab889ccccfdb9490c13c62d6269557bf542c6880625aed36e32040186ac2438a5eccc053e683ee1567389d52554fc8c"}) 16:33:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:02 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0xa00, 0x20, 0x9f40d283ac1efdae, 0x400, 0xa77, 0x400, 0x10, 0x0, {0xf7ef, 0x5}, {0x2, 0x8, 0x1}, {0x2, 0x1ff, 0x1}, {0xc8, 0x2, 0x1}, 0x0, 0x0, 0x80000001, 0x5, 0x1, 0x7, 0x6, 0x7, 0x7f, 0x101, 0x5, 0x2b, 0x29, 0x1, 0x2, 0x3}) mmap(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) [ 664.299897][ T5091] Bluetooth: hci6: command 0x1003 tx timeout [ 664.301149][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:33:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:33:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) 16:33:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c80), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 16:33:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:02 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0xa00, 0x20, 0x9f40d283ac1efdae, 0x400, 0xa77, 0x400, 0x10, 0x0, {0xf7ef, 0x5}, {0x2, 0x8, 0x1}, {0x2, 0x1ff, 0x1}, {0xc8, 0x2, 0x1}, 0x0, 0x0, 0x80000001, 0x5, 0x1, 0x7, 0x6, 0x7, 0x7f, 0x101, 0x5, 0x2b, 0x29, 0x1, 0x2, 0x3}) mmap(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x4000) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 16:33:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="020300000a00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000000fc00000000030005000000000002000000ac1414aa000000000000000029a34be6d3eaae0e287ed2701c41ae75ad05d8b67269a124601579f9c8f8ba59a3740000000000000005a3253ea4ad064ef60df963ec200d4eb904000000000000008b0ec0c9cadf2f97b07b6f"], 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001180)={0x1, 0x2, 0x1000, 0xac, &(0x7f00000000c0)="fed0741b28fc6edc8133934ab49a12e1f504ce498433a561113b33fcc5700f0f37e62384e7d3ae8179a7b3ea5e90d20816954c33e9d3cd9a957a67336cd06ad99deab9c269dd29b6ed658d8f84dff258684c8eb959db1ad5ddddc1c490467e731095c03085168af79e8f66a3bf33575d2fc50a6486fa06c1c22029bf396dbb9dba63f1bdd14a07476aee481eb52fda83677094df03ffd596e8fea884536f0c4354b790d0e93e7d44bcfa7e43", 0x1000, 0x0, &(0x7f0000000180)="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"}) 16:33:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x6, 0x8a73}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) dup3(r2, r3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 664.537656][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 664.547963][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/97, 0x61) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2c2, 0x9, 0x3, 0x0, 0x16, "e748d39fa076e71580815d8585793e07c41e73"}) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7fffffff, 0x121400) (async, rerun: 64) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x3) (rerun: 64) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[@rthdr_2292={{0x18}}], 0x18}}], 0x1, 0x0) 16:33:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0xa00, 0x20, 0x9f40d283ac1efdae, 0x400, 0xa77, 0x400, 0x10, 0x0, {0xf7ef, 0x5}, {0x2, 0x8, 0x1}, {0x2, 0x1ff, 0x1}, {0xc8, 0x2, 0x1}, 0x0, 0x0, 0x80000001, 0x5, 0x1, 0x7, 0x6, 0x7, 0x7f, 0x101, 0x5, 0x2b, 0x29, 0x1, 0x2, 0x3}) mmap(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x4000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0xa00, 0x20, 0x9f40d283ac1efdae, 0x400, 0xa77, 0x400, 0x10, 0x0, {0xf7ef, 0x5}, {0x2, 0x8, 0x1}, {0x2, 0x1ff, 0x1}, {0xc8, 0x2, 0x1}, 0x0, 0x0, 0x80000001, 0x5, 0x1, 0x7, 0x6, 0x7, 0x7f, 0x101, 0x5, 0x2b, 0x29, 0x1, 0x2, 0x3}) (async) mmap(&(0x7f0000366000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x4000) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) (async) 16:33:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 16:33:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 664.593270][T15747] Bluetooth: hci6: Frame reassembly failed (-84) 16:33:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={{0xf}, [@NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0x3c}}, 0x0) [ 664.701800][T16763] Bluetooth: hci6: Frame reassembly failed (-84) 16:33:03 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60e435c600102c00fc000000b159983656bddb57f9adea5a9cff0200000000000000000000000000010000000004019078"], 0x0) 16:33:03 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r0, 0x3000) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000040)={r0}) 16:33:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16:33:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5437, 0x0) (async) 16:33:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async, rerun: 64) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x6, 0x8a73}) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) dup3(r2, r3, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:05 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r0, 0x3000) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000040)={r0}) 16:33:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$TIOCSTI(r1, 0x5437, 0x0) 16:33:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 666.619906][ T5091] Bluetooth: hci6: command 0x1003 tx timeout [ 666.620205][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 666.768995][ T1133] Bluetooth: hci6: Frame reassembly failed (-84) [ 666.779906][ T5091] Bluetooth: hci7: command 0x1003 tx timeout [ 666.786114][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:33:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000000)) 16:33:05 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000500)={0x14, r0, 0x1}, 0x14}}, 0x0) 16:33:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x3f, 0x0, 0x6, 0x9, 0x14, "e52e277c4b8e54d00a56a53477c2ac5a7ab0e0"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000080)=0x9, 0x4) 16:33:05 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/mdstat\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000900)='%\x00', 0x0, 0xffffffffffffffff) 16:33:05 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r0, 0x3000) (async) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000040)={r0}) [ 666.903360][ T49] Bluetooth: hci7: sending frame failed (-49) [ 666.910726][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 666.996573][ T49] Bluetooth: hci7: sending frame failed (-49) [ 667.003980][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -49 16:33:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x6, 0x8a73}) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) dup3(r2, r3, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:07 executing program 0: renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) 16:33:07 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) 16:33:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x3f, 0x40, 0x4, 0x3, 0x3, 0x3, 0x239, 0x40, 0x1e3, 0x1, 0x8001, 0x38, 0x2, 0x4, 0x0, 0x3}, [{0x2, 0x8000, 0x10000000, 0x0, 0x3ff, 0x7c3, 0x1, 0x1}, {0x6474e551, 0x5, 0xfffffffffffffff9, 0x48000000000, 0x5, 0x4, 0x7, 0x1}], "a987786e4017114e6a8b6af3fe5f4f248b0c12ac141acac24a1984ed2e477797c0f3", ['\x00', '\x00', '\x00']}, 0x3d2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x10000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x1, 0x3, 0x1622, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x400) r2 = dup(r0) creat(&(0x7f0000000080)='./file0\x00', 0x4) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) 16:33:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x3f, 0x0, 0x6, 0x9, 0x14, "e52e277c4b8e54d00a56a53477c2ac5a7ab0e0"}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x1) (async, rerun: 64) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 668.780114][T12528] Bluetooth: hci6: command 0x1003 tx timeout [ 668.780262][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:33:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x3f, 0x0, 0x6, 0x9, 0x14, "e52e277c4b8e54d00a56a53477c2ac5a7ab0e0"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x3f, 0x0, 0x6, 0x9, 0x14, "e52e277c4b8e54d00a56a53477c2ac5a7ab0e0"}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$int_in(r2, 0x5421, &(0x7f00000001c0)=0x1) (async) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3a) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x10000002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x1, 0x3, 0x1622, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x400) (async) r2 = dup(r0) creat(&(0x7f0000000080)='./file0\x00', 0x4) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) [ 668.861152][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 668.869285][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:07 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 668.926239][T16848] loop0: detected capacity change from 0 to 264192 16:33:07 executing program 3: r0 = syz_io_uring_setup(0x7712, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 16:33:07 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x10000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x1, 0x3, 0x1622, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x400) r2 = dup(r0) creat(&(0x7f0000000080)='./file0\x00', 0x4) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x10000002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x1, 0x3, 0x1622, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x400) (async) dup(r0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x4) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r3, 0x0) (async) [ 668.967087][T16848] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 668.980024][T16869] Bluetooth: hci6: Frame reassembly failed (-84) 16:33:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r1, 0x4}) [ 669.062617][T16848] EXT4-fs (loop0): orphan cleanup on readonly fs [ 669.075068][ T49] Bluetooth: hci6: sending frame failed (-49) [ 669.082605][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 669.104304][T16848] EXT4-fs error (device loop0): ext4_quota_enable:6779: inode #3: comm syz-executor.0: iget: bad extra_isize 12078 (inode size 256) 16:33:07 executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) [ 669.148945][T16866] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 669.156622][T16848] EXT4-fs (loop0): Remounting filesystem read-only [ 669.163498][T16848] EXT4-fs error (device loop0): ext4_quota_enable:6781: comm syz-executor.0: Bad quota inode # 3 [ 669.175498][T16848] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 669.190320][T16848] EXT4-fs (loop0): Cannot turn on quotas: error -117 16:33:07 executing program 0: renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) 16:33:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 669.197180][T16848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 669.300756][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 669.366851][T16904] loop0: detected capacity change from 0 to 264192 [ 669.382756][T16904] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 669.398607][T16904] EXT4-fs (loop0): orphan cleanup on readonly fs [ 669.405261][T16904] EXT4-fs error (device loop0): ext4_quota_enable:6779: inode #3: comm syz-executor.0: iget: bad extra_isize 12078 (inode size 256) [ 669.423247][T16904] EXT4-fs (loop0): Remounting filesystem read-only [ 669.430409][T16904] EXT4-fs error (device loop0): ext4_quota_enable:6781: comm syz-executor.0: Bad quota inode # 3 [ 669.441707][T16904] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 669.455985][T16904] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 669.462973][T16904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 669.525204][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x3f, 0x40, 0x4, 0x3, 0x3, 0x3, 0x239, 0x40, 0x1e3, 0x1, 0x8001, 0x38, 0x2, 0x4, 0x0, 0x3}, [{0x2, 0x8000, 0x10000000, 0x0, 0x3ff, 0x7c3, 0x1, 0x1}, {0x6474e551, 0x5, 0xfffffffffffffff9, 0x48000000000, 0x5, 0x4, 0x7, 0x1}], "a987786e4017114e6a8b6af3fe5f4f248b0c12ac141acac24a1984ed2e477797c0f3", ['\x00', '\x00', '\x00']}, 0x3d2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:33:09 executing program 3: syz_emit_ethernet(0xa6, &(0x7f0000000440)={@random="490c62ae859a", @random="6aa5307ff380", @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev, {[@ssrr={0x89, 0x23, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @private, @remote, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@multicast1}]}, @lsrr={0x83, 0x7, 0x0, [@multicast1]}]}}}}}}, 0x0) 16:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r1, 0x4}) 16:33:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:09 executing program 0: renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 670.939893][ T5058] Bluetooth: hci7: command 0x1003 tx timeout [ 670.952931][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -110 16:33:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x2000020c, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 16:33:09 executing program 3: unshare(0x400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) 16:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r1, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r1, 0x4}) (async) [ 671.066659][T16921] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 671.077376][T16916] loop0: detected capacity change from 0 to 264192 [ 671.102553][T16916] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 16:33:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:09 executing program 3: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) [ 671.136329][T16916] EXT4-fs (loop0): orphan cleanup on readonly fs [ 671.144989][T16916] EXT4-fs error (device loop0): ext4_quota_enable:6779: inode #3: comm syz-executor.0: iget: bad extra_isize 12078 (inode size 256) [ 671.159272][T16916] EXT4-fs (loop0): Remounting filesystem read-only 16:33:09 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 671.202319][T16916] EXT4-fs error (device loop0): ext4_quota_enable:6781: comm syz-executor.0: Bad quota inode # 3 [ 671.228230][T16916] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 671.269443][T16916] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 671.298710][T16916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 671.304987][T16950] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 671.406581][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x3f, 0x40, 0x4, 0x3, 0x3, 0x3, 0x239, 0x40, 0x1e3, 0x1, 0x8001, 0x38, 0x2, 0x4, 0x0, 0x3}, [{0x2, 0x8000, 0x10000000, 0x0, 0x3ff, 0x7c3, 0x1, 0x1}, {0x6474e551, 0x5, 0xfffffffffffffff9, 0x48000000000, 0x5, 0x4, 0x7, 0x1}], "a987786e4017114e6a8b6af3fe5f4f248b0c12ac141acac24a1984ed2e477797c0f3", ['\x00', '\x00', '\x00']}, 0x3d2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x6, 0x3f, 0x40, 0x4, 0x3, 0x3, 0x3, 0x239, 0x40, 0x1e3, 0x1, 0x8001, 0x38, 0x2, 0x4, 0x0, 0x3}, [{0x2, 0x8000, 0x10000000, 0x0, 0x3ff, 0x7c3, 0x1, 0x1}, {0x6474e551, 0x5, 0xfffffffffffffff9, 0x48000000000, 0x5, 0x4, 0x7, 0x1}], "a987786e4017114e6a8b6af3fe5f4f248b0c12ac141acac24a1984ed2e477797c0f3", ['\x00', '\x00', '\x00']}, 0x3d2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) 16:33:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0xfffff26d, 0x4) 16:33:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2242, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:11 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:33:11 executing program 0: renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 673.099980][ T5091] Bluetooth: hci6: command 0x1003 tx timeout [ 673.106122][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:33:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) [ 673.187219][T16959] loop0: detected capacity change from 0 to 264192 [ 673.197730][T16961] Bluetooth: hci6: Frame reassembly failed (-84) [ 673.226560][T15747] Bluetooth: hci6: Frame reassembly failed (-84) 16:33:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) [ 673.229287][T16959] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 673.276401][T16959] EXT4-fs (loop0): orphan cleanup on readonly fs 16:33:11 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) [ 673.287673][T16959] EXT4-fs error (device loop0): ext4_quota_enable:6779: inode #3: comm syz-executor.0: iget: bad extra_isize 12078 (inode size 256) 16:33:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:11 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) io_uring_enter(r3, 0x1530, 0xdf3f, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x30, r2, 0x70306000) [ 673.339283][T16959] EXT4-fs (loop0): Remounting filesystem read-only [ 673.377539][T16959] EXT4-fs error (device loop0): ext4_quota_enable:6781: comm syz-executor.0: Bad quota inode # 3 [ 673.394639][T16983] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 673.430291][T16959] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 673.445926][T16959] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 673.465135][T16959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 673.561402][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:13 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) 16:33:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cf403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 675.261064][ T5091] Bluetooth: hci7: command 0x1003 tx timeout [ 675.267202][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 675.273592][T15665] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:33:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2242, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) io_uring_enter(r3, 0x1530, 0xdf3f, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x30, r2, 0x70306000) 16:33:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cf403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cf403, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:13 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) [ 675.353114][T16994] loop0: detected capacity change from 0 to 264192 [ 675.371277][T16994] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 16:33:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0203ffff0017cdec115ee814bf26fc02"], 0x10}, 0x1, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x39) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300"/16], 0x10}, 0x1, 0x7}, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000100)=""/118, &(0x7f0000000180)=0x76) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) [ 675.408024][T16994] EXT4-fs (loop0): orphan cleanup on readonly fs [ 675.416656][T16994] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 675.429553][T17002] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.459847][T16994] EXT4-fs (loop0): Remounting filesystem read-only [ 675.468804][T16994] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 16:33:14 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) io_uring_enter(r3, 0x1530, 0xdf3f, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x30, r2, 0x70306000) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) io_uring_enter(r3, 0x1530, 0xdf3f, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x30, r2, 0x70306000) (async) 16:33:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cf403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1cf403, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) [ 675.504377][ T49] Bluetooth: hci7: sending frame failed (-49) [ 675.511741][T15665] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 675.516614][T15747] Bluetooth: hci6: Frame reassembly failed (-84) [ 675.528834][T16994] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 675.545681][T16994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 16:33:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0203ffff0017cdec115ee814bf26fc02"], 0x10}, 0x1, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x39) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300"/16], 0x10}, 0x1, 0x7}, 0x0) (async) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000100)=""/118, &(0x7f0000000180)=0x76) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:14 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x127b, 0x20000000) 16:33:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 675.648167][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x4, 0x1}, 0x48) 16:33:14 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x521000, 0x44, 0x20}, 0x18) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xen_mmu_write_cr3\x00', r1}, 0x10) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) [ 675.710749][ T47] Bluetooth: hci7: Frame reassembly failed (-84) [ 675.768303][T17040] loop0: detected capacity change from 0 to 264192 [ 675.796582][T17040] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 675.825520][T17040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 675.838431][T17040] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 675.850737][T17040] EXT4-fs (loop0): Remounting filesystem read-only [ 675.857435][T17040] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 675.876294][T17040] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 675.883772][T17040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 675.925692][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2242, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x80000001, 0x400, 0x1c2, 0xcc62, 0xe39, 0xffff, 0x9, 0x6, 0x2, 0x101, 0x28, 0x9, 0x9b, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:16 executing program 3: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x76}, &(0x7f00000000c0)={0x101}, 0x0, 0x0) 16:33:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x521000, 0x44, 0x20}, 0x18) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xen_mmu_write_cr3\x00', r1}, 0x10) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) 16:33:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 677.499830][ T27] Bluetooth: hci6: command 0x1003 tx timeout [ 677.500076][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 16:33:16 executing program 3: shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) 16:33:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x80000001, 0x400, 0x1c2, 0xcc62, 0xe39, 0xffff, 0x9, 0x6, 0x2, 0x101, 0x28, 0x9, 0x9b, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 677.566890][T17050] loop0: detected capacity change from 0 to 264192 [ 677.589979][T17050] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 677.628456][T17060] Bluetooth: hci6: Frame reassembly failed (-84) [ 677.635649][T17050] EXT4-fs (loop0): orphan cleanup on readonly fs [ 677.645438][T15747] Bluetooth: hci6: Frame reassembly failed (-84) [ 677.652090][T17050] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 677.670561][T17050] EXT4-fs (loop0): Remounting filesystem read-only [ 677.679335][T17050] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 677.699277][T17050] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 677.706259][T17050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 16:33:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0203ffff0017cdec115ee814bf26fc02"], 0x10}, 0x1, 0x7}, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) (async) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x39) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300"/16], 0x10}, 0x1, 0x7}, 0x0) (async) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000100)=""/118, &(0x7f0000000180)=0x76) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:16 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) dup(r0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x521000, 0x44, 0x20}, 0x18) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xen_mmu_write_cr3\x00', r1}, 0x10) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x521000, 0x44, 0x20}, 0x18) (async) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='xen_mmu_write_cr3\x00', r1}, 0x10) (async) openat$cgroup_int(r1, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r2, 0x0) (async) 16:33:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x18, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) 16:33:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0x80000001, 0x400, 0x1c2, 0xcc62, 0xe39, 0xffff, 0x9, 0x6, 0x2, 0x101, 0x28, 0x9, 0x9b, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) 16:33:16 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 677.739856][ T5144] Bluetooth: hci7: command 0x1003 tx timeout [ 677.739985][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 677.802575][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 677.883890][T15665] Bluetooth: hci7: sending frame failed (-49) [ 677.892647][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 677.914392][T17084] loop0: detected capacity change from 0 to 264192 [ 677.939950][T17084] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 677.954613][T17084] EXT4-fs (loop0): orphan cleanup on readonly fs [ 677.964224][T17084] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 677.985690][T17084] EXT4-fs (loop0): Remounting filesystem read-only [ 677.992949][T17084] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 678.007021][T17084] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 678.013840][T17084] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 678.037487][ T3635] EXT4-fs (loop0): unmounting filesystem. 16:33:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r1) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) fchmod(r0, 0x124) 16:33:18 executing program 3: socketpair(0xa, 0x2, 0xc6, &(0x7f0000000040)) 16:33:18 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) signalfd4(r2, &(0x7f0000000040)={[0x4e1]}, 0x8, 0x0) dup(r1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$rtc(&(0x7f00000001c0), 0xfff, 0x12842) lseek(r3, 0x5, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x10, 0x384, 0x30, 0x140, 0x4, 0x2, 0x2, 0x2, {0x1, 0x9, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0xfffffff9, 0x9, 0x1}, 0x251a31b09a8a3980, 0x80, 0x100, 0x9, 0x0, 0x1, 0x58fd, 0x2, 0x2, 0x1, 0x6, 0x1ff, 0x0, 0x100, 0x1}) 16:33:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x7e00, &(0x7f00000001c0)={0x0, 0x8378, 0x8, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000200000000000000000000f73c92a97b64af4e4d905fdfc774a6b15680faa68c121ad21ab01411e23a97cb228442e14d6384e109390a4bbafea717927579f527e0aa02309b624ed6190c7b963787dcfa818afbfde0270fcbe1cd714fef1050e6285a1de4998d681f519e8ef82747dfea75eb6d98fb0a5615674a20ff3042b510ea0e1fec5deb379ddbe0889b1754fa28ffada1cf6135672081e5b74e3d7bfd14a05128a1da108262912337fe79f23359e02435c5db7d52d2"], 0x10}, 0x1, 0x7}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2040, 0x0, {0x3, r5}}, 0x10000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x6f0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) r3 = memfd_secret(0x0) ftruncate(r3, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x7, 0xfc5fb9d, 0x20, 0x9, 0x1, "786093d471ed42edd78d3e324f812e6cfc88d8"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:18 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) [ 679.660065][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 679.667171][ T5058] Bluetooth: hci6: command tx timeout 16:33:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r1) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) fchmod(r0, 0x124) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) close(r1) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) (async) fchmod(r0, 0x124) (async) [ 679.773109][T17094] loop0: detected capacity change from 0 to 264192 16:33:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x7e00, &(0x7f00000001c0)={0x0, 0x8378, 0x8, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000200000000000000000000f73c92a97b64af4e4d905fdfc774a6b15680faa68c121ad21ab01411e23a97cb228442e14d6384e109390a4bbafea717927579f527e0aa02309b624ed6190c7b963787dcfa818afbfde0270fcbe1cd714fef1050e6285a1de4998d681f519e8ef82747dfea75eb6d98fb0a5615674a20ff3042b510ea0e1fec5deb379ddbe0889b1754fa28ffada1cf6135672081e5b74e3d7bfd14a05128a1da108262912337fe79f23359e02435c5db7d52d2"], 0x10}, 0x1, 0x7}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2040, 0x0, {0x3, r5}}, 0x10000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x6f0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x7e00, &(0x7f00000001c0)={0x0, 0x8378, 0x8, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000200000000000000000000f73c92a97b64af4e4d905fdfc774a6b15680faa68c121ad21ab01411e23a97cb228442e14d6384e109390a4bbafea717927579f527e0aa02309b624ed6190c7b963787dcfa818afbfde0270fcbe1cd714fef1050e6285a1de4998d681f519e8ef82747dfea75eb6d98fb0a5615674a20ff3042b510ea0e1fec5deb379ddbe0889b1754fa28ffada1cf6135672081e5b74e3d7bfd14a05128a1da108262912337fe79f23359e02435c5db7d52d2"], 0x10}, 0x1, 0x7}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2040, 0x0, {0x3, r5}}, 0x10000) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r2, r1, 0x0, 0x80000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x6f0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) [ 679.837253][T17094] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 16:33:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r1) ioctl$TIOCSTI(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) fchmod(r0, 0x124) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) close(r1) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) (async) fchmod(r0, 0x124) (async) [ 679.894504][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 679.902098][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 679.933160][T17094] EXT4-fs (loop0): orphan cleanup on readonly fs [ 679.943397][T17094] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 16:33:18 executing program 3: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 16:33:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) r3 = memfd_secret(0x0) ftruncate(r3, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x7, 0xfc5fb9d, 0x20, 0x9, 0x1, "786093d471ed42edd78d3e324f812e6cfc88d8"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) [ 680.010894][T17094] EXT4-fs (loop0): Remounting filesystem read-only [ 680.018034][T17094] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 680.040449][T17094] EXT4-fs (loop0): Cannot turn on quotas: error -22 16:33:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_io_uring_setup(0x7e00, &(0x7f00000001c0)={0x0, 0x8378, 0x8, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000200000000000000000000f73c92a97b64af4e4d905fdfc774a6b15680faa68c121ad21ab01411e23a97cb228442e14d6384e109390a4bbafea717927579f527e0aa02309b624ed6190c7b963787dcfa818afbfde0270fcbe1cd714fef1050e6285a1de4998d681f519e8ef82747dfea75eb6d98fb0a5615674a20ff3042b510ea0e1fec5deb379ddbe0889b1754fa28ffada1cf6135672081e5b74e3d7bfd14a05128a1da108262912337fe79f23359e02435c5db7d52d2"], 0x10}, 0x1, 0x7}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x2040, 0x0, {0x3, r5}}, 0x10000) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) sendfile(r2, r1, 0x0, 0x80000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x6f0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) 16:33:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, &(0x7f0000002100)='clear_refs\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002140)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x20006) ioctl$TIOCSTI(r0, 0x5437, 0x0) [ 680.102430][T17094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 16:33:18 executing program 3: openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 680.200424][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 680.401654][ T3654] Bluetooth: hci6: sending frame failed (-49) [ 680.408723][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:19 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) signalfd4(r2, &(0x7f0000000040)={[0x4e1]}, 0x8, 0x0) dup(r1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$rtc(&(0x7f00000001c0), 0xfff, 0x12842) lseek(r3, 0x5, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x10, 0x384, 0x30, 0x140, 0x4, 0x2, 0x2, 0x2, {0x1, 0x9, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0xfffffff9, 0x9, 0x1}, 0x251a31b09a8a3980, 0x80, 0x100, 0x9, 0x0, 0x1, 0x58fd, 0x2, 0x2, 0x1, 0x6, 0x1ff, 0x0, 0x100, 0x1}) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) (async) dup(r0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) signalfd4(r2, &(0x7f0000000040)={[0x4e1]}, 0x8, 0x0) (async) dup(r1) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_open_dev$rtc(&(0x7f00000001c0), 0xfff, 0x12842) (async) lseek(r3, 0x5, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x10, 0x384, 0x30, 0x140, 0x4, 0x2, 0x2, 0x2, {0x1, 0x9, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0xfffffff9, 0x9, 0x1}, 0x251a31b09a8a3980, 0x80, 0x100, 0x9, 0x0, 0x1, 0x58fd, 0x2, 0x2, 0x1, 0x6, 0x1ff, 0x0, 0x100, 0x1}) (async) 16:33:19 executing program 0: renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe000000, 0x41c, &(0x7f0000000540)=[{&(0x7f0000010000)="200000002002000019000000600100000f040000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010003000000ddf4655f000000000000000001000000000000000b0000000001000008000000d26400004003", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000200000005", 0xffc3, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00f5ffffff00040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000180)={[{@errors_remount}]}, 0x0) 16:33:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) r3 = memfd_secret(0x0) ftruncate(r3, 0x200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x7, 0xfc5fb9d, 0x20, 0x9, 0x1, "786093d471ed42edd78d3e324f812e6cfc88d8"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 16:33:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x0) 16:33:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr(r2, &(0x7f00000001c0)=@random={'system.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x110) 16:33:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, &(0x7f0000002100)='clear_refs\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002140)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x20006) ioctl$TIOCSTI(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) syz_open_procfs(r1, &(0x7f0000002100)='clear_refs\x00') (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002140)=0x3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x20006) (async) ioctl$TIOCSTI(r0, 0x5437, 0x0) (async) 16:33:19 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x0, 0x0) [ 680.591536][T17154] loop0: detected capacity change from 0 to 264192 16:33:19 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x1c1141) r1 = dup(r0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) signalfd4(r2, &(0x7f0000000040)={[0x4e1]}, 0x8, 0x0) (async) dup(r1) (async, rerun: 64) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (rerun: 64) r3 = syz_open_dev$rtc(&(0x7f00000001c0), 0xfff, 0x12842) lseek(r3, 0x5, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x13, r4, 0x0) (async, rerun: 32) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x10, 0x384, 0x30, 0x140, 0x4, 0x2, 0x2, 0x2, {0x1, 0x9, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0xfffffff9, 0x9, 0x1}, 0x251a31b09a8a3980, 0x80, 0x100, 0x9, 0x0, 0x1, 0x58fd, 0x2, 0x2, 0x1, 0x6, 0x1ff, 0x0, 0x100, 0x1}) (rerun: 32) [ 680.643554][T17154] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 680.662492][ T3749] Bluetooth: hci6: Frame reassembly failed (-84) [ 680.682681][ T3749] Bluetooth: hci6: Frame reassembly failed (-84) [ 680.709385][T17154] EXT4-fs (loop0): orphan cleanup on readonly fs [ 680.724214][T17154] EXT4-fs error (device loop0): ext4_free_inode:282: comm syz-executor.0: reserved or nonexistent inode 3 [ 680.741346][T17154] EXT4-fs (loop0): Remounting filesystem read-only 16:33:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr(r2, &(0x7f00000001c0)=@random={'system.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x110) [ 680.748170][T17154] EXT4-fs warning (device loop0): ext4_enable_quotas:6821: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 680.781207][T17154] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 680.788577][T17154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 16:33:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) fsetxattr(r2, &(0x7f00000001c0)=@random={'system.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r3, 0x0, 0x80000000004) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x110) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) (async) fsetxattr(r2, &(0x7f00000001c0)=@random={'system.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r3, 0x0, 0x80000000004) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x110) (async) 16:33:19 executing program 0: r0 = openat$random(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, 0x0) [ 680.872360][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 680.969907][T12528] usb 4-1: new high-speed USB device number 11 using dummy_hcd 16:33:19 executing program 0: openat$bsg(0xffffff9c, &(0x7f0000000240), 0x42, 0x0) 16:33:19 executing program 0: socket(0x26, 0x5, 0xde77) 16:33:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0x8, 0x7a, 0xffff, 0x7fff, 0x20, 0x1, {0x3}}, 0xa21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001100)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001140)=0x19) [ 681.170818][ T49] Bluetooth: hci8: sending frame failed (-49) [ 681.177902][T15665] Bluetooth: hci8: Opcode 0x1003 failed: -49 [ 681.559904][T12528] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 681.568994][T12528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.590001][T12528] usb 4-1: Product: syz [ 681.594228][T12528] usb 4-1: Manufacturer: syz [ 681.598835][T12528] usb 4-1: SerialNumber: syz [ 681.671154][T12528] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 682.340192][ T5091] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 682.553985][T12528] usb 4-1: USB disconnect, device number 11 [ 682.709976][ T5058] Bluetooth: hci7: command 0x1003 tx timeout [ 682.716139][ T3654] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 682.722675][ T3651] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 682.730595][ T5058] Bluetooth: hci6: command tx timeout 16:33:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, &(0x7f0000002100)='clear_refs\x00') (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002140)=0x3) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x20006) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5437, 0x0) (rerun: 32) 16:33:21 executing program 0: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 16:33:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0x8, 0x7a, 0xffff, 0x7fff, 0x20, 0x1, {0x3}}, 0xa21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001100)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001140)=0x19) (rerun: 32) 16:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0xb0, 0x6, 0x9, 0x9, 0x6}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000140)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000600)={0x2, 0x688, 0xa3, 0x3}) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x18, 0x4, 0x7fff}) [ 682.943765][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 682.945670][T17234] Bluetooth: hci6: Frame reassembly failed (-84) [ 682.956628][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:21 executing program 3: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0cc5604, &(0x7f0000000540)={0x2, @sdr={0x0, 0xc31}}) socket(0x5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x6) 16:33:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=@v2={0x5, 0x2, 0x6, 0x6c0e1432, 0x1000, "d54a8c4b5e1a15a0878962925760ba963f10fad7699bc8cff7c84ca8253af606c646f9c6bf932d49919392cee3241add2cac0c9325d079dede40853e800371e082d46241098ac6ae2971c58a0a3d0189615d14bc4e07c18779eeee98a58cc2160f87948bca12bf07dcca0d559535fa00ce80247d9253e42f133675d57b835a363a2f6c84d4f3e42dcf303499aa1772565ec3109e6544345dcd23a91b975dcd0cdb1a33edfa5139b017bd7824a38fc9bbcc09c73b1ec7064e0f431123ecfdda7e87db2aafd4e13bdf81dd913c239ff12e7529e7b981f17945afbb391244565b22d05ab086fc25e4f7b8b8e63f219f650b1aa40aedf1bae3765762ee4e46c875aadd747ce9ea221335e3c07cf5c3e855aa12cfc7f5efd0e1cc0b0b1f7fb87840326cf9b8ba3240618cf9bf570d7384848ca1c7b7c044074038e54d3fdfcff40dd82d8a8014649e4c747f2983f31a452e8289468ef4e005b8ea79fd3feab349b406cca7b851a070f8b1710c50535f68f9843d4c425ffffd71cb0f296e9007f9371b758fe02d6c55968f80c38f1f2d9b0a1a7bb81a6cf908db3e372a5f4fe3a66000110f96e1c39c324ed965068c697c141ef8da0540ed3535e00b7b112dddbce12ee3056bafe58126236702cdcd315c5cfde6b3b15d259e5334e36a400bc2f389527d3e569d6536e39d10607734fe9fedade64201660309bcae39234dcf79cc81da47a7aeb1d94bb89a8ab9452a7d1d930e9232692bdbcfa9ca64a25e373c3287e191ac68290e9f988c26492d0bba43ed8683720e35c9724c1086fe03e19c98a296c7a52d51c933b74be5424f0ee2c0f9e33933ae5129b515d3ff3fe8515fa82d04cd1592ed0ef5a53f73dc90974a6de0f317c67f21ec6940ef79bdb4768e566ebfcb371302f22d47025fa1f852b521d764c8822306fee63474cf05020f229f7b8defdef924f7c0b705affcb4698de52fc15e25cce5e88524ab3dc8feab182c9323a68d65cf53ad3c11aa19d0a662d7bcafaf0883fe03c9b13959ddd848518c92962c5338865109cb23651704ea22354ae7168edcbbe29994b0c0ba7b0f92cbacc8c71a2ffbb73cb9d46cb148f15f43884ee40fe3cd78df99c7dd9cdc3127579b1aeabce23d0c17ae2ba7f5de81d72e60fc0a7865e91a88e547485f5b71621566bee133f90a5bad6904c96d3e258102a3bc3bd1931f0cacaa0eadd39195d6586bd658b51d99733ceaf8947c34ab3ab55240d3950b81bdf0c1b14b935b48108aa04cedcf80b2624ef539afd1cb27fa12e2108783f7570a33662d4f9f81c746c3f904ef489687a44a5ab49e53f81c55512204d47ed3d929afaa3003efe767b241ebfb6917776d56e13695b88e1c5d1312b1d16fe8ec65cdc4794b3b19aad7a099f3323f9035f054995931fde8fd05e45ba60e4e46c0318e2c48034dc567e89083365bf7ac6fa05814e86d16c646e58ca6eaa5a3cc5a1d31ed1dc54f7ddf25ad41716b544fbec84f9e0301caab6a0e8e845482ce9c1a08dc604c9295e801a1756181de3b6016ca20fd25f5a8bf945a114fc34d00e29afc14175ca228173db7f103ddeb64ea836d6ac44634c7f3fd0eb36967fd09c1e1f9681c064e9bf2b471dec197e3ec3cbe1921557ce8fa789e158cfd1123bffb054a24ae5e7c38b3b267c09da9a9b5b5d5c18bc17e4b6f9fad638740a633389d99bf3cb91e59f386a558c48255ef1a666be1cfcfef1e0d938632d5933402c2e83863d696d0b0536c04aab482d27c0882ebde9214c6d8ed336c5ff977febbb4629633d6890e2937fff81fa55fe996ed486bb7f14631f700022ef4cdc0459481c49258267cc0263614715f1120c99032099caeca6dfec8de1f2441fd69f12173d84ec19200d85cdfa2f4bb9a211a81d506226c12a783b1a99ad224d6bf49976c181cf964b4aee6af24cf2625bd188a6730de5138ceebc85470089cfa7a52c1fa48b8fb4d038b24d1a42425664f8451b9ebffee101748ae447a748b9f3fbea15c5126d8a2069dc54756e9002bf2bcf357b80660f88db328e976d83469645ae47b48d4e16d35cf2c1e003584bcf217ffe955370dfc26b2b3d52832df0e16c2298425e828d290803ab168dc96bd76df22d2439b9bb1cbcf80811e94febc9692590000daf511f84116776ffab222f37ced044aea3b7e313dac7c301c4d70c764bd14c02294669c7734e6e76ae135b9bcaeabf831e8395c1278b452728571c3f139791e6e697243b939e188f6c4dbf09c30b2a9c8a25aec32d645dca8d816402f69c89538b1985aaad177118263a70c1b4044dcb8740e4d22c4acf60a5bcc1062bb57c24e0f3f56933a463396b5dd6ce6a611b810079a500555cf3bb2b2a9bbd153edd4f4db4e5ca9de96451be9ec201df902731c46d6c8fb4684dcb0fa50ee40bcd5f1b41a775430db3f262eca37474fbfcffeb53ea5b46a971f1c0fe8ed23ef20c0ca4f9f2a03754da6899911a1a5faaf65423f097e4f787bb2507d6894ce999f1dd78dbf49104707343485549b6540480ed5c165b69043b1b625d282f3c926b48b9e0a26f59d8b31332189e0d0c6b67e247fa2f16455ba84c86d193f746abb7f97e45c077e0a0c65e5b8fc2608433ffabb64fd007e391ca66d4ee8f03cd9ac509349dd9f2c681569d63efb4d3800d61db2334c29f7ca52abd3a6055024eca19c05d634def1ce7358d91e551b7b96a095c5f470197d3d1e715a6a74931fce8e5a7f5f7aa30773ade4f7c4f74cd4c43ca65a10400683d20e5378696af2a935b88a111e6c81fb84aeab6a5402d6b86979a7edb443ede8631d844c47c3284589084a0787fa034230d83b3b444175377275a90cc0b85fb672b1b9c71a1538505f4756018b1be1101c14c0d19c51a85b50c1f1582437864dfd38317d0c68efb9f54abc91e3b72f9a86bd62b2eba98f750ac90f0ac2ac064da7506059650197f793f03aa40ca87482e4906ceca404d7b5548d8dc2327f0ed34d8a8d8479b6b8bd9b9d40fb95590ef9bf50941567010be3b9c6b19b7d855cd06915919af28b6c149cbdebddd5c8b3c56eff38923d873b09e09b4d9536be6d3b044627aa4ba4c6df6dcf19b3335de25d377700fa502f5084bbff40034702d5903a49f3c09f9c0e8d032d043b92c2d9602ea38564fbcd11ffc476fc66ca937ace1d495ba174afcfe61b24d1693bc482447c9e63b7e2fda1952b301903188e94534786a877edf7eb3008c6627e009c06bc5f5048ffe30301596e594ac91dd2f1aa0b62999c8297a1979b0d97e20c3eafdb7dd97858acd7a03608b419bb47225ce3041edd7ec1d497b3652b89da5961d609c2f5f6eaf277a23df142557de31626c3fb5f43bc690d99a64ff4aa6550f1c91f1b55bec209ce521efee3ab16bdfa109f3d7006b9e8eaf4d40a6d5150a5a47af95b9a48b323d25c33cb1be26a7fc72c097ff3c7a6ac7dfca6c5603232f13e3c77486a2ce0a772ac0a1f678b7db034db1c79dee44ee2416c29310b9389e1e62e3ea5a31f31bcedd50e6420e03888bbbaa3b2d9772b6a4cf1fea1617bd29aa9844941762279f7902b6687b0eac5d95442c062edf8ce2c761c702385af787dbb9607002c7e6c6e3acbaf6caf2073bf071fd9cab3c9b16ad6ac3711f86b69369fcd7659b7cced9f584f0a1043fa4c26fa2712f80125bf1cd41c293f53bca0b54a658dbc405921bf360c09280f374a92b81849bb7cbc10ff2bc702854743e198c52643d7bc30df0d1269ea67404cce9cd63ec7574cd3cb2af9874868ba748fcdec95975d9f23f262785ffe9e1a7813fcabf1224abcf4aeb4bbc9ef2306c0ef13f4491099ecdf6cab83335133532264b100118a02d6eea597603047a75f6320d6bf2d9b6c0ef34c4fed2525f0e2a6110e3db69853373e11bd280272cb4ffeb5003b8129a3eb6bb5b3a655d299eff7b29108e5889069206e1dbe6f9836a0641d23bcb1793862e749fd7cfad76f6489f77b534bd051f3ec1d097cc7cfdd71eab33598674d7c5017c57e7bd671ae0d5e36fcb16deac0b459409c6f3f6a2fe1ac3611a83ea3b15bb908bcbd69485a5856d42f4a9dac1365b74719ab6615d08a8d38e699757899037ca0140184365ccf1161b38a7032a57059b376aea905f7ff23590d4bb1bca0cfa57fa3ca3090fd8176bcb12ad099b53a1ee4c6f92bc52927f4d175d2b5b31740a6e62557f8bb327883a4053ab74470dca8497a44298245deb873567b1f2ddfc198f874e97e2e2b5376201be75f6b0c72c7dc3743c22f9341324cb5893712339bea61e4195ccd8eaeba7e7c2c44011c6a921833b04c1b32cc21e8f1cd802ef3bc49c8e0cac88e00c11d1551ffd82b571db1ca8b6aa52be303ed6adea991f1747025a90bdf8b2bf0bda9726fef3c1926f47c8211707a77d32ae0f9e081faaf60e32d51d1c8d5c61a19a7858a5369a191aa2ae57ed92d8dcd09d1d490c5529ed991d22681e45ad3c4f0fe4d3f0572402b63b5e676c039952ec73948008001c9ea715df80bc5b9ba48f24c4953355eaabdc68fc153bff46fe4b9222b0616b78dd90e5cde1ad20353d46172868a8d1b7030d451a611ed597e03755a1c6a2c7d8f00a1bbb65be42e91c392ad554a95427679b28cc3f1fc32e7e9a0e2430cb07ebc0b2f642a55974260490b552ef8a7ac81ce274a9f1dae097fd44e9dcd72c53dddedfbd73d9c6602806f5530d3e903588304e162e128111170ee63e1f4d57f9a44394b6900b7b08f960e8a14fca79442e429b282e2d20d51567bee72aaadf018df0592aa302867421467cadc7102c50a8b1981514b0f40610b667f37ca423ccca10379f3276279b09df156014c27dc95a391c6afdba349b43845aea433e5a753ef90432834624c32e7a38cfd35f96e6bc17d43b2fa684b30e89bf5285df292d80f0676cf4b7ebd074ec73b8e5175a3c3cbf29156758981e7d3de619a5820ff06b574ac7565a89623b54d15d70da6da5e22005a54326405e92691e6ebbaa0fb51e3461f312f8d228d30695f5c946edd4a33f729132b24805c6b883edccb01ad5ac4c2750d6ff615693bf858f3a2082a0aadba96445281c5e9485e28c8864f083037449dd9d7caa73f3cc36483fcdb34eba7b70128a1447ae023d840d6ca86dfa77580131466fc2edbdf05356cefd6f2f1344a97abdde0748274e088b2ce3f82f3fd4763493216d8cf61cd849489c91a6824beb5437e9208a494a0dfc0dff6b8cd0914b76fbaba2e75a4f5ee21132222c179e40dc539a4ddc405118486ddb7f41ecba4ab9483c33e114b02437bb3b05b336ab9305c4d24ac4bd558990f1e16c8429c5dc4b7d85ae455acc4dcafda5e923f31182a93ec26e12c517d865dd88ea8a348945e525ff81ebf3219dd303ff0fea60eaad6e085ef829271ea8b8b62ab256a234253072efe27d330cdfac467591c1e8b99131c1f5c50936cb152745dce85b90b4e764ca036b057acda0b7d121c917faaead160cbd3fd8e29dca6a890ad59f0f6d61c2c7d3886da2a2e2d6fcf713260759ccab3311405adaf2ea203dfb414cfdf3022d44744e2f4f2ca105c9bd19705f8deaa4472432748bdc5ae796908645fa26f28b6fa2f229eb21fb4db6874389df6bc969941c80c85f0936899cf033b01c60c8e3deda0e7f12bcfeef588a3c17f374df6f7a4c4244a78ca390ebdf07dfd37e3ad58bec6d5493c2b59e637faac6cd4620ca05b210f1c9a5a680f9481b182d074415ef53859c8cfde7bbc5746f969218c4659bbab28075b28423b23d1c90eac8579215f43f7d05aac78dd"}, 0x1009, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x2df, &(0x7f0000000100)=0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r4, r1, 0x0, 0x80000000004) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:33:21 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) 16:33:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0x8, 0x7a, 0xffff, 0x7fff, 0x20, 0x1, {0x3}}, 0xa21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001100)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001140)=0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001180)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd_index=0x8, 0x7a, 0xffff, 0x7fff, 0x20, 0x1, {0x3}}, 0xa21) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001100)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001140)=0x19) (async) 16:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0xb0, 0x6, 0x9, 0x9, 0x6}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}, 0x1, 0x7}, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000140)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000600)={0x2, 0x688, 0xa3, 0x3}) (async) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[], 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x18, 0x4, 0x7fff}) [ 683.140592][ T3651] Bluetooth: hci6: sending frame failed (-49) [ 683.148357][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -49 16:33:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=@v2={0x5, 0x2, 0x6, 0x6c0e1432, 0x1000, "d54a8c4b5e1a15a0878962925760ba963f10fad7699bc8cff7c84ca8253af606c646f9c6bf932d49919392cee3241add2cac0c9325d079dede40853e800371e082d46241098ac6ae2971c58a0a3d0189615d14bc4e07c18779eeee98a58cc2160f87948bca12bf07dcca0d559535fa00ce80247d9253e42f133675d57b835a363a2f6c84d4f3e42dcf303499aa1772565ec3109e6544345dcd23a91b975dcd0cdb1a33edfa5139b017bd7824a38fc9bbcc09c73b1ec7064e0f431123ecfdda7e87db2aafd4e13bdf81dd913c239ff12e7529e7b981f17945afbb391244565b22d05ab086fc25e4f7b8b8e63f219f650b1aa40aedf1bae3765762ee4e46c875aadd747ce9ea221335e3c07cf5c3e855aa12cfc7f5efd0e1cc0b0b1f7fb87840326cf9b8ba3240618cf9bf570d7384848ca1c7b7c044074038e54d3fdfcff40dd82d8a8014649e4c747f2983f31a452e8289468ef4e005b8ea79fd3feab349b406cca7b851a070f8b1710c50535f68f9843d4c425ffffd71cb0f296e9007f9371b758fe02d6c55968f80c38f1f2d9b0a1a7bb81a6cf908db3e372a5f4fe3a66000110f96e1c39c324ed965068c697c141ef8da0540ed3535e00b7b112dddbce12ee3056bafe58126236702cdcd315c5cfde6b3b15d259e5334e36a400bc2f389527d3e569d6536e39d10607734fe9fedade64201660309bcae39234dcf79cc81da47a7aeb1d94bb89a8ab9452a7d1d930e9232692bdbcfa9ca64a25e373c3287e191ac68290e9f988c26492d0bba43ed8683720e35c9724c1086fe03e19c98a296c7a52d51c933b74be5424f0ee2c0f9e33933ae5129b515d3ff3fe8515fa82d04cd1592ed0ef5a53f73dc90974a6de0f317c67f21ec6940ef79bdb4768e566ebfcb371302f22d47025fa1f852b521d764c8822306fee63474cf05020f229f7b8defdef924f7c0b705affcb4698de52fc15e25cce5e88524ab3dc8feab182c9323a68d65cf53ad3c11aa19d0a662d7bcafaf0883fe03c9b13959ddd848518c92962c5338865109cb23651704ea22354ae7168edcbbe29994b0c0ba7b0f92cbacc8c71a2ffbb73cb9d46cb148f15f43884ee40fe3cd78df99c7dd9cdc3127579b1aeabce23d0c17ae2ba7f5de81d72e60fc0a7865e91a88e547485f5b71621566bee133f90a5bad6904c96d3e258102a3bc3bd1931f0cacaa0eadd39195d6586bd658b51d99733ceaf8947c34ab3ab55240d3950b81bdf0c1b14b935b48108aa04cedcf80b2624ef539afd1cb27fa12e2108783f7570a33662d4f9f81c746c3f904ef489687a44a5ab49e53f81c55512204d47ed3d929afaa3003efe767b241ebfb6917776d56e13695b88e1c5d1312b1d16fe8ec65cdc4794b3b19aad7a099f3323f9035f054995931fde8fd05e45ba60e4e46c0318e2c48034dc567e89083365bf7ac6fa05814e86d16c646e58ca6eaa5a3cc5a1d31ed1dc54f7ddf25ad41716b544fbec84f9e0301caab6a0e8e845482ce9c1a08dc604c9295e801a1756181de3b6016ca20fd25f5a8bf945a114fc34d00e29afc14175ca228173db7f103ddeb64ea836d6ac44634c7f3fd0eb36967fd09c1e1f9681c064e9bf2b471dec197e3ec3cbe1921557ce8fa789e158cfd1123bffb054a24ae5e7c38b3b267c09da9a9b5b5d5c18bc17e4b6f9fad638740a633389d99bf3cb91e59f386a558c48255ef1a666be1cfcfef1e0d938632d5933402c2e83863d696d0b0536c04aab482d27c0882ebde9214c6d8ed336c5ff977febbb4629633d6890e2937fff81fa55fe996ed486bb7f14631f700022ef4cdc0459481c49258267cc0263614715f1120c99032099caeca6dfec8de1f2441fd69f12173d84ec19200d85cdfa2f4bb9a211a81d506226c12a783b1a99ad224d6bf49976c181cf964b4aee6af24cf2625bd188a6730de5138ceebc85470089cfa7a52c1fa48b8fb4d038b24d1a42425664f8451b9ebffee101748ae447a748b9f3fbea15c5126d8a2069dc54756e9002bf2bcf357b80660f88db328e976d83469645ae47b48d4e16d35cf2c1e003584bcf217ffe955370dfc26b2b3d52832df0e16c2298425e828d290803ab168dc96bd76df22d2439b9bb1cbcf80811e94febc9692590000daf511f84116776ffab222f37ced044aea3b7e313dac7c301c4d70c764bd14c02294669c7734e6e76ae135b9bcaeabf831e8395c1278b452728571c3f139791e6e697243b939e188f6c4dbf09c30b2a9c8a25aec32d645dca8d816402f69c89538b1985aaad177118263a70c1b4044dcb8740e4d22c4acf60a5bcc1062bb57c24e0f3f56933a463396b5dd6ce6a611b810079a500555cf3bb2b2a9bbd153edd4f4db4e5ca9de96451be9ec201df902731c46d6c8fb4684dcb0fa50ee40bcd5f1b41a775430db3f262eca37474fbfcffeb53ea5b46a971f1c0fe8ed23ef20c0ca4f9f2a03754da6899911a1a5faaf65423f097e4f787bb2507d6894ce999f1dd78dbf49104707343485549b6540480ed5c165b69043b1b625d282f3c926b48b9e0a26f59d8b31332189e0d0c6b67e247fa2f16455ba84c86d193f746abb7f97e45c077e0a0c65e5b8fc2608433ffabb64fd007e391ca66d4ee8f03cd9ac509349dd9f2c681569d63efb4d3800d61db2334c29f7ca52abd3a6055024eca19c05d634def1ce7358d91e551b7b96a095c5f470197d3d1e715a6a74931fce8e5a7f5f7aa30773ade4f7c4f74cd4c43ca65a10400683d20e5378696af2a935b88a111e6c81fb84aeab6a5402d6b86979a7edb443ede8631d844c47c3284589084a0787fa034230d83b3b444175377275a90cc0b85fb672b1b9c71a1538505f4756018b1be1101c14c0d19c51a85b50c1f1582437864dfd38317d0c68efb9f54abc91e3b72f9a86bd62b2eba98f750ac90f0ac2ac064da7506059650197f793f03aa40ca87482e4906ceca404d7b5548d8dc2327f0ed34d8a8d8479b6b8bd9b9d40fb95590ef9bf50941567010be3b9c6b19b7d855cd06915919af28b6c149cbdebddd5c8b3c56eff38923d873b09e09b4d9536be6d3b044627aa4ba4c6df6dcf19b3335de25d377700fa502f5084bbff40034702d5903a49f3c09f9c0e8d032d043b92c2d9602ea38564fbcd11ffc476fc66ca937ace1d495ba174afcfe61b24d1693bc482447c9e63b7e2fda1952b301903188e94534786a877edf7eb3008c6627e009c06bc5f5048ffe30301596e594ac91dd2f1aa0b62999c8297a1979b0d97e20c3eafdb7dd97858acd7a03608b419bb47225ce3041edd7ec1d497b3652b89da5961d609c2f5f6eaf277a23df142557de31626c3fb5f43bc690d99a64ff4aa6550f1c91f1b55bec209ce521efee3ab16bdfa109f3d7006b9e8eaf4d40a6d5150a5a47af95b9a48b323d25c33cb1be26a7fc72c097ff3c7a6ac7dfca6c5603232f13e3c77486a2ce0a772ac0a1f678b7db034db1c79dee44ee2416c29310b9389e1e62e3ea5a31f31bcedd50e6420e03888bbbaa3b2d9772b6a4cf1fea1617bd29aa9844941762279f7902b6687b0eac5d95442c062edf8ce2c761c702385af787dbb9607002c7e6c6e3acbaf6caf2073bf071fd9cab3c9b16ad6ac3711f86b69369fcd7659b7cced9f584f0a1043fa4c26fa2712f80125bf1cd41c293f53bca0b54a658dbc405921bf360c09280f374a92b81849bb7cbc10ff2bc702854743e198c52643d7bc30df0d1269ea67404cce9cd63ec7574cd3cb2af9874868ba748fcdec95975d9f23f262785ffe9e1a7813fcabf1224abcf4aeb4bbc9ef2306c0ef13f4491099ecdf6cab83335133532264b100118a02d6eea597603047a75f6320d6bf2d9b6c0ef34c4fed2525f0e2a6110e3db69853373e11bd280272cb4ffeb5003b8129a3eb6bb5b3a655d299eff7b29108e5889069206e1dbe6f9836a0641d23bcb1793862e749fd7cfad76f6489f77b534bd051f3ec1d097cc7cfdd71eab33598674d7c5017c57e7bd671ae0d5e36fcb16deac0b459409c6f3f6a2fe1ac3611a83ea3b15bb908bcbd69485a5856d42f4a9dac1365b74719ab6615d08a8d38e699757899037ca0140184365ccf1161b38a7032a57059b376aea905f7ff23590d4bb1bca0cfa57fa3ca3090fd8176bcb12ad099b53a1ee4c6f92bc52927f4d175d2b5b31740a6e62557f8bb327883a4053ab74470dca8497a44298245deb873567b1f2ddfc198f874e97e2e2b5376201be75f6b0c72c7dc3743c22f9341324cb5893712339bea61e4195ccd8eaeba7e7c2c44011c6a921833b04c1b32cc21e8f1cd802ef3bc49c8e0cac88e00c11d1551ffd82b571db1ca8b6aa52be303ed6adea991f1747025a90bdf8b2bf0bda9726fef3c1926f47c8211707a77d32ae0f9e081faaf60e32d51d1c8d5c61a19a7858a5369a191aa2ae57ed92d8dcd09d1d490c5529ed991d22681e45ad3c4f0fe4d3f0572402b63b5e676c039952ec73948008001c9ea715df80bc5b9ba48f24c4953355eaabdc68fc153bff46fe4b9222b0616b78dd90e5cde1ad20353d46172868a8d1b7030d451a611ed597e03755a1c6a2c7d8f00a1bbb65be42e91c392ad554a95427679b28cc3f1fc32e7e9a0e2430cb07ebc0b2f642a55974260490b552ef8a7ac81ce274a9f1dae097fd44e9dcd72c53dddedfbd73d9c6602806f5530d3e903588304e162e128111170ee63e1f4d57f9a44394b6900b7b08f960e8a14fca79442e429b282e2d20d51567bee72aaadf018df0592aa302867421467cadc7102c50a8b1981514b0f40610b667f37ca423ccca10379f3276279b09df156014c27dc95a391c6afdba349b43845aea433e5a753ef90432834624c32e7a38cfd35f96e6bc17d43b2fa684b30e89bf5285df292d80f0676cf4b7ebd074ec73b8e5175a3c3cbf29156758981e7d3de619a5820ff06b574ac7565a89623b54d15d70da6da5e22005a54326405e92691e6ebbaa0fb51e3461f312f8d228d30695f5c946edd4a33f729132b24805c6b883edccb01ad5ac4c2750d6ff615693bf858f3a2082a0aadba96445281c5e9485e28c8864f083037449dd9d7caa73f3cc36483fcdb34eba7b70128a1447ae023d840d6ca86dfa77580131466fc2edbdf05356cefd6f2f1344a97abdde0748274e088b2ce3f82f3fd4763493216d8cf61cd849489c91a6824beb5437e9208a494a0dfc0dff6b8cd0914b76fbaba2e75a4f5ee21132222c179e40dc539a4ddc405118486ddb7f41ecba4ab9483c33e114b02437bb3b05b336ab9305c4d24ac4bd558990f1e16c8429c5dc4b7d85ae455acc4dcafda5e923f31182a93ec26e12c517d865dd88ea8a348945e525ff81ebf3219dd303ff0fea60eaad6e085ef829271ea8b8b62ab256a234253072efe27d330cdfac467591c1e8b99131c1f5c50936cb152745dce85b90b4e764ca036b057acda0b7d121c917faaead160cbd3fd8e29dca6a890ad59f0f6d61c2c7d3886da2a2e2d6fcf713260759ccab3311405adaf2ea203dfb414cfdf3022d44744e2f4f2ca105c9bd19705f8deaa4472432748bdc5ae796908645fa26f28b6fa2f229eb21fb4db6874389df6bc969941c80c85f0936899cf033b01c60c8e3deda0e7f12bcfeef588a3c17f374df6f7a4c4244a78ca390ebdf07dfd37e3ad58bec6d5493c2b59e637faac6cd4620ca05b210f1c9a5a680f9481b182d074415ef53859c8cfde7bbc5746f969218c4659bbab28075b28423b23d1c90eac8579215f43f7d05aac78dd"}, 0x1009, 0x3) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r3, r2, 0x0, 0x80000000004) (async) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x2df, &(0x7f0000000100)=0x4) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r1, 0x0, 0x80000000004) (async) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 16:33:21 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)) 16:33:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 16:33:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=@v2={0x5, 0x2, 0x6, 0x6c0e1432, 0x1000, "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"}, 0x1009, 0x3) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendfile(r3, r2, 0x0, 0x80000000004) (async) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x2df, &(0x7f0000000100)=0x4) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendfile(r4, r1, 0x0, 0x80000000004) (async) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 683.328120][T15747] Bluetooth: hci7: Frame reassembly failed (-84) 16:33:21 executing program 3: r0 = socket(0x26, 0x5, 0x0) getpid() syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$bsg(0xffffff9c, &(0x7f0000000240), 0x42, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, 0x0, 0x20000000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 16:33:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x10, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, {&(0x7f0000000180)=""/233, 0xe9}, &(0x7f0000000280)}, 0xa0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000002c0)={0x3, 0x0, 0x19, 0x10, 0xa5, &(0x7f0000000440)}) dup3(r1, r2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) recvmmsg(r3, &(0x7f0000003a40)=[{{&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/40, 0x28}], 0x1, &(0x7f0000000900)=""/251, 0xfb}, 0x20}, {{&(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/111, 0x6f}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x3, &(0x7f0000000b40)=""/180, 0xb4}, 0x1}, {{&(0x7f0000000c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/168, 0xa8}], 0x1, &(0x7f0000000d80)=""/74, 0x4a}, 0xffff6583}, {{&(0x7f0000000e00)=@l2, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e80)=""/163, 0xa3}, {&(0x7f0000000f40)=""/206, 0xce}, {&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/218, 0xda}], 0x4}, 0x6ad}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/184, 0xb8}, {&(0x7f0000003540)=""/254, 0xfe}, {&(0x7f0000001400)=""/12, 0xc}], 0x4}, 0x4}, {{&(0x7f0000003640)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000001480)=""/32, 0x20}, {&(0x7f00000036c0)=""/158, 0x9e}, {&(0x7f0000003780)=""/13, 0xd}], 0x3}, 0xb71d}, {{&(0x7f0000003800)=@can, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)=""/135, 0x87}, {&(0x7f0000003940)=""/24, 0x18}], 0x2, &(0x7f00000039c0)=""/86, 0x56}, 0x2}], 0x7, 0x40012000, &(0x7f0000003c00)={0x77359400}) [ 683.419842][ T5091] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 683.429391][ T5091] ath9k_htc: Failed to initialize the device [ 683.453562][T12528] usb 4-1: ath9k_htc: USB layer deinitialized 16:33:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 16:33:22 executing program 0: getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 16:33:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000080)={0x28, 0xd, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) 16:33:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 685.259873][ T3654] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 685.266394][T12528] ================================================================== [ 685.274478][T12528] BUG: KASAN: use-after-free in hci_cmd_timeout+0x6a/0x1f0 [ 685.281906][T12528] Read of size 8 at addr ffff88801829e5d8 by task kworker/0:1/12528 [ 685.289897][T12528] [ 685.292232][T12528] CPU: 0 PID: 12528 Comm: kworker/0:1 Not tainted 6.0.0-rc6-syzkaller-00286-ga63f2e7cb110 #0 [ 685.302413][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 685.312485][T12528] Workqueue: events hci_cmd_timeout [ 685.317719][T12528] Call Trace: [ 685.321009][T12528] [ 685.323946][T12528] dump_stack_lvl+0x1e3/0x2cb [ 685.328673][T12528] ? io_alloc_page_table+0x110/0x110 [ 685.333977][T12528] ? __wake_up_klogd+0xcd/0x100 [ 685.338839][T12528] ? panic+0x76b/0x76b [ 685.343010][T12528] ? _printk+0xcf/0x10f [ 685.347182][T12528] print_address_description+0x65/0x4b0 [ 685.352966][T12528] print_report+0x108/0x220 [ 685.357482][T12528] ? hci_cmd_timeout+0x6a/0x1f0 [ 685.362342][T12528] kasan_report+0xfb/0x130 [ 685.366778][T12528] ? hci_cmd_timeout+0x6a/0x1f0 [ 685.371653][T12528] hci_cmd_timeout+0x6a/0x1f0 [ 685.376343][T12528] process_one_work+0x81c/0xd10 [ 685.381305][T12528] ? worker_detach_from_pool+0x260/0x260 [ 685.386956][T12528] ? _raw_spin_lock_irqsave+0x120/0x120 [ 685.392516][T12528] ? kthread_data+0x4d/0xc0 [ 685.397031][T12528] ? wq_worker_running+0x95/0x190 [ 685.402070][T12528] worker_thread+0xb14/0x1330 [ 685.406771][T12528] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 685.412687][T12528] kthread+0x266/0x300 [ 685.416754][T12528] ? rcu_lock_release+0x20/0x20 [ 685.421600][T12528] ? kthread_blkcg+0xd0/0xd0 [ 685.426283][T12528] ret_from_fork+0x1f/0x30 [ 685.430731][T12528] [ 685.433753][T12528] [ 685.436077][T12528] Allocated by task 3651: [ 685.440392][T12528] __kasan_slab_alloc+0xb2/0xe0 [ 685.445240][T12528] kmem_cache_alloc+0x1a6/0x310 [ 685.450131][T12528] skb_clone+0x1e0/0x360 [ 685.454373][T12528] hci_cmd_work+0xba/0x3c0 [ 685.458785][T12528] process_one_work+0x81c/0xd10 [ 685.463626][T12528] worker_thread+0xb14/0x1330 [ 685.468293][T12528] kthread+0x266/0x300 [ 685.472350][T12528] ret_from_fork+0x1f/0x30 [ 685.476762][T12528] [ 685.479076][T12528] Freed by task 3654: [ 685.483041][T12528] kasan_set_track+0x4c/0x70 [ 685.487617][T12528] kasan_set_free_info+0x1f/0x40 [ 685.492548][T12528] ____kasan_slab_free+0xd8/0x120 [ 685.497563][T12528] slab_free_freelist_hook+0x12e/0x1a0 [ 685.503013][T12528] kmem_cache_free+0x95/0x1d0 [ 685.507679][T12528] hci_dev_open_sync+0x622/0x8d0 [ 685.512649][T12528] hci_power_on+0x16a/0x610 [ 685.517146][T12528] process_one_work+0x81c/0xd10 [ 685.522006][T12528] worker_thread+0xb14/0x1330 [ 685.526673][T12528] kthread+0x266/0x300 [ 685.530728][T12528] ret_from_fork+0x1f/0x30 [ 685.535134][T12528] [ 685.537448][T12528] The buggy address belongs to the object at ffff88801829e500 [ 685.537448][T12528] which belongs to the cache skbuff_head_cache of size 240 [ 685.552007][T12528] The buggy address is located 216 bytes inside of [ 685.552007][T12528] 240-byte region [ffff88801829e500, ffff88801829e5f0) [ 685.565270][T12528] [ 685.567580][T12528] The buggy address belongs to the physical page: [ 685.573982][T12528] page:ffffea000060a780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1829e [ 685.584123][T12528] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 685.591664][T12528] raw: 00fff00000000200 ffffea00009eaa40 dead000000000002 ffff8880170b8500 [ 685.600234][T12528] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 685.608802][T12528] page dumped because: kasan: bad access detected [ 685.615195][T12528] page_owner tracks the page as allocated [ 685.620891][T12528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 5091, tgid 5091 (kworker/0:44), ts 668120309410, free_ts 667040894366 [ 685.640762][T12528] get_page_from_freelist+0x72b/0x7a0 [ 685.646166][T12528] __alloc_pages+0x259/0x560 [ 685.650747][T12528] alloc_slab_page+0x70/0xf0 [ 685.655327][T12528] allocate_slab+0x5e/0x520 [ 685.659817][T12528] ___slab_alloc+0x42e/0xce0 [ 685.664392][T12528] kmem_cache_alloc_node+0x28a/0x350 [ 685.669663][T12528] __alloc_skb+0xd5/0x620 [ 685.673979][T12528] nsim_dev_trap_report_work+0x267/0xad0 [ 685.679636][T12528] process_one_work+0x81c/0xd10 [ 685.684479][T12528] worker_thread+0xb14/0x1330 [ 685.689147][T12528] kthread+0x266/0x300 [ 685.693208][T12528] ret_from_fork+0x1f/0x30 [ 685.697614][T12528] page last free stack trace: [ 685.702270][T12528] free_pcp_prepare+0x812/0x900 [ 685.707120][T12528] free_unref_page+0x7d/0x630 [ 685.711782][T12528] __vunmap+0x867/0x9d0 [ 685.715923][T12528] free_work+0x66/0x90 [ 685.719988][T12528] process_one_work+0x81c/0xd10 [ 685.724826][T12528] worker_thread+0xb14/0x1330 [ 685.729491][T12528] kthread+0x266/0x300 [ 685.733548][T12528] ret_from_fork+0x1f/0x30 [ 685.737953][T12528] [ 685.740264][T12528] Memory state around the buggy address: [ 685.745876][T12528] ffff88801829e480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 685.753923][T12528] ffff88801829e500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.761983][T12528] >ffff88801829e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 685.770026][T12528] ^ [ 685.776944][T12528] ffff88801829e600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 685.784992][T12528] ffff88801829e680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.793035][T12528] ================================================================== [ 685.804451][ T3651] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 685.811204][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.815262][T15665] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 685.817519][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.838654][T12528] Kernel panic - not syncing: panic_on_warn set ... [ 685.845263][T12528] CPU: 0 PID: 12528 Comm: kworker/0:1 Not tainted 6.0.0-rc6-syzkaller-00286-ga63f2e7cb110 #0 [ 685.855421][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 685.865486][T12528] Workqueue: events hci_cmd_timeout [ 685.870710][T12528] Call Trace: [ 685.874003][T12528] [ 685.876948][T12528] dump_stack_lvl+0x1e3/0x2cb [ 685.881643][T12528] ? io_alloc_page_table+0x110/0x110 [ 685.886949][T12528] ? panic+0x76b/0x76b [ 685.891037][T12528] ? preempt_schedule_common+0xb7/0xe0 [ 685.896514][T12528] ? preempt_schedule+0xd9/0xe0 [ 685.901388][T12528] ? vscnprintf+0x59/0x80 [ 685.905765][T12528] panic+0x316/0x76b [ 685.909702][T12528] ? fb_is_primary_device+0xcc/0xcc [ 685.914922][T12528] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 685.920925][T12528] ? print_report+0x1e0/0x220 [ 685.925623][T12528] ? hci_cmd_timeout+0x6a/0x1f0 [ 685.930500][T12528] end_report+0x91/0xa0 [ 685.934684][T12528] kasan_report+0x108/0x130 [ 685.939202][T12528] ? hci_cmd_timeout+0x6a/0x1f0 [ 685.944072][T12528] hci_cmd_timeout+0x6a/0x1f0 [ 685.948767][T12528] process_one_work+0x81c/0xd10 [ 685.953660][T12528] ? worker_detach_from_pool+0x260/0x260 [ 685.959306][T12528] ? _raw_spin_lock_irqsave+0x120/0x120 [ 685.964872][T12528] ? kthread_data+0x4d/0xc0 [ 685.969392][T12528] ? wq_worker_running+0x95/0x190 [ 685.974432][T12528] worker_thread+0xb14/0x1330 [ 685.979130][T12528] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 685.985121][T12528] kthread+0x266/0x300 [ 685.989208][T12528] ? rcu_lock_release+0x20/0x20 [ 685.994079][T12528] ? kthread_blkcg+0xd0/0xd0 [ 685.998690][T12528] ret_from_fork+0x1f/0x30 [ 686.003133][T12528] [ 686.006318][T12528] Kernel Offset: disabled [ 686.010647][T12528] Rebooting in 86400 seconds..