) 18:24:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x148) [ 1387.857434][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1387.870072][T25147] Bluetooth: hci2: Frame reassembly failed (-84) [ 1388.138625][ T2951] Bluetooth: hci11: command 0x1001 tx timeout [ 1388.144938][T18171] Bluetooth: hci11: sending frame failed (-49) 18:24:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:24:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1389.568370][ T2951] Bluetooth: hci3: command 0x1009 tx timeout [ 1389.728399][ T2951] Bluetooth: hci10: command 0x1009 tx timeout [ 1389.898448][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1389.904715][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1389.912510][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1389.921756][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1390.218444][T25046] Bluetooth: hci11: command 0x1009 tx timeout [ 1391.968319][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1391.975013][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1391.982248][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1391.988772][T18171] Bluetooth: hci4: sending frame failed (-49) 18:24:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x102) 18:24:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:24:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1394.048520][T25046] Bluetooth: hci4: command 0x1009 tx timeout [ 1394.054876][T25046] Bluetooth: hci2: command 0x1009 tx timeout 18:24:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:24:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:24:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:24:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1395.648365][ T2951] Bluetooth: hci3: command 0x1003 tx timeout [ 1395.655705][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1397.738663][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1397.745405][T24244] Bluetooth: hci3: sending frame failed (-49) 18:24:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000000)) 18:24:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:24:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x163) 18:24:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:24:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1398.146233][T25211] Bluetooth: hci2: Frame reassembly failed (-84) [ 1398.162991][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) [ 1399.808446][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1400.208526][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1400.214780][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1400.214905][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1400.222367][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1402.288551][ T2951] Bluetooth: hci4: command 0x1001 tx timeout [ 1402.288569][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1402.294775][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1402.302581][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:24:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:24:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:24:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x103) 18:24:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:24:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1403.852652][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) 18:24:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:24:51 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) [ 1404.368514][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1404.368647][ T8513] Bluetooth: hci2: command 0x1009 tx timeout [ 1405.888525][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1405.896948][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1407.968446][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1407.975132][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:24:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x40505330, &(0x7f0000000000)) 18:24:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:24:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@local, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="450a09e644b7871f9eb3c25e0a580a7d1ae82c05e0f91550ca39445e937abacfb07b3540f1789037c98c82755e879fa50fed79aed351a91a29d52fc1cf0367a4dab473e6a7f2955d181a2bdc83abb190ae1b7fe51cad7a903b94d22126667eb17ab5f1a24e7f0ae24c8fe2e5bfd527af14337120b031537c8d8a1e3c33f70dedf506eb6b98362353c06a7f6ae382e504c35bf48d3c6d7b15308c05d4fec2d1a4adb2b53bbe068ef30cbdeb29cf526eaa02965b57bef2476aaaf462bd73410420b1", 0xc1}], 0x1}}], 0x1, 0x4080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x62, &(0x7f0000000540)={@multicast1, @empty}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) 18:24:55 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) 18:24:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:24:55 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) 18:24:55 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) [ 1408.386515][T25266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.443046][T14535] Bluetooth: hci4: Frame reassembly failed (-84) [ 1408.450741][T25266] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1410.048497][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1410.368453][T24697] Bluetooth: hci2: command 0x1003 tx timeout [ 1410.374814][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1410.449188][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1410.455991][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1412.458544][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1412.464928][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1412.528532][T24697] Bluetooth: hci4: command 0x1001 tx timeout [ 1412.534662][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x104) 18:25:01 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) 18:25:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1414.528696][T24697] Bluetooth: hci2: command 0x1009 tx timeout [ 1414.609073][T24697] Bluetooth: hci4: command 0x1009 tx timeout [ 1416.128545][ T8513] Bluetooth: hci3: command 0x1003 tx timeout [ 1416.135844][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1418.208388][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1418.214968][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:25:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000000)) 18:25:05 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) 18:25:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x133) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000ff002e2f66696c653000175768eae472ebb04e3bb83228ae29dd7fad82286c203b5b3e211ed024feb049700e7e96e846dabfb06d12bdc6a41c3c65781f2f2837"]) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x44400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0xfff, 0x2b93, r2, 0x0, &(0x7f0000000140)={0x990001, 0x2, '\x00', @ptr=0x7}}) 18:25:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1418.596966][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:25:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1418.678333][T25319] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1418.704528][T22439] Bluetooth: hci4: Frame reassembly failed (-84) [ 1420.298524][ T8513] Bluetooth: hci3: command 0x1009 tx timeout [ 1420.608553][ T2951] Bluetooth: hci2: command 0x1003 tx timeout [ 1420.614993][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1420.688444][ T8513] Bluetooth: hci4: command 0x1003 tx timeout [ 1420.694886][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1422.289175][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.295485][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.688354][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1422.694526][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1422.768444][T18630] Bluetooth: hci4: command 0x1001 tx timeout [ 1422.774703][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x109) 18:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1424.365596][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1424.380568][T25342] Bluetooth: hci3: Frame reassembly failed (-84) [ 1424.768547][T18630] Bluetooth: hci2: command 0x1009 tx timeout [ 1424.848406][T18630] Bluetooth: hci4: command 0x1009 tx timeout [ 1426.368625][ T2951] Bluetooth: hci3: command 0x1003 tx timeout [ 1426.376895][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1428.452477][ T2951] Bluetooth: hci3: command 0x1001 tx timeout [ 1428.460228][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:25:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000000)) 18:25:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x77bd82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:16 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1428.850585][T22439] Bluetooth: hci2: Frame reassembly failed (-84) [ 1430.528521][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1430.928720][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1430.935586][T15237] Bluetooth: hci2: sending frame failed (-49) [ 1433.008502][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1433.015187][T15237] Bluetooth: hci2: sending frame failed (-49) 18:25:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x125) 18:25:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:25:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1434.593884][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1434.607640][T25388] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1434.702882][T25397] Bluetooth: hci4: Frame reassembly failed (-84) [ 1434.741722][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1435.099459][ T8513] Bluetooth: hci2: command 0x1009 tx timeout [ 1436.608569][ T8513] Bluetooth: hci3: command 0x1003 tx timeout [ 1436.616320][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1436.768562][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1436.775042][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1438.688584][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1438.694802][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1438.848428][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1438.854664][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f0000000000)) 18:25:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:26 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1440.768649][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1440.928386][T25046] Bluetooth: hci4: command 0x1009 tx timeout [ 1441.168495][ T8513] Bluetooth: hci2: command 0x1003 tx timeout [ 1441.175615][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1443.248418][ T8513] Bluetooth: hci2: command 0x1001 tx timeout [ 1443.255429][ T6588] Bluetooth: hci2: sending frame failed (-49) 18:25:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1445.330924][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1445.496092][T25450] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1445.517407][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1447.488438][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1447.496700][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1447.568492][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1447.575152][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000000)) 18:25:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1449.568509][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1449.574913][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1449.654416][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1449.660555][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1451.258387][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1451.264560][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1451.658390][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1451.728620][T18630] Bluetooth: hci4: command 0x1009 tx timeout [ 1453.338401][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1453.345467][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1455.409670][T18630] Bluetooth: hci2: command 0x1009 tx timeout 18:25:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) 18:25:43 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xb8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) [ 1455.679884][T25492] Bluetooth: hci3: Frame reassembly failed (-84) [ 1455.696648][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1455.780544][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1455.787601][T25499] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1455.857595][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 1455.873882][T25505] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1457.728581][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1457.735449][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1457.808516][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1457.815153][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1457.888441][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 1457.895023][T24244] Bluetooth: hci10: sending frame failed (-49) 18:25:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f0000000000)) 18:25:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:25:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1459.529962][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:25:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1459.676961][ T10] Bluetooth: hci11: Frame reassembly failed (-84) [ 1459.692750][T25526] Bluetooth: hci11: Frame reassembly failed (-84) [ 1459.808482][ T8513] Bluetooth: hci3: command 0x1001 tx timeout [ 1459.815078][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1459.889017][ T8513] Bluetooth: hci4: command 0x1001 tx timeout [ 1459.895410][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1459.968430][ T8513] Bluetooth: hci10: command 0x1001 tx timeout [ 1459.974898][T18171] Bluetooth: hci10: sending frame failed (-49) 18:25:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1461.578535][ T8513] Bluetooth: hci2: command 0x1003 tx timeout [ 1461.585319][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1461.728503][ T8513] Bluetooth: hci11: command 0x1003 tx timeout [ 1461.735007][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1461.888498][ T8513] Bluetooth: hci3: command 0x1009 tx timeout [ 1461.968820][T24697] Bluetooth: hci4: command 0x1009 tx timeout [ 1462.058541][ T8513] Bluetooth: hci10: command 0x1009 tx timeout [ 1463.648602][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1463.655307][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1463.809023][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1463.815391][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1465.738554][ T8483] Bluetooth: hci2: command 0x1009 tx timeout 18:25:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:25:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1465.888356][T25046] Bluetooth: hci11: command 0x1009 tx timeout [ 1465.922664][T25544] Bluetooth: received HCILL_WAKE_UP_IND in state 2 18:25:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1465.936709][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1466.036718][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1466.046608][T25550] Bluetooth: hci4: Frame reassembly failed (-84) 18:25:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x3f) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:25:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1467.968494][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1467.974868][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1468.048506][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1468.055101][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)) 18:25:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:25:57 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc", 0x62) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1469.733501][T14535] Bluetooth: hci2: Frame reassembly failed (-84) [ 1470.048481][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1470.054615][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1470.128593][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1470.135407][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:25:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1470.355051][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 1470.371899][T25590] Bluetooth: hci10: Frame reassembly failed (-84) 18:25:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc", 0x62) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:25:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x44001, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) [ 1470.605195][T25598] sp0: Synchronizing with TNC [ 1470.708009][ T10] Bluetooth: hci11: Frame reassembly failed (-84) 18:25:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc", 0x62) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1471.808436][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1471.815813][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1472.128644][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1472.208640][T25046] Bluetooth: hci4: command 0x1009 tx timeout [ 1472.368624][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 1472.375753][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1472.768488][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 1472.775007][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1473.888460][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1473.894785][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1474.458504][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1474.464879][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1474.858534][ T8483] Bluetooth: hci11: command 0x1001 tx timeout [ 1474.865179][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1475.978542][ T8483] Bluetooth: hci2: command 0x1009 tx timeout 18:26:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x134) 18:26:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee78", 0x93) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x131) [ 1476.207865][T25634] Bluetooth: hci3: Frame reassembly failed (-84) [ 1476.223420][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1476.244902][T25635] Bluetooth: hci4: Frame reassembly failed (-84) [ 1476.256593][T14535] Bluetooth: hci4: Frame reassembly failed (-84) [ 1476.528610][ T2951] Bluetooth: hci10: command 0x1009 tx timeout [ 1476.928576][T24697] Bluetooth: hci11: command 0x1009 tx timeout 18:26:04 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee78", 0x93) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee78", 0x93) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1478.208560][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1478.215259][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1478.288431][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1478.295741][T18171] Bluetooth: hci4: sending frame failed (-49) 18:26:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)) 18:26:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc22", 0x63) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1479.963169][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1480.288628][ T2951] Bluetooth: hci3: command 0x1001 tx timeout [ 1480.294873][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1480.378548][ T2951] Bluetooth: hci4: command 0x1001 tx timeout [ 1480.385068][T18171] Bluetooth: hci4: sending frame failed (-49) 18:26:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) [ 1480.603228][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1480.618988][T25665] Bluetooth: hci10: Frame reassembly failed (-84) 18:26:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc22", 0x63) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x10) [ 1481.250249][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 1481.319571][T25680] Bluetooth: hci11: Frame reassembly failed (-84) 18:26:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc22", 0x63) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1482.048644][ T2951] Bluetooth: hci2: command 0x1003 tx timeout [ 1482.054967][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1482.368580][T25358] Bluetooth: hci3: command 0x1009 tx timeout 18:26:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d7", 0x7b) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1482.458519][T25358] Bluetooth: hci4: command 0x1009 tx timeout [ 1482.608358][T25358] Bluetooth: hci10: command 0x1003 tx timeout [ 1482.616448][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1483.258788][ T2951] Bluetooth: hci11: command 0x1003 tx timeout [ 1483.265302][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1483.729296][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.735615][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.128558][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1484.135386][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1484.688437][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 1484.694592][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1485.328603][T24697] Bluetooth: hci11: command 0x1001 tx timeout [ 1485.334854][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1486.208622][T25046] Bluetooth: hci2: command 0x1009 tx timeout 18:26:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d7", 0x7b) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x137) 18:26:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) [ 1486.415825][T25697] Bluetooth: hci3: Frame reassembly failed (-84) [ 1486.434963][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1486.768627][T25046] Bluetooth: hci10: command 0x1009 tx timeout 18:26:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d7", 0x7b) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1487.408400][T24697] Bluetooth: hci11: command 0x1009 tx timeout 18:26:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1488.458631][T25358] Bluetooth: hci3: command 0x1003 tx timeout [ 1488.460409][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1488.538469][T18630] Bluetooth: hci4: command 0x1003 tx timeout [ 1488.546015][T18171] Bluetooth: hci4: sending frame failed (-49) 18:26:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000000)) 18:26:17 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1490.220469][T22439] Bluetooth: hci2: Frame reassembly failed (-84) [ 1490.528509][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1490.534603][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1490.608492][T24697] Bluetooth: hci4: command 0x1001 tx timeout [ 1490.615382][T18171] Bluetooth: hci4: sending frame failed (-49) 18:26:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) [ 1490.839004][T14535] Bluetooth: hci10: Frame reassembly failed (-84) 18:26:18 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200000000) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) [ 1491.480161][ T6792] Bluetooth: hci11: Frame reassembly failed (-84) [ 1491.490899][T25742] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:26:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b", 0x8d) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1492.288453][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1492.294715][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1492.317143][ T6792] Bluetooth: hci12: Frame reassembly failed (-84) [ 1492.327061][T25749] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1492.608544][T24697] Bluetooth: hci3: command 0x1009 tx timeout [ 1492.698541][T24697] Bluetooth: hci4: command 0x1009 tx timeout 18:26:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1492.858495][T24697] Bluetooth: hci10: command 0x1003 tx timeout [ 1492.865260][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1493.498521][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 1493.504952][T15864] Bluetooth: hci11: sending frame failed (-49) 18:26:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1494.368694][T25046] Bluetooth: hci12: command 0x1003 tx timeout [ 1494.376107][T15864] Bluetooth: hci12: sending frame failed (-49) [ 1494.382997][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1494.389244][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1494.928690][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 1494.935685][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1495.568503][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1495.574722][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1496.448852][T18630] Bluetooth: hci2: command 0x1009 tx timeout [ 1496.455368][T18630] Bluetooth: hci12: command 0x1001 tx timeout [ 1496.462602][T15864] Bluetooth: hci12: sending frame failed (-49) 18:26:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x148) 18:26:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) 18:26:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1496.660260][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1496.675596][T25771] Bluetooth: hci3: Frame reassembly failed (-84) [ 1496.685354][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1497.018442][T25358] Bluetooth: hci10: command 0x1009 tx timeout 18:26:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1497.658667][T18630] Bluetooth: hci11: command 0x1009 tx timeout [ 1498.538603][T18630] Bluetooth: hci12: command 0x1009 tx timeout [ 1498.688475][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1498.695011][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1498.778578][T18630] Bluetooth: hci4: command 0x1003 tx timeout [ 1498.784856][T15864] Bluetooth: hci4: sending frame failed (-49) 18:26:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000000)) 18:26:27 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1500.768735][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1500.774910][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1500.848483][T18630] Bluetooth: hci4: command 0x1001 tx timeout [ 1500.855115][T15864] Bluetooth: hci4: sending frame failed (-49) 18:26:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) 18:26:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1502.448663][T25358] Bluetooth: hci2: command 0x1003 tx timeout [ 1502.455490][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1502.848783][T25358] Bluetooth: hci3: command 0x1009 tx timeout [ 1502.928554][T25358] Bluetooth: hci4: command 0x1009 tx timeout 18:26:30 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0xb, 0x2, 0x0, 0x0, @str='batadv\x00'}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000007440)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8051}, 0x8050) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) [ 1503.049252][T25842] smc: net device ip6gre0 applied user defined pnetid SYZ2 [ 1503.088727][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1503.097422][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1503.101941][T25842] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1503.136456][T22439] Bluetooth: hci11: Frame reassembly failed (-84) 18:26:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f864", 0x89) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1504.538680][ T8513] Bluetooth: hci2: command 0x1001 tx timeout [ 1504.545830][T18171] Bluetooth: hci2: sending frame failed (-49) 18:26:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f864", 0x89) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1505.168696][ T8513] Bluetooth: hci11: command 0x1003 tx timeout [ 1505.175406][ T8513] Bluetooth: hci10: command 0x1001 tx timeout [ 1505.175536][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1505.189053][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1506.608492][T24697] Bluetooth: hci2: command 0x1009 tx timeout 18:26:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x163) 18:26:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x131) 18:26:34 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f864", 0x89) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1506.910265][T25864] Bluetooth: hci3: Frame reassembly failed (-84) [ 1506.924976][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1506.937679][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1507.248548][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 1507.254881][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1507.261244][T18171] Bluetooth: hci11: sending frame failed (-49) 18:26:35 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1508.928660][T18630] Bluetooth: hci4: command 0x1003 tx timeout [ 1508.934890][T18630] Bluetooth: hci3: command 0x1003 tx timeout [ 1508.935078][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1508.942243][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1509.328578][T18630] Bluetooth: hci11: command 0x1009 tx timeout 18:26:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:26:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1510.672993][ T1372] Bluetooth: hci2: Frame reassembly failed (-84) [ 1510.683797][T25884] Bluetooth: hci2: Frame reassembly failed (-84) [ 1511.008681][ T8513] Bluetooth: hci4: command 0x1001 tx timeout [ 1511.014930][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1511.021493][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 1511.027595][T15864] Bluetooth: hci3: sending frame failed (-49) 18:26:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x130) 18:26:38 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1512.688630][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1512.695006][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1513.088664][ T8513] Bluetooth: hci3: command 0x1009 tx timeout [ 1513.088731][ T8483] Bluetooth: hci4: command 0x1009 tx timeout 18:26:40 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000300)={{r0, 0x3, 0xfffffffffffffff7, 0xb1b, 0x2, 0x1, 0x91b6, 0x4, 0x2, 0x4, 0x0, 0xffffffffffff8b1c, 0x4, 0x6785, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) 18:26:40 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1513.244176][T25906] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1513.328859][ T8513] Bluetooth: hci10: command 0x1003 tx timeout [ 1513.335570][T15864] Bluetooth: hci10: sending frame failed (-49) 18:26:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1514.768444][ T8513] Bluetooth: hci2: command 0x1001 tx timeout [ 1514.775816][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1515.328542][ T8513] Bluetooth: hci11: command 0x1003 tx timeout [ 1515.335577][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1515.408521][ T8513] Bluetooth: hci10: command 0x1001 tx timeout [ 1515.414896][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1516.848509][ T8513] Bluetooth: hci2: command 0x1009 tx timeout 18:26:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:26:44 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:26:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x7c, 0x5, 0x38000, 0x4, 0x9, "f251b2cdf8a9b0ac71f7ea35c5c1a048684a63"}) [ 1517.200851][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1517.224747][T25931] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1517.418506][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1517.427233][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1517.488669][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 1519.168467][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1519.175557][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1519.248475][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1519.255017][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1519.488589][T18630] Bluetooth: hci11: command 0x1009 tx timeout 18:26:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2) 18:26:48 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1520.939502][ T6792] Bluetooth: hci2: Frame reassembly failed (-90) [ 1521.248748][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1521.256527][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1521.328459][T18630] Bluetooth: hci4: command 0x1001 tx timeout [ 1521.335014][T15864] Bluetooth: hci4: sending frame failed (-49) 18:26:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1521.575822][T14535] Bluetooth: hci10: Frame reassembly failed (-84) 18:26:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:50 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1523.008500][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1523.014755][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1523.328588][T18630] Bluetooth: hci3: command 0x1009 tx timeout 18:26:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) open_by_handle_at(r1, &(0x7f0000000100)=@ceph_nfs_fh={0x8, 0x1, {0x9}}, 0x103080) [ 1523.435016][ T8483] Bluetooth: hci4: command 0x1009 tx timeout 18:26:50 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1523.487046][T25962] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1523.494487][T25962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1523.497411][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 1523.648975][T18630] Bluetooth: hci10: command 0x1003 tx timeout [ 1523.655322][T15864] Bluetooth: hci10: sending frame failed (-49) 18:26:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1525.088416][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1525.094665][T15864] Bluetooth: hci2: sending frame failed (-49) 18:26:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1525.498483][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 1525.504770][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1525.728588][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 1525.735002][T15864] Bluetooth: hci10: sending frame failed (-49) 18:26:53 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1527.168512][T25046] Bluetooth: hci2: command 0x1009 tx timeout 18:26:54 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:26:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x2, 0x3f, 0x5, 0x6, 0x8, "12cd616d18ea9d4c5e6f28741336282f42337c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x1, 0x3, 0x6, 0x5, 0x1, "774ef3301f6c11d28443a81f12161dad40cc25", 0x8, 0xfff}) [ 1527.473000][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1527.487434][T25992] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1527.568502][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1527.575597][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1527.808669][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 1529.488604][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1529.495633][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1529.648528][T18633] Bluetooth: hci11: command 0x1009 tx timeout 18:26:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3) 18:26:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1531.149909][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1531.183997][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1531.568615][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1531.575430][T15864] Bluetooth: hci3: sending frame failed (-49) 18:26:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:26:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1531.818816][ T10] Bluetooth: hci10: Frame reassembly failed (-84) 18:27:00 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1533.168521][ T8568] Bluetooth: hci2: command 0x1003 tx timeout [ 1533.177080][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1533.248685][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1533.255005][T15864] Bluetooth: hci4: sending frame failed (-49) 18:27:01 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x560e, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0xc8, 0x81, 0x400000000008, 0x2, 0x6, 0x4dd, 0x5b, 0x40, 0x148, 0x10, 0xcaf0, 0x38, 0x2, 0x20, 0x1000, 0x204}, [{0x60000000, 0x8000, 0xffffffff, 0x8fb0, 0x7, 0x7, 0x7, 0x8}], "6e3f426d6d68a727f6a38dc881cc210cb9ee114cc1aa8e1cbb0d162b918deeff8c7d45ce1fb9c5758fed9514301c08460ea486da7a1313dfbc81d7a218eb858d10032a3f72fbf423c091e1947b5e41a1040b1c382528ae1209584ae1f52a8bdfaea6b89412e97037c7615caf23f7954a17df2d", ['\x00', '\x00', '\x00', '\x00']}, 0x4eb) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000700)="f17d6e8097fc60a9af4d781c9c92337362f8eb978f2edba57c4de85bb12317b00c238d19b0af66f05d4a62a596ca58fd939e9ca5082bef5e03b86410d31f674c00f92aa0f5eaa35d1b1ef88ed77729415f943b928a54cb9e77e94fc996cf088484c8cc723c536c7555c1d69393fdbae6848c454902b9f7108c6626ea98490f8ce28f4386e837011e375fbe31f8babf42bc320af77575e6433daade4cc4f92aa2ae7f10fe153f27b4e68434f64e9e83425b801dff134e20e69fa848eaa37b8e16402f69b2ff960bc824e9c7ba080de47c4db46ac9d892a25159777b0c1cb9b44da105763b2513defc5afdaa498bb75894f7995ff810c364804af173a9c10a8eed") r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0010e254010000002e2f66696c653000991484bb8070887da1073cca1852f78f8d33de611951619c7c71912cdb5c4dec51e48a076599843741b2b510d72beca35d57effa78621f698434d598b13bd65553919cd71d87ef338ab2eb64f204101d4471c300e75098396bb96bed3ceb7e9798d0d622e9479e97a7779b"]) r4 = dup3(r2, r3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000580)=0x1a) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:27:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1533.651253][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1533.888484][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1533.895960][ T6588] Bluetooth: hci10: sending frame failed (-49) 18:27:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000001c0)=0x5ba) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0x396e, 0x8001, 0x0, 0x1, 0xf7, "3cbab6786764b3a1ff69776fbac8c7aecacdb9", 0xfffffffb, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r3, 0x400455c8, 0x20008000002) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) [ 1535.248481][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1535.255154][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1535.328565][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1535.334938][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:27:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000140)="094dd3edf3aee3b57a920f4012e5e80ad6661af1a674532e80d070f60c00a1384c4194ece175a45938a6e77c6ffe0c0be54e49babc28b06eef7494a6dc69b2495e3f9157413fec46330143aae7bda6bf412bf8842fbd9f9a48117d07aa3bd90d34262dfb6cacc889465806039b8228add9a9a63e865171e90f5f131a73b5641c16a66a5693505525e66aebd7a614a790eb23b98f2579e4f04ddee73c2dcacb3f3ad23ca9d076dd21b397af958195196cf378d53f93737d631fc057f5add9419795b8") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r4, 0x200002) sendfile(r3, r4, 0x0, 0x80001d00c0d0) io_submit(0x0, 0x7, &(0x7f0000001a80)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1ff, r0, &(0x7f0000000280)="54d8861e868957a26e27f4769b6c3a3b", 0x10, 0x3, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000580)="b2b671cf47c0f4301e0672a9945592686d7a5e0c66668bedf000352b2b8cf51e96f4b6ce6385696931596e14a4ac5a6ddbfc94b2b329de55332b00fe", 0x3c, 0x7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000640)="3aa45b108ba418e55c3dd293f4160717f226b2e93f62a52ea671fbb9df856823531bfcd57112da64126158f23facd5ea0b40178df6fd6d978c9cfcb6206a07291b0c4ac30483314c24aa10aa983e19bb3215efbb3f53abc7fb6ae3b83e1d93f1cc69eb2bfb72cdfb18383e878ffc68386f6894461da301", 0x77, 0x7f, 0x0, 0x3}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000700)="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", 0x1000, 0xef, 0x0, 0x2}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001740)="1adaf2157ae6d37bbff56efe429eb1724bb4b62b69155cfa8032d45df64620176944b079cb0b9b6266d32f7850791a4393ce56066c44a4655f48e5e202b82260e6234fa0eff638d7fc6681b46ad5e01dae9324885946191585b150e61a46c73803daa56b64ab83cf2e2793b651811832fcb80bddf371078f3267faf05e7ede0a016c6580ff4a2d3a5581b717d1e1974812ab79bf50a565c8f0e57388a633d7e8979abfa48a971590f8f126e514c46cc435d250157d1ff101920bc62665f4108f601ccf4666a1584ea3f9525ed6e3d0464a41e739b37a8ddbdc", 0xd9, 0x7, 0x0, 0x3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000001880)="aa8e47be9ae1e2f7855fe021e8f3d34ea0f6b6292f83913507e82c902d422a62d7fbdd37ffcc697a24fb14330f93d0c6d8068d8853f7809ef85a78c0d44da454debd26861e99a375c655e37cb23f58d913d4d73494694dde9f85498f0884c74db22961b1dae99ff5055540cf0adc4bc7acc59bd7", 0x74, 0x4, 0x0, 0x2}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x7, 0xfffd, r2, &(0x7f0000001980)="8f93a5097c622cbb73019c979032b2000e610135fa7afca277f92667665f7a41f12a6128d45ef8436e71a62eb8fe7c5cc504675a5aea797aa84498d508e7af0ff0c8c65232d5cb1645727b7ec9d8fe194a4aa64d5e94e900e6b2e57cd2aa65d9e38df649980ecf9afa67421a0a41db40b995fb1b76048aa6191ec6d217d2be280c4a30f61f19fecc0d31b4e089d7c86956670e91f32e67632cb2268648792e1acc91ccc8d7f3a1046d", 0xa9, 0x1, 0x0, 0x0, r4}]) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x20000016) close(r0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000100)) [ 1535.968620][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1535.974927][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 1537.328649][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1537.408558][ T8568] Bluetooth: hci4: command 0x1009 tx timeout 18:27:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x72d100, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x9, 0x7, 0x7fffffff, 0x4, 0x0, 0x8}) r2 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x5, 0x5, &(0x7f00000023c0)=[{&(0x7f00000001c0)="dbf1edd3ed2f67e51e67457fe839483444737618b88399d83c", 0x19, 0xfffffffffffffff9}, {&(0x7f0000000200)="50c6433d138750bc9771cbbabaa6e2f80a869d0b94990d3ec659a35daa27b72585ca959d3fb0646d67f1cb547d8b9a07400c9113058d05405de10d8b9d57d19fd33148cc1120c315a035ddc0578e4858a1f3425c53c5c6a8b63ac0fdeaa7e1088b4e727ccd8c0b97843a19d5b517e19f7ee4be2e8de5387fb3da78d0540ed74a5da1358f83541f58c1f75371abba7ac95bcbad74723fe33cc25cbe74322a9f7a7cfc723701770edf92a2d4142fa74060c6309ba8e15520015fd25b3ab36de1be269acc843aeb814aa88b654fe667448222ba1d3d4525f045ce9820407a0440f4847d66c5d3210b4cf261887ad59ee0d256538e0fe461781cff1fd1a009471d1527a83de7416f7e4a1ef68245968db9a70628851760c5c3dfc674865ccd49e946c2fcd7fbc41bd036db3c222b9d6ac9b97957396a994b6b456eb4b7688ee20a6a22c2fd47e2b9dcd91699d00a56d26420579599f8de3f5b04cd381fa85f1f728293c3d0ba4fda28396a27f7f9816b08803d1541f473f4dba9e916843c0dd4ce7b65d2e08bf83f852da0dde360c25db31ee6cd9d813169971bfa8b5dc3756c920907abb6c6f7de3b2e0b39aab2a45196b04c00401b57138d2c8cd26ff959433ae9adca3733c28ce05ced0ef0d4ceaccdb02be3c3c2e58fa0069fcb00cf3f253fdc3e75460f015d0c08f1b9aa8f5f1b05f1fa702ec91513bdcb2568d5cd116d8006234fd23886b047c354ae0bd2dcedfd50803f1df59f8c74d000c0710814cf03aeff0eec38b003b070900560776e169263d9d6e3a1a612d71fd7fa6ec52db645bba64c4568d17f6ad28aed9cf1b0c2267de13b7b80e1baf6a97239842c6d8203b4e79ad3ac7f2ffbf27599f3da4f42187c0831cf65535d19ee920d85a12139908d4ad3b381a5d761429bb46b02c8a7dc0f88f7e5e619fd80e30fae6981b794fd874f2f99afa1f57e3750d74bb451bec434fd4a08098cbe87f169cc379559865a22ffbf7c0da862ab1267a5a825113ae2b9ce6cf9c418fb0b943665de44e3a6f62a526073471604e861fef33cac89baef9ba7ece9b84ee59acf64b02eddbafe9682ee6da8304024f24f6dfa7c047451cd4737bff8b48ea6b1a796b0e9be3fbeab23eb4cc358e120d71c5b66105770595125691c4c325da1497e08b146da7caf0a17e13f9bb6c2b15eca80607443640d899b0f345b29c94a9b69f25b8ea639ced84d261f23bdf05f0514a0f57e1bb9272909dd6cb23371430ec267fcf5c1243988da78df2c94812393f52bb539220bebf209e5833d4dcc101dd0f7521df9e4d212ffd2853ec79ff5d6967cdfb8c0531cb4541de82778eefdf94c707080abd4c34057f8cd0458e4b4f7f11860c5b9006107983740b4ef02830c9529ebe2b5f9e0b6488baef8f1049e29ac711ac5a1a296c5ddf8efe1a4b0ad20e2ec5bb6b2181cc4f6465eb2e1978a14a5080f62d32f51afe2822e88ff43cd517e21ddf4d548ae3b7b116ef2ba406e029fb58685b86b0d6ed607ae0ea8e7812777e75c354f7db035909ab02b4e906aa93b38b341a5f682a005880f08b1ca7f7d8432562d86b1e413acebe16de1da110ef018fe2d6a93361f588c4314c24a643005d511fd93eabcd52818caa4633722b39fc7c77463d7b69d61b05b80d3a659426bf0997b66d951a699562aec0fcc36e3a7bd9344cebc0a50f43a4d051f82959f49d0010c254256d09beff095a7a7eaef6fe5634ad0edec3f4989c83357b6fea38aff9e02e6f290ef526bebc159c764c6a74994edaa5cd6f03e3f719411ef8481385adb9b7d35a01d150d919f82992fe570ba38100871dd51c1404f683f9f1e7c7e7140a4bc5a8a73aea2fe3c3062efe0b824ca0205102a6809e80b330bb64c02390494cb685f6238c1377af524adcfe3266a2408be0a6d4bdd7c84697a332a390dec6690fba48d048e72303f49d5bdcfeb7eaf5aa1d87f2b4b6ce395fb878cb9a4a001bd6d283f5a0aa4509cf6e321808b6ce5696dec3ce23f4564fc020481a0bc510ea2f012e2cd7ea14c1243840523c3cb65dddf7362edb6cdb154b65968a0d5034b3a7d9c945776135d0af57f87a93f3e4e1cc64d6c60ae08a22407ebb5ac576bda256e0975c7b828b55cb47a4af4cf3f38c00ed1e49ad4d6a9388e69e434bdfa678ed17d6fd5c2c37e393406c61bfe18139cee99e9f43afe350a8e80937b55e03ae3e4ccb235498f45a74cf4971095de36f9a41e6122abef56ee3fb36e8409a3067ffce6c673f4b7e0fc38a9dff87453ca356efe244030b1181fa5d2cdb2d08121d721dbce63923b2f65000548cf421c4e3ac04d547086bdfa2f8317263cf1c87284a35013fb3dba5e9ed56a8a2b6f2b26ba287b971661b8b2f883770a9867e7a135e71d22cc7cef70b28c6cadbcd86f92b49972b2e8558daafddcc201895619f8eb8fc4870fd8973b922ec86859b8d431b6cdb4bcede3b9281f5459af8d7e513ce2078322947878ac055b299f55741ee03efc25a6d77814a988020dbdb5e468ba9e995f787df0ffc2b804c54c8cf2513e354adccd63100fc99ebcc9a50fecff2539de446a85e42b93ddb1786f0260b92b0ad0d10cfbbe11c29c5e4b97211033e11deb350db48e96b1afb5a37915ce9e91b1dcd2d604b3654cf1ebbd2a185350ee476a0e1c3a4dc2509bb8d5b83d6c08922948fe2c8fa4e1a46e051f81c64182c10b944ac0021285fa2b9273f7de60bbca7894cdb91de348ed6a54216dc42f03f78e198bb3594ddbaed7a6535a31038cef603f5469ff480158ebe6b6a6bba83f008e582677415a86cdf3d39992ec0805749ac30ef0d27bbc2c361aba810cf9ba919fdf0d0ec69134551e0276da3bf964baa9cf446562d9dc74ae0addc95ca682c1d150dff32478c426ec0d0831808149469912fb4d2e4ba15378126d65228f3e8bbcd2df3343776d1abe1e4373e54e3b1ceb864aa4198d864f9ac86725c76e3bde99144698c424746e7717a83f666048f3efefd0cfe28a37ce40199ad8360f352c632e4ba898c7329f80f8b1d8293166ecdce15403563883ccde1b4c500d1ea6ec77f5fa33761eea89f1629c2f17a5787b6529f66c6bf2687339df00f70182673ac65e5a41add5c3452613341ae217f939658c3ecbe40a66fa54aa74052bb32463103b0db8fb3b786658f12e86e8d8f77ac1dbac96fdfe55b6510afad583b57b8a17ebd7092d8cda5a02a1a5e5f0381f74ba1a77236f7f442cd9960d0f41229a99a1c7f111e2514a8f011bb899a2cc38365a4403c748b223c202af0f9188997a34d55e9a0a25c6863482407ac61ef6c1f459708ecc17fd9f8d6f18ced1f2368a1d246ea9df1d91398cabc368bd99e54e79dbbeba1e11d8cdfc7185d55e23cf1be78d4f674ec0e14cf0d3056526ca874e6b773ffbafb8a890d15b4a9ec1c529569fca214cd9e881cc607e578b4eb1c749b1bd4802f5f188e186e73cfabd3f4a8695679a37abfb02a41829dd5816c59f13181799345ff51321b431e33e4c6d320641a474a87819a65a02b32962b17133454eac0f689d5cdcdfe66c7873f5c76a99030f0b9cafa882f88048c402d9363e7ff31ee5a4f4ed767a44af240e6915f42fae8d45cdd0704b2d1cd32cf13e12ce12fad8f530f15ae3aa3675b8c17342e2ccc78f80bb4522cf8016959c42fb998d0d15f8e44e6c86e1f3bd4f3cc287c0d88760d4667e555e4b53be90e6f209ca56f134ec68d30bb9f906e897888dc4631ba71fcabbb1df97d5ffba0a79b655df6d16b5f9889c96996235c502416b87b608130a3d57723f2626c34fef9fbd830f0045412515c666676ed16729e67c52bceca6e3c504e1c61a65f7589e8f7c601e883e7684376a193532d1e431c3b58f26facc76476342cd2627b2a2ade3bc677ed31ee323f878ffb19c73391e007970d01720bc44a742dfbb4766d14808a88a9a40e6ff2c067807a211f6325f48bc035b9d794652792652cab0bca057e33ef0810f2e953acb10b1dad74682c647311cf137322336e5ae2b2dd24a0327a43eaa4c3a5c8ea23b16b8447785d2218f72c5b114182401d0ee7cf9603cf55ff522b3bfe04d417a4c89eed4a2782c549df5342b65ef93fcde7ab65d048908044f222f909c520163ce83fa92ba97016a190a3fef5aa2eb139393c25c2096b7067c07897e77fd6c7acb238a3cc6b33268bd70afba9a1d6ab0cff5e3f7a0fb7c2a91a315380b6582a18022f29fe76268dd73eea030396fcbc5ec852afa8122a4ea96ea8017746544b54312fb75b7f90eec4ba48190d473e90570d260817efcf190a94e2a3819c9dd05469d34679dcd4d0d42c5e7d520d54d9a64b1740a46291f0fb85f81a36fb690e087d81c65eb65ed849530ab238851d209e344295835d9faab29f9a3503785de329f830a080db8b67b9a9a0615e63d6b9a3eebbf3b3cf7cd972369a90430083609a5c4dbf273a4eb1a6e5e38a8ee8eda87481cfa3a02bf4c5945dc08033d60c7882ccfd499073affc0c6c364125d63e1811f13a5c912d02d9eac15a4cdfd6f9ad0610019a44fdee6f4c803c76206d8d2d2f92082d68f8443195ac63a06abce0ad383daaeddfe899205b8550731df2b303d5360b9c89ea26de194c9cd0d46ee695462821f8c304725e5551ea1892b7ea39b288238213906e8adaacfb481d61699fecbd639cf53e525d70dfc0b17dffc8fe1e70db79a5ff56cdd89a3e47013965a85057de6a6db2a5ae3c448857c70e6fdf32254ff44188e12d040fdae7f416c74cb82e3f6c5cb6ff7fa259ac9bb70f3c985757e3e516ede01be23243446fbe56a7113468dd0316f57165327c5477e775ab030f88e8caf14fccf585fe047d683c9a697faf7d1818486938b62cd40356096ad3758fca6e40a62a3ff700f9f6eeb061d98d7571c4fe5f1bd1171c6b9e522706abeddf979e0453edb177bc3a7af47521e5ce7f5254fbcd9e10e8ff29ff53ecbe84d3a37b266068de127e8e5a384e18ffec14ef27360a00c87ecd3b928af3201fde724df4023e74da1eddf9d198797f96fbfb3beffd56b6ea61d5a894e9f40c668f3afcedacad010b77b2234177d619e1004daac9ffdc7d3e0cb29d41de0df5c470b2f7868c98015f1ce4560f9e2b49c40061dcab73d267b5e75c18d83f22a71e59ee26574c2bdffa14950d3e3844df91023a9e6dc1fbceb44840bf9551c497fce238750d3f9517e1075d4ca34fd0e57e2894c5d7af29d98920004826898a98dacebc1522caa7b30af8c2eb204c61493353041600a5e9a86fc3e0585f5dcda854508571294141c7c1426ba76f7c21c2c162f9ad06d1ecc5fac3a4f24b1368acf9b3b5622f8e49b151ebd179230ffbdc7f7b721d43fec65c653a58cfa42076562ae11661805448d3fb99c91a1b6974a0263fe01c92e1f0adc15a5b541a3f1596af28f418a4e831984c96d5860351da9134a43a28ccc635dd5c80c82541442ad9ff270bda24b416aa968aa99371b0c4a33bec92bbca8afee666a106fce8b788550c5c33f3e03bd25d4252d294364998c293dbbd7b2b859e8950d9d5567b2e0132fe11dda4445d28c9975e7687c0dec77ce844b092e2cfe54344359fa503b1bfb02793789907608056ed88faf84c3d50d740f90e1871d9ba276554a56e922f88f9a08b46f93cfe86059a921724c80db464c998c952743036c32cf3beb01f46e1dcc5c0ebe267f811b9cb70b1a96fa35ff3166953227a37c6a2ea0808b57c891966bfe50b4c7b84a4e09c6c3b42b692e0e82fa86688267ea364a502a634b86d907b4c140f77aa973", 0x1000, 0x4}, {&(0x7f0000001200)="eb4478c6da8566d90a5cfa93595ff85674e89161847b54f3d3f13ffcb0f226d8f5d2ab6040633102ec4ef1963c63c1e64d0e471be3a86be090fc905349ad88552371f40f79813e146f2cccf280b678e2a45ff41cec89b27c88699f102fd26ce4147f2333bbca79410ca56c659fbc865cec49bed9b4c471f7ac13450388b9f333f0b83c08960140ce9d8463e39a1d3277ee46f212f2f55549db9b43c0a61d3a6d6ff2a0bdb19a4bb38bd4a4ddb51bc869c95b146f20dd682095827ca7a40620fe03c6ff56a96c39181c1aad9dbc8e832ea3c2ac1c28e75fd21fad19bbcf33901ddc24cc9b40b0be2653d04b47cc49aa0743", 0xf1, 0x7}, {&(0x7f0000001300)="83664b710aa15b0da2051ee45b10659976d2092042b51a937bbadfb31dfc7d4a74207bb8aaeb90f8133ce0488258ba41589a44e489ab352d3e5880bdc6586875902b078e28dd1a59305071461cacd78beb6c1236088b507aae8d64845103d0c22df4f6394ae0ec968bb8a938be785615da5e32ac9284e7af91b37194f05e15baacb60e16ffd6d793a61f078805716c20e6127d567256", 0x96, 0x1}, {&(0x7f00000013c0)="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", 0x1000, 0x9}], 0x50, &(0x7f0000002580)={[{@six_active_logs}, {@six_active_logs}, {@noinline_data}, {@usrquota={'usrquota', 0x3d, '/dev/nvram\x00'}}, {@nolazytime}, {@inline_dentry}, {@fastboot}, {@acl}, {@acl}, {@noinline_dentry}], [{@seclabel}, {@subj_role={'subj_role', 0x3d, '/+]\\#,'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fowner_eq}, {@smackfshat}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@appraise_type}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setown(r2, 0x8, 0x0) [ 1537.557247][T26058] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1537.564973][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1538.058715][T18630] Bluetooth: hci10: command 0x1009 tx timeout [ 1539.578540][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1539.584817][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:27:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1541.648799][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1541.655996][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:27:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:27:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) 18:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x6681, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xb) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100)) [ 1542.109752][T22439] Bluetooth: hci10: Frame reassembly failed (-84) 18:27:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:27:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1542.233559][T22439] Bluetooth: hci11: Frame reassembly failed (-84) [ 1542.264413][T26098] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:27:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1543.488707][T24697] Bluetooth: hci2: command 0x1003 tx timeout [ 1543.495644][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1543.728571][T24697] Bluetooth: hci3: command 0x1009 tx timeout 18:27:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1544.132272][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1544.142427][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1544.149468][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1544.155703][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1544.289371][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1544.296050][T15864] Bluetooth: hci11: sending frame failed (-49) 18:27:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1545.180772][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.187190][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.568478][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1545.574696][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1546.218630][T24697] Bluetooth: hci4: command 0x1001 tx timeout [ 1546.224812][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 1546.224907][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1546.238006][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1546.378665][T24697] Bluetooth: hci11: command 0x1001 tx timeout [ 1546.386623][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1547.649506][T18630] Bluetooth: hci2: command 0x1009 tx timeout 18:27:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) 18:27:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1548.288770][T18630] Bluetooth: hci10: command 0x1009 tx timeout [ 1548.295010][T18630] Bluetooth: hci4: command 0x1009 tx timeout [ 1548.448488][T18630] Bluetooth: hci11: command 0x1009 tx timeout [ 1549.898535][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1549.906220][T15864] Bluetooth: hci3: sending frame failed (-49) 18:27:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1551.643157][T26131] Bluetooth: hci2: Frame reassembly failed (-84) [ 1551.651623][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1551.968712][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1551.975016][T15864] Bluetooth: hci3: sending frame failed (-49) 18:27:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:27:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 1552.337414][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1552.352239][T26148] Bluetooth: hci10: Frame reassembly failed (-84) [ 1552.366814][T26147] Bluetooth: hci4: Frame reassembly failed (-84) [ 1552.375613][T14535] Bluetooth: hci10: Frame reassembly failed (-84) 18:27:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1552.922071][T26160] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1552.946300][ T10] Bluetooth: hci11: Frame reassembly failed (-84) 18:27:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1553.648476][ T8513] Bluetooth: hci2: command 0x1003 tx timeout [ 1553.655512][T15864] Bluetooth: hci2: sending frame failed (-49) 18:27:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1554.048724][ T8513] Bluetooth: hci3: command 0x1009 tx timeout [ 1554.368607][ T8513] Bluetooth: hci10: command 0x1003 tx timeout [ 1554.375926][T15864] Bluetooth: hci10: sending frame failed (-49) [ 1554.383973][ T8513] Bluetooth: hci4: command 0x1003 tx timeout [ 1554.390954][T15864] Bluetooth: hci4: sending frame failed (-49) 18:27:22 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1555.008715][ T8513] Bluetooth: hci11: command 0x1003 tx timeout [ 1555.015227][T15864] Bluetooth: hci11: sending frame failed (-49) 18:27:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1555.730125][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1555.737552][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1556.448598][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1556.454868][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 1556.455930][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1556.468138][T15864] Bluetooth: hci10: sending frame failed (-49) 18:27:24 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1557.088723][ T8513] Bluetooth: hci11: command 0x1001 tx timeout [ 1557.095052][T15864] Bluetooth: hci11: sending frame failed (-49) [ 1557.818741][T25046] Bluetooth: hci2: command 0x1009 tx timeout 18:27:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:27:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1558.528517][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 1558.535120][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1559.168649][T18633] Bluetooth: hci11: command 0x1009 tx timeout 18:27:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1561.886358][T26194] Bluetooth: hci2: Frame reassembly failed (-84) 18:27:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:27:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2000000000000004) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x424000, 0x20) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KDENABIO(r2, 0x4b36) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x8000200ffff, 0x4000) ioctl$TCGETS(r3, 0x5401, &(0x7f00000001c0)) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x9, 0x0, 0xe8fc, 0xd84, 0x15, "ce23677ad3acf0d7"}) 18:27:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6) [ 1562.579700][T26209] Bluetooth: hci3: Frame reassembly failed (-84) [ 1562.595178][T26214] Bluetooth: hci4: Frame reassembly failed (-84) [ 1562.604677][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1562.643475][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) 18:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x4b35, 0x9) 18:27:30 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000100)={0x1, 0x1f, @status={[0x80000001, 0x3ff, 0x9, 0xbf2, 0x5a3c, 0x529]}, [0x7, 0x6, 0x7fffffff, 0x7, 0xb8, 0x3, 0x0, 0xfffffffffffffff8, 0x5, 0x7, 0xc1c1, 0xa8ea, 0xffffffff, 0x80000001f, 0x3, 0x1, 0x6, 0xfffffffffffffffd, 0xa1, 0x1ff, 0x0, 0x1f, 0x0, 0x1, 0x7, 0xe6b, 0xfffffffffffffffc, 0x5fe, 0x0, 0xb2, 0x5, 0xff, 0x6, 0x295, 0xfff, 0x0, 0xb665, 0x9, 0x8, 0x1ff, 0x80000000, 0x9, 0xc65, 0x3f, 0x28, 0x5, 0x5, 0x10001, 0xf8, 0xffffffffffff64d5, 0x3, 0x4, 0x400, 0xfffffffffffffff8, 0x9, 0x10001, 0x101, 0x0, 0x1, 0x0, 0x6, 0x2, 0x3, 0xc8]}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1563.188160][T26226] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1563.214275][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) 18:27:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSBRK(r1, 0x5409, 0xab4c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_dev$loop(&(0x7f0000000080), 0xffffffff, 0x20000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1563.709699][T26041] serio: Serial port tty1 [ 1563.893373][T18630] Bluetooth: hci2: command 0x1003 tx timeout [ 1563.900406][T15237] Bluetooth: hci2: sending frame failed (-49) 18:27:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1564.608594][T18630] Bluetooth: hci4: command 0x1003 tx timeout [ 1564.616380][T15237] Bluetooth: hci4: sending frame failed (-49) [ 1564.618440][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1564.631243][T15237] Bluetooth: hci3: sending frame failed (-49) 18:27:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1565.248748][T18630] Bluetooth: hci10: command 0x1003 tx timeout [ 1565.255401][T15237] Bluetooth: hci10: sending frame failed (-49) 18:27:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1565.978693][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1565.985915][T15237] Bluetooth: hci2: sending frame failed (-49) 18:27:34 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1566.698588][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1566.705114][T15237] Bluetooth: hci3: sending frame failed (-49) [ 1566.718468][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1566.724677][T15237] Bluetooth: hci4: sending frame failed (-49) [ 1567.329035][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1567.336492][T15237] Bluetooth: hci10: sending frame failed (-49) [ 1568.058604][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1568.768612][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1568.774729][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1569.418722][T18630] Bluetooth: hci10: command 0x1009 tx timeout 18:27:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1572.188831][T26289] Bluetooth: hci2: Frame reassembly failed (-84) [ 1572.197450][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:27:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:27:40 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) 18:27:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7) [ 1572.804821][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1572.819731][T26302] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1572.834409][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1572.843241][T26309] Bluetooth: hci4: Frame reassembly failed (-84) [ 1572.863497][T26312] Bluetooth: hci11: Frame reassembly failed (-84) [ 1572.875625][ T10] Bluetooth: hci11: Frame reassembly failed (-84) 18:27:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xb) [ 1573.395641][T26322] Bluetooth: hci10: Frame reassembly failed (-84) [ 1573.402772][ T10] Bluetooth: hci10: Frame reassembly failed (-84) 18:27:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1574.208487][T24697] Bluetooth: hci2: command 0x1003 tx timeout [ 1574.214994][T15864] Bluetooth: hci2: sending frame failed (-49) 18:27:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1574.848704][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1574.855327][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1574.862107][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 1574.868250][T15864] Bluetooth: hci4: sending frame failed (-49) [ 1574.938656][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 1574.945182][T15864] Bluetooth: hci11: sending frame failed (-49) 18:27:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1575.408689][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 1575.415924][T15864] Bluetooth: hci10: sending frame failed (-49) 18:27:43 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1576.288498][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1576.294851][T15864] Bluetooth: hci2: sending frame failed (-49) [ 1576.928553][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1576.928701][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1576.937889][T15864] Bluetooth: hci3: sending frame failed (-49) [ 1576.947418][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1577.008766][ T8483] Bluetooth: hci11: command 0x1001 tx timeout [ 1577.015218][T18171] Bluetooth: hci11: sending frame failed (-49) 18:27:44 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1577.498631][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1577.505187][T18171] Bluetooth: hci10: sending frame failed (-49) 18:27:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1578.378514][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1579.008603][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1579.008707][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1579.098696][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 1579.573037][ T8483] Bluetooth: hci10: command 0x1009 tx timeout 18:27:49 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:27:50 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2000f) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8) [ 1583.050170][T26364] Bluetooth: hci2: Frame reassembly failed (-84) [ 1583.149772][T26370] Bluetooth: hci3: Frame reassembly failed (-84) [ 1583.191040][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) 18:27:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x533) ioctl$TIOCSIG(r0, 0x40045436, 0x25) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x100, 0x4, 0xe58, 0xc6, 0x7, "384731f33cf22078da192f0fc21f58b0464219"}) 18:27:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x80000001, 0x5, 0xfffffffb, 0x6, 0x12, "0ec34e19da289f97755b5cffdb1ec349b0b92c"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:27:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1583.671234][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1583.751464][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1583.760689][T26391] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:27:51 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:52 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1585.098568][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1585.105583][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1585.168510][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1585.174923][T25004] Bluetooth: hci3: sending frame failed (-49) 18:27:52 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:27:53 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1585.728530][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 1585.734847][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1585.808549][T24697] Bluetooth: hci10: command 0x1003 tx timeout [ 1585.816437][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1587.168477][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1587.175508][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1587.248652][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1587.255432][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1587.818575][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1587.825534][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1587.888587][T25358] Bluetooth: hci10: command 0x1001 tx timeout [ 1587.895681][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1589.248582][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1589.338745][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1589.888834][T25046] Bluetooth: hci4: command 0x1009 tx timeout [ 1589.978543][T25046] Bluetooth: hci10: command 0x1009 tx timeout 18:28:00 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:00 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:00 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30) 18:28:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0a02, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) r3 = socket$inet(0x2, 0x3, 0x20000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x10001) [ 1593.907834][T26442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1593.938519][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1593.945206][T22439] Bluetooth: hci3: Frame reassembly failed (-84) 18:28:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$tipc(r0, &(0x7f0000001340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000100)="f6b74e9cd7f5c1a0dc1af10ca9c29f05a100b6c39c667ba817b14861e68d3fd03e093e06289ed3525c8985d4fbc2109470b0da70b447e5a9a94ed8ed67cb", 0x3e}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="0eb4dbf561167b97a84b3d808b80d9e6d3cf8c99d1f8e57ef810753e094386f8e03b408df05aa1139483d137a7e1f5b828b4ba79cc4c01d1d5dd96be81422f4d7e139e91b94152671bd00c2e9a0aef7256a474727a30a36555723c80299c60524b515f330819abbc53c126c6a9d200e47ce9128bdb80b2fcc9b3d1d556e35e7d095f1a49ba7b72665ee4f4b804aee774073fca93e8b2f7e045219a3f92478a70b0c47750cbc8ab1e731399d8523649c739d21e76bab1", 0xb6}], 0x3, &(0x7f0000001240)="9c70f921673a4b6fa02e6d2e2ad97fab7e2ed1572de7e8c1bf05edf0904b75b47ad233039e75e52c7b58a1392775c41d435fa5b01897ea4498d46a747dc77824f541941fc1f16644f531de90b90461fda66eac4bf59efbe0bc006fffdfca4bc59947be9f66cc5c3973f61318095d6ce1174ae71343db92b4f4432f2c1fc6d61909daa6f949f90578252cc48ebe047f2b242760132a75242052e501b2b5de31485c66b358c100c5e905faa0e5385647dac8a0db95c2468bec7222b9086b0a31c87a0e2ed16269872b9a18f128d51a", 0xce, 0x41}, 0x4044881) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = accept4$packet(r0, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002d80)=0x14, 0x80000) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000001380)=""/217) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x40, 0x1412, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) getsockname$packet(r2, &(0x7f0000002dc0), &(0x7f0000002e00)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) [ 1593.975140][T26443] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1594.091661][T14535] Bluetooth: hci4: Frame reassembly failed (-84) [ 1594.100526][T26457] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:28:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xd0a02, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) r3 = socket$inet(0x2, 0x3, 0x20000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x10001) 18:28:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:28:01 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1594.258855][T26466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1594.289175][T22439] Bluetooth: hci10: Frame reassembly failed (-84) [ 1594.297024][T26463] Bluetooth: hci10: Frame reassembly failed (-84) 18:28:02 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:02 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1595.408545][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1595.415630][T25004] Bluetooth: hci2: sending frame failed (-49) 18:28:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1595.968585][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1595.974849][T25004] Bluetooth: hci3: sending frame failed (-49) 18:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0xb, 0x2, 0x0, 0x0, @str='batadv\x00'}]}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000007440)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8051}, 0x8050) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) [ 1596.080552][T26485] smc: net device ip6gre0 applied user defined pnetid SYZ2 [ 1596.113612][ T1372] Bluetooth: hci11: Frame reassembly failed (-84) [ 1596.125856][T26485] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1596.128569][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1596.143888][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1596.368844][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1596.375232][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1597.488549][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1597.494613][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1598.048540][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 1598.055228][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1598.128658][T21258] Bluetooth: hci11: command 0x1003 tx timeout [ 1598.135201][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1598.218673][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1598.224853][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1598.448529][T21258] Bluetooth: hci10: command 0x1001 tx timeout [ 1598.454768][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1599.568722][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1600.128840][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1600.208637][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1600.215812][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1600.288554][T25046] Bluetooth: hci4: command 0x1009 tx timeout [ 1600.528750][T25358] Bluetooth: hci10: command 0x1009 tx timeout [ 1602.298529][T25358] Bluetooth: hci11: command 0x1009 tx timeout 18:28:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31) [ 1603.515376][T26495] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1603.526939][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:28:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) fadvise64(r3, 0x40, 0x7, 0x3) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x430040, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x88, 0x0, 0xa, 0xa982, 0x4, "0bcb8daef6d865c05dc0276ee28855ca862816"}) 18:28:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1604.822778][T26518] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1604.834049][T22439] Bluetooth: hci3: Frame reassembly failed (-84) 18:28:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x18) 18:28:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f864", 0x89) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1605.575415][ T8568] Bluetooth: hci2: command 0x1003 tx timeout [ 1605.581820][T24244] Bluetooth: hci2: sending frame failed (-49) 18:28:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) [ 1605.948609][T26543] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1605.971051][T22439] Bluetooth: hci4: Frame reassembly failed (-84) 18:28:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1606.613148][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.621065][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 18:28:14 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1606.852080][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1606.858290][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1607.648475][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1607.655979][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1607.968574][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1607.974760][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1608.928555][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1608.935512][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1609.728570][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1610.048755][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1610.054953][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1611.008536][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1612.128555][T25046] Bluetooth: hci4: command 0x1009 tx timeout 18:28:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32) 18:28:21 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:21 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867", 0x87) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1613.762465][T26570] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1613.771092][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:28:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x17) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:22 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d7", 0x7b) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc22", 0x63) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:22 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2ffff, 0x0) [ 1615.021601][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1615.146126][T26597] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:28:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1615.808599][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1615.817605][T25004] Bluetooth: hci2: sending frame failed (-49) 18:28:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc", 0x62) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1615.924759][ T1372] Bluetooth: hci10: Frame reassembly failed (-84) [ 1615.933757][T26599] Bluetooth: received HCILL_WAKE_UP_IND in state 2 18:28:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) sendfile(r1, r2, &(0x7f0000000580)=0xff, 0x4) ioctl$TIOCEXCL(r1, 0x540c) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x9, 0x4, 0x21, 0xffff8000, 0x13, "ef90409edbd04d9a47de798a566d4ec23902c6"}) 18:28:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2ffff, 0x0) 18:28:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc", 0x62) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1617.088624][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1617.096039][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1617.888601][ T8483] Bluetooth: hci2: command 0x1001 tx timeout [ 1617.895670][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1617.968550][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 1617.974932][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1619.168746][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 1619.175318][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1619.969223][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1620.048751][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1620.055154][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1621.248673][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1622.128706][T25046] Bluetooth: hci10: command 0x1009 tx timeout 18:28:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33) 18:28:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2ffff, 0x0) 18:28:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1623.999259][T26639] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:28:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) dup3(r1, 0xffffffffffffffff, 0x0) 18:28:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:32 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 18:28:32 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002a80)=ANY=[@ANYBLOB="0100000001000000381e0000df174132d8e5fabbc403a59ca8c7ace33b56f8575247df530f22caf669a5dbaf93fb8b5a2ab1118a08", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r3, 0x200002) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket$inet(0x2, 0x2, 0x0) r5 = accept4$inet(r1, &(0x7f0000000100), &(0x7f0000000180)=0xffffffffffffffd5, 0x81800) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0xff}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {0xff}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffe, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000680)=ANY=[@ANYBLOB="9e2067902913fbdcc5150cde4bdc73f68ae38d09863cb906df83974fda4f3a6a4cd057ba9baca36303d2a8fe3a688448f0ef0c498ec15c265967f25c53b656688c3fcacff5fffde7858b08b7f54ee5cbe811fb8921", @ANYRES16, @ANYRES64=r3, @ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="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"]) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r6, 0x560e, &(0x7f0000000000)) sendmsg$unix(r1, &(0x7f0000002a40)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000000540)="066db6fb2c4824841e1af49cbea15419badc86e4d1a821064f48a68266621ee8ce0c1647e03d1263abb244657c6b6d45b33fd6dc4688fc5a08588e813cb1ce3ab0e9653ae027966f6fe2ff2b73af1ed8217f1fe5b0bd3e84329b2b60576f6a03e8be95f67aebfe5d45b7dee4", 0x6c}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000000c0)="cf662eaf8233940d9d13d01dfadc6e37c71a656bca04a0db", 0x18}, {&(0x7f00000001c0)="3e808d8905bdd066331598608538e165dbb7a5035ec5f4ce5bbf42fe28a896aaa5219b36ead5128092520e396fa1d96623141d0f47ed93d0", 0x38}, {&(0x7f00000005c0)="faa96b9061cdd5f457302ddbb66a273b801ccd9fc16dd1825732487602eced0b5663e5897a93d4422642b62f09b29bc3d14c7de3373bddcda0c960fa57e5539e99d9c629ba9ed4a0d8090ae8889f3ba7eb7e9a714b274678d2755f846a5657e5272b184e3bd1c0405b9994d2689e2c047f0150530b2a0dd862a1ef40f5ee", 0x7e}, {&(0x7f0000001800)="077166c8452128e6346f5aad7204c9f44a34ae9051547c9dc5a132a535a2687e2275d29c847110ff1d16f74ec605fef5e9675edf20eee0b4708f5b57fd80352f33369d12f1a3ba07c7fd7bbf69c14eb7d107730100ab0d28233f4b974b6bbe830ecf6fb2822ef5eefd3d07d93bf411da3646d6cc53891fe80265be29bf6784669e10b6e0f1f795e4fe8d6ca6c765a75bc25b42ed93777e15d5ba2b45982c11348683b44afcab3c8d9e85aafabb861895e5f8e2f9e418ad56181cdaaa6632227816d9053a7a430d995d32edbd4c54eb044363d8a60c7858b1f5ee4fec8fb688dd6df6a255c8ddb4e46e1cb9774394ffc586c246f42fe8d386212592a025cd43b7ea7bb8b5e2ac7fe32ad8fcf99acb892f6652f41f47335d92c95b57b38cfa5876a0627fc08421fbd65588c6f2338ebb833104b090ae8dd7a85559de8bdc8536a04062728f3539ca1b1e81f698c3c09443d35b0ecd6e41cac6cf57137a57cb065f0773c955fdaf413dd66fbe8bfd9db25f56fbe7678a41003d0fc9c430b56ff2cb737dc757873a3938b769946dacf2fb9203b2e0d3dbcd65cdab18f2d771cb0582b90f93816d200084d3a5215e5b318c976d67e99001a2ae9a53935405bafe84413e7ba2881b7f4e982c2a9d6dfc746c911af040284f97535587f103db98cb4e956fd4c4a67b01cf89ded1a4ba13ca37a5ab0cb80f274b35e72de51ea5654fea62aa0f3dd9c9720e163d502e443be89e9034ceb2f492af4d4844242fe24d386462f68f0d92f4e80c669cb1e3f6ee33e6d61011aea607fcf47035d9f31d4918b5e79b803f8150eee8713d28c27cb7e10438f0946d9d9d0d9c6b0b5e77e45ba6219bb53a2453ef9728fe352905867e20c05093b5031ba9794d07de0914f42e651cd5d429976bd99a401d5407178a36b365db33d15de84667efaac713c092eee1222fc8a1c5d27696d52dca27d85c99bf82d6892c11942c7a4924c31f3d6cca19b49a66dc1a6bbef791acd85a6d8ffacbd9ba881447f6123b6751feea545cd581da0aa2d0d13120e47c52e2f498ca403f2610f0b2c1571dfa17a5430a163de725ffbd295f57b4bb63d9d46dd8e0da2b7ee4cf5a8d0921f176c8273218fb95775e61b46a3a082d38a049ab7b31e17c36393ca8c5ce36190b4c990255ec9d72ad771153ccb3677784bce1638def5136b148de3ba9e1746f6924750a96cfc8e749fb99efb3a9494f4a1cf1c643085811b0e4d588eeaa5a6b874c29f1598ddd9181d69760b31276873da550a290a5fb4882eae84dd984b946f8b04296773392f4106d54a53ea660922110830d2cbdac84528225f58bd66e3413405ca485dea12f27a01e894953810e436eb8209382ab3a097c790b964e43a4acbe35a0759c8a22ffed974c38506cce304c731fba9357004fd113debd83a3acff86b1286ad5cc099545c1df2083332f781e7eea4b6469726e73bc6c2512ef595769fe2c68c1de9ad9afbf234bfc1525a0400ff451d085f809e3f07ba5aa6357c58bf6d09c7e0c794784cfac7c8974b11bdad578d3faa7b13de41cbc6084c38ec2baa30f48ac94b7859cab884be7bb3de1783ab35ac51404cfe88ccebd669ddcff976535eb73eaa6491447cb18fc3c4e5494b3c6a23d84ccc567aca77161b97d843116857c83c2456038d183cd18060a35e1217fbe39b04ad514a5453aac44fea0bd7c8f6ca3a2082b741edb30af2a5dcc3c3f92ce8a652050e7f1b23f4d6e2b879075972aa876d99f26524d342eb91c3fecdc89a78d27c1d664c9cb1d9638b23620f63a337b2546e27100dc7f83551942d4b37c4f433265c9181c4b0c311760aac242420988d1338b230e2349407ead51e815d686d551d966b26a473792f2286008910ddea52c5a79e4ed924b76dc833b41ddd9c535494db96e95bf5e3de192ac32801983ea388ed73da1461cb8397ef29b8e11e72986bf356a6b05165508adb4a99f6dcb565a8b62319df608c593d57d4843e067cdef20df86bd0c9a4e15489aed9608b240b03243d7bb795bd8d83e396694a374cdb9748e3e747b6542886f2fabebb84f8620fa456e0459ef84fb8e1b9184c097c5b452ec01fc0d858a1bb2a9f52d981fac1be6f7e747a4c5b5d4abd1d733053c25f1f9c488732bd2ee74b2cd818353bd3a81372e2b0a07717e285ac3ba2e22f8dfff77c808678bb3edb7695a9f79385bf0735906e8a2659f8d405bce62e3d5c5b4c2dbb0042fa5718de52b6c86898b7311f850c6fdfea397a4612374d4274ca136a57c2b8cc2ab16ef23db09ed6948ae913edf927b4eb643926d59b02b1ccb7eed5ca60294aac7590b1290e7f0c8f7d2c6c3606ff48db7022c7aa8edc49ef03d514e646e52ac42a06b1d58617319df5f744737a5ae3339960f00302270666a0359f2ee1660931cfe1e679bf9dd75dc4f09843e1039c7c063218069e8695e467d648bf0e2d13cc1bf8c60fb2680c66f34826bfe6734cc1509c2d86f475dbbd0d6a478e14da38fb9067f3259dce75daf89ff6b5132960b4144d9f9aa93ef01418d6d84564cd47044b3b67dc91840499ac69ae72bebe7e3973add4a83a5993147c2c010c340f79ae1b30db9c7ec44fa0d7e3b8e6101025264d32ba92418491031189ad3cfb48fc81c39d05797446a0e5ac7c67c88ee2c68422e6c0966afbd6ab88be1f708f7aec65ae85bf3171cf26d26534f20e8ca10b8f307d7b96379fdc74ecc239f2912da3cc549f554dbb07fd27c966aacc7485ce5f8b87cef59993f4cde15a8c100a53b6e927777a1ad63a289ea543be8c92bb8a7afd4389c593788ee5d05d6c9baa97c3ede156bce351287d62a9cd8efed217fc745875362de446a602d3c23a24a85244067641f0a725ddd666e1187d6bcb8091dea92dfbe6cbf718bd27d4273f990a6127183cc4928557fa751c8ae67cac5502d60c8af44985b9c01e15f7aedd42ce8f469215690f479d33251f3dea607ab889c609687b98a9f1f4a36336f3552e9742d255248dd77a69b9dcd6b99d201fabe973a9a622b1b51728d0639c73d459056b71b2fe6d5630529f6c5a9ff3afdf0991465e828b7c27affc832da152ad1edf9b52a80ec0326e902883a60c4746627107dd46aaa19c8afd8cb73b33ce7d8540b08fbe8db58f9460387fb705487537bf3f1b225e5d152d87f6d07d7b1e2ea5ed67f00bbe6c9844aff7fc124c93639af3733410a8f14bcf9b078147beb3c5e40cec168b1a4abc3525e4ac0a1835a48f9b85ed67665502de2c44769c80375ec1d4c251c08fa7bb74a354ddbdb028184325866759204353191b4c625b5539f499b0112ecec29ab6b18210c3563cb795408f8fefe2cfac5d75135a408f56cc0f4ab3a42a3e0c9e09672fcced3369ec167e9f5b571fe4bf27166a7dc2a3af0ef1ed56b034af0172b435c9b0d53a121f2292d73eef2f97a6a7bfc3670b986bac27bf58b7bc773a1efa306740d476e69772bd3405d89552a101b6ffa33a0d5339428f5f02cb6a4c1415d33bd32933930c4d504bd4d3667f14108b6b0bb13dc675c7f02424ed90d18fced4545a5c156f899acfa16c987d875494281124e4be4c3f34913ebfd7c365f6ac53ccb2d0f7e28b284ba26c77ae5a0fd45039e3d5f6862840083684bd64e1812b3d06bae9ca4b0cda1a5c4fcf954a553b23f389253b2a5bc2a0071367ce0613948b868de63fda541c1c96346993f4f07efd5794f49590616fe794860621d366c22b5b8a3b590cb2879fec924d5839e35a007fdcf4b16aa97520efb67393e477348f10ef9a4d9a1bab56e02cbccfa35af87e05d7c6dce8ef51e1121dd10488a6fe34f2f8764982dc16d0492eb114f2d2c8fc351ab41b7a3bc609f0165b0d133a1b6b60cc79f39a7358ee78d2ac719cfdc93d0c1c46c5a7676542cbcd97d1d3d554731ad76651217644c1916a83601c5da76ed0e7880d680c987a6b0404a73db9b3345094daf1058291a5990c067274f281a9d083ee14b66000790c321af563d9944498a9aadb3f0b6fff4751a70bb1f6bea323e73864e869a2c7725c5b7e01d299eb2bef9b61de8de6b6233b2410bf51d32f8307d5a4e3903818f8accf73deb135a4e1f39f1ccb44f0fb7d81fd6c76d644fe6fd216cb906b845c523e52dcffe557fd555d9ab4e982ecaab7471f93d737805fcb834aff778eb55b680efb8f5a5a1c8a8ec93e03847e3fd170f1f090a0d62c118f3387dd058216da84635ccda30c49e8c9125e1df790ba556557364fcc3a5085e9337028f29c60afaead81adf4513382edd14658d4d9fa3c81aaed2f887b9527ea266fc1fd5925ad894de1cd8f168e1ebfb55e6e94eab9dc70439957484f70b2d78a922e3a4811f0b8647652869ad5bd7d09b7711103b04c4def989a0984650f5059e77140f70b842424f2888b80db030d8ffc97ee833954241ac9d2d2a60aab00009de7a1032f1575fb0e8a176ba59fd263ffc8201bebea75605b1983b3116f88b7fa25451b4d37802af6defd92034bb959ac61c87a75d0ac21d3ad222b094b867a98b500ac22e3be2f0525a76bb316eda1c31543839b4b9fd1a2f07fd957741f835ede74e465d4677723d3f77301779bca9c848f9d22037cc1bb96a10d0cb9c5bdd3c8c77cb19a1bd8fb1ab700b9617583710a449de340dc5b7d2508fccf396aa4ae3f4836bb1c5a52af65d676b08810606fe29e14397ecc3a52d4905802b32963c0d8aa5ae4b9e2cb50ac9163aad18f517e3ca183369ac354e613405fc7d1d9c3cf5ee876567c19d5b17c6f6df77fd6b6ab18e795c89cfea7950ed622ffbbea858d649486fda46828b1f79c95da5b4fdaf1a37a42b8b8217c6d737c99157613b078b6282084f81c9055bef327f7aa1933832930b51a94892736b8d5ac453722e1be84db7b31f82cf7afe58fbc16252b21ec6742f762461ed23fc4778a8b462ec346b6b58bac93f85f5581b1b57e3977ae902a1365efd35664e39aaa3c617159b2862ce003f98431dfaeab7bf90a52176062bd4ba42768d13b7cc252475074f4b072f888f9f95b5fd7eac78f15775e02a8b832ad88183c1e5af3404bf2883fcb983d7574b4eebdd2290805d0da30cbd58781c86954b05a01291b1ce6e1f99404ff7a70d90232d5484502da6483e2a5a3102ca428e2b2d826f70539e7f485d1a6368898621d3341dae06524256441af6148f4224f5e637df8018ffa370d48b1e5e1f92beb9c33612ca7cef40e5256827fdb3199b9e87cc2d7b52a6f33582757f3f0a4d4203c393ec97bbfb239b0bf42b72f89ad1814df5612f6da728b9a671635c9199d7a620cd8411d6c47302d2a6dba2e8b66c2a16621f44368d934c31506e161d3e535609d600e5d43e13cbd882acaf6144e9765e495a6157cc0d6853480dcb01573697e87d587e651143e155e4e26b7d5b68c2445892cf2c86aa0d68996d161772d17135c7fb3322efab35d7a240a582cbd0296b85b8f9dbfa912ed940689b94049451aeecc330c33c21da0436f178609bf0ecc530f30b57a0bd733cd5d5a514f64eae40f0d3ac66cdbb0a88c9642062916acab8c0f8c3dc5057c38176b1332219e7d3408464948be116de1eed803641eaabf122706c602bb1f53d62420564f2a2a10006486a8892189cd3ad7fe0eaf199c69e8c937e66e8a85e5296c99d844842e2405c9378ec4ee770865e5a6e1376c93d0232a3e54ae90e8d045934e2e32d4a397579982b25a026bf13c7d2e3a748b049a400526873506298d81e4ab1c898affc9d96e119d45fb0c8cecaa6fb2c917586acbc4a6b7c7bad", 0x1000}, {&(0x7f0000002800)="b8d016d6e9b3228b83de882848a101f0ff135718b9a92f6f6b2e4a6ccd93724cec3d680850cc0fc1afa3b2e492b921d3fbb66fc768bed6c83cff7afce96197e25382f8a8e92b90817b2e71b7cf9115e81cff61283fcecf3201d582e16b8de38e8483e7f8baddb9b596e288433a5efbcf3fcf294fa8ae32d8e197f545594f35775f3c78dd4f7bce1f76f5bc8ed2fa3467bd73072f35", 0x95}, {&(0x7f0000000640)="88b8dadc3198e531c7e3487477ba9ad2aa4285b82afea26d8dde2cc66c37c8773b1390ecf25845117db88ea53582", 0x2e}, {&(0x7f00000028c0)="6e623a29f3b36d813196fcc9e8c042a6137ecc945b42884712eef48ab30d37ece9236f73fda3cc4abca96269304992f710877b87696f402e038cc5691ca77a405c4141ee", 0x44}], 0x9, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4000}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KDADDIO(r0, 0x400455c8, 0x8007) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0x9) [ 1625.261141][T26655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1625.275834][T26655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1625.357728][T26661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1626.063029][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1626.070340][T15237] Bluetooth: hci2: sending frame failed (-49) [ 1626.137557][T26662] xt_CT: You must specify a L4 protocol and not use inversions on it 18:28:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:28:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x17) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r2, 0x400455c8, 0xfffffffffffffffb) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) 18:28:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) 18:28:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/udplite\x00') ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:33 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) [ 1626.572562][T26681] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1626.586792][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1628.130110][ T8483] Bluetooth: hci2: command 0x1001 tx timeout [ 1628.136722][T15237] Bluetooth: hci2: sending frame failed (-49) [ 1628.608764][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1628.615565][T15237] Bluetooth: hci3: sending frame failed (-49) [ 1630.208778][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1630.698957][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1630.705089][T15237] Bluetooth: hci3: sending frame failed (-49) [ 1632.779040][ T8568] Bluetooth: hci3: command 0x1009 tx timeout 18:28:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x48) 18:28:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff9275}}, './file0\x00'}) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0xfff8, 0xfa6, 0x1f}) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000080)=0x1000132) 18:28:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffff7fff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x854f) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b", 0x8a) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getpeername$inet(r1, 0x0, &(0x7f0000000140)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) [ 1634.293759][T14535] Bluetooth: hci2: Frame reassembly failed (-84) [ 1634.307518][T26708] Bluetooth: hci2: Frame reassembly failed (-84) [ 1634.388078][T14535] Bluetooth: hci4: Frame reassembly failed (-84) 18:28:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffb, 0x82, 0x0, 0x8001, 0x10, "7c64b0184571f572a0258ebf6e53146eb4d699"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x8000012) 18:28:42 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1636.368549][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1636.375593][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1636.458877][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1636.465155][ T6588] Bluetooth: hci4: sending frame failed (-49) 18:28:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x133) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000000000ff002e2f66696c653000175768eae472ebb04e3bb83228ae29dd7fad82286c203b5b3e211ed024feb049700e7e96e846dabfb06d12bdc6a41c3c65781f2f2837"]) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x44400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x980000, 0xfff, 0x2b93, r2, 0x0, &(0x7f0000000140)={0x990001, 0x2, '\x00', @ptr=0x7}}) 18:28:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:28:44 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1636.802364][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1636.804184][T26746] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1636.821274][T26744] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1636.869774][T22439] Bluetooth: hci11: Frame reassembly failed (-84) [ 1637.408618][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1637.414969][T18171] Bluetooth: hci10: sending frame failed (-49) 18:28:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:45 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1638.468465][T25358] Bluetooth: hci2: command 0x1001 tx timeout [ 1638.475301][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1638.528983][T25358] Bluetooth: hci4: command 0x1001 tx timeout [ 1638.535616][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1638.848620][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1638.855881][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1638.858530][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1638.869095][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1639.488568][T21258] Bluetooth: hci10: command 0x1001 tx timeout [ 1639.495926][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1640.528710][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1640.608701][T21258] Bluetooth: hci4: command 0x1009 tx timeout [ 1640.928693][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 1640.934983][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1640.941289][T21258] Bluetooth: hci11: command 0x1001 tx timeout [ 1640.947419][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1641.568665][ T8568] Bluetooth: hci10: command 0x1009 tx timeout [ 1643.008596][ T8568] Bluetooth: hci11: command 0x1009 tx timeout [ 1643.015052][ T8568] Bluetooth: hci3: command 0x1009 tx timeout 18:28:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4c) 18:28:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1644.474840][T26768] Bluetooth: hci2: Frame reassembly failed (-84) [ 1644.491578][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) 18:28:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x7d5700, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:28:52 executing program 5: ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) syz_open_pts(r0, 0x80000) [ 1645.124967][ T1372] Bluetooth: hci4: Frame reassembly failed (-84) 18:28:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff9275}}, './file0\x00'}) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000140)={0xfff8, 0xfa6, 0x1f}) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000080)=0x1000132) [ 1645.380359][ T6792] Bluetooth: hci12: Frame reassembly failed (-84) 18:28:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x244181, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1645.725108][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 1645.738828][T26799] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1646.528713][ T8568] Bluetooth: hci2: command 0x1003 tx timeout [ 1646.535447][T15864] Bluetooth: hci2: sending frame failed (-49) 18:28:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:28:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:28:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:28:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:28:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1647.169321][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1647.175731][T25004] Bluetooth: hci4: sending frame failed (-49) 18:28:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1647.408697][T21258] Bluetooth: hci12: command 0x1003 tx timeout [ 1647.418228][T25004] Bluetooth: hci12: sending frame failed (-49) [ 1647.728685][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1647.735351][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1648.608835][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1648.615359][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1649.248624][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1649.256125][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1649.488769][ T8568] Bluetooth: hci12: command 0x1001 tx timeout [ 1649.495964][T25004] Bluetooth: hci12: sending frame failed (-49) [ 1649.818768][T21258] Bluetooth: hci10: command 0x1001 tx timeout [ 1649.824973][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1650.688736][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1651.328723][T25358] Bluetooth: hci4: command 0x1009 tx timeout [ 1651.568699][T18630] Bluetooth: hci12: command 0x1009 tx timeout [ 1651.888700][T18630] Bluetooth: hci10: command 0x1009 tx timeout 18:29:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x60) 18:29:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1654.758264][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1654.775944][T26836] Bluetooth: hci2: Frame reassembly failed (-84) 18:29:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x60, 0xfffffffffffffff8, 0x18000000000}) dup(r1) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xd) [ 1655.315725][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1655.347558][T26845] Bluetooth: hci3: Frame reassembly failed (-84) 18:29:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:29:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x10a) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x10001, 0xc69b, 0x100, 0x8195, 0x2, "c46257cb7e52f8356b99caf1b7e5b74408140c"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x4, 0x7f, 0x3, 0x5, 0x13, "c71db6b1ec3a81bdc7be5c7523a8581bf06712"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x81, 0x2, 0x9, 0x3, 0x0, 0x100000000, 0xc0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x9}, 0x800, 0x1000, 0x7, 0x4, 0x3, 0x9, 0x1000, 0x0, 0xff, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) 18:29:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:29:03 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000340)}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:29:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) [ 1656.039280][T26864] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1656.084096][T22439] Bluetooth: hci4: Frame reassembly failed (-84) 18:29:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:29:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1656.768652][T21258] Bluetooth: hci2: command 0x1003 tx timeout [ 1656.776600][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1657.328616][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1657.335550][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1658.058695][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1658.064854][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1658.848761][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1658.855074][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1659.408693][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1659.414786][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1660.128618][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1660.136493][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1660.938617][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1661.488581][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1662.208623][T21258] Bluetooth: hci4: command 0x1009 tx timeout 18:29:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x68) 18:29:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 1664.980355][T26890] Bluetooth: hci2: Frame reassembly failed (-84) [ 1665.006466][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:29:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:29:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$VT_RELDISP(r1, 0x5605) 18:29:13 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x560e, &(0x7f0000000000)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x402, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x10000, 0x1360, 0x51, 0x9, 0x95, "9c34a64ef2a197da75b96159364882be777144", 0x1, 0x119}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) ioctl$FIONREAD(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000540)="4566036a5f0b2a343d4c7c7eb01f813bae64ed349fec0774ceb8ed72ddf7fad467d32665a7ea2e3924a09a76cdcae96b9da71406532c753ef9e4a95851ac74ad6853236454340b389e4f9312f637927b7c1a5cfa293565daa7684d32c312ca2e800614af434ee7d1f768ab8e7e9ae6375671bbf785f5f2defd2707cb3adc4e3e91953c87") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x10, 0x1, 0x9, 0x1, 0x0, 0x5, 0x40280, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xaec4, 0x2}, 0x4201a, 0x5, 0x4, 0x0, 0x80, 0x9, 0x6, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) kcmp(0x0, r2, 0x0, r3, r1) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r5 = fcntl$dupfd(r1, 0x406, r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x6, 0x81, 0x3, 0x0, 0x1, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xfff, 0x7}, 0x0, 0x9, 0xfffffffe, 0x1, 0x80000000, 0x3ff, 0x1, 0x0, 0x1800, 0x0, 0xffffffff}, r4, 0xd, r5, 0x1) 18:29:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x60, 0xfffffffffffffff8, 0x18000000000}) dup(r1) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xd) [ 1666.217608][T26913] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1666.243953][ T1372] Bluetooth: hci4: Frame reassembly failed (-84) [ 1666.249923][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1666.256987][T26914] Bluetooth: hci4: Frame reassembly failed (-84) 18:29:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1666.282028][T26923] xt_CT: You must specify a L4 protocol and not use inversions on it 18:29:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1666.466468][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 1666.478667][T26929] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1667.008700][T18630] Bluetooth: hci2: command 0x1003 tx timeout [ 1667.023900][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1667.034343][T26933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1668.049825][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.056402][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.288563][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1668.295931][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1668.298558][T18630] Bluetooth: hci4: command 0x1003 tx timeout [ 1668.309452][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1668.528669][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1668.535211][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1669.088729][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1669.094971][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1670.368686][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1670.374812][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1670.375919][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1670.393724][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1670.618775][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1670.625715][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1671.178592][T18630] Bluetooth: hci2: command 0x1009 tx timeout [ 1672.458668][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1672.464955][ T8483] Bluetooth: hci4: command 0x1009 tx timeout [ 1672.698770][ T8483] Bluetooth: hci10: command 0x1009 tx timeout 18:29:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6c) 18:29:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:22 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff80, 0x20000400}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="bba81a4f2845250e1a6add652ae818ccaec04e7211e742e69600d5aeaca4961fdcc6ee1e10f275786e7d6fc57ba1c62e5468eb5fb78b361594335c1b0f7ffd92a1b7b8e5baf7a8789f", 0x49) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) socket(0x9, 0x800, 0x7a7) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) 18:29:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1675.271665][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1675.284681][T26945] Bluetooth: hci2: Frame reassembly failed (-84) [ 1675.330588][T26946] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1675.384276][T14535] Bluetooth: hci11: Frame reassembly failed (-84) 18:29:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write$binfmt_misc(r2, &(0x7f0000000100)={'syz0', "1f2906b9805b985ad153ccf2054abb30370084e9d6f167e66e7f62e2499e0c3acae9fc14d8ad65fc688b9a88f5c46462a7b88d29aa69c0686b91bb2f8c45b2ffc739b118d32873b84e38822e3bef89d8a99e8c03fcfb2817a85b4a0023fc98e0e1f9adab7b629625ffb00e74ea969b50c6aaefd8cfdaf4f2fa47e10c0abe287b3f027c72c05423b05c87d67f9021636fde24584cc18a1868d2975a422e6f80b8357695ea9277b753f07d3b815fc20699fecd99377b9fa24eecbd0d4460c5d3f7db70d99cd074b9da6f7733d734ac25c2e37214914ef2b698ffacf64ea8d60f8b7fdd42eb06581a199723605bb5ac"}, 0xf2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0x133) 18:29:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1676.571813][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1676.578398][T22439] Bluetooth: hci4: Frame reassembly failed (-84) [ 1676.640203][T26976] xt_CT: You must specify a L4 protocol and not use inversions on it 18:29:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1676.697333][T26976] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:29:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1677.329565][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1677.336957][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1677.408724][T18633] Bluetooth: hci11: command 0x1003 tx timeout [ 1677.415230][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1678.608713][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1678.614800][T21258] Bluetooth: hci3: command 0x1003 tx timeout [ 1678.614923][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1678.622878][T15237] Bluetooth: hci3: sending frame failed (-49) [ 1679.408733][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1679.414907][T15237] Bluetooth: hci2: sending frame failed (-49) [ 1679.498861][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1679.505320][T15237] Bluetooth: hci11: sending frame failed (-49) [ 1680.688677][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 1680.695147][T15237] Bluetooth: hci3: sending frame failed (-49) [ 1680.701447][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1680.707667][T15237] Bluetooth: hci4: sending frame failed (-49) [ 1681.488918][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1681.568658][T21258] Bluetooth: hci11: command 0x1009 tx timeout [ 1682.778673][ T8483] Bluetooth: hci4: command 0x1009 tx timeout [ 1682.785128][ T8483] Bluetooth: hci3: command 0x1009 tx timeout 18:29:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x74) 18:29:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1685.451354][ T1372] Bluetooth: hci2: Frame reassembly failed (-84) [ 1685.468073][T26993] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1685.489374][T26998] Bluetooth: hci10: Frame reassembly failed (-84) [ 1685.506681][ T10] Bluetooth: hci10: Frame reassembly failed (-84) 18:29:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2013) 18:29:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1686.040986][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 1686.054840][T27006] Bluetooth: hci11: Frame reassembly failed (-84) [ 1686.090466][T27011] Bluetooth: hci12: Frame reassembly failed (-84) [ 1686.104865][T15864] Bluetooth: hci12: sending frame failed (-49) 18:29:34 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 18:29:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) [ 1686.937600][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1686.945641][T27030] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1687.498600][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1687.505353][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1687.578665][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1687.585198][ T6588] Bluetooth: hci10: sending frame failed (-49) 18:29:35 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) [ 1688.048750][ T8483] Bluetooth: hci11: command 0x1003 tx timeout [ 1688.056740][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 1688.129176][T25046] Bluetooth: hci12: command 0x1003 tx timeout [ 1688.135558][ T6588] Bluetooth: hci12: sending frame failed (-49) 18:29:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000000)) [ 1688.599667][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1689.018862][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1689.025268][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1689.569937][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1689.576059][T27015] Bluetooth: hci2: sending frame failed (-49) [ 1689.648775][T18630] Bluetooth: hci10: command 0x1001 tx timeout [ 1689.656094][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1690.138788][T18630] Bluetooth: hci11: command 0x1001 tx timeout [ 1690.145095][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1690.208640][T18630] Bluetooth: hci12: command 0x1001 tx timeout [ 1690.215036][T27015] Bluetooth: hci12: sending frame failed (-49) [ 1690.608740][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1690.615623][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1691.088952][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1691.096487][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1691.648771][T24697] Bluetooth: hci2: command 0x1009 tx timeout [ 1691.728899][T24697] Bluetooth: hci10: command 0x1009 tx timeout [ 1692.218716][T24697] Bluetooth: hci11: command 0x1009 tx timeout [ 1692.288688][T24697] Bluetooth: hci12: command 0x1009 tx timeout [ 1692.688669][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1692.696247][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1693.178781][T24697] Bluetooth: hci3: command 0x1009 tx timeout [ 1694.768570][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:29:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7a) 18:29:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1695.722635][T27062] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1695.730749][T27061] Bluetooth: hci10: Frame reassembly failed (-84) [ 1695.743115][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1695.753094][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1695.772862][T14535] Bluetooth: hci10: Frame reassembly failed (-84) 18:29:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup2(r0, r0) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x7f, 0x1, 0x2f, 0x2, 0x12, "dc20f837631667fe3f1cf5c1bae023d377c5b1"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000) syz_open_pts(r2, 0x2c181) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x5, 0x10000) r5 = dup2(r2, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x4, 0xff, 0x4}) dup3(r3, r4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000001c0)) [ 1696.322820][T27076] Bluetooth: hci11: Frame reassembly failed (-84) [ 1696.333309][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 1696.355055][T27081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1696.381580][T27081] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:29:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x6) [ 1697.576866][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1697.586587][T27089] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1697.738562][T18630] Bluetooth: hci2: command 0x1003 tx timeout [ 1697.745368][T27015] Bluetooth: hci2: sending frame failed (-49) [ 1697.808618][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1697.818841][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1698.378943][T18630] Bluetooth: hci11: command 0x1003 tx timeout [ 1698.386811][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1698.448615][ T8568] Bluetooth: hci12: command 0x1003 tx timeout [ 1698.455472][T27015] Bluetooth: hci12: sending frame failed (-49) 18:29:46 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(0xffffffffffffffff, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) 18:29:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x8914, &(0x7f0000000000)) [ 1699.648852][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1699.655152][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1699.723384][ T6792] Bluetooth: hci4: Frame reassembly failed (-84) [ 1699.808716][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1699.814821][T27015] Bluetooth: hci2: sending frame failed (-49) [ 1699.898619][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1699.905004][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1700.448636][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1700.455350][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1700.528641][T25046] Bluetooth: hci12: command 0x1001 tx timeout [ 1700.535021][T27015] Bluetooth: hci12: sending frame failed (-49) [ 1701.728600][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1701.728644][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1701.736434][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1701.746831][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1701.888724][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1701.968646][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 1702.528666][ T8568] Bluetooth: hci11: command 0x1009 tx timeout [ 1702.608679][ T8568] Bluetooth: hci12: command 0x1009 tx timeout [ 1703.818781][T18630] Bluetooth: hci4: command 0x1001 tx timeout [ 1703.825345][T18630] Bluetooth: hci3: command 0x1009 tx timeout [ 1703.825983][T27015] Bluetooth: hci4: sending frame failed (-49) 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xf0) [ 1705.888848][T25046] Bluetooth: hci4: command 0x1009 tx timeout 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1705.961409][T27121] Bluetooth: hci2: Frame reassembly failed (-84) [ 1706.000930][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:29:53 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="acb79ac6326c6366c66ec404ddfd41d090ada12a8eea2cb1b5ede5aaf836c76c81d0404314e94c23ffb9f25934b5590cbea35d798010442fdfac67e93fb53b5a01f72fd284d8e3f6e05da394a9204b70f7b20d4f69c31b7d3559792e4dbd349ccfd22a9a9f14f4d5699624c2ab183d8d017a2f4fc8dc4f5d8d53629c662476f28f8c06ca4745ea2534b8eba0749498d46512f99e9422ef3b51828674a12690e51373d13a358e3619527c350b2279f99a5804c760337f0aa05c845cefe0cd4b4d3833d799c64c6c9238c0b924154ea9a114819529bcfc184bdbd2ef9cfbe7843663731cef1bbd87ca", 0xe8}, {&(0x7f0000000440)="40e9bab08df9169c27a37dcfdc95dbe214d190177603c3dea2c2c6364a887611186a8ab470b28d66f38183a955848ce89372b0ef78189563a41aaa0f26580ea4f88e1932c336dde18d019ff1e4af60c081c05134d8f09c21357388b876edbecd88435f8158853527413437b492b46d3fb848c5601f6c9723770447003eb185a57c790299b20dca4938b99d7a92eecda76daa22374151c8bdc5ca86ef246785a9ad115ae216e661ce630d57eaab4e3eb82eab884c94aa8d0734e915fc4586f95d6cd81a9968633a27ef26970665398c935102068c9903ebd4e5236a408228b410b184b86b40", 0xe5}, {&(0x7f0000000540)="c6a3ec9b6615169a1949e5a6ee5376da0b1ef60b8ae65f734aa4c71a781d4378eb52b800df1ac8eb5ff2a0512205d3c9d7a9f7bd7e8670ab574f61421c624dc9fd7e3f47dec2e19c8fa98e71a695efd7e90889edbb60acc9dd9ebcacbf0abd9f94dd7ee6049a82b407705eea5434cf281e7c13e8bfc612a63367fcacf3f9dfb8ff152777315d6d", 0x87}, {&(0x7f0000000000)="101ffc59ad979d7a0078711db68a96f0cd0dc2b26130f9b62b962f9db3406f1a824e0d5d2105c17a4be127dc2303", 0x2e}], 0x4) exit_group(0x0) madvise(&(0x7f0000640000/0x3000)=nil, 0x3000, 0x12) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000030007b010000000000000000007a19ba011f00000064000100600001008f11db4494d2004b38000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="78000000300000000000000064000100600001000800010062706600380002800600030002000000180002000000000000ffffffffffffffff0000000000000014000400600000000000000006"], 0x78}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000030007b010000000000000000000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000030007b010000000000000000000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX=r1, @ANYRES16, @ANYRESDEC=r3, @ANYRESOCT=r4, @ANYRESOCT=r4], 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x20010880) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000180), 0xfd40, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) [ 1706.544539][T27142] Bluetooth: hci10: Frame reassembly failed (-84) [ 1706.567800][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 1706.585083][T27144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.597706][T27144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.620563][T27144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.631667][T27144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.672552][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.681956][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.694819][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1706.704921][T27148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 18:29:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:29:55 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) [ 1707.813903][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1707.847757][T27157] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1708.048820][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1708.060903][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1708.608602][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 1708.615429][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1709.888612][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1709.895308][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1710.128947][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1710.135242][T25004] Bluetooth: hci2: sending frame failed (-49) 18:29:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="acb79ac6326c6366c66ec404ddfd41d090ada12a8eea2cb1b5ede5aaf836c76c81d0404314e94c23ffb9f25934b5590cbea35d798010442fdfac67e93fb53b5a01f72fd284d8e3f6e05da394a9204b70f7b20d4f69c31b7d3559792e4dbd349ccfd22a9a9f14f4d5699624c2ab183d8d017a2f4fc8dc4f5d8d53629c662476f28f8c06ca4745ea2534b8eba0749498d46512f99e9422ef3b51828674a12690e51373d13a358e3619527c350b2279f99a5804c760337f0aa05c845cefe0cd4b4d3833d799c64c6c9238c0b924154ea9a114819529bcfc184bdbd2ef9cfbe7843663731cef1bbd87ca", 0xe8}, {&(0x7f0000000440)="40e9bab08df9169c27a37dcfdc95dbe214d190177603c3dea2c2c6364a887611186a8ab470b28d66f38183a955848ce89372b0ef78189563a41aaa0f26580ea4f88e1932c336dde18d019ff1e4af60c081c05134d8f09c21357388b876edbecd88435f8158853527413437b492b46d3fb848c5601f6c9723770447003eb185a57c790299b20dca4938b99d7a92eecda76daa22374151c8bdc5ca86ef246785a9ad115ae216e661ce630d57eaab4e3eb82eab884c94aa8d0734e915fc4586f95d6cd81a9968633a27ef26970665398c935102068c9903ebd4e5236a408228b410b184b86b40", 0xe5}, {&(0x7f0000000540)="c6a3ec9b6615169a1949e5a6ee5376da0b1ef60b8ae65f734aa4c71a781d4378eb52b800df1ac8eb5ff2a0512205d3c9d7a9f7bd7e8670ab574f61421c624dc9fd7e3f47dec2e19c8fa98e71a695efd7e90889edbb60acc9dd9ebcacbf0abd9f94dd7ee6049a82b407705eea5434cf281e7c13e8bfc612a63367fcacf3f9dfb8ff152777315d6d", 0x87}, {&(0x7f0000000000)="101ffc59ad979d7a0078711db68a96f0cd0dc2b26130f9b62b962f9db3406f1a824e0d5d2105c17a4be127dc2303", 0x2e}], 0x4) exit_group(0x0) madvise(&(0x7f0000640000/0x3000)=nil, 0x3000, 0x12) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="7800000030007b010000000000000000007a19ba011f00000064000100600001008f11db4494d2004b38000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="78000000300000000000000064000100600001000800010062706600380002800600030002000000180002000000000000ffffffffffffffff0000000000000014000400600000000000000006"], 0x78}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000030007b010000000000000000000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7800000030007b010000000000000000000000006400010060000100080001006270660038000280060003000200000018000200000000000000000000000000000000000000000014000400600000000000000006"], 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16, @ANYRESHEX=r1, @ANYRES16, @ANYRESDEC=r3, @ANYRESOCT=r4, @ANYRESOCT=r4], 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x20010880) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000180), 0xfd40, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) 18:29:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000140)={0x0, 0x4, 0x1, 0xffff, 0xbc, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/block/ram6', 0x4082, 0x49) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x6) [ 1710.380875][T27167] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.391284][T27168] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1710.413962][T27167] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.688721][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 1710.695589][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1711.978626][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1711.985553][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1712.208825][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1712.448614][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 1712.454991][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1712.768605][T24697] Bluetooth: hci10: command 0x1009 tx timeout [ 1714.048649][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1714.538645][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1714.544860][T25004] Bluetooth: hci4: sending frame failed (-49) 18:30:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x300) 18:30:03 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:30:03 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) 18:30:03 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) [ 1716.232005][T27188] Bluetooth: hci2: Frame reassembly failed (-84) [ 1716.248742][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1716.608574][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:30:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:30:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1716.855824][T25004] Bluetooth: hci10: sending frame failed (-49) 18:30:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) write(r3, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2ffff, 0x0) [ 1718.298767][T18630] Bluetooth: hci2: command 0x1003 tx timeout [ 1718.305054][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1718.928676][T18630] Bluetooth: hci10: command 0x1003 tx timeout [ 1718.935920][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1720.368683][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 1720.375962][T24244] Bluetooth: hci2: sending frame failed (-49) 18:30:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x6b4201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1721.008903][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 1721.015292][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 1722.448675][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1723.098716][T18630] Bluetooth: hci10: command 0x1009 tx timeout 18:30:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x500) 18:30:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xc) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r0}, 0x6, &(0x7f0000000140)=[0xffff, 0x800, 0x0, 0xfffffffffffffff9, 0x9, 0x1], 0x1, 0x0, [0x1, 0x8, 0x9, 0x20]}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x9, 0x101) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x3, 0x1, 0x80000000, 0x186, 0x992e}) 18:30:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:13 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0xffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 18:30:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0xe, 0x1e, 0x7b, &(0x7f0000000100)="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"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1726.432233][T27243] Bluetooth: hci2: Frame reassembly failed (-84) [ 1726.463350][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1726.476762][T27249] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1726.505138][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1726.511836][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1726.523347][T27250] Bluetooth: hci4: Frame reassembly failed (-84) 18:30:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1727.061953][T25004] Bluetooth: hci10: sending frame failed (-49) 18:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1728.460491][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1728.467400][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1728.528668][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1728.528715][T24697] Bluetooth: hci3: command 0x1003 tx timeout [ 1728.535038][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1728.542344][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1729.088609][T18633] Bluetooth: hci10: command 0x1003 tx timeout [ 1729.096002][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1729.499929][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.506238][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.528930][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1730.535519][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1730.608763][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1730.608800][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 1730.615030][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1730.626771][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1731.168851][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 1731.176119][T25004] Bluetooth: hci10: sending frame failed (-49) [ 1732.608864][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1732.688719][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1732.688912][ T8483] Bluetooth: hci4: command 0x1009 tx timeout [ 1733.248699][T24697] Bluetooth: hci10: command 0x1009 tx timeout 18:30:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x600) 18:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:24 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0xffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 18:30:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0xae) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000140)) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xe37, 0x6, 0x9, 0x400, 0x6, "a8de801e2e9d7e9bdc64f20059266fad9f1f61"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xaa280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x1, 0xfffff36f, 0x5, 0xd6e8, 0xe, "9c6387c064b62ae684fa26bc4fce0ad9198163"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1736.726846][T27299] Bluetooth: hci2: Frame reassembly failed (-84) [ 1736.744902][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1736.783832][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1736.810401][T27305] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:30:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1737.478096][T27329] Bluetooth: hci10: Frame reassembly failed (-84) [ 1737.494205][ T10] Bluetooth: hci10: Frame reassembly failed (-84) 18:30:25 executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0x31, 0x4a, {0x4a, 0x3, "5894d6e6d417bdea42d9c7db64daf8fcd2f9778e6672c4a80dd7fc55da5594c81700a00a768672b4b6e61cdc65fcfb541e1fdc0d295e0ba8e68ac38527da8f4bb4f37528e1d53034"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "da65032d"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x40, 0x1, {0x22, 0x50}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x1, 0xbc, "08bb9c4d562bdb88026ab2b8ca58454332c478d234b37b26603d2a712fdeb8bd0453e482a73704c93163a81a34b6d65285d6c74cdba86925b8c48832541f219cf999c1b37b9cd7c9057a1a97eb7150f9aa4b55a19e108938b3a4ca52e511a13407290472b90c5ca49cc1914575cb00633674ce8ab5ae71cfa7b8d0eb6339da6a900445b5b223dc70d675484acd9a098d93b8e26503e9a8c03a26179c5489c552c63d6db3b64e813382b54ad61ec49cbe25d38cda5f3948d782ac6067"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000003c0)={0x20, 0x1, 0x57, "4b117a21ef379c626feb34cc81666378170a6c987e1be808c9f280c59ab71a8272249be0a55648e360bf55f444a3c38beabb783d57bb6697a30b1e2eeb39b9acca506d9a1718b74f0eb30cbcaf2302e164ed1afce7198d"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x6a}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1737.745258][T27335] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1737.786154][T14535] Bluetooth: hci11: Frame reassembly failed (-84) 18:30:25 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0xffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 1738.778721][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1738.785011][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1738.848834][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1738.856316][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1739.408882][T27295] Bluetooth: hci4: command 0x1003 tx timeout [ 1739.416053][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1739.488777][T27295] Bluetooth: hci10: command 0x1003 tx timeout [ 1739.495170][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1739.818707][T18630] Bluetooth: hci11: command 0x1003 tx timeout [ 1739.826078][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1740.858867][ T2951] Bluetooth: hci2: command 0x1001 tx timeout [ 1740.865657][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1740.928777][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1740.936457][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1741.488740][ T2951] Bluetooth: hci4: command 0x1001 tx timeout [ 1741.494873][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1741.568695][ T2951] Bluetooth: hci10: command 0x1001 tx timeout [ 1741.576372][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1741.888800][ T2951] Bluetooth: hci11: command 0x1001 tx timeout [ 1741.895114][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1742.928782][ T6678] Bluetooth: hci2: command 0x1009 tx timeout [ 1743.008905][T27295] Bluetooth: hci3: command 0x1009 tx timeout [ 1743.568853][T27295] Bluetooth: hci4: command 0x1009 tx timeout [ 1743.648787][ T6678] Bluetooth: hci10: command 0x1009 tx timeout [ 1743.968661][ T6678] Bluetooth: hci11: command 0x1009 tx timeout 18:30:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x700) 18:30:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2ffff, 0x0) [ 1746.851618][T27356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1746.864381][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) [ 1746.874324][T27357] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x3, 0xffff, 0xc6, 0x7f, 0xf, "37c58a1abba4a1b6f4893c32b8111801d52e24"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000002c0)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$KIOCSOUND(r2, 0x4b2f, 0xd5) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000100)={{0x3f, 0x200}, 0x100, './file0\x00'}) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x1) 18:30:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:30:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x111280, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) [ 1747.636781][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1747.645636][T27380] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:30:35 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:30:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x130) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2f313166, 0x4, 0x8, 0x5, 0x9, "6956b9e7c40dc0c5df27a0655ff7966a964307"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x81, 0x0, 0x80000001, 0x10001, 0x6, "5062ffa2804d70d3feccc7309c15b0e8723455", 0x1, 0x5}) [ 1748.251058][T27397] Bluetooth: hci10: Frame reassembly failed (-84) [ 1748.298967][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1748.305568][T14535] Bluetooth: hci11: received HCILL_GO_TO_SLEEP_ACK in state 1 18:30:36 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1748.938782][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1748.945134][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1749.569057][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1749.575267][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1749.648678][ T2951] Bluetooth: hci4: command 0x1003 tx timeout [ 1749.657651][ T6583] Bluetooth: hci4: sending frame failed (-49) 18:30:37 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1750.288805][ T6678] Bluetooth: hci10: command 0x1003 tx timeout [ 1750.296320][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1750.368793][ T2951] Bluetooth: hci11: command 0x1003 tx timeout [ 1750.378040][ T6583] Bluetooth: hci11: sending frame failed (-49) 18:30:38 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1751.008636][ T2951] Bluetooth: hci2: command 0x1001 tx timeout [ 1751.015090][ T6583] Bluetooth: hci2: sending frame failed (-49) 18:30:38 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1751.658727][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 1751.664957][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1751.729542][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1751.735923][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1752.379156][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1752.386035][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1752.448990][ T8483] Bluetooth: hci11: command 0x1001 tx timeout [ 1752.455221][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1753.098779][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1753.728830][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1753.808744][ T2951] Bluetooth: hci4: command 0x1009 tx timeout [ 1754.458980][ T2951] Bluetooth: hci10: command 0x1009 tx timeout [ 1754.528713][T21258] Bluetooth: hci11: command 0x1009 tx timeout 18:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x145c) 18:30:44 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1757.156677][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1757.174070][T27445] Bluetooth: hci2: Frame reassembly failed (-84) [ 1757.193268][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) 18:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1757.863543][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1757.959376][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1757.966227][T27468] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) 18:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xa8e2, 0x5, 0x9, 0x1, 0xe, "3d40f36e46917beee27f5758f38a43c4f27ec8"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) [ 1758.361675][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1758.376651][T27483] Bluetooth: hci10: Frame reassembly failed (-84) 18:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) [ 1758.472251][T27490] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1759.168884][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1759.176113][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1759.898876][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1759.906000][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1759.968800][ T2951] Bluetooth: hci4: command 0x1003 tx timeout [ 1759.975015][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1760.378702][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1760.385031][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1760.528704][ T2951] Bluetooth: hci11: command 0x1003 tx timeout [ 1760.534984][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1761.248757][ T2951] Bluetooth: hci2: command 0x1001 tx timeout [ 1761.255042][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1761.968803][ T2951] Bluetooth: hci3: command 0x1001 tx timeout [ 1761.975528][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1762.058831][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1762.065411][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1762.448923][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1762.457372][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1762.608820][ T8568] Bluetooth: hci11: command 0x1001 tx timeout [ 1762.615207][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1763.338851][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1764.048996][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1764.138977][ T8568] Bluetooth: hci4: command 0x1009 tx timeout [ 1764.528840][ T2951] Bluetooth: hci10: command 0x1009 tx timeout [ 1764.688932][ T2951] Bluetooth: hci11: command 0x1009 tx timeout 18:30:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1f00) 18:30:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1767.374810][T14535] Bluetooth: hci2: Frame reassembly failed (-84) [ 1767.400039][T27514] Bluetooth: hci2: Frame reassembly failed (-84) 18:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x400455c8, 0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:30:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x7fff, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) 18:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1768.731216][T14535] Bluetooth: hci4: Frame reassembly failed (-84) [ 1768.743881][T27549] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:30:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:30:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:30:56 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) [ 1769.408877][ T6678] Bluetooth: hci2: command 0x1003 tx timeout [ 1769.415788][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1769.968699][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1769.974884][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1770.768822][ T2951] Bluetooth: hci10: command 0x1003 tx timeout [ 1770.775094][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1770.781962][ T6678] Bluetooth: hci4: command 0x1003 tx timeout [ 1770.788322][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1771.488840][T18630] Bluetooth: hci2: command 0x1001 tx timeout [ 1771.495059][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1772.048853][T18630] Bluetooth: hci3: command 0x1001 tx timeout [ 1772.054967][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1772.848850][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1772.854952][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1772.861950][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1772.868243][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1773.568790][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1774.128870][ T6678] Bluetooth: hci3: command 0x1009 tx timeout [ 1774.928819][ T6678] Bluetooth: hci10: command 0x1009 tx timeout [ 1774.934993][ T6678] Bluetooth: hci4: command 0x1009 tx timeout 18:31:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2000) 18:31:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1777.582963][ T1372] Bluetooth: hci2: Frame reassembly failed (-84) [ 1777.618808][T27579] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:05 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000003340)=[{&(0x7f0000003400)=""/165, 0xa5}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/233, 0xe9}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/38, 0x26}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/28, 0x1c}], 0x7, 0x9, 0xa12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)={0x100, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x100}}, 0x50040) sendmsg$nl_netfilter(r0, &(0x7f0000003840)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xb4, 0x6, 0x3, 0x401, 0x70bd25, 0x25dfdbfc, {0xd}, [@generic="e0acb7ac780a7123c5e54e470cf61c8831a9c050089b92193fd396ccbe1f37e2e8f502b321311b91c69a11be725c381fb3b3203348fe61e4bf2b818bb38c3260a7a85c", @generic="7fd34743ca99", @nested={0x40, 0x7a, 0x0, 0x1, [@typed={0x4, 0x71}, @generic="fac0756dffa187fa7daffe645e6f346ccda3b9da803832217e2d341dfb977ff325a230e727aa82d1d9e853f6e954a6391bfc59c28f3b883e"]}, @nested={0x14, 0x66, 0x0, 0x1, [@typed={0xe, 0x25, 0x0, 0x0, @str='/dev/ptmx\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000033c0)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000036c0)={0x1, 0x1, 0x1000, 0xd2, &(0x7f00000034c0)="03666af1aa19770a3c5ecb6371b74257ff89c12c33ed906b0347d9ec3fc758fe49b4d81027c6b0b514a50e9b2f1b0c8a7898d28e84b37e3700efb304cf801e39d61d4514e429f9a4d5b44f616ecbdfdd3f9486e2d6e551e81878c72072b5c19252e3938e0e6871acc3897e7bd7451da0020b2ff66f976bf4683b9e3e5acc920bc8f713d21b829ad4d0c9e7427c5cd53a7c467635a6004e713abbe0dd13cf003df9a213422bbbfd06032ec3685505dbbb7253b84b62f427cf5e981225bdb53c02f744747684782a3d2121ec71e5e7b51a31d9", 0xf8, 0x0, &(0x7f00000035c0)="60c28936c6200e5133b4fa8f6b41348658c40e98d733982a408be9faf8398a6c5bf3634d33f009dfe9105dea8b7e5b0e1eedac80578e88b0f84dbc42dace9c978c0152e3e536d13230eb5eef27b6ca3e2c2c5d2094a7710823a7aeb74d796f60ab61cd741b4ff3ae8c8bd49235c29cb971ac39b3b517b92f7f6213e32e87efa5348c4ab5efdf4eeb091b856f127846078abacd16d0b6a905c594976b135b781bd158020ed56ff3b0c7301cabdc75c7465b1f9f65642d07cd5ec435b0f4b3db2318b677662609a90b06222b43cc6c6d73f7ab8c438f37da8e92e0de4d5a6255829d16352e2dd482e8d09f891d8d61ef00fb043636a2b403c6"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) [ 1778.234418][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1778.243472][T27593] Bluetooth: hci3: Frame reassembly failed (-84) [ 1778.304898][T27599] __nla_validate_parse: 2 callbacks suppressed [ 1778.304915][T27599] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1778.345777][T27600] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x24e182, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x7ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x301000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x5000, 0xd, 0x6, 0x2, 0x7, "6968cb81427c7183a50e0519939c605ce19100"}) 18:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x5, 0x2b, 0x1f, 0x3, 0x13, "87475d6d4778eb85f0b03cb6782e47dbebb610"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140)) 18:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1778.970891][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1779.033225][T27630] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1779.073243][T27631] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1779.648820][T27295] Bluetooth: hci2: command 0x1003 tx timeout [ 1779.660005][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1780.288738][T27295] Bluetooth: hci3: command 0x1003 tx timeout [ 1780.295040][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1780.928821][T27617] Bluetooth: hci4: command 0x1003 tx timeout [ 1780.935117][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1781.008685][T27295] Bluetooth: hci10: command 0x1003 tx timeout [ 1781.015328][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1781.098864][T27295] Bluetooth: hci11: command 0x1003 tx timeout [ 1781.105416][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1781.728803][T27295] Bluetooth: hci2: command 0x1001 tx timeout [ 1781.735684][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1782.378973][T27617] Bluetooth: hci3: command 0x1001 tx timeout [ 1782.385430][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1783.008890][T27295] Bluetooth: hci4: command 0x1001 tx timeout [ 1783.015268][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1783.088681][T27295] Bluetooth: hci10: command 0x1001 tx timeout [ 1783.095242][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1783.178881][T27295] Bluetooth: hci11: command 0x1001 tx timeout [ 1783.185243][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1783.808760][T27295] Bluetooth: hci2: command 0x1009 tx timeout [ 1784.448847][T27295] Bluetooth: hci3: command 0x1009 tx timeout [ 1785.099012][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1785.178832][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 1785.248976][T18633] Bluetooth: hci11: command 0x1009 tx timeout 18:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3000) 18:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1787.839925][T27645] Bluetooth: hci2: Frame reassembly failed (-84) [ 1787.854876][ T10] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1788.469765][T27657] Bluetooth: hci3: Frame reassembly failed (-84) [ 1788.486900][ T10] Bluetooth: hci3: Frame reassembly failed (-84) 18:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x132) 18:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1789.141141][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1789.169512][T27681] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1789.186507][ T10] Bluetooth: hci10: Frame reassembly failed (-84) 18:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1789.734391][ T10] Bluetooth: hci11: Frame reassembly failed (-84) [ 1789.889051][T21258] Bluetooth: hci2: command 0x1003 tx timeout [ 1789.895642][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1790.006351][T27704] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1790.528788][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1790.535159][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1790.562675][T27710] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1790.930310][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1790.936600][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.168838][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1791.175287][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1791.248750][T21258] Bluetooth: hci10: command 0x1003 tx timeout [ 1791.255616][T27109] Bluetooth: hci10: sending frame failed (-49) [ 1791.808702][T21258] Bluetooth: hci11: command 0x1003 tx timeout [ 1791.815100][T27109] Bluetooth: hci11: sending frame failed (-49) [ 1791.968859][T27617] Bluetooth: hci2: command 0x1001 tx timeout [ 1791.976018][T27109] Bluetooth: hci2: sending frame failed (-49) [ 1792.048859][T21258] Bluetooth: hci12: command 0x1003 tx timeout [ 1792.059637][T27109] Bluetooth: hci12: sending frame failed (-49) [ 1792.608912][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 1792.615799][T27109] Bluetooth: hci3: sending frame failed (-49) [ 1792.618642][T18633] Bluetooth: hci13: command 0x1003 tx timeout [ 1792.628097][T27109] Bluetooth: hci13: sending frame failed (-49) [ 1793.258809][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1793.265673][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1793.328816][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1793.335290][T27109] Bluetooth: hci10: sending frame failed (-49) [ 1793.898802][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1793.905666][T27109] Bluetooth: hci11: sending frame failed (-49) [ 1794.048772][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1794.128862][ T8568] Bluetooth: hci12: command 0x1001 tx timeout [ 1794.135449][T27109] Bluetooth: hci12: sending frame failed (-49) [ 1794.688819][ T8568] Bluetooth: hci13: command 0x1001 tx timeout [ 1794.694971][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1794.695150][T27109] Bluetooth: hci13: sending frame failed (-49) [ 1795.338869][T18633] Bluetooth: hci4: command 0x1009 tx timeout [ 1795.418838][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 1795.968870][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 1796.208781][T27617] Bluetooth: hci12: command 0x1009 tx timeout [ 1796.768885][T27617] Bluetooth: hci13: command 0x1009 tx timeout 18:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3100) [ 1798.060022][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1798.067371][T27722] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) [ 1798.696989][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1798.712027][T27735] Bluetooth: hci3: Frame reassembly failed (-84) 18:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:31:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1800.138712][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1800.145217][T24244] Bluetooth: hci2: sending frame failed (-49) 18:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x400455c8, 0x7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) [ 1800.778928][T23206] Bluetooth: hci3: command 0x1003 tx timeout [ 1800.785454][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6c4901, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f00000000c0)) 18:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1801.418768][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1801.437959][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1802.208684][T27295] Bluetooth: hci2: command 0x1001 tx timeout [ 1802.215164][T27015] Bluetooth: hci2: sending frame failed (-49) [ 1802.848774][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1802.855199][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1803.498822][ T6678] Bluetooth: hci4: command 0x1001 tx timeout [ 1803.505324][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1804.288816][ T6678] Bluetooth: hci2: command 0x1009 tx timeout [ 1804.928785][T27295] Bluetooth: hci3: command 0x1009 tx timeout [ 1805.578803][T27617] Bluetooth: hci4: command 0x1009 tx timeout 18:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3200) [ 1808.311238][T27822] Bluetooth: hci2: Frame reassembly failed (-84) [ 1808.327721][ T10] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_io_uring_complete(0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x17) 18:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x100000001) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x5, 0x2b, 0x1f, 0x3, 0x13, "87475d6d4778eb85f0b03cb6782e47dbebb610"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000140)) [ 1808.918193][T27832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1808.958475][T27838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1808.972440][T27836] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1808.985087][T27835] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1808.997960][ T6584] Bluetooth: hci10: Frame reassembly failed (-84) 18:31:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xbdd5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81000) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7f) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:31:37 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000003340)=[{&(0x7f0000003400)=""/165, 0xa5}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/233, 0xe9}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/38, 0x26}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/28, 0x1c}], 0x7, 0x9, 0xa12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)={0x100, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x100}}, 0x50040) sendmsg$nl_netfilter(r0, &(0x7f0000003840)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xb4, 0x6, 0x3, 0x401, 0x70bd25, 0x25dfdbfc, {0xd}, [@generic="e0acb7ac780a7123c5e54e470cf61c8831a9c050089b92193fd396ccbe1f37e2e8f502b321311b91c69a11be725c381fb3b3203348fe61e4bf2b818bb38c3260a7a85c", @generic="7fd34743ca99", @nested={0x40, 0x7a, 0x0, 0x1, [@typed={0x4, 0x71}, @generic="fac0756dffa187fa7daffe645e6f346ccda3b9da803832217e2d341dfb977ff325a230e727aa82d1d9e853f6e954a6391bfc59c28f3b883e"]}, @nested={0x14, 0x66, 0x0, 0x1, [@typed={0xe, 0x25, 0x0, 0x0, @str='/dev/ptmx\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc4080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000180)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000140)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000033c0)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000036c0)={0x1, 0x1, 0x1000, 0xd2, &(0x7f00000034c0)="03666af1aa19770a3c5ecb6371b74257ff89c12c33ed906b0347d9ec3fc758fe49b4d81027c6b0b514a50e9b2f1b0c8a7898d28e84b37e3700efb304cf801e39d61d4514e429f9a4d5b44f616ecbdfdd3f9486e2d6e551e81878c72072b5c19252e3938e0e6871acc3897e7bd7451da0020b2ff66f976bf4683b9e3e5acc920bc8f713d21b829ad4d0c9e7427c5cd53a7c467635a6004e713abbe0dd13cf003df9a213422bbbfd06032ec3685505dbbb7253b84b62f427cf5e981225bdb53c02f744747684782a3d2121ec71e5e7b51a31d9", 0xf8, 0x0, &(0x7f00000035c0)="60c28936c6200e5133b4fa8f6b41348658c40e98d733982a408be9faf8398a6c5bf3634d33f009dfe9105dea8b7e5b0e1eedac80578e88b0f84dbc42dace9c978c0152e3e536d13230eb5eef27b6ca3e2c2c5d2094a7710823a7aeb74d796f60ab61cd741b4ff3ae8c8bd49235c29cb971ac39b3b517b92f7f6213e32e87efa5348c4ab5efdf4eeb091b856f127846078abacd16d0b6a905c594976b135b781bd158020ed56ff3b0c7301cabdc75c7465b1f9f65642d07cd5ec435b0f4b3db2318b677662609a90b06222b43cc6c6d73f7ab8c438f37da8e92e0de4d5a6255829d16352e2dd482e8d09f891d8d61ef00fb043636a2b403c6"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) [ 1809.596963][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1809.676623][T27863] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. 18:31:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1809.776485][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) [ 1809.794345][T27867] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1809.873567][T22439] Bluetooth: hci12: Frame reassembly failed (-84) [ 1809.885132][T27872] Bluetooth: hci12: Frame reassembly failed (-84) [ 1810.368798][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1810.375909][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1811.018850][T27617] Bluetooth: hci10: command 0x1003 tx timeout [ 1811.025248][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1811.032251][T27617] Bluetooth: hci3: command 0x1003 tx timeout [ 1811.038425][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1811.659165][T27617] Bluetooth: hci4: command 0x1003 tx timeout [ 1811.665355][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1811.808738][T27295] Bluetooth: hci11: command 0x1003 tx timeout [ 1811.815272][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1811.898802][T27617] Bluetooth: hci12: command 0x1003 tx timeout [ 1811.909273][T18171] Bluetooth: hci12: sending frame failed (-49) [ 1812.448823][T27617] Bluetooth: hci2: command 0x1001 tx timeout [ 1812.454943][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1813.088951][T27617] Bluetooth: hci3: command 0x1001 tx timeout [ 1813.095170][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1813.103707][T27617] Bluetooth: hci10: command 0x1001 tx timeout [ 1813.110740][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1813.729055][T27617] Bluetooth: hci4: command 0x1001 tx timeout [ 1813.735364][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1813.888904][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1813.895821][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1813.968912][T27617] Bluetooth: hci12: command 0x1001 tx timeout [ 1813.975935][T18171] Bluetooth: hci12: sending frame failed (-49) [ 1814.538772][T27617] Bluetooth: hci2: command 0x1009 tx timeout [ 1815.168884][T23206] Bluetooth: hci10: command 0x1009 tx timeout [ 1815.175283][T23206] Bluetooth: hci3: command 0x1009 tx timeout [ 1815.809056][T27295] Bluetooth: hci4: command 0x1009 tx timeout [ 1815.968793][T27295] Bluetooth: hci11: command 0x1009 tx timeout [ 1816.048786][T27295] Bluetooth: hci12: command 0x1009 tx timeout 18:31:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3300) [ 1818.576345][ T1372] Bluetooth: hci2: Frame reassembly failed (-84) [ 1818.587925][T27884] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3200) 18:31:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161182, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/86}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x6, 0x3}, {0x9, 0x1}, {0x5, 0x1000}, {0x148, 0x101}]}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000280)={0x462, 0x100, 0x19, 0x3, 0x8, 0x3ff}) [ 1819.206245][T27895] Bluetooth: hci3: Frame reassembly failed (-84) [ 1819.214766][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1819.257136][ T1372] Bluetooth: hci10: Frame reassembly failed (-84) [ 1819.268446][T27900] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:31:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) [ 1819.803149][ T10] Bluetooth: hci4: Frame reassembly failed (-84) 18:31:47 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:31:47 executing program 0: r0 = socket(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfff}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = socket(0x1, 0x2, 0xffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) [ 1820.517736][T27921] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1820.525231][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) [ 1820.618802][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1820.624995][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1821.248864][T27617] Bluetooth: hci3: command 0x1003 tx timeout [ 1821.261406][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:31:48 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1821.338880][T27617] Bluetooth: hci10: command 0x1003 tx timeout [ 1821.350419][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1821.808726][T27617] Bluetooth: hci4: command 0x1003 tx timeout [ 1821.816624][ T6583] Bluetooth: hci4: sending frame failed (-49) 18:31:49 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1822.528827][T27617] Bluetooth: hci11: command 0x1003 tx timeout [ 1822.543337][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1822.688739][T27617] Bluetooth: hci2: command 0x1001 tx timeout [ 1822.697422][ T6583] Bluetooth: hci2: sending frame failed (-49) 18:31:50 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1823.333718][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1823.340154][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1823.408999][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1823.415473][ T6583] Bluetooth: hci10: sending frame failed (-49) 18:31:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(r3, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2ffff, 0x0) [ 1823.888763][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1823.896623][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1823.962057][T27951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1824.608789][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1824.621241][ T6583] Bluetooth: hci11: sending frame failed (-49) 18:31:52 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1824.778793][T27617] Bluetooth: hci2: command 0x1009 tx timeout [ 1825.409684][T27617] Bluetooth: hci3: command 0x1009 tx timeout [ 1825.489312][T27617] Bluetooth: hci10: command 0x1009 tx timeout 18:31:53 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1825.978875][T27617] Bluetooth: hci4: command 0x1009 tx timeout [ 1826.688906][T18633] Bluetooth: hci11: command 0x1009 tx timeout 18:31:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4800) [ 1828.791756][T27977] Bluetooth: hci2: Frame reassembly failed (-84) [ 1828.804826][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) 18:31:56 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:31:56 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:31:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000170000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004041}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) r4 = syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="3f0bf36d75a90152bf1d2a9c3687e643cce149b29ac577c52eda3fe5d56679b517eccd399af7", 0x26, 0xeef}, {&(0x7f0000000180)="ba1c8c00f4c342236980a93f9d1b6a72c90a319ee9df433d9db3f6ac1297f8e7a734274b65783a0a82a3c26e546012c135ac481459ed888d793ab3b655e380569be9eea85ff1f0b4f74c644af48fb59c5a872b93552c597fc9230223c716f3edc1b088a2d0a25339ec6d333a", 0x6c}], 0x18, &(0x7f0000000240)={[{'+'}, {'/]@--)}-},,+(!/'}, {'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}, {}], [{@appraise_type}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x80a, r4}, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x8) 18:31:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 1830.133529][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1830.148774][T28000] Bluetooth: hci3: Frame reassembly failed (-84) [ 1830.197604][ T1372] Bluetooth: hci4: Frame reassembly failed (-84) [ 1830.208461][ T1372] Bluetooth: hci4: Frame reassembly failed (-84) [ 1830.250331][T28001] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:31:58 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:31:58 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000fffff6ff00000000080001006362710004000200"], 0x30}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200440, 0x6) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f00000002c0)=""/225, 0xe1}], 0x2, &(0x7f0000000800)=""/4096, 0x1000}, 0x10040) [ 1830.858753][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1830.866467][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1830.908512][T28017] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1830.916144][ T6584] Bluetooth: hci10: Frame reassembly failed (-84) [ 1830.923591][T28017] xt_CT: You must specify a L4 protocol and not use inversions on it 18:31:58 executing program 1: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1832.208782][T27295] Bluetooth: hci4: command 0x1003 tx timeout [ 1832.218803][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1832.219040][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1832.227745][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:31:59 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:31:59 executing program 1: r0 = socket(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfff}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = socket(0x1, 0x2, 0xffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) [ 1832.564776][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) [ 1832.584955][T28034] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1832.928811][T27295] Bluetooth: hci10: command 0x1003 tx timeout [ 1832.938313][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1832.939016][T27617] Bluetooth: hci2: command 0x1001 tx timeout [ 1832.978813][T27015] Bluetooth: hci2: sending frame failed (-49) 18:32:00 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:32:01 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) [ 1834.288725][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1834.288949][T27295] Bluetooth: hci4: command 0x1001 tx timeout [ 1834.300838][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1834.307025][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1834.608995][T27295] Bluetooth: hci11: command 0x1003 tx timeout [ 1834.615354][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1835.008962][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1835.015053][T21258] Bluetooth: hci10: command 0x1001 tx timeout [ 1835.021642][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1836.368827][T21258] Bluetooth: hci4: command 0x1009 tx timeout [ 1836.374993][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 1836.688919][T21258] Bluetooth: hci11: command 0x1001 tx timeout [ 1836.695697][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1837.089010][T27295] Bluetooth: hci10: command 0x1009 tx timeout [ 1838.768843][T21258] Bluetooth: hci11: command 0x1009 tx timeout 18:32:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4c00) 18:32:06 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(r3, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2ffff, 0x0) [ 1838.997166][T28058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1839.032613][T28061] Bluetooth: hci2: Frame reassembly failed (-84) [ 1839.042334][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:32:07 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(r3, &(0x7f0000000240)="c7eb89a42bef6001cf0a4e88571dbb860bc2bf05abeb808b7eca522d54dc5a547e20552dc34fbd6d653d40c39c6b971b4951f7b6a8632ae8be3743af2e600ecda6901439612ab027f2fc43440a08e1c05dd9018b269f54c1cf81b25f4c09ac8751dc220c7ed83437f19a5d8dd604633823f5823743073dd3deb6d739ac51146dc06a2d9d072867f8642b0ca10b5426350eee7818e533f3e89902b1cee0673d6c560e997d28f5d53eeae4680e9f3b2276b60bc1c530cb689939c2637376a172ddf18d46", 0xc3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4000000) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r4, 0x0, 0x2ffff, 0x0) [ 1839.852747][T28067] xt_CT: You must specify a L4 protocol and not use inversions on it 18:32:07 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nf_conntrack_h323', 0x2, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fremovexattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="75001638f4b700"]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/videobuf2_v4l2', 0x400840, 0x360) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:32:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:32:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1840.345866][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1840.360657][T28079] Bluetooth: hci3: Frame reassembly failed (-84) [ 1840.366746][T28084] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1840.383953][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1841.088844][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1841.096210][T27015] Bluetooth: hci2: sending frame failed (-49) 18:32:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x84041, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x106) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:32:08 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x8) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x2) mlockall(0x2) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2021, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') mlockall(0x7) mlockall(0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000a70000/0x1000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) pkey_mprotect(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0xffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) 18:32:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCFLSH(r1, 0x540b, 0x2) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x900) [ 1841.686233][T14535] Bluetooth: hci10: Frame reassembly failed (-84) [ 1841.697947][T28097] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1842.369131][T27617] Bluetooth: hci3: command 0x1003 tx timeout [ 1842.376470][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1842.448953][T27617] Bluetooth: hci4: command 0x1003 tx timeout [ 1842.455390][T27015] Bluetooth: hci4: sending frame failed (-49) 18:32:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 1) 18:32:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) (fail_nth: 1) [ 1842.849475][T28109] FAULT_INJECTION: forcing a failure. [ 1842.849475][T28109] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.862956][T28109] CPU: 0 PID: 28109 Comm: syz-executor.1 Not tainted 5.15.0-rc7-syzkaller #0 [ 1842.863868][ T10] Bluetooth: hci11: Frame reassembly failed (-84) [ 1842.871731][T28109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1842.871767][T28109] Call Trace: [ 1842.871775][T28109] dump_stack_lvl+0xcd/0x134 [ 1842.871803][T28109] should_fail.cold+0x5/0xa [ 1842.871823][T28109] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1842.871846][T28109] should_failslab+0x5/0x10 [ 1842.871864][T28109] __kmalloc+0x72/0x320 [ 1842.871893][T28109] tomoyo_realpath_from_path+0xc3/0x620 [ 1842.871919][T28109] ? tomoyo_profile+0x42/0x50 [ 1842.871948][T28109] tomoyo_path_number_perm+0x1d5/0x590 [ 1842.871967][T28109] ? tomoyo_path_number_perm+0x18d/0x590 [ 1842.871993][T28109] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1842.872026][T28109] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1842.947544][T28109] ? lock_downgrade+0x6e0/0x6e0 [ 1842.952402][T28109] ? __fget_files+0x23d/0x3e0 [ 1842.957070][T28109] security_file_ioctl+0x50/0xb0 [ 1842.962096][T28109] __x64_sys_ioctl+0xb3/0x200 [ 1842.966772][T28109] do_syscall_64+0x35/0xb0 [ 1842.971273][T28109] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1842.977247][T28109] RIP: 0033:0x7f509ff79a39 [ 1842.981649][T28109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1843.001249][T28109] RSP: 002b:00007f509d4ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.009667][T28109] RAX: ffffffffffffffda RBX: 00007f50a008cf60 RCX: 00007f509ff79a39 [ 1843.017624][T28109] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1843.025587][T28109] RBP: 00007f509d4ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1843.033545][T28109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.041505][T28109] R13: 00007ffd63f530cf R14: 00007f509d4ef300 R15: 0000000000022000 [ 1843.051009][T28109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1843.057955][T28109] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1843.079973][T28112] FAULT_INJECTION: forcing a failure. [ 1843.079973][T28112] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.094522][T28112] CPU: 0 PID: 28112 Comm: syz-executor.3 Not tainted 5.15.0-rc7-syzkaller #0 [ 1843.103414][T28112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.113500][T28112] Call Trace: [ 1843.116780][T28112] dump_stack_lvl+0xcd/0x134 [ 1843.121380][T28112] should_fail.cold+0x5/0xa [ 1843.125889][T28112] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1843.131701][T28112] should_failslab+0x5/0x10 [ 1843.136209][T28112] __kmalloc+0x72/0x320 [ 1843.140377][T28112] tomoyo_realpath_from_path+0xc3/0x620 [ 1843.145930][T28112] ? tomoyo_profile+0x42/0x50 [ 1843.150618][T28112] tomoyo_path_number_perm+0x1d5/0x590 [ 1843.156079][T28112] ? tomoyo_path_number_perm+0x18d/0x590 [ 1843.161720][T28112] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1843.167548][T28112] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1843.172956][T28112] ? lock_downgrade+0x6e0/0x6e0 [ 1843.177817][T28112] ? __fget_files+0x23d/0x3e0 [ 1843.182481][T28112] security_file_ioctl+0x50/0xb0 [ 1843.187407][T28112] __x64_sys_ioctl+0xb3/0x200 [ 1843.192076][T28112] do_syscall_64+0x35/0xb0 [ 1843.196480][T28112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1843.202536][T28112] RIP: 0033:0x7fe0f3f26a39 [ 1843.207213][T28112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1843.226810][T28112] RSP: 002b:00007fe0f149c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.235202][T28112] RAX: ffffffffffffffda RBX: 00007fe0f4039f60 RCX: 00007fe0f3f26a39 [ 1843.243160][T28112] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 18:32:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) (fail_nth: 2) [ 1843.251151][T28112] RBP: 00007fe0f149c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1843.259110][T28112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.267074][T28112] R13: 00007ffed716007f R14: 00007fe0f149c300 R15: 0000000000022000 [ 1843.279004][ T8483] Bluetooth: hci2: command 0x1001 tx timeout [ 1843.284972][T28112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1843.285069][T27015] Bluetooth: hci2: sending frame failed (-49) [ 1843.336957][T28118] FAULT_INJECTION: forcing a failure. [ 1843.336957][T28118] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.350918][T28118] CPU: 1 PID: 28118 Comm: syz-executor.3 Not tainted 5.15.0-rc7-syzkaller #0 [ 1843.359704][T28118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1843.369743][T28118] Call Trace: [ 1843.373017][T28118] dump_stack_lvl+0xcd/0x134 [ 1843.377615][T28118] should_fail.cold+0x5/0xa [ 1843.382145][T28118] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1843.387532][T28118] should_failslab+0x5/0x10 [ 1843.392060][T28118] __kmalloc+0x72/0x320 [ 1843.396223][T28118] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1843.401410][T28118] tomoyo_encode+0x28/0x50 [ 1843.405982][T28118] tomoyo_realpath_from_path+0x186/0x620 [ 1843.411609][T28118] tomoyo_path_number_perm+0x1d5/0x590 [ 1843.417065][T28118] ? tomoyo_path_number_perm+0x18d/0x590 [ 1843.422680][T28118] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1843.428476][T28118] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1843.434103][T28118] ? lock_downgrade+0x6e0/0x6e0 [ 1843.438945][T28118] ? __fget_files+0x23d/0x3e0 [ 1843.443703][T28118] security_file_ioctl+0x50/0xb0 [ 1843.448652][T28118] __x64_sys_ioctl+0xb3/0x200 [ 1843.453516][T28118] do_syscall_64+0x35/0xb0 [ 1843.457940][T28118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1843.463932][T28118] RIP: 0033:0x7fe0f3f26a39 [ 1843.468353][T28118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1843.488122][T28118] RSP: 002b:00007fe0f149c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.496521][T28118] RAX: ffffffffffffffda RBX: 00007fe0f4039f60 RCX: 00007fe0f3f26a39 [ 1843.504478][T28118] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1843.512446][T28118] RBP: 00007fe0f149c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1843.520412][T28118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.528537][T28118] R13: 00007ffed716007f R14: 00007fe0f149c300 R15: 0000000000022000 [ 1843.538055][T28118] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1843.738731][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1843.745286][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1844.448950][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1844.455613][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1844.538830][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1844.545674][T27015] Bluetooth: hci4: sending frame failed (-49) [ 1844.848888][T18633] Bluetooth: hci11: command 0x1003 tx timeout [ 1844.857927][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1845.328843][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1845.808709][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1845.817753][T27015] Bluetooth: hci10: sending frame failed (-49) [ 1846.528980][T27617] Bluetooth: hci3: command 0x1009 tx timeout [ 1846.608804][T27617] Bluetooth: hci4: command 0x1009 tx timeout [ 1846.928920][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1846.936432][T27015] Bluetooth: hci11: sending frame failed (-49) [ 1847.898831][T27617] Bluetooth: hci10: command 0x1009 tx timeout [ 1849.018936][T27617] Bluetooth: hci11: command 0x1009 tx timeout 18:32:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5c14) 18:32:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) (fail_nth: 3) [ 1849.265429][T28125] FAULT_INJECTION: forcing a failure. [ 1849.265429][T28125] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.269669][T28127] Bluetooth: hci2: Frame reassembly failed (-84) [ 1849.278614][T28125] CPU: 0 PID: 28125 Comm: syz-executor.3 Not tainted 5.15.0-rc7-syzkaller #0 [ 1849.278682][T28125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1849.278695][T28125] Call Trace: [ 1849.278705][T28125] dump_stack_lvl+0xcd/0x134 [ 1849.311728][T28125] should_fail.cold+0x5/0xa [ 1849.316249][T28125] ? __build_skb+0x21/0x60 [ 1849.320681][T28125] should_failslab+0x5/0x10 [ 1849.325195][T28125] kmem_cache_alloc+0x5e/0x390 [ 1849.329977][T28125] __build_skb+0x21/0x60 [ 1849.334233][T28125] __netdev_alloc_skb+0x21a/0x400 [ 1849.339270][T28125] ppp_sync_receive+0xe7/0x680 [ 1849.344041][T28125] ? sp_put+0xa0/0xa0 [ 1849.348037][T28125] tty_ioctl+0x909/0x1670 [ 1849.352380][T28125] ? tty_lookup_driver+0x550/0x550 [ 1849.357500][T28125] ? lock_downgrade+0x6e0/0x6e0 [ 1849.362435][T28125] ? __fget_files+0x23d/0x3e0 [ 1849.367193][T28125] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1849.373526][T28125] ? tty_lookup_driver+0x550/0x550 [ 1849.378636][T28125] __x64_sys_ioctl+0x193/0x200 [ 1849.383401][T28125] do_syscall_64+0x35/0xb0 [ 1849.387806][T28125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1849.393797][T28125] RIP: 0033:0x7fe0f3f26a39 [ 1849.398212][T28125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1849.417807][T28125] RSP: 002b:00007fe0f149c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1849.426290][T28125] RAX: ffffffffffffffda RBX: 00007fe0f4039f60 RCX: 00007fe0f3f26a39 [ 1849.434356][T28125] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1849.442318][T28125] RBP: 00007fe0f149c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.450300][T28125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.458266][T28125] R13: 00007ffed716007f R14: 00007fe0f149c300 R15: 0000000000022000 18:32:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) (fail_nth: 4) [ 1849.466237][T28125] PPPsync: no memory (input pkt) [ 1849.520563][T28132] FAULT_INJECTION: forcing a failure. [ 1849.520563][T28132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.533891][T28132] CPU: 1 PID: 28132 Comm: syz-executor.3 Not tainted 5.15.0-rc7-syzkaller #0 [ 1849.542767][T28132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1849.552923][T28132] Call Trace: [ 1849.556199][T28132] dump_stack_lvl+0xcd/0x134 [ 1849.560782][T28132] should_fail.cold+0x5/0xa [ 1849.565271][T28132] _copy_to_user+0x2c/0x150 [ 1849.569771][T28132] simple_read_from_buffer+0xcc/0x160 [ 1849.575197][T28132] proc_fail_nth_read+0x187/0x220 [ 1849.580217][T28132] ? proc_fault_inject_read+0x220/0x220 [ 1849.585761][T28132] ? security_file_permission+0xab/0xd0 [ 1849.591304][T28132] ? proc_fault_inject_read+0x220/0x220 [ 1849.596936][T28132] vfs_read+0x1b5/0x600 [ 1849.601091][T28132] ksys_read+0x12d/0x250 [ 1849.605324][T28132] ? vfs_write+0xae0/0xae0 [ 1849.609732][T28132] ? syscall_enter_from_user_mode+0x21/0x70 [ 1849.615794][T28132] do_syscall_64+0x35/0xb0 [ 1849.620198][T28132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1849.626081][T28132] RIP: 0033:0x7fe0f3ed95ec [ 1849.630486][T28132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1849.651306][T28132] RSP: 002b:00007fe0f149c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1849.659889][T28132] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0f3ed95ec 18:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1849.667847][T28132] RDX: 000000000000000f RSI: 00007fe0f149c1e0 RDI: 0000000000000004 [ 1849.675806][T28132] RBP: 00007fe0f149c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.683764][T28132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.691720][T28132] R13: 00007ffed716007f R14: 00007fe0f149c300 R15: 0000000000022000 18:32:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 18:32:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x10) 18:32:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)=0x133) [ 1850.543256][T28142] Bluetooth: hci3: Frame reassembly failed (-84) 18:32:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)=0x133) [ 1850.625632][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1850.633451][T28150] Bluetooth: hci4: Frame reassembly failed (-84) [ 1851.338899][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1851.346036][T27015] Bluetooth: hci2: sending frame failed (-49) 18:32:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sync_file_range(r1, 0xffffffffffffffff, 0x2, 0x3) [ 1851.809810][T22439] Bluetooth: hci10: Frame reassembly failed (-84) [ 1851.824812][T28161] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1851.889340][T28165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1852.369986][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.376921][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.608761][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1852.616106][T27015] Bluetooth: hci3: sending frame failed (-49) [ 1852.649357][T28165] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1852.669877][ T10] Bluetooth: hci12: Frame reassembly failed (-84) [ 1852.699433][T28165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1852.712287][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1852.719280][T18171] Bluetooth: hci4: sending frame failed (-49) 18:32:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 2) 18:32:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)=0x133) 18:32:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)=0x133) [ 1853.126086][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 1853.137188][T28177] FAULT_INJECTION: forcing a failure. [ 1853.137188][T28177] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.156670][T28177] CPU: 1 PID: 28177 Comm: syz-executor.1 Not tainted 5.15.0-rc7-syzkaller #0 [ 1853.165466][T28177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1853.175529][T28177] Call Trace: [ 1853.178809][T28177] dump_stack_lvl+0xcd/0x134 [ 1853.183421][T28177] should_fail.cold+0x5/0xa [ 1853.188475][T28177] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1853.193887][T28177] should_failslab+0x5/0x10 [ 1853.198401][T28177] __kmalloc+0x72/0x320 [ 1853.202579][T28177] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1853.207793][T28177] tomoyo_encode+0x28/0x50 [ 1853.212215][T28177] tomoyo_realpath_from_path+0x186/0x620 [ 1853.217864][T28177] tomoyo_path_number_perm+0x1d5/0x590 [ 1853.223333][T28177] ? tomoyo_path_number_perm+0x18d/0x590 [ 1853.228983][T28177] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1853.234811][T28177] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1853.240211][T28177] ? lock_downgrade+0x6e0/0x6e0 [ 1853.245087][T28177] ? __fget_files+0x23d/0x3e0 [ 1853.249790][T28177] security_file_ioctl+0x50/0xb0 [ 1853.254749][T28177] __x64_sys_ioctl+0xb3/0x200 [ 1853.259436][T28177] do_syscall_64+0x35/0xb0 [ 1853.263944][T28177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1853.269859][T28177] RIP: 0033:0x7f509ff79a39 [ 1853.274286][T28177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1853.293904][T28177] RSP: 002b:00007f509d4ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1853.302320][T28177] RAX: ffffffffffffffda RBX: 00007f50a008cf60 RCX: 00007f509ff79a39 [ 1853.310296][T28177] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1853.318282][T28177] RBP: 00007f509d4ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.326240][T28177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.334198][T28177] R13: 00007ffd63f530cf R14: 00007f509d4ef300 R15: 0000000000022000 [ 1853.354971][T28177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1853.361912][T28177] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1853.408872][ T6678] Bluetooth: hci2: command 0x1001 tx timeout [ 1853.414986][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1853.808799][ T6678] Bluetooth: hci10: command 0x1003 tx timeout [ 1853.815393][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1854.688970][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1854.695738][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1854.703528][ T8483] Bluetooth: hci12: command 0x1003 tx timeout [ 1854.710118][T18171] Bluetooth: hci12: sending frame failed (-49) [ 1854.768890][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1854.775043][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1855.168775][T21258] Bluetooth: hci11: command 0x1003 tx timeout [ 1855.175578][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1855.488767][T27617] Bluetooth: hci2: command 0x1009 tx timeout [ 1855.888842][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 1855.895767][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1856.778944][ T8483] Bluetooth: hci12: command 0x1001 tx timeout [ 1856.785299][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1856.786205][T18171] Bluetooth: hci12: sending frame failed (-49) [ 1856.853208][T27617] Bluetooth: hci4: command 0x1009 tx timeout [ 1857.248759][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1857.255994][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1857.968958][T21258] Bluetooth: hci10: command 0x1009 tx timeout [ 1858.848940][ T8568] Bluetooth: hci12: command 0x1009 tx timeout [ 1859.329009][ T8568] Bluetooth: hci11: command 0x1009 tx timeout 18:32:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6000) 18:32:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)=0x133) 18:32:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)=0x133) [ 1859.537923][T28195] Bluetooth: hci2: Frame reassembly failed (-84) [ 1859.561904][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:32:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)=0x133) 18:32:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)=0x133) 18:32:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x13) 18:32:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 1) 18:32:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)=0x133) [ 1860.810826][T28216] Bluetooth: hci3: Frame reassembly failed (-84) [ 1860.852286][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1860.852468][T28221] FAULT_INJECTION: forcing a failure. [ 1860.852468][T28221] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.871998][T28221] CPU: 0 PID: 28221 Comm: syz-executor.4 Not tainted 5.15.0-rc7-syzkaller #0 [ 1860.880775][T28221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1860.890836][T28221] Call Trace: [ 1860.894115][T28221] dump_stack_lvl+0xcd/0x134 [ 1860.898983][T28221] should_fail.cold+0x5/0xa [ 1860.903582][T28221] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1860.910026][T28221] should_failslab+0x5/0x10 [ 1860.914533][T28221] __kmalloc+0x72/0x320 [ 1860.918708][T28221] tomoyo_realpath_from_path+0xc3/0x620 [ 1860.924266][T28221] ? tomoyo_profile+0x42/0x50 [ 1860.928945][T28221] tomoyo_path_number_perm+0x1d5/0x590 [ 1860.934474][T28221] ? tomoyo_path_number_perm+0x18d/0x590 [ 1860.940098][T28221] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1860.945900][T28221] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1860.951276][T28221] ? lock_downgrade+0x6e0/0x6e0 [ 1860.956128][T28221] ? __fget_files+0x23d/0x3e0 [ 1860.960807][T28221] security_file_ioctl+0x50/0xb0 [ 1860.965745][T28221] __x64_sys_ioctl+0xb3/0x200 [ 1860.970430][T28221] do_syscall_64+0x35/0xb0 [ 1860.974837][T28221] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1860.980728][T28221] RIP: 0033:0x7fb7b0852a39 [ 1860.985133][T28221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.004911][T28221] RSP: 002b:00007fb7addc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.013316][T28221] RAX: ffffffffffffffda RBX: 00007fb7b0965f60 RCX: 00007fb7b0852a39 [ 1861.021798][T28221] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1861.029755][T28221] RBP: 00007fb7addc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.037715][T28221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.045766][T28221] R13: 00007ffc1f41939f R14: 00007fb7addc8300 R15: 0000000000022000 [ 1861.072074][T28221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.086838][T28221] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1861.569012][ T8568] Bluetooth: hci2: command 0x1003 tx timeout [ 1861.575572][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1862.848805][T21258] Bluetooth: hci3: command 0x1003 tx timeout [ 1862.855282][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1862.932443][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1862.938608][T24244] Bluetooth: hci4: sending frame failed (-49) 18:32:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)=0x133) 18:32:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 3) 18:32:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x109001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x7f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1863.420217][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1863.433242][T28266] FAULT_INJECTION: forcing a failure. [ 1863.433242][T28266] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.510517][T28272] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1863.578816][T28266] CPU: 1 PID: 28266 Comm: syz-executor.1 Not tainted 5.15.0-rc7-syzkaller #0 [ 1863.587617][T28266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.597689][T28266] Call Trace: [ 1863.600967][T28266] dump_stack_lvl+0xcd/0x134 [ 1863.605556][T28266] should_fail.cold+0x5/0xa [ 1863.610059][T28266] should_failslab+0x5/0x10 [ 1863.614552][T28266] kmem_cache_alloc_node+0x65/0x3d0 [ 1863.619747][T28266] ? __alloc_skb+0x20b/0x340 [ 1863.624339][T28266] __alloc_skb+0x20b/0x340 [ 1863.628782][T28266] h4_recv_buf+0x573/0xdb0 [ 1863.633205][T28266] ll_recv+0xec/0x200 [ 1863.637263][T28266] hci_uart_tty_receive+0x24d/0x710 [ 1863.642458][T28266] ? hci_uart_send_frame+0x6c0/0x6c0 [ 1863.647758][T28266] tty_ioctl+0x909/0x1670 [ 1863.652083][T28266] ? tty_lookup_driver+0x550/0x550 [ 1863.657284][T28266] ? lock_downgrade+0x6e0/0x6e0 [ 1863.662144][T28266] ? __fget_files+0x23d/0x3e0 [ 1863.666824][T28266] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1863.673066][T28266] ? tty_lookup_driver+0x550/0x550 [ 1863.678178][T28266] __x64_sys_ioctl+0x193/0x200 [ 1863.682945][T28266] do_syscall_64+0x35/0xb0 [ 1863.687366][T28266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1863.693257][T28266] RIP: 0033:0x7f509ff79a39 [ 1863.697666][T28266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1863.717430][T28266] RSP: 002b:00007f509d4ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:32:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)=0x133) [ 1863.725850][T28266] RAX: ffffffffffffffda RBX: 00007f50a008cf60 RCX: 00007f509ff79a39 [ 1863.733816][T28266] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1863.741797][T28266] RBP: 00007f509d4ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.749757][T28266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.757738][T28266] R13: 00007ffd63f530cf R14: 00007f509d4ef300 R15: 0000000000022000 [ 1863.766391][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1863.773395][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1863.817793][T28266] Bluetooth: hci10: Frame reassembly failed (-12) [ 1864.928797][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 1864.935555][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1865.008970][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1865.015114][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1865.488767][T21258] Bluetooth: hci10: command 0x1003 tx timeout [ 1865.494946][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1865.578843][T21258] Bluetooth: hci11: command 0x1003 tx timeout [ 1865.585290][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1865.808978][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1867.008817][ T6678] Bluetooth: hci3: command 0x1009 tx timeout [ 1867.098837][T27617] Bluetooth: hci4: command 0x1009 tx timeout [ 1867.568860][T27617] Bluetooth: hci10: command 0x1001 tx timeout [ 1867.575063][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1867.648942][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 1867.655296][T24244] Bluetooth: hci11: sending frame failed (-49) 18:32:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6800) 18:32:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)=0x133) [ 1869.648962][T21258] Bluetooth: hci10: command 0x1009 tx timeout [ 1869.728997][ T6678] Bluetooth: hci11: command 0x1009 tx timeout [ 1869.744438][T28292] Bluetooth: hci2: Frame reassembly failed (-84) [ 1869.759536][T14535] Bluetooth: hci2: Frame reassembly failed (-84) 18:32:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)=0x133) 18:32:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)=0x133) 18:32:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)=0x133) 18:32:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)={0xff, "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"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x81, 0x648, 0x7, 0x0, 0x1, "26d4154767c66872c28dfd525260b1911dfadc"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0xc00) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000003c0)={{r1}, 0x5, &(0x7f0000000380)=[0x4, 0x1ff, 0xffffffffffff1f37, 0x9, 0x2], 0x5, 0x3, [0x6, 0x5, 0x6174, 0x100000000]}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:32:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 2) 18:32:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x133) 18:32:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x133) [ 1871.128702][T28327] FAULT_INJECTION: forcing a failure. [ 1871.128702][T28327] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.148846][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1871.197424][T28327] CPU: 1 PID: 28327 Comm: syz-executor.4 Not tainted 5.15.0-rc7-syzkaller #0 [ 1871.207218][T28327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1871.217267][T28327] Call Trace: [ 1871.220538][T28327] dump_stack_lvl+0xcd/0x134 [ 1871.225648][T28327] should_fail.cold+0x5/0xa [ 1871.230664][T28327] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1871.236556][T28327] should_failslab+0x5/0x10 [ 1871.241225][T28327] __kmalloc+0x72/0x320 [ 1871.245401][T28327] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1871.250649][T28327] tomoyo_encode+0x28/0x50 [ 1871.255056][T28327] tomoyo_realpath_from_path+0x186/0x620 [ 1871.261299][T28327] tomoyo_path_number_perm+0x1d5/0x590 [ 1871.266754][T28327] ? tomoyo_path_number_perm+0x18d/0x590 [ 1871.272642][T28327] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1871.278552][T28327] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 1871.283927][T28327] ? lock_downgrade+0x6e0/0x6e0 [ 1871.288802][T28327] ? __fget_files+0x23d/0x3e0 [ 1871.293506][T28327] security_file_ioctl+0x50/0xb0 [ 1871.298479][T28327] __x64_sys_ioctl+0xb3/0x200 [ 1871.303933][T28327] do_syscall_64+0x35/0xb0 [ 1871.308526][T28327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1871.314414][T28327] RIP: 0033:0x7fb7b0852a39 [ 1871.318846][T28327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1871.338445][T28327] RSP: 002b:00007fb7addc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.346852][T28327] RAX: ffffffffffffffda RBX: 00007fb7b0965f60 RCX: 00007fb7b0852a39 [ 1871.354815][T28327] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1871.362778][T28327] RBP: 00007fb7addc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1871.370738][T28327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.378719][T28327] R13: 00007ffc1f41939f R14: 00007fb7addc8300 R15: 0000000000022000 [ 1871.399534][T28327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1871.407440][T28327] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1871.808840][ T6678] Bluetooth: hci2: command 0x1003 tx timeout [ 1871.815695][T25004] Bluetooth: hci2: sending frame failed (-49) [ 1873.168933][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1873.175640][T25004] Bluetooth: hci3: sending frame failed (-49) 18:32:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 4) [ 1873.564184][T28337] FAULT_INJECTION: forcing a failure. [ 1873.564184][T28337] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.588234][T28337] CPU: 1 PID: 28337 Comm: syz-executor.1 Not tainted 5.15.0-rc7-syzkaller #0 [ 1873.597216][T28337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1873.607285][T28337] Call Trace: [ 1873.610567][T28337] dump_stack_lvl+0xcd/0x134 [ 1873.615175][T28337] should_fail.cold+0x5/0xa [ 1873.619779][T28337] should_failslab+0x5/0x10 [ 1873.624311][T28337] __kmalloc_node_track_caller+0x7d/0x340 [ 1873.630046][T28337] ? h4_recv_buf+0x573/0xdb0 [ 1873.634639][T28337] __alloc_skb+0xde/0x340 [ 1873.639877][T28337] h4_recv_buf+0x573/0xdb0 [ 1873.644313][T28337] ll_recv+0xec/0x200 [ 1873.648292][T28337] hci_uart_tty_receive+0x24d/0x710 [ 1873.653488][T28337] ? hci_uart_send_frame+0x6c0/0x6c0 [ 1873.658790][T28337] tty_ioctl+0x909/0x1670 [ 1873.663119][T28337] ? tty_lookup_driver+0x550/0x550 [ 1873.668232][T28337] ? lock_downgrade+0x6e0/0x6e0 [ 1873.673179][T28337] ? __fget_files+0x23d/0x3e0 [ 1873.677854][T28337] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1873.684092][T28337] ? tty_lookup_driver+0x550/0x550 [ 1873.689206][T28337] __x64_sys_ioctl+0x193/0x200 [ 1873.693968][T28337] do_syscall_64+0x35/0xb0 [ 1873.698372][T28337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1873.704262][T28337] RIP: 0033:0x7f509ff79a39 [ 1873.708668][T28337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1873.728270][T28337] RSP: 002b:00007f509d4ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.736941][T28337] RAX: ffffffffffffffda RBX: 00007f50a008cf60 RCX: 00007f509ff79a39 [ 1873.744912][T28337] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1873.752964][T28337] RBP: 00007f509d4ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1873.761118][T28337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.769089][T28337] R13: 00007ffd63f530cf R14: 00007f509d4ef300 R15: 0000000000022000 [ 1873.800809][T28337] Bluetooth: hci4: Frame reassembly failed (-12) [ 1873.807748][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) [ 1873.888874][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1873.895099][T25004] Bluetooth: hci2: sending frame failed (-49) 18:32:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x401a) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2800) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x40133) [ 1874.219169][T22439] Bluetooth: hci10: Frame reassembly failed (-84) [ 1874.225775][T28348] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1874.277337][T22439] Bluetooth: hci11: Frame reassembly failed (-84) [ 1875.248801][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1875.255647][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1875.568793][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1875.575013][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1875.968973][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1876.289054][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1876.297051][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1876.304400][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1876.311256][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1877.328874][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 1877.648855][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1877.656006][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1878.368841][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1878.380055][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1878.386406][ T8568] Bluetooth: hci11: command 0x1001 tx timeout [ 1878.393837][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1879.728889][ T8568] Bluetooth: hci4: command 0x1009 tx timeout 18:32:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6c00) 18:32:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)=0x133) [ 1879.991297][T28365] Bluetooth: hci2: Frame reassembly failed (-84) 18:32:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x133) 18:32:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000000)=0x133) 18:32:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000000)=0x133) 18:32:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000000)=0x133) [ 1880.449060][ T8568] Bluetooth: hci11: command 0x1009 tx timeout [ 1880.455391][ T8568] Bluetooth: hci10: command 0x1009 tx timeout 18:32:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 3) 18:32:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000000)=0x133) 18:32:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000000)=0x133) [ 1881.285863][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 1881.298184][T28390] FAULT_INJECTION: forcing a failure. [ 1881.298184][T28390] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.322283][T28390] CPU: 1 PID: 28390 Comm: syz-executor.4 Not tainted 5.15.0-rc7-syzkaller #0 [ 1881.331371][T28390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.341909][T28390] Call Trace: [ 1881.345176][T28390] dump_stack_lvl+0xcd/0x134 [ 1881.349758][T28390] should_fail.cold+0x5/0xa [ 1881.354248][T28390] ? do_raw_spin_lock+0x120/0x2b0 [ 1881.359270][T28390] should_failslab+0x5/0x10 [ 1881.363782][T28390] kmem_cache_alloc_node+0x65/0x3d0 [ 1881.368991][T28390] ? __alloc_skb+0x20b/0x340 [ 1881.373669][T28390] __alloc_skb+0x20b/0x340 [ 1881.378076][T28390] h4_recv_buf+0x573/0xdb0 [ 1881.382509][T28390] ll_recv+0xec/0x200 [ 1881.386480][T28390] hci_uart_tty_receive+0x24d/0x710 [ 1881.391759][T28390] ? hci_uart_send_frame+0x6c0/0x6c0 [ 1881.397064][T28390] tty_ioctl+0x909/0x1670 [ 1881.401387][T28390] ? tty_lookup_driver+0x550/0x550 [ 1881.406490][T28390] ? lock_downgrade+0x6e0/0x6e0 [ 1881.411338][T28390] ? __fget_files+0x23d/0x3e0 [ 1881.416004][T28390] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1881.422233][T28390] ? tty_lookup_driver+0x550/0x550 [ 1881.427332][T28390] __x64_sys_ioctl+0x193/0x200 [ 1881.432087][T28390] do_syscall_64+0x35/0xb0 [ 1881.436495][T28390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1881.442414][T28390] RIP: 0033:0x7fb7b0852a39 [ 1881.446906][T28390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1881.466502][T28390] RSP: 002b:00007fb7addc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1881.474902][T28390] RAX: ffffffffffffffda RBX: 00007fb7b0965f60 RCX: 00007fb7b0852a39 [ 1881.482856][T28390] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1881.491014][T28390] RBP: 00007fb7addc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1881.498987][T28390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.506946][T28390] R13: 00007ffc1f41939f R14: 00007fb7addc8300 R15: 0000000000022000 [ 1881.519535][T28390] Bluetooth: hci3: Frame reassembly failed (-12) [ 1881.526634][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1882.048791][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1882.056071][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1883.328778][T21258] Bluetooth: hci3: command 0x1003 tx timeout [ 1883.335118][T24244] Bluetooth: hci3: sending frame failed (-49) 18:32:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 5) [ 1883.808841][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1883.818106][T28402] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1883.826163][T28402] FAULT_INJECTION: forcing a failure. [ 1883.826163][T28402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.839776][T28402] CPU: 0 PID: 28402 Comm: syz-executor.1 Not tainted 5.15.0-rc7-syzkaller #0 [ 1883.848547][T28402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1883.858699][T28402] Call Trace: [ 1883.861982][T28402] dump_stack_lvl+0xcd/0x134 [ 1883.866572][T28402] should_fail.cold+0x5/0xa [ 1883.871071][T28402] _copy_to_user+0x2c/0x150 [ 1883.875569][T28402] simple_read_from_buffer+0xcc/0x160 [ 1883.881028][T28402] proc_fail_nth_read+0x187/0x220 [ 1883.886053][T28402] ? proc_fault_inject_read+0x220/0x220 [ 1883.891595][T28402] ? security_file_permission+0xab/0xd0 [ 1883.897319][T28402] ? proc_fault_inject_read+0x220/0x220 [ 1883.902875][T28402] vfs_read+0x1b5/0x600 [ 1883.907038][T28402] ksys_read+0x12d/0x250 [ 1883.911279][T28402] ? vfs_write+0xae0/0xae0 [ 1883.915693][T28402] ? syscall_enter_from_user_mode+0x21/0x70 [ 1883.921593][T28402] do_syscall_64+0x35/0xb0 [ 1883.926002][T28402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1883.931890][T28402] RIP: 0033:0x7f509ff2c5ec [ 1883.936297][T28402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1883.956096][T28402] RSP: 002b:00007f509d4ef170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1883.964510][T28402] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f509ff2c5ec [ 1883.972647][T28402] RDX: 000000000000000f RSI: 00007f509d4ef1e0 RDI: 0000000000000004 [ 1883.980628][T28402] RBP: 00007f509d4ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1883.988761][T28402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.996811][T28402] R13: 00007ffd63f530cf R14: 00007f509d4ef300 R15: 0000000000022000 [ 1884.128869][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1884.135536][T24244] Bluetooth: hci2: sending frame failed (-49) 18:32:51 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) fcntl$setown(r0, 0x8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x4b34, 0x874) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = syz_io_uring_complete(0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x133) 18:32:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="49c9bab0eed7680884e4184b6d3fdeeee4f50658c06caf289389e224716fc82c3ee012f3badab6b00f9ba640bbda0dfa43e4358b274f3196f6a6b1e6dc47343a760c50e654254a5e5896462a54e7767df456889f69382c6bcc2ccb5b1a04b758994f1d", 0x63, 0x1}, {&(0x7f00000001c0)="557e3c09648254ec69e5a1544f40eb406acd8ec512f8510de50047f2e9878b36b0cc5da9b5a8094fd3a5ea0c5421fa7f320425dbf82f8423ec381715a5aa8245f74f1f352c10ae7b387207b179e7283b8394808f985721768fe27e9fe01eb3fab0", 0x61, 0xe10}], 0x108c00c, &(0x7f0000000280)={[{@jqfmt_vfsold}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsdef={'smackfsdef', 0x3d, ':$'}}, {@obj_role={'obj_role', 0x3d, '/dev/ptmx\x00'}}, {@appraise_type}]}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r3 = syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x1ca480000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000380)="17367ba18595ff0af90986fdc0e04fd75d49ff27bd73c15f7415e601d16ea6cfcd18f24c5947aa79d5031f88ee45e6bf41ded769cd8c58ddc88dd8ef74ae8183cec04cd0ef735bba5c265f23e8cd54650c91feaba0f3ec4681f6d3d4c9afb693", 0x60, 0x81}], 0x0, &(0x7f0000000440)={[{@check_relaxed}, {@check_relaxed}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {@uid}, {}], [{@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '\'-'}}, {@uid_gt={'uid>', 0xee00}}, {@audit}, {@euid_lt={'euid<', 0xee00}}]}) r4 = syz_open_dev$audion(&(0x7f0000000500), 0x6ea09eac, 0x311203) ppoll(&(0x7f0000000540)=[{r0, 0x4515}, {r0, 0x208d}, {r0, 0x80}, {r0, 0x8420}, {r1, 0x80}, {r0, 0x3001}, {r2, 0x1680}, {r3, 0x1008}, {r4, 0x4008}, {r0, 0x600c}], 0xa, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0xff]}, 0x8) [ 1884.442899][T28415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1884.515510][T28420] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1884.537011][ T1372] Bluetooth: hci11: Frame reassembly failed (-84) [ 1884.538220][T28420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1885.408949][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1885.416360][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1885.808784][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1885.815329][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1886.208902][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1886.528779][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1886.528971][T27617] Bluetooth: hci10: command 0x1003 tx timeout [ 1886.541412][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1886.548302][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1887.498833][T23206] Bluetooth: hci3: command 0x1009 tx timeout [ 1887.888753][T23206] Bluetooth: hci4: command 0x1001 tx timeout [ 1887.895749][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1888.609403][T23206] Bluetooth: hci10: command 0x1001 tx timeout [ 1888.616512][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1888.623653][T23206] Bluetooth: hci11: command 0x1001 tx timeout [ 1888.630248][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1889.979000][T23206] Bluetooth: hci4: command 0x1009 tx timeout 18:32:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7400) 18:32:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000000)=0x133) 18:32:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000000)=0x133) [ 1890.244684][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) [ 1890.271078][T28433] Bluetooth: hci2: Frame reassembly failed (-84) 18:32:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000000)=0x133) 18:32:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000000)=0x133) 18:32:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000000)=0x133) [ 1890.688934][T23206] Bluetooth: hci11: command 0x1009 tx timeout [ 1890.695550][T23206] Bluetooth: hci10: command 0x1009 tx timeout 18:32:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 4) 18:32:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000000)=0x133) [ 1891.497003][T28455] FAULT_INJECTION: forcing a failure. [ 1891.497003][T28455] name failslab, interval 1, probability 0, space 0, times 0 18:32:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x6364, &(0x7f0000000000)=0x133) [ 1891.540414][T28455] CPU: 1 PID: 28455 Comm: syz-executor.4 Not tainted 5.15.0-rc7-syzkaller #0 [ 1891.549300][T28455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1891.559367][T28455] Call Trace: [ 1891.562646][T28455] dump_stack_lvl+0xcd/0x134 [ 1891.567247][T28455] should_fail.cold+0x5/0xa [ 1891.571998][T28455] should_failslab+0x5/0x10 [ 1891.576525][T28455] __kmalloc_node_track_caller+0x7d/0x340 [ 1891.582540][T28455] ? h4_recv_buf+0x573/0xdb0 [ 1891.587155][T28455] __alloc_skb+0xde/0x340 [ 1891.591582][T28455] h4_recv_buf+0x573/0xdb0 [ 1891.595993][T28455] ll_recv+0xec/0x200 [ 1891.600249][T28455] hci_uart_tty_receive+0x24d/0x710 [ 1891.605480][T28455] ? hci_uart_send_frame+0x6c0/0x6c0 [ 1891.610755][T28455] tty_ioctl+0x909/0x1670 [ 1891.615078][T28455] ? tty_lookup_driver+0x550/0x550 [ 1891.620826][T28455] ? lock_downgrade+0x6e0/0x6e0 [ 1891.625711][T28455] ? __fget_files+0x23d/0x3e0 [ 1891.630413][T28455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1891.636679][T28455] ? tty_lookup_driver+0x550/0x550 [ 1891.641813][T28455] __x64_sys_ioctl+0x193/0x200 [ 1891.646594][T28455] do_syscall_64+0x35/0xb0 [ 1891.651096][T28455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1891.656989][T28455] RIP: 0033:0x7fb7b0852a39 [ 1891.661478][T28455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1891.681165][T28455] RSP: 002b:00007fb7addc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1891.689575][T28455] RAX: ffffffffffffffda RBX: 00007fb7b0965f60 RCX: 00007fb7b0852a39 [ 1891.697545][T28455] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1891.705527][T28455] RBP: 00007fb7addc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1891.713508][T28455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.721469][T28455] R13: 00007ffc1f41939f R14: 00007fb7addc8300 R15: 0000000000022000 [ 1891.738500][T28455] Bluetooth: hci3: Frame reassembly failed (-12) [ 1891.748939][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1892.290394][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1892.296613][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1893.568798][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1893.575550][T24244] Bluetooth: hci3: sending frame failed (-49) 18:33:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) [ 1894.053070][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1894.064198][T28467] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1894.368812][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1894.375196][T24244] Bluetooth: hci2: sending frame failed (-49) 18:33:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4000000000000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) [ 1894.716425][T22439] Bluetooth: hci10: Frame reassembly failed (-84) [ 1894.722391][T28481] Bluetooth: hci11: Frame reassembly failed (-84) [ 1894.744299][ T1372] Bluetooth: hci11: Frame reassembly failed (-84) [ 1894.777026][T28489] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1895.649000][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 1895.655288][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1896.138894][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1896.145679][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1896.448968][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1896.768779][ T8483] Bluetooth: hci11: command 0x1003 tx timeout [ 1896.775870][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1896.778798][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1896.789895][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1897.739060][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1898.208907][T18633] Bluetooth: hci4: command 0x1001 tx timeout [ 1898.215457][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1898.849530][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1898.855941][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1898.857362][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1898.863421][T18171] Bluetooth: hci11: sending frame failed (-49) [ 1900.288792][ T8568] Bluetooth: hci4: command 0x1009 tx timeout 18:33:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7a00) 18:33:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x8913, &(0x7f0000000000)=0x133) 18:33:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x8914, &(0x7f0000000000)=0x133) [ 1900.465046][T28500] Bluetooth: hci2: Frame reassembly failed (-84) [ 1900.484374][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) 18:33:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000000)=0x133) 18:33:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x400448c9, &(0x7f0000000000)=0x133) 18:33:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x400448dd, &(0x7f0000000000)=0x133) [ 1900.928935][ T6678] Bluetooth: hci10: command 0x1009 tx timeout [ 1900.928942][T27617] Bluetooth: hci11: command 0x1009 tx timeout 18:33:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) (fail_nth: 5) 18:33:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x400454ca, &(0x7f0000000000)=0x133) 18:33:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000000)=0x133) [ 1901.736956][T28524] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1901.762696][T28524] FAULT_INJECTION: forcing a failure. [ 1901.762696][T28524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.762800][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 1901.785469][T28524] CPU: 1 PID: 28524 Comm: syz-executor.4 Not tainted 5.15.0-rc7-syzkaller #0 [ 1901.794271][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.804328][T28524] Call Trace: [ 1901.807598][T28524] dump_stack_lvl+0xcd/0x134 [ 1901.812185][T28524] should_fail.cold+0x5/0xa [ 1901.816703][T28524] _copy_to_user+0x2c/0x150 [ 1901.821230][T28524] simple_read_from_buffer+0xcc/0x160 [ 1901.826611][T28524] proc_fail_nth_read+0x187/0x220 [ 1901.831629][T28524] ? proc_fault_inject_read+0x220/0x220 [ 1901.837180][T28524] ? security_file_permission+0xab/0xd0 [ 1901.842738][T28524] ? proc_fault_inject_read+0x220/0x220 [ 1901.848305][T28524] vfs_read+0x1b5/0x600 [ 1901.852456][T28524] ksys_read+0x12d/0x250 [ 1901.856690][T28524] ? vfs_write+0xae0/0xae0 [ 1901.861102][T28524] ? syscall_enter_from_user_mode+0x21/0x70 [ 1901.866998][T28524] do_syscall_64+0x35/0xb0 [ 1901.871411][T28524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1901.877300][T28524] RIP: 0033:0x7fb7b08055ec [ 1901.881713][T28524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1901.901487][T28524] RSP: 002b:00007fb7addc8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1901.909893][T28524] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb7b08055ec [ 1901.917867][T28524] RDX: 000000000000000f RSI: 00007fb7addc81e0 RDI: 0000000000000004 [ 1901.925825][T28524] RBP: 00007fb7addc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.933787][T28524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.941746][T28524] R13: 00007ffc1f41939f R14: 00007fb7addc8300 R15: 0000000000022000 [ 1902.528846][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 1902.536228][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1903.808979][T21258] Bluetooth: hci3: command 0x1003 tx timeout [ 1903.816265][T18171] Bluetooth: hci3: sending frame failed (-49) 18:33:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)=0x132) [ 1904.289147][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1904.608936][T21258] Bluetooth: hci2: command 0x1001 tx timeout [ 1904.615225][T24244] Bluetooth: hci2: sending frame failed (-49) 18:33:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000000)=0x133) 18:33:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1905.888975][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1905.895683][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1906.368819][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1906.374960][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1906.688919][ T6678] Bluetooth: hci2: command 0x1009 tx timeout [ 1907.968954][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1908.458917][ T6678] Bluetooth: hci4: command 0x1001 tx timeout [ 1908.465077][T25004] Bluetooth: hci4: sending frame failed (-49) [ 1910.538895][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:33:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xf000) 18:33:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000100)={0x0, 0x4, 0xfffffffffffff2c2, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0xa0) ioctl$KDADDIO(r1, 0x400455c8, 0x400000000000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000540)={0x9, 0x1, 0x1, 0x8, 0x0, [0x200, 0x1, 0xaf51, 0x9]}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x7fff, 0xa9, 0x101, 0x5, 0x7f, "3596e6eb77b0402b79258ee2582f03ba5d8ff6", 0x3, 0x3}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x40186366, &(0x7f0000000000)=0x133) 18:33:18 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r1, 0x200002) sendfile(r0, r1, 0x0, 0x80001d00c0d0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x6, 0x0, 0x66, &(0x7f0000000100)="9f7a5bf6aacaed0542ebf9cc98c2ba3f3fa27262efb7f800613401d8332c15b229eddf79eef22212f48f3d6e3c2bfc7a342d99f3faed264379cdc0caa9c1d6cd4ec774419e9d5b91f96434d5d4d712d01c60e00c04f8cf114f30ee25b0a23112165671b6ddb7"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x133) 18:33:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x401c5820, &(0x7f0000000000)=0x133) 18:33:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1910.767702][T22439] Bluetooth: hci2: Frame reassembly failed (-84) [ 1910.780268][T28566] Bluetooth: hci2: Frame reassembly failed (-84) [ 1910.917363][T28577] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1910.956700][T14535] Bluetooth: hci10: Frame reassembly failed (-84) 18:33:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x132) 18:33:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000000)=0x133) 18:33:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) [ 1911.984922][ T10] Bluetooth: hci11: Frame reassembly failed (-84) [ 1911.991536][ T6792] Bluetooth: hci3: Frame reassembly failed (-84) [ 1911.998071][T28589] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1912.012903][T28590] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1912.768941][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1912.776531][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1912.928824][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1912.936719][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1913.809755][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.816035][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.048795][ T8568] Bluetooth: hci3: command 0x1003 tx timeout [ 1914.055505][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1914.062216][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1914.068411][T24244] Bluetooth: hci11: sending frame failed (-49) 18:33:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)=0x132) 18:33:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x800448f0, &(0x7f0000000000)=0x133) 18:33:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000000)=0x133) [ 1914.532288][T22439] Bluetooth: hci4: Frame reassembly failed (-84) [ 1914.848900][ T8568] Bluetooth: hci12: command 0x1003 tx timeout [ 1914.856169][T24244] Bluetooth: hci12: sending frame failed (-49) [ 1914.863814][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1914.871119][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1915.008882][ T8568] Bluetooth: hci10: command 0x1001 tx timeout [ 1915.015248][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1916.128852][ T8568] Bluetooth: hci11: command 0x1001 tx timeout [ 1916.135666][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1916.136448][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1916.148304][T27109] Bluetooth: hci3: sending frame failed (-49) [ 1916.608871][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 1916.615454][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1916.928937][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1916.935272][T25046] Bluetooth: hci12: command 0x1001 tx timeout [ 1916.942999][T27109] Bluetooth: hci12: sending frame failed (-49) [ 1917.098940][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 1918.218957][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1918.228008][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 1918.698796][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1918.704935][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1919.008834][ T8483] Bluetooth: hci12: command 0x1009 tx timeout [ 1920.778842][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:33:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xff00) 18:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000000)=0x133) 18:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x80086301, &(0x7f0000000000)=0x133) [ 1920.958137][T22439] Bluetooth: hci2: Frame reassembly failed (-84) [ 1920.973504][T28627] Bluetooth: hci2: Frame reassembly failed (-84) 18:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000000)=0x133) 18:33:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x801c581f, &(0x7f0000000000)=0x133) 18:33:28 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(r0, &(0x7f0000000100)=""/202, 0xca, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x90100, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x420}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) [ 1921.559967][T28645] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:33:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000000)=0x132) 18:33:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0x133) [ 1923.008918][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 1923.015608][ T6583] Bluetooth: hci2: sending frame failed (-49) 18:33:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_mount_image$ufs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x81, 0x5, &(0x7f0000001400)=[{&(0x7f00000001c0)="de59183a866329dad4a44d96e6fb8e66fdc1ade404e537c4ccd30f1b5c768d92fb1648435ad4551a736b85feb7935acf55b223a55b1cb4a133f1ffb28759e9fd088bd6", 0x43, 0xffffffffffffffff}, {&(0x7f0000000240)="e684b0cb0a537d1143d9ee9b1932b1e7d9d08112f3a11a57f3617f81c766d972ac47b8a468", 0x25, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x5}, {&(0x7f0000001280)="bacb3c70fc7a6fc8bd3c071acee8edaa8dea2b2843e45230fcca641793c1462932c170c9242644f8d521f82f7ca7380b1142ac2aada8f5e2dd87cf0a5a47b4f5d22e0e045b94c00d6141b096dc0b87234874c28f52aa33c76433d65e87e54460dfbd397632da724285a6f3df2324c982bf049f8060bd554bdf298c6245c3f3f12649621833f9659ec61ee9f0aa9e104d339ded8069da1373fb05cb90caa854cfa877381e874e3da8383a33819df5d0d74dbcd58aed89ffb09516b892f35e657f4fba0017e715f5fd2b22fada548f2130335d1d6d711c5d5de35874a65fa7bc2bcc3808f4", 0xe4, 0x80000001}, {&(0x7f0000001380)="fcd8a0c7141a5f98c8f78607ed2924cfae0bdf6f8e8a0c8cc0562fe656e2c67df6a289eb84db891fd873eea376cf25507c4b9212bf7c2df3f5eff15c3f83c80dd598f3b17a4af59117fefcec251566da71b93976b7860fc14dfed7b2a8e563c6f0a5f9d5db4a6c1316", 0x69, 0x40}], 0x802000, &(0x7f0000001480)={[{'$-%'}, {}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsfloor}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x482, &(0x7f00000014c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/ptmx\x00'}}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '^-'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, '/dev/ptmx\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1923.550762][T22439] Bluetooth: hci11: Frame reassembly failed (-84) [ 1923.568182][T28694] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1923.580623][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1923.586878][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1924.288976][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1924.295858][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:33:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)=0x132) 18:33:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000000)=0x133) 18:33:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc0086420, &(0x7f0000000000)=0x133) [ 1924.772844][ T10] Bluetooth: hci4: Frame reassembly failed (-84) [ 1925.098999][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1925.105142][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1925.569049][T18633] Bluetooth: hci11: command 0x1003 tx timeout [ 1925.575609][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1925.648959][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1925.655188][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1926.368994][T27617] Bluetooth: hci3: command 0x1001 tx timeout [ 1926.375139][ T6583] Bluetooth: hci3: sending frame failed (-49) [ 1926.850254][T18633] Bluetooth: hci4: command 0x1003 tx timeout [ 1926.857198][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1927.178861][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1927.649272][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1927.656582][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1927.729185][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 1928.448882][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1928.928910][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 1928.935044][ T6583] Bluetooth: hci4: sending frame failed (-49) [ 1929.728909][ T8568] Bluetooth: hci11: command 0x1009 tx timeout [ 1931.019222][ T8483] Bluetooth: hci4: command 0x1009 tx timeout 18:33:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xe0ffff) 18:33:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000000)=0x133) [ 1931.185559][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1931.194538][T28725] Bluetooth: hci2: Frame reassembly failed (-84) 18:33:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000000)=0x133) 18:33:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0xc08c5332, &(0x7f0000000000)=0x133) 18:33:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r2, 0x200002) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) fchown(r5, 0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000540)="45bdbc494bf7cd4fb27d27a7d274bba8e1eac08348f819f936b87ab3c2a34e771d39d7ff7fc9c5f7a42ed0f701caabba6b74294634978ae774ee340fd37df2fbb77ff4e51fea02e9e9c9fef7bbf43e369afc0bfe8a4b8c03463c3c901aff11840180af951384355f11f94818a393202934eff13ad2c188638f2f0183884bdec5793ec5ae905271d0ab49556918bbb0ee2a84eeca26d4f1ee6f37b980292df97bd83234408a527e4e5ceed6cf8c4e85d1e7be8513eeee95c9d35772de6a2b355de89db0dda86757b5bed21f6bda60b90e5f65abf136107d8db4935a58ee3d08f175719c5a359dbc444d785876ede6c8533ff069d64d46dedcf7979e522376f76a413a53168f2ac7e3b159eed8613362927a5c14c9fa553db63510874267a93b12ff94cde63bc20c45be3b2b423b6f0359c172919fe2e36630bd5c1955587f36871e2175392747d9e0c390d7ce2c400a6ba4a56470135ff6ee043362559838be4bc82f6e1bba3d90f8ca2465bf06dd19f52918d72c30e2404bd8998cad437dff7458c1b1fe9c8393a35b419ec8c6e5aef2f47fbde8ec63acbd254b5666d6caeaea3f458aeb1b89230d54f7ad6c7db806742a0faef45b1d5480959ae41c69a2a77d73fb7195038a3b395815fb1284a6b1b10283bc4af71a3321714a5de50e83b54439cb1163b0ee1304c7265f5d22c5c1fffdfb63932ef53ef79b1689062eb35bf90bb0a892ba6c30ca4bb84a2bcf3fb05affd20f0c6eb6f1c9a80f0efb3b79127c67c720a5b6d98286f5921c7c12019b082625c7853d09ca218ca79f3daaa6bd2ef5e445a2e74d7c7df805b89cc144c1e80d49e97ed9a2b6254c2fbdcc3662e3502860eeb067e1afa86b2bda34c954e0a03688b3b714d336c7b144d727635454372f011856f6f6dae579a9908e77ef376ae98208e595266a07918f507245b9e06572e865dcd2ef4d96862443125a150085e64b431437a88c6a4a9187c86c8f3d07f4d9a5c178917c6579deb387af89cbdb6d643543568cedca685a98835d636b2bf0c8314c9c69ebde6ac6b476a0bf72e0c927953838a2dc823b80a7888b1c409931323cede6ac439be671e51655b38542b791c4968150360422be97b457049d98f8afafb774c66bb09bc77be85bf58871e113b957b53367371950eb0ab91af3117ac280fc23fa4d179ae51e8d2373f9fc1e5fba92e9c52a74159757dc12b8af0322615f78a8a185687e3a071fff98f45dac3d2ae906a498e4b9f36d41de0566e034036fee792019f503dc87139766ad15a9c0a1fb395d26984293ffe90eae76568c5fbb2f2c6f072d98695e7db35024840bd758793bc9dd52c9e87adb4a1861c9b45466fe51c8a1578faf518da586856720cc06d6a3b9dc55ff068cf604affe249d1e63d1c7e92f480c07225f680b5660aaadb01eb04927102ac12c8b408ba9b2265313b1c15cb03179e8ed244191906ba9df26970a3a2dd935cb8e4fb8fc30f83e2926c720bc898f1a1ed01c5a08b6a01bb5faa7d2a7e7dcfaf9ac8a6c1139c23df3766a45c8382e5d79ad0ecf7a19f10cdd55aef161f1e82d23eb4d407f6c05acc7f174ff1990762d5fc3261bc313aed5326ece2e996a2d788c36439811155c25cde2e1c3882b8e77d5708043790e8c06fc89acf74442a69da21a31b95494a3f9ef628849b6da1f9dfa30c02dd096849f76dd94d1e394535d563594df96a04de4f987c05aeb72497da31d44302bb99752680b7bd1878f539b67d7b4e2f9bdb4683922fccc7e9e56ff909504e63c1ae8a6a504f9f831f1c1d85c7a68184971c848108a830dfddfad356dd386a041108ffd6a684a594ec6fac301b159b47f9985444ea09f2987a0a7b7e8523dd984d89d5d736d7d540e86f2eab2a22e7fc634a6684d019711bd8652a2af6f4d49def203e9d22baf0d224b74af0401382b10144b2348ca3b5b35fcd85a13394000c6c12497705e73c5361eb235c4131a2bb95b0c5e85e9e294994906f5f37591382183f76fdf2597152abf45de63df2a9b368a884f87f9aca6455bdc8bbb303da4b351b302b4824b4d732befb6f4d74279ddd3b9e5ffef8635574b128d6575352dd4f34d8a0fe38d64f2d02c3debe5fb49960cee9bc156859ceb7c922f237a6f1a8f0f667409345c59f316e1e9fe79a3b25c92a64761d53168ff5f8a2b36da2db83dcd7d9fa189c64deb4fa896af491d9f020ac5e46468b912fba555aa148f56df3ae6ba514b25445806dc9fad44df57ecd8a875bcc0453467845792fa0c120b3ad526de54186bb1e038ceb013cf3ab0d9f2901857fd83ed0bbd53c55d9c2942cabb7bbd2a4ae0d576890e32a3e862f23d31be004dbe387f2f4ec538d106e16e23e15977c1582dbc897b764400a17de2a372e3c0ebe64a6a604d581cbe8b72afa5b5279765a536eb0e982e8900760871bd11b8fd7af4288265deea584e7a1bf3068c8ba8eb54cd1e1f9f85c39fc4a80e474330191b6df0a61590804701ad6c2875572312ea246d4dcade921935495433c4af320956d7917d123412b3dc19bfa67349e1311d25f5a714fd52bde061cbbac3588ab1772661e3b1bf34cd4bb4f37948589a5c2df0df3a41a14e41bc81c871509dee4ef37447f2c2f75cdb2f4348c59306c04e1bc0ba3e6658452fef74742b54ac9d6feedf9c79afbfe6031ee656dbf1e9828d82bf47dd3bd2b716c60ef6dec26441c00bcbe90a5c1630c61bf6263c7615ce1c73ba3b8c8db641b0eb733460345788c1c5c2ef3f7910ce18f36feec7c09575cd931795578dacc10821bfc49dc0b9004be030e191200a71889c3ab709377e35506ed967eeb88491201d629447ac6298e92ed53661b869a67ab71555e02fca3a9ff8400505d0d4d55eabe1d7085f00e0739ae3d0149325bb1dd56587f9e6156335bdd823dff13e23c9a8b35c38834602c7300cab2afe6010e0225596f98eb7a614c15ab3c6d681eb71b931b03d105546351d84767c25be347d6437f1e3015f03635828d0a1e5d8d845daa8e6fa2225ad08aff0f1233dc6e37166caa22d6821293d1178a6e964fe677cb36704f5ddfcaf67f1ea7959d8e027622b5664d618a81e930b3010421039b6de0afb4d12141e8b8bdcb9efa211e5493bbcfd7e6e365a36ddda3074cf7747c0e1e82e20c7b951adccca1704a115e0711ea54b028e593b762b96c005571a2e3d1471ff2cf53af67e830ea658973d7ebc6226fed0b82806d959425b91c0dd2eada61b35f7f852128b258643ab655329f193ea1d917cbd87974518d0cedeacc1afbb94ded6440b9f12dd2ae65a89bedc977143c4a662c50fefee1bfe2acaca8324b0a4cb63de3cbed1c182b101c95656c9ed1f265925953367315a8bd2405bb7d869c7b96ab5933468593be9a6e2d5f78cb55f994f59440357cb2da49706209083c3d232846686f2d3a063735b57a999cbb331a7e14d4e7859dd58d124bafb2622e4e4f4c7b47307f712075322d2396d15e52152c1e019d56da64b97f755fb571439b03128d21bd3ca25bd77aa238e5d4bdfc83e0912b13cdf308c11f44073cdf7382c9b29c4f29afc81f780cb626e4bf5580b973ba30a0912f23e4933e64d7e2ea7d55a5f0510b1c79e1c319a0bd0ab47a1160afcb88ec8e01f3d1c9a381215311353aeba5136bed27776fa62eee91d4a4bf54ce70dc341ef80b792d4120d4ffcb4d4d80b53c45ef91dc3515fe23470fedbc5faab93a9765eca0187b7d29e2cb475cff72eb92575a601142b9f656616d5aece4fb351caf66925325ec99820f9c13468bbd2d3a046cb88d7d8cf96663171a619692b121e2c0794fb173931d9950a85e4e1e5f1a295ad7761ce4d4a792fa4861cd5d8c913776b4f3bd7f508ab12b2ef8e074de306c7dd1c973dba351bdec87b03525f90f44411db9d63600f22f6daff47cc34e70e61a3d11a056bcd219b2f238e9171426d112d08b207c2db9c2429ff5358aa50c29594efac2dec44cb97b9eba454c99560468fa2cf91011253918c2fcf36d2b50a3b94aa3642beb0188333d65e563d138dacea68387c527d1d2732bb4a2241220442c4fe270f291191c9b122b3a49034599eb83b7955123c10e1161a11bdf3fea5349ce50daced0afb8fbf9e926074eb40bdbbbfd2e30a4b2615d1698ca494bef1ddd4940c8ce78774b86b04f90f1d98e28f34e68602a3991a8be115717d4767d1efee8946fce19088a3832aab3d077a250ac70702330fa90252996b3f878a6bfd7cd0a638e1bacb0037c71189dd6192e75d920bc12f43dbc59fa29aad87b9e583c7e5754ef9bb09a8eea90ca72819835f683efba33fc067f3438013175645e54a6423345bd5dafc48b10a4a521439c3252f3cdf86a483e79be0d06a1dcd26e4692a6c4c197ab58f709f71546dd94883f1e96b21bc2a82317d10bc6072871b2fae892ee1e803dfc0c8127f3d5386c64b2b163503485af57790bf70877d12a9a0e6213dd56c1460e2e857832c240d7581c68653da01a8e5ff202da2134d4db1aaaa133532b934d2f3697061c7b574b258ffe15d8b26e09ff5d6716c3fdc0463e2f6dbadf837e5e5d80a1867a7101c10f0de2fb9f010fdcf7fbc3d185221d9f72df0cb0bdc32a19876bfd70067bbf2d8556167a202050279dbc4c16c30cd5bb101d9b2e56ae490c5aa0c3645bb03d999d7128a5ce08c882b949fb3738dee8c1abc190ddf9fcaf189399797ca9ce8ef20595cb5b35e0b51dd850efba19852a0f8408b034bd31d41d99fc6635bd3bd7c5e1a297a0609af7a89d7864b9eb821a1c157e495ba862628f8a4cdac334bf2e4ca8841dc91e0e8abdf7be5f112d396fdd688e1bf06e230349fc00e4aab15db46a809e775c40d666d27b37474875263f6c27fbd5b30891cbf58fe83530400698a603f56947c6dae0cb1ef1b9b2caceaf697b69bc4df859a4ff230be889420e46c38bd80ae17264d4922f6b920327864031bb6247b15c69dfd08ca0e7cdbabb295c537eaab8bddbf3cedbf8c91408d0c4fb1ca3236fbae8fed89ee9330c56540ebf393900e996c6c882ae036ed4cb6394b406bc70014a2dd6e18b33822dd1ecbf5063fc6e015e1d2d99a8c8b30030923735b1dd62d5cec40c61cdebdd60d2b76b332e09e1d0f0d02611c9f3e68fe095b7661e1e20eef54036a8431c52f5745e03b2521bf23905dc5e690ebe84ebf4ba137c914ed6510edb6c3a7282df03c65e8d0c1fcb71d9f8d86b41c3ba0dfb4c8e3012a113453c1dd871bfd9753e5c9f42cab7ab469297cedb49ff1d50e3fb4778884ba0fc8847565718dcc79029bd97f32b042c2cdd0c727df90c782f02f0f11338e0d1fdebe84833bae2c0a4e3c4d5785da85e23c7855166f82fd28f8b18f29f8643f6f4a1fde45129130562fee59f602bea7b0ab90c1228f2ee25f60ff6fa26aa3cdea6f3d06d051516034f89d955cd3493b1f9b80f0259facedd5f05174fef8c222f60bd2bc48836b5059638c98befcfcc8bd85783062eebaa1e19f2a06da8728b40b938387f49dc80b28d6842402e2f54d746c3eef7cdd2eff23e439bd46d1fbf73e2f9fc25a4e4f202783b2eba83bc19126caa0c31c3e9449b623cf898e05e1114c0003f1bcce5f53e29ffcb37145411c538b3a5c715711f384e3f19deb96ee035f4924afa315ac43be81428aa65b530dfbeb5a655e105009b26b146e6f7d09382382d3b2f85c7f51d6cc9b45ea57db97f494a3cbeaf16362a17fd58fb04e485a423d6d0272d6c780807cfdb2f9b359a39604c68d8c51c3814bf25c9a43ed997543748a155c", 0x1000, 0x4000800, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r6, 0xfffff49d, 0x80000}) [ 1931.366030][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.376292][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.386578][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.396330][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.427242][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.427409][T28738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.444457][T28737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1931.452909][T28739] xt_CT: You must specify a L4 protocol and not use inversions on it 18:33:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1f) [ 1931.800035][ T10] Bluetooth: hci10: Frame reassembly failed (-84) [ 1931.810907][T28745] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1931.830709][T28745] Bluetooth: hci10: Frame reassembly failed (-84) 18:33:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1b4e}}, './file0\x00'}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x7, 0x7, 0xa, 0x8, 0x8, [{0x4, 0x1, 0x200, '\x00', 0x800}, {0xfc, 0x9dda, 0x1, '\x00', 0x2400}, {0xfffffffffffffff8, 0x7, 0x0, '\x00', 0x1201}, {0x80, 0xffffffff, 0x40, '\x00', 0x1}, {0x6, 0x10001, 0x10000, '\x00', 0x4}, {0x25ae6ae4, 0xa41, 0xffff, '\x00', 0x500}, {0x80, 0x8231, 0x9, '\x00', 0x104}, {0x9, 0x0, 0x7fff}]}) 18:33:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x10, &(0x7f0000000000)=0x132) [ 1932.475041][T22439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1933.258861][ T8568] Bluetooth: hci2: command 0x1003 tx timeout [ 1933.265661][ T6583] Bluetooth: hci2: sending frame failed (-49) 18:33:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1933.809030][ T8568] Bluetooth: hci10: command 0x1003 tx timeout [ 1933.815302][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1934.528879][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1934.535913][T18171] Bluetooth: hci3: sending frame failed (-49) 18:33:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)=0x132) 18:33:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/stat\x00') ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000140)={0x80000000, 0x1, 0xffff8001, 0x1ff, 0x6, "bee9f63d68fa48b426c6a8f9a681bb37a3da23", 0x7, 0xfffffff9}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r5, 0x200002) sendfile(r4, r5, 0x0, 0x80001d00c0d0) write$UHID_DESTROY(r5, &(0x7f0000000200), 0x4) ioctl$TCSETA(r3, 0x5406, &(0x7f00000001c0)={0x800, 0x40, 0x800, 0x6, 0x13, "4fc564a4e6d1668f"}) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x16) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f000000acc0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x200) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000100)={0x725, 0xff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1935.328883][ T6678] Bluetooth: hci2: command 0x1001 tx timeout [ 1935.335405][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1935.888853][ T6678] Bluetooth: hci10: command 0x1001 tx timeout [ 1935.895265][T18171] Bluetooth: hci10: sending frame failed (-49) [ 1936.608911][ T6678] Bluetooth: hci3: command 0x1001 tx timeout [ 1936.615576][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1937.089286][ T6678] Bluetooth: hci4: command 0x1003 tx timeout [ 1937.096446][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1937.408952][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1937.968945][ T6678] Bluetooth: hci10: command 0x1009 tx timeout [ 1938.688947][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 1939.169102][ T6678] Bluetooth: hci4: command 0x1001 tx timeout [ 1939.175314][T18171] Bluetooth: hci4: sending frame failed (-49) [ 1941.259453][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:33:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xf0ffff) 18:33:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x8100, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000080)) 18:33:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1941.406616][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1941.415536][T28795] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1941.456293][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) [ 1941.466438][T28802] Bluetooth: hci11: Frame reassembly failed (-84) 18:33:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xa) [ 1942.040213][T28811] Bluetooth: hci10: Frame reassembly failed (-84) [ 1942.053801][ T6584] Bluetooth: hci10: Frame reassembly failed (-84) 18:33:49 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) 18:33:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x7, 0x0, 0x6, 0x9, 0x10, "0e6fc5dd2e78ed3b47d2b83307f2562f90c78f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) dup3(r1, r2, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write(r0, &(0x7f0000000140)="a1abae2afb0abe215ae87d9055cf84cd83eb904376eaa5727d2c6facb6ce926cd1b51e42d485cc4730c37bf26f70f8daa398f64b81556ba3e632e3151c25414538fbe757a304e192382f80238367e5260a3a4af56016fd3f0d9120bea33728469d881d0d06df84b1ab3415fcd2518c71813866cfc61d542ef4bdac4bec454dc3153ca8222726644fcba3d65682abc83c7db56540b03af7c85899f637eeda21a5bf44aab2a1cb4206ced43c436f64ff4e6da1e8d1ef7b9381326ac3f223d368cd015c4239c3a530804350979ffae7510926cda05e39d9b1b6eda63ffa6bba6b89729ff50d0215034b", 0xe8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1942.350552][T28822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1942.387658][T28825] xt_CT: You must specify a L4 protocol and not use inversions on it 18:33:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c00, &(0x7f0000000000)=0x132) 18:33:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x800, 0x1) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r3, 0x200002) sendfile(r2, r3, 0x0, 0x80001d00c0d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='objagg_destroy\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1942.687400][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 1943.488919][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 1943.495599][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1943.498953][T23206] Bluetooth: hci2: command 0x1003 tx timeout [ 1943.511449][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1944.128939][ T6678] Bluetooth: hci10: command 0x1003 tx timeout [ 1944.135373][ T6583] Bluetooth: hci10: sending frame failed (-49) [ 1944.688919][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1944.695200][ T6583] Bluetooth: hci3: sending frame failed (-49) 18:33:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)=0x132) 18:33:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) [ 1945.249219][T28859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1945.264069][T22439] Bluetooth: hci4: Frame reassembly failed (-84) 18:33:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) syz_open_pts(r2, 0x2d0000) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/35) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1945.568905][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1945.575181][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1945.575241][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1945.587845][T27109] Bluetooth: hci11: sending frame failed (-49) [ 1946.208965][T23206] Bluetooth: hci10: command 0x1001 tx timeout [ 1946.215393][T27109] Bluetooth: hci10: sending frame failed (-49) [ 1946.768862][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1946.776416][T27109] Bluetooth: hci3: sending frame failed (-49) [ 1947.338960][T23206] Bluetooth: hci4: command 0x1003 tx timeout [ 1947.345295][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1947.649013][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 1947.655249][T18633] Bluetooth: hci2: command 0x1009 tx timeout [ 1948.288858][ T8483] Bluetooth: hci10: command 0x1009 tx timeout [ 1948.859063][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1949.409759][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1949.416848][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1951.489029][ T6678] Bluetooth: hci4: command 0x1009 tx timeout 18:33:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x420000) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x40, 0x4, 0xff, 0x6a9, 0x8000}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1000000) 18:33:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_usbip_server_init(0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1951.690319][T28881] Bluetooth: hci2: Frame reassembly failed (-84) [ 1951.734741][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1951.763874][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) [ 1951.797951][T28884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1951.805023][T28884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1951.827137][T28895] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1951.844865][T28884] vhci_hcd vhci_hcd.0: Device attached [ 1952.138931][T23206] usb 19-1: new low-speed USB device number 2 using vhci_hcd 18:33:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1000000, 0x7, 0x0, 0x7f, 0x8000, 0x200}, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x2, 0x3ff000, 0x9, 0x200, 0x8, "207ae16dfa302fb8d5e8e7392f16751a5718f1"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:33:59 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x8000012) 18:33:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1952.413367][ T6584] Bluetooth: hci10: Frame reassembly failed (-84) [ 1952.424830][T28910] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:34:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x4c01, &(0x7f0000000000)=0x132) 18:34:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200081, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x9) [ 1952.949810][ T10] Bluetooth: hci3: Frame reassembly failed (-84) [ 1953.728956][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1953.735964][T27109] Bluetooth: hci2: sending frame failed (-49) [ 1953.808877][ T8483] Bluetooth: hci11: command 0x1003 tx timeout [ 1953.815297][T27109] Bluetooth: hci11: sending frame failed (-49) [ 1954.459042][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1954.471340][T27109] Bluetooth: hci10: sending frame failed (-49) [ 1955.009242][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 1955.016371][T27109] Bluetooth: hci3: sending frame failed (-49) 18:34:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xe00, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0xfffffff9, 0x2, 0x200, 0xa502, 0x15, "fcaf4e3ae52e9dd53e6b1059d83a09b99c154d"}) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x3, 0x7, 0x9, 0x9, 0x19, "9a43dc232f8a26e30d93085792ef7c5fa1e891"}) 18:34:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)=0x132) 18:34:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8440, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x88200) write$binfmt_aout(r1, &(0x7f0000000140)={{0x107, 0x3, 0x0, 0x1b5, 0x154, 0x3, 0x1e3, 0x5}, "a88293e901db7dc65515f1b71e3121dbf49b825b21af5a52d5bd6ad6f5d8b38a3f9ab5c7df724f6ff44bf4a0f6a36384fe892b045a247e09ff02713563adb34d791b136ab5fe187cf50d782714b32ccd301b650f236f5b026d4d32120925ca443f68696544e23d49a3c47e7fed570e4437218b1cf4dc0d6839245dbd742dbdbf8145e6374d45a7a7edd55802528d6e83c3d611ecfcdf9bfd55317715afe8a8bdc5bf876d8704e546f4f0a1c5bff614ee5b60802e61d1409800113730301767bb0a50400c99b59358ea890afdd7c9730c5e27cc2e2ad821e71ce7"}, 0xfa) ioctl$KDSKBLED(r0, 0x4b65, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66806c653000"]) syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1955.534075][T14535] Bluetooth: hci4: Frame reassembly failed (-84) 18:34:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x30300, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000200)=r1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x13) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000240)={0x40, 0x800, 0x2}) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r6, 0x560e, &(0x7f0000000000)) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000100)=""/47) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xd) [ 1955.809101][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1955.816899][T27109] Bluetooth: hci2: sending frame failed (-49) [ 1955.888991][T18633] Bluetooth: hci11: command 0x1001 tx timeout [ 1955.895350][T27109] Bluetooth: hci11: sending frame failed (-49) [ 1956.529027][T18633] Bluetooth: hci10: command 0x1001 tx timeout [ 1956.535484][T27109] Bluetooth: hci10: sending frame failed (-49) [ 1957.088972][ T8568] Bluetooth: hci3: command 0x1001 tx timeout [ 1957.095192][T27109] Bluetooth: hci3: sending frame failed (-49) [ 1957.568989][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 1957.575243][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1957.889038][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1957.968955][T21258] Bluetooth: hci11: command 0x1009 tx timeout [ 1958.608919][T21258] Bluetooth: hci10: command 0x1009 tx timeout [ 1959.169183][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 1959.649092][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 1959.655546][T27109] Bluetooth: hci4: sending frame failed (-49) [ 1961.728948][T21258] Bluetooth: hci4: command 0x1009 tx timeout 18:34:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2000000) 18:34:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000140)={0x74, 0x40, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x600e40, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x200, 0x4, 0x8ca}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x5, 0x8, 0x7, 0x7, 0x8, "ba7ee6336eee55e6004f025c9c9713600488cd"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1961.879226][T28893] vhci_hcd: connection reset by peer [ 1961.889754][T14535] vhci_hcd: stop threads [ 1961.894400][T14535] vhci_hcd: release socket [ 1961.921521][T14535] vhci_hcd: disconnect device [ 1961.972204][T28956] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1961.984842][T28958] Bluetooth: hci11: Frame reassembly failed (-84) [ 1961.992403][T23206] vhci_hcd: vhci_device speed not set [ 1962.006308][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1962.036199][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) 18:34:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b34, 0x59a) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18:34:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = dup3(r0, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xff, 0x785, 0x58e5, 0x7ff, 0x18, "b938a5438e257e3682e985bc969147122d7373"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$security_capability(r3, &(0x7f0000000200), &(0x7f0000000240)=@v1={0x1000000, [{0x4ff0, 0x8000}]}, 0xc, 0x3) flistxattr(r2, &(0x7f0000000140)=""/176, 0xb0) 18:34:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000140)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x227f}, {0xff, 0x2}, {0x1ff, 0x100}, {0xf7, 0x8}, {0x4000, 0xc7}, {0x1, 0x7ff}, {0x6, 0x400}, {0x8, 0x7f}, {0x3, 0xa0c8}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000000)=0x132) 18:34:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8000e) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40203, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1964.048941][ T6678] Bluetooth: hci11: command 0x1003 tx timeout [ 1964.055198][ T6678] Bluetooth: hci2: command 0x1003 tx timeout [ 1964.055955][ T6583] Bluetooth: hci11: sending frame failed (-49) [ 1964.068009][T24244] Bluetooth: hci2: sending frame failed (-49) [ 1964.528839][T21258] Bluetooth: hci10: command 0x1003 tx timeout [ 1964.535289][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1965.249016][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 1965.255281][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1965.419072][T23206] Bluetooth: hci12: command 0x1003 tx timeout [ 1965.425389][T24244] Bluetooth: hci12: sending frame failed (-49) 18:34:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)=0x132) 18:34:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) write(r1, &(0x7f0000000080)="b9ca6760494e665b31a6ed2bd05f2f1b760e", 0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x6, 0x2, 0x100, 0x6, 0x3, 0x6}) [ 1965.718357][T29004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1965.747773][T29009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1965.853431][T29014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1965.874740][T29014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1966.129005][ T8483] Bluetooth: hci2: command 0x1001 tx timeout [ 1966.135298][ T8483] Bluetooth: hci11: command 0x1001 tx timeout [ 1966.136037][ T6583] Bluetooth: hci2: sending frame failed (-49) [ 1966.147263][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1966.618895][T23206] Bluetooth: hci10: command 0x1001 tx timeout [ 1966.625626][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1967.328936][T18633] Bluetooth: hci3: command 0x1001 tx timeout [ 1967.335664][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1967.499100][T18633] Bluetooth: hci12: command 0x1001 tx timeout [ 1967.506130][T24244] Bluetooth: hci12: sending frame failed (-49) [ 1967.809145][T23206] Bluetooth: hci4: command 0x1003 tx timeout [ 1967.816041][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1968.208895][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 1968.209047][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 1968.688887][T21258] Bluetooth: hci10: command 0x1009 tx timeout [ 1969.409011][ T8568] Bluetooth: hci3: command 0x1009 tx timeout [ 1969.579151][ T8568] Bluetooth: hci12: command 0x1009 tx timeout [ 1969.888946][ T8568] Bluetooth: hci4: command 0x1001 tx timeout [ 1969.895187][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1971.968883][ T8568] Bluetooth: hci4: command 0x1009 tx timeout 18:34:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x3000000) 18:34:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024800020000000009047d00031d5abf0009050400005539000009050b00000000000009050200000005000009047d010134feaf0009b50e00000000690009047dbe"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000100)={0x0, 0x0, 0x3, "10de51"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) [ 1972.213437][T29030] Bluetooth: hci2: Frame reassembly failed (-84) [ 1972.226626][ T10] Bluetooth: hci2: Frame reassembly failed (-84) [ 1972.438917][T21258] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1972.679034][T21258] usb 4-1: Using ep0 maxpacket: 16 [ 1972.819126][T21258] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1972.827330][T21258] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1972.835920][T21258] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1972.847116][T21258] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1972.856576][T21258] usb 4-1: config 0 has no interface number 0 [ 1972.863917][T21258] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 1280, setting to 64 [ 1972.875492][T21258] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1972.886148][T21258] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1972.896742][T21258] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1972.910439][T21258] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1973.089102][T21258] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1973.098359][T21258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.107370][T21258] usb 4-1: Product: syz [ 1973.112124][T21258] usb 4-1: Manufacturer: syz [ 1973.116705][T21258] usb 4-1: SerialNumber: syz [ 1973.127212][T21258] usb 4-1: config 0 descriptor?? [ 1973.175299][T21258] usb 4-1: selecting invalid altsetting 2 18:34:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x134) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x420002, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000100)) 18:34:21 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1090}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000bc0)={{r0}, "d62c5803cb21f46141f1357d80932a80d7e9de0abaf1d9e49ca8a78b10930150935bbca189bf4a50f3b903cc0f1ea7bc59f78507c89de6328ac4db4002c91262fab80210ced7abd1ceaed42e4f22eaefa9fcf72eb5a4eab61e9c6c2dd8c60f6e3622c30277ced27d1f94412775b1991ada4cc189732527a59e57cebd012900ca02cc881be3cd39df73d59691b46156affb311266528c76c50d7ebeeec867516a921726f67c4ce9304c45b61b160fb9400d4c8b8554d858163d8eb7126883cc03b0afb1b21d2bc82c81211875d4668eb15a0f69f93b2561b3db489fb51e89470a95b9fea70982a9d643b53e86551bfdb8b13b454b1d76d737ae1cb0aea18427581cabbf1fd2f73db0418f368ca92133099689b62971ba8d8ede4424a7d12b5f29daa8c47c83864468ccdbe59ad7ad860c3a8be0e7f54f25895ca0e3b9b19d40545ba1d305339e3949b65de4f9024596e4d43ac1abeb92c2755d86e757daa70e1aa42177cf5a2516f3e9b7492338f784bafd422a9e390f675dbb69fdb2a29d4737ec27e9c3028c2a597181887d15ce63ae06d7515de183057201fda80bab1b0f88a239e4facad252b54bf85439f8b16b5bc64937ee521c804c40f7edaa7c6585cd1e15dc7b6c8ada4865ae68e0214a2cc0a96525b857d2a8b4cf01da67780358b1c2d6bbc2f26a1be2fbfe091db87a213b6d774c4ea38ffdc932469b76fc069ca3464ca22d8a41e2cc7df36f1cf2f440275c22b1cfe18db3ed11fb8c54b9c3c523d2e564f39e3c7eed0731176ce84103972d8802096e7c373c01b99973e141a6d82a2e429bee9f99df64812bb349f2eb1aac8476b2daac4abbfe41982c8da2f46c102d3e8dcde0f30366930468eb0527e503822b32c13409b29c90435ab73a471716bae4b35e845f5a17be360cd04a59a02f722fb261e9bfb51e4cc28a4728315e6609e720358d55d320d52cf82d960bb98599689a9eb5887052b8252d000720a17d8a4cafbc2499a0e1811e625c16805f1ae09e4fa1933078a0346c690a21142f8d3181088690b11c8965928fc8cfb254e2d53d0d4e68302860b9ecd28509e4b352936dc99a8dc04a0ee961b285b646a9efd1d1f606e357205a3506d8a0bff8f1d70ed5cefaa9b9350f2a7161bb48751f323bdea018ffef5a36a6e635f52f4b98512b300b8b18527bf13f40ef8edef957146f7a6011c6d647fc152fcc38704b08c66ba448a9185c8c4a34ce424dc0ab8bf6c757b0475a6fd2478a3ad6934a2e028ec7ffaeb8069cd58e812b1a083d4782a3f6a1d903840dbbfafa78e8aa119fb541027762509a3275120346c4d0dd0c069928b4d3b2f703b25a082c069f3cb0afdafd69c3bfb5a871279cdb5e2584c21de4a82885be2382540ade34c1ffa34e6c8703a4a1dccbeda1fa28b182386dd01a06de8e628c8b03b31932713daad858558dc7d007dfa01e7c21b5f3e484f064abfd8a82bfe51bda0041fc93de180a8465bfcc4d3d81e12bbdcec3162722cd80a156fcc62da0a35d8936ea91e96413f937f6eefdd10b34e2eb5840c49eb0166ab80f9d79d49b88e285c18cb63df52b8140a4b69d04a1f392543b6c3122c17898a82b773a85d55d066e87d789880513e47d705abaf5edc64876035ff6231796e25b8b90d16e2af0429d8f27f50c5bae1672b1e59290799c63713d26adc1da962c4b3ab7b4520f9b5531b7ab30d366c54a1d33d7b582b3a6fa69455f71180bc722b33205302bf7c86744026af693986c9cd8d8c85c870a1d7d9a1340ea040c59437ddfb7b5058b9b810ceebcb3f9aa6acc3724edffc3f0e25f2389452a9fd3b591ddeff6616ebc6811713447e2f4eca492e13549393ee47fbbbc815f5eeff4986a9e455e1ceed1b259ccf13b2d204937fc0ed2d7054cbd52bfe7efc9795ab81768dc0d33fb4c3a3c5c43a4441249a794cabd4c7d6614615bd3f16e233e3cf33cd5711275ada4e7f913ed894144d2e2ba6970b60045352f8f921599f93844d07b3317b94ffbd2f5dd207e1cea94eb53632f3486bb9c5c867d6c34ddcf1684ea55062ae12b45a3564fe460876df3e632259ff2b7de005d6a6b28a06585ed7d94125040e58a88fddc227842f4803505623acab07b31b4e831949df5c62e85fed0dfef3fcf79a25f0b17d978948b289516ab0e857f561a06a0bd11930f358184d6b771655fd9c1b1bbf394b92cb64ccadb84646cdb59b9202465da390d10a50878afc2778a5ecff76267d3c59ab5215e934205f2a2eafff8babe5454f4a3bd658e1a5202ed613a92d8c006d81a60072433106cf5a3dd3bdbed58b87df89829973a0c40c748cf3d4c2f3b5b14ed0201564777a1943d60b32e8513b6e2b09f69679f625bc06d7c2de6d88d19c9ff2be29c58cab22a05b7200606d7c878bee0894402bd1c3fd1008f37e568022dc1940d0caf6c95aae17f2fe796e9a41fcdb98fb55ecacdca69f164d6ba70dab078ef0df391798fc09b9f8075c424987ca1eba44c9c459555414c9fded974322c1dbc3ae0ade751a024610a1bfc6f89169e424d022b43f6483d34a829a2f5eec83e3f08e84920d5a43d155b7457b55dda189ece5892fd3796720b84b1e98caadca403a33e7515879a3fe6e5d915e001e70685ba2db8d6c0e4a958ef8b943bca4311a89c68d05a5176f0ec252b7437e48f1e45ffdad9c5ee5cec054cf843fec9edc4db8c153bccee7511810e21cbebf7dd744cf2f5efb116e7f2594e84e1dfdfa81dddc0b39e9b712e9872c9eb399775089279859bb3c0a6c05e01035a42631a6dbdd02a31d9cc7b68bd3814f092b859715000d0004985dda8208e2417e0aad62d60118b726fc83a83caaf2693664d8673a9b034de6ec490480f96727552e4a3b56735d7f7afcb791c10dda8265b45a90ffc33412535b31133cb6a04606be0cf108391287f28ca35ad273d911394ca96544e2cbd9dfa9960ba2fc5133796d0f8515b4ea331925cadb3c826f4b6468681700b2902741e64545714e245f0f1ee5896732e1ad1d8c65b3f3bc35f8f48a6cfda78922c732041c0b14fb19de01e09f111456a10db5e3e31cab5a525705d1e38d6fe6ae305c4fe4378d3e17970889fb1929295ab8538f5a3b8d2f25209423634d44bda434ecdf09e5e8fd205a1ac3f6f8f69999db8ac20b6499d99ddf1b2fbe11305e668643d1993c338fa84442ceecd477352561778eb191b08d3bda92a978c86cdca792ad5ca88a700f896ff217f17869e8b4d8ca821ee96002f9d784c1a5d6195f07ad9b5cc0b4b1ca0158e8e5e736aa30940f191cb5ef3b3fb519b4a0f009cc913468749f6949f9f8b144c846f7a0e445c1f4e168a5afc5aaf3ad75c2e4d993cff9b3f7628b1eeff6804ce2b78b39f2d4509af5b700479b81efd425f7a05f7d8c0314614cf0f9873e4ed0185376f0e1a807a7593f5e6fdc7aa26f5967be40aaf13c2a2d896d5a3d53a570efc07fbdcdaa1a8581a4c99835eb9bb8e508a86b7184dc3635cf8d94d11c17de7440d79457ce74313a91e678f4ab5fd79d991ce8ed56874777e9a7da24eea9121f07ce8a6ee92fca3302b8fa545461b503024cb4293664746c88fd30b7456579e89093faa638d7d17c546f9211ac9e3cf969688a9002427014d4ee14c98038ae0dc66881b32bf2154a53035c8833190a847e8cfc46a740a89766f737e81d7133245203c60ae5585b65084795f4ec61f7a990be223be783a8d13a6d36992cc248dbcffe4b4cf13f64b0bf044c2cca88e6013d488b0d36e6a3f636da3d0e4bd7f68222f8b8989013f59104a7d36d605f882cb1b8cbe3ad71e750ff4b015c2dae2bcc68ecd4058524555fe86499ec9caf19d957e780605dc16c7bd6fa3ae65a4a9ac7da920f9e5331f9b29b73815107051c68e14e7f1d8a85a635469d0b641e8961c83caa214f8e544d3b6af643348745aef3f2853e710d297c1a274a36386beb6a4efe1b65dd83eeb803b6c48a5fec76099d4bddd8a84a7dc4a0864a489f31f6b8f0e0626f1439dddd32204987fe675f53ddbbd798d029a245f6e38f46dc20876bd96142f4316c18b83748f8a7b513e813dc9d2a70a2b277f5b80d92c7a57e4c540f9b19180af0c05e2ae023dd399304571a81a6179a44aecab17163b6162e1361dbe873e2bba135ffc0ac16057cc3658ca7722cc559dcf898950a5e91dc1ea527cf1462ad11a592634ff69f00bc5fdb23feb1327093ff392bb7db0754906ce981c15491da54b0f8b7237c2e95ccd63e6092782a0f9ba1779336b3950acf9fe72d7fefd220272531eee593a66976167dd2c9867d45228bb881c6a8c533a6d9f8357f63a042d88b92bb20e3bf7021c414d072e7598ceab9ba1477815b959667bafa5a74d035a72c8ba85696ff3ee3ef1994420dd94fb5ab8155b6e9fa6e7697897e5b9c463681ffe3e548afddd39b3de58a6e16157c3a95e075312479bffd2a9dd0b47097c0b98a83f45a17afa46443bb45cd6815b91a4d60d5331904ed5d6241021d830359339c69e92dc4cdebf92f38a7e058e4ba9a0c59dd66b7e40e22fdf699eeab4837baa2285d90dc90438e3e064eb87d369e94954e73adbd2d383d7ea8b6f3fcfc8f71d363e9dacc17341f1952eabf19df9f014b64fefe0da92cd194ccb0939b30c29faf971897de86f26b1f1803ef38abb5dda90c82de3095029724423a4ba65a72ca56d1187a2b42b1c045f3d18d66f400a0a9f80e821b2e95ca6c6eecab14f6f7e01ca37cbffb02acacab8423db98f3fdb02cd2b0fee3a2634d6d40e1c0ec3f18de19e8ccc0ad3d2ef5cc467d60d0dab743ab7c0e0c82e6164f86a83478798bf2f0194de43c05aec9ac73242b2c8259401b274f348a94503ee66afcbc262fd739e2f81aa2f57ca0f354bcc61ecde52be372e5d250ccad1b9a1c808b0209235d1626a2b481265f6f99220b01d337091beaea32a7e06b23a445c1da9215e9c195319f54f37963c18a66db31c5b3389a0496d410ae255b3e722d52328b2ed3330c9b30474b359b140325f047217432c0508a9f98382c12f66053111036e71841d5cd6b700c4c897d315152725840fb7e26ee72037298e3718fd31eb9c7c5261f3158c1a9611b7aa0a0eb7bf8dd0154d514829957bfea304505c23c83c8f403bdc91b12e21bb844a55d2879cb401a684e3151a4969baf6585d0d408edf1c5e11123b342d6569cf1cc0307da54571b2bd20666acba2dc575979b4531576d7eaffcb7f06c96cfa5cb79d3442e000f4eb9ff7f9cd5744dc18cffeb179ade2b11bb142bade366cb2b009a80a6c8020ae9181eaf87ac0727f5a5a01f5cb3bfebb643cec9d5757e26f1f81ac818897d105f7e0f8abf8ef03a368268bee7d91c43e3364bf348333df9cbfa192a7b5c8ada6b87b7fd96978a14a1fd8f123613e6d1001f7b080b3cc7f5d908b339fe91175eff544ee06a52a9e3aa09b6b57ecffb294c3df80d98c1e5ed4d550aa59efc719486df05be429436985f1923dd827048b9609c8597b432306047b8b73760e15487a82cbf73a6b41f74f9f8e9a7f44ccc058bc0b2b0fba875af05daa837a129fccf8f2cd511d45d4ae4e8a81061cd744931023012d9e6835036edc0783437e0b58b490793ea782d4f47be997ddd20b17ee1c03af9185da6be311e7eca1ed0d3d14b8bf285db6f595f74d7bdf6a0c03d703683629401afa0f9fb63fb5479bbcfe7eb0848ad0ee4fcc4a2b1965849ae738629468f55396da7a9a33fa3235c03949f3b01d8522f662e159eb67905a346fbd78cd39ee4ce144"}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x9, 0x0, 0x7, 0x5, 0x0, 0x4000000000000000, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000640), 0xb}, 0x104, 0x7ff, 0xee0, 0x3, 0x9, 0x4, 0x100, 0x0, 0x1e9, 0x0, 0xcfed}, r3, 0xf, r2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"d82b6f71083298acb70b1fbdab8f0c07", r1, r5, {0x9}, {0x1f}, 0x1, [0x20, 0x0, 0x47, 0xe23c, 0x101, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x5, 0x7, 0x2, 0x200, 0x5, 0x20, 0x8]}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000780)={0xfffffffffffffffc, 0x0, 0x0, 0x1650, 0x0, [0x7fffffff, 0x94c, 0x5, 0x1]}) 18:34:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000000)=0x132) [ 1974.038441][T29055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1974.050659][T21258] parport0: fix this legacy no-device port driver! [ 1974.062861][T29055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1974.084889][T14535] Bluetooth: hci10: Frame reassembly failed (-84) [ 1974.098063][T22439] Bluetooth: hci3: Frame reassembly failed (-84) 18:34:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) semget(0x3, 0x2, 0x622) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xfffffffa, 0x3, 0x401, 0x2, 0x17, "611c3eb518d15593a484be2b1cfb149403603d"}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x301000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000180)) r3 = semget(0x3, 0x0, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000080)) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x7fff, 0xfff, 0x40, 0xfc800000, 0x19, "58a666997248019c6d265bd4df1afa2cbcbf65"}) [ 1974.135336][T29055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1974.150762][T29069] Bluetooth: hci3: Frame reassembly failed (-84) [ 1974.154123][T29067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1974.241992][ T10] Bluetooth: hci11: Frame reassembly failed (-84) [ 1974.255862][ T8568] usb 4-1: USB disconnect, device number 10 [ 1974.299204][T21258] Bluetooth: hci2: command 0x1003 tx timeout [ 1974.307909][T18171] Bluetooth: hci2: sending frame failed (-49) [ 1974.322844][T29081] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1975.069031][T23206] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1975.250544][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.257293][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.318968][T23206] usb 4-1: Using ep0 maxpacket: 16 [ 1975.459993][T23206] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1975.468367][T23206] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1975.477762][T23206] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1975.486973][T23206] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1975.496899][T23206] usb 4-1: config 0 has no interface number 0 [ 1975.503744][T23206] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x4 has invalid maxpacket 1280, setting to 64 [ 1975.515571][T23206] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1975.526283][T23206] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1975.537188][T23206] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1975.552298][T23206] usb 4-1: config 0 interface 125 has no altsetting 2 18:34:23 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0xc0280, 0x90) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000016c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000180)={0x14e0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_b, @device_a, {0xd, 0x486}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x24, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@device_b, {0x8}}, @sp_mp_open={0xf, 0x1, {0x82, {0x1, 0x2, [{0x60, 0x1}, {0x12}]}, @void, @void}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x136c, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x62}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x3}}, @a_msdu=[{@device_a, @broadcast, 0xc4, "8bae03ab8c3e183cc74007d581dc51317f385cc0b67b656af1dfa99ea96fcb95e4ab9048f2ef1df33c477ef189fa5a55afd0574de403bf6f0cf7129bf45c620f68e28a3142d084bf9c2de891a28becb0cab259050310040d0fcb5b103cde9fab9cd71b478d51da1118946090417a9fc446540b20207546a6fbdde4f654f6734c9ae3e6ac8530f294168db5eeee1a2f0095d10b628d7c4eb17a5cfda8d2e1964c49ccef592fcb27ea240ad754fd6a397dc9aa9f6a90b2338707a20a7bbc36de11784730c3"}, {@broadcast, @device_a, 0x1000, "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"}, {@broadcast, @broadcast, 0xa5, "4920f2919574cac5295d45e4191d8845e549d5e17376fd93dc02336e076bf7988da2c44371e4574bce5e6037cf66a6d0b13b30778685b19c2714119a94b5cfc957672aff252ab27d2075c323edba8f3cc807157c5b2b1073d49bac6cf49dddafefd7d26a6abfd2c245d7992d0cde02fd3496b6cda51fd55310a7f83451c680b7ccc80862a7d2252c756cbb25ac74fe394b5efe98fe4043b3bcd8b0562dfd0120682c201b24"}, {@broadcast, @broadcast, 0xba, "fcf1fda4b8cfedcd2e1a14dd2ebf6744f9a77dd0bf00b7f964d160231a98105b079d59e44f8fe1dccfa41b4490c923bbd8205f8464c15a364a761221564ee4bef2d5876cad63297225b50c4dffe0722a906329976d9728fbe23c130f507908bd74b08a9602b1e9ceba8262231907bc7d78b58d9b48078c533401cc066b7c4f73657e2a5614aa1959f6a2760775779c0b7452341dae0d2efe73450489948073006a5c7a591160c40d49d99ad717d04f6c156e43d8ea22f7e7d111"}, {@broadcast, @device_a, 0xe1, "72ef43b18ee0ff5ac232bfa5a7eec0b21344656362b87bcf051d8a488a3cdef9832540731e336e9fb46a001ef25f23448a353a9df727ab28a34768ac6d6aa017e785ffbbe19ad7d5c4b1932081aa3b9c0b2af15274fd41085eb5a0c21ee91b5ee7890dedd63a15ac24b93169a4475f71c678df59ac1908770b40ac3f44a9d971ddd561f6630d7baad421f5fbae5f0d67092c99e8144f711e3b6561ec64a9891ad2cb6e8d0ed133032addfa3c8a88bf53a01cdedbd0e1e1d455f36c1d4040d3684aff0cb73ee822914f7f58735325d82d15e27780092663094d222ceb5c7df6dfe7"}]}}, @NL80211_ATTR_FRAME={0xf4, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @from_mac, @device_a, {0x6, 0xff}}, {0x0, 0x1, 0x0, 0x0, 0x7}}, {@type00={{0x0, 0x2, 0x8}, {0x81}, @device_b, @device_b, @initial, {0x5, 0x7}}, {0xb, 0x0, 0x1, 0x1, 0xff}}}, @a_msdu=[{@broadcast, @broadcast, 0x57, "961ab31b9773eddd92f77707100a80f0f200818ac70ad36217cb399bc6f9e1799fdb30c763fa293ea0e43c3e4d557a3f1a2411ce1379493f4c0e882c68fb3e1e5723991b5b3e76c22b5fc2bda4fa0eb0ad0a648f406b5e"}, {@device_b, @device_b, 0x43, "58dbc5917acaa2099620ea69e42e6c4fd52e032f7aeb3def21704b613883b769c85074a90021694863859ddcd968d18c010cd705e1bd67bcf28fe913ce3f9049872bda"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x14e0}, 0x1, 0x0, 0x0, 0x20002000}, 0x20008004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0xb, 0x2, 0x0, 0x0, @str='batadv\x00'}]}, 0x20}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xbc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x16}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x7ff}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) syz_open_pts(r2, 0x252841) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x130) [ 1975.660336][T23206] usb 4-1: string descriptor 0 read error: -71 [ 1975.668274][T23206] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1975.681586][T23206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.703769][T23206] usb 4-1: config 0 descriptor?? [ 1975.739006][T23206] usb 4-1: can't set config #0, error -71 [ 1975.755159][T23206] usb 4-1: USB disconnect, device number 11 18:34:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)=0x132) [ 1976.129588][T23206] Bluetooth: hci3: command 0x1003 tx timeout [ 1976.135941][T23206] Bluetooth: hci10: command 0x1003 tx timeout [ 1976.136054][T18171] Bluetooth: hci3: sending frame failed (-49) [ 1976.143311][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1976.289069][ T8568] Bluetooth: hci11: command 0x1003 tx timeout [ 1976.295561][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1976.368878][ T8568] Bluetooth: hci2: command 0x1001 tx timeout [ 1976.375943][T24244] Bluetooth: hci2: sending frame failed (-49) 18:34:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x3) 18:34:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ppoll(&(0x7f0000000200)=[{r2, 0x1b0}, {r5, 0x262c}, {r3, 0x180}, {r4, 0x8008}, {r5, 0x2000}], 0x5, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x6]}, 0x8) [ 1976.618106][T29114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.627206][T29114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.636672][T29114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.650864][T29115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.659648][T29115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1976.667931][T29115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1978.048864][ T8568] Bluetooth: hci4: command 0x1003 tx timeout [ 1978.056011][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1978.209270][T23206] Bluetooth: hci10: command 0x1001 tx timeout [ 1978.215734][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1978.222318][ T6678] Bluetooth: hci3: command 0x1001 tx timeout [ 1978.228524][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1978.369208][T23206] Bluetooth: hci11: command 0x1001 tx timeout [ 1978.376831][T24244] Bluetooth: hci11: sending frame failed (-49) [ 1978.458957][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 1980.129046][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1980.135534][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1980.288864][ T8568] Bluetooth: hci10: command 0x1009 tx timeout [ 1980.303398][T18633] Bluetooth: hci3: command 0x1009 tx timeout [ 1980.448987][ T8568] Bluetooth: hci11: command 0x1009 tx timeout [ 1982.208865][ T6678] Bluetooth: hci4: command 0x1009 tx timeout 18:34:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x4000000) 18:34:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000140)) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1982.415322][T29124] Bluetooth: hci2: Frame reassembly failed (-84) [ 1982.425047][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) 18:34:30 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x80, 0x40, 0x4}) 18:34:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080), 0x2d51, 0x482002) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40200c20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltfilter={0x54, 0x2d, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {0x7, 0x3}, {0xd, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0xb5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xad, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4048800) r4 = signalfd(r2, &(0x7f0000000240)={[0x101]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000280)={0x3f, 0x5, 0x1000, 0x410, 0x5, 0x98c}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)=0x133) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x1, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x453, 0x200, 0x70bd26, 0x25dfdbfe, "0bb9", ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40070}, 0x40000) 18:34:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000000)=0x132) [ 1984.451046][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 1984.459507][ T6588] Bluetooth: hci2: sending frame failed (-49) 18:34:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x1, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x13) ioctl$KDADDIO(r0, 0x4b34, 0x139f295a) [ 1984.913130][T29185] xt_CT: You must specify a L4 protocol and not use inversions on it 18:34:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)=0x132) 18:34:33 executing program 0: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2c101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 18:34:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x80002) [ 1986.222994][T29200] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1986.459102][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 1986.465569][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1986.529489][T18633] Bluetooth: hci2: command 0x1001 tx timeout [ 1986.535898][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1988.299048][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 1988.305337][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1988.305497][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 1988.313062][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1988.529244][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 1988.535411][T24244] Bluetooth: hci3: sending frame failed (-49) [ 1988.609143][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 1990.369171][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 1990.369213][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 1990.382215][T24244] Bluetooth: hci10: sending frame failed (-49) [ 1990.389009][T24244] Bluetooth: hci4: sending frame failed (-49) [ 1990.609032][ T8483] Bluetooth: hci3: command 0x1009 tx timeout [ 1992.459273][T23206] Bluetooth: hci4: command 0x1009 tx timeout [ 1992.468048][T23206] Bluetooth: hci10: command 0x1009 tx timeout 18:34:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5000000) 18:34:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001380)={0x4, 0x18000, 0x8001, 0xf2f, 0x1, "b281680000000000e4ff0000000700000000cb"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r0}, r1, 0x14, @inherit={0x70, &(0x7f0000000300)={0x0, 0x5, 0x1f, 0x4, {0x20, 0x4, 0x300, 0xffffffff, 0x7fff}, [0x0, 0x0, 0xffff, 0x1, 0x3]}}, @name="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"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:40 executing program 3: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) r0 = socket(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @local, 0x19}}, 0x1, 0x8, 0x1, 0x401, 0x0, 0x5, 0xc}, 0x9c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 1992.633337][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 1992.647654][T29221] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1992.670907][T29229] Bluetooth: hci11: Frame reassembly failed (-84) 18:34:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1992.683272][T22439] Bluetooth: hci11: Frame reassembly failed (-84) 18:34:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x6500c0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000000)=0x132) 18:34:41 executing program 3: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x4, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "b9b9cea03987b49c"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sendmmsg(r0, &(0x7f000000a780)=[{{&(0x7f00000001c0)=@phonet={0x23, 0x8, 0x5, 0x7}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="4f70a3108a7a376a6580725f20bbfb09bfa17e9548fd27b61cec60a8f0a6f873d888e1ff144f926d77733078efaf01938139137e92cb8fe46a2c9a116482", 0x3e}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000300)=[{0x88, 0x109, 0x6, "461500cab32bb3ab9c765c23d6da098ecbe045f5995721a3ce3fa638cc80319f56e3ef1c0ecec1e7aa0efda27c5870b2c053b2bd5e0736cfe3da0f1d992151f41d90630e4abe5897038096b8b0b8a4b7864006a84b8fbf7a3f5e6d18446d5297699ed97bbb73548e41b034127d06390058"}, {0x38, 0x1, 0x180, "255bdad0a7c519bbc7762f2ebc2c152294b8c9224ae45ec29e793b4438626e895094"}, {0x30, 0x6, 0xff, "666c79dfbf48168594def55d1eabb5fd50409cc633c51e7acb840b"}, {0x1010, 0x11, 0x10000, "e6d2330471701c6c909968976748ef72e9a2696852f01284ee3160b5d31b9bcc310baa7f732b814b48b42d26c088d8925fb8582df942564f6e5c7e21e0d2195624d3ddfeb0b20fa1a5cdee8b484d4fd84653d45c0d07b13b2411fb0a2c55f277bdea87594a2933f3f1bd65522a37eda5509096f6cb008d4cd8c843c7347f98aefd318929e2f445a2f200b86ccd0bb3c99ca36cac388ab23e0c20607e73c316c7164b17e0ff8239b79296d105ab563b6093d89a8fbabcbab6e32f6cb18c20c5d62adfe6795250cc2d65655ad393afd428ad854333e0dd511178255bc63f38ce1e9147c9e0f39395c89429e69e99e716cee8f42a05747822d94e6dccc966601e3f04f4fd4a4e99e84120bb82532cb68e182efdd1c22ebbfa3321d1510c7aa7f056ab95d515dddc13b9f2195eacb7b22d59d020573d795f2ad2918ba6cba743c7270202c8e2a731adbbcfe0bc9edddbdbd8f8a36826fcd8682b8e0676df3140c127612853e9aca07529ae558aeab92de873b0d0681a24d90d9e208ccecad5d1d5a8eab19d35f35b779b69d9800d387b949879b05d3dd47f6aa1c6c8dac1fa99ebf9bf36fb8d5007c95877d8a0911ec9a605e3251ad9c7a99137590fef42b86ba9ee1ef2dfd15e9d96cad37c51bea5a9b028e4759e3f1055d163e5161eff8a1aefdbd0f91403ae1f3bbe2abd93ae5da9d7a79a4cbb1d6e3543cada112f209ff1f6b44279395709277a89f0709227a33708e459bfbc73797c561456424f3b1c4e017377f19c4afd72f45ca1ab22e5d5f36ef49627b0b73ee9102e205e923d6c00c8b2edae16b45c24152822d2276cff6c6141f3870ddecd3c1c8f41af8db5ba4043c2aa2ba8d9961845f8c5f69ddd2721b3abcaca90a6dabe24635a0f0a5d0655fa1a7f5a50dc46a52556524eb28e52ad64346142de96784aaae6f7e8fa60df51d1b96c56af0defe321106fb453220f4a71324c949308950142ed6a72e3cce6104064f06b7e6402fb9d82f4bf621a79a511f97fb5e8abd1ebe96e931744863d3e58ae5a6d9e803355f8c3639e83eb0a3ee48c7f3da54d8d605e47de8a3c06717370eef3b12dbaa0a7ecd660ac17da76da528a8ddd08f313c3dd5eb95d221e48680d33c33f390ec446a9bc79b115e3eaf177aff8ba257d284f846d82fd72621ea411003b5f07a44bd3b2a55706fc2b2482ceb1a718b48a2d7ffe6395ee9b8ecd1eab6636f0d25b78b57d3c4ac302ba6b495972c07ceed695914c66ca1603178417775f40a0df6d82ed78177cb8bbc11034afcb3bd698c93b7077b6e1f91a5ad219d566372a2586c8250579c6b387d83bbb2aca5dd47cabe5570eaf16e5948563d072d25aa07d3fa80a2af143f45d9dfacf83f1345885a33d1099bd0ec28937ec4e4efbaa1ceadc064986534813247c01d2d7d15fb7ab72ff9df7be8b3d607e84f637a3c27acbf55456b9d6207f1c5ad0187954130d8bf56431df46e650eecf461fc8707c6daf6791aa8eb1db0a1bc7c8f991f1a8617e496495a98fd398b0a0fddacc48a80dbdd39d630dae2a15abcf0bf54cac4cf67d76d98f9d8db687269b1d1b37112be16fbdb2a709efd427163fc5d6020526f2644cd7cecad47f9afe1f096dbcd0635dc6eb4989eeee12ecfcd90bf30c0e86f1581e57931b98760ef628c1d9e79c7a518af5ee51989a88086619c7345ac8ee4408f2c2e5b44628546842187f7dd5f606ae13c42b50d4a6b3c2bca6167b3d9dea4658fecd6e85004d5264f3f5ea024b8534cb486266ec0cc151dce55083af3d89b26226b02f7d3c437303ced38b43280ec59a5520ad6673df6070c9f6288437558361f796442348044c036a117d69bf92728df001b4d305486a687557184725641880527b1921c81f91590521a7ec5f46e2b19f5c580c2e5683bbdee1664b854d5a4a34fbabec39661c1d437be4405e7ab11e1dc566fe39cd629c766fa5c4ef34d483819005c24cf6465ea8d209c6445f012892818a4485957de910801cb58a89daef3acdf670eb844f1a7e1cf3476d8d95a3f10938739e723a1baa908a8fb42edcb774edb52d8824963438739a90b9c1a080a84021ff0a2b0fd48b71f13d51e4dc43a511911aeaaacb47d41e76bbdd7d58c84576e4eb3dbc0f6399a2c025d8e44e703cc01947e5261c23f5bbb7bad9630f7b872c2af631c31bafbff99de917a5baabf264cfc44b0864c3403cc98224b5952c6c22888718a6a146d3ee02b1c24535af9d8abfc3958f8056b7c352c36310411ecad9cf6134ed9c922bddf307a30ab8e14f961be44a8ed408b2168429c65143aea1edd1cc6c56c1ec35bdd0f74de96f154ffd0c4c4e289da8bb3ee021319f9b662d1041e0cd68be0f5739c4b228c2a865be3c105ddc36357bc4ddc8c5c2475d7752487c218697545a10cbc9403eeb036e338f96effbc50e5736e2a2b67024ec8e5f7ddc89559f635b0a3b78c0831e0d784f7215a199094a18414742559b18d026cd93ffa307e683d63ae02cfcad359baf5b610e5bfa34e4d13c803f3a7763d93dc1d55aa1504c3fe3575083a5ffe255d2603c72534a9905342e3cce93efc6b87fd6423876780ec40adabc79666d6b0d93fadaa788d56a0a943bbdf14d37f7117e110376cb84e76b66a63b73904c167368cff9560ba4a7f06b65b7201b1668a50d02fdfc8ec3aafe9efeda9abc7e49b23a45e5111ad0b8592bfdb227908ac0765f1704d01195b8911200d48606864920eee146310a005ec2c430ff2524f80b7448c216493eb460f2135c2a294e131d929173fe35b687a2b498d6f40b27baef092134998dd0bc5d6285c7dba692ea44a76e1e654029809cfd0b2e1401bc1f8447a0fadab69b3617f25b985efcccde75070af4c404eb28560102f32e279a8a42d98db994d5adce344f8f62c70ff468531b4d2b7602e3c6e6807856f2e13d66a063fd13823b7d7e5a6d91a61f7a1f78cc0a5e90675c232044569829507857e4c533530adfc6e544e4cda337fbe3ca3186674d3e2b4b5cf1a00a61215df54df35c92fa94faef88cfc057af6403a038c0d1139771d2c14896276e3fdac75dbf7114761f5dcd6d29c072ff2d1aff64e9d5bf6f14e9d6c766a1160f48d65397e916c868eac7b0a766f79cf1eda12307c92eb1ecc3deddfa93cd8968a42ae153ef9f56cc337f44caa20c498ee955a6ec59102905591e41e6dcf85a061ec3a7fdd73185abd47e60460e923eab5545f2c62a7fc8ea05dc0a3892d16b92b6396123bf143bec5a5371e58b827cb011cdbd6e66858eb10c1c4f83d173dc8c8571057d7f1855e27acb0800588229428ab3ceb2655b7419b3702823d586c972afd8e875153748f2d7f2900b630aa31b9178554d258d7f748fb5193ac01929b60a2476365a2d0ac3292298cd9ba8318462b2a503f52f492ff237074d3a21d5f485ec32978ffe7950ead9aa483a565a3249fb542eca2a7ea870fa05564394ca073bea0b4d9be0e63d811860a24c4d0d7cb58349e3e400893038e31ebb4c0ee80757a4c13f1d32d3bfefc0da6bbe3ecc27667fc59dd23952911119905f9b5a66748c9c7c36761987891c5def527c958a6d06f24aad842151748c1bb06b466d5403dc556a16bf35f310ac1c2549ecf2c47fefe162af37dca6cd5f5889276d2d36148706d8e428568eafe6a6aa20402ed5625361179768c4c0c400e00c3181f47f35719fb58bd2e9a214138d26c359ec79250b0ed5b4538a3f53e79bf67b33ba0ba60fbfa0efd767660d2e238bc708f469b818d1336a9fad4858eea0257c938228a9da5493e26995924742757284cc948f669ba567520f5b08d7e15236cd687eadf35b9a73ab12905ed2b24fc0ea9a27626e3e37cdd57f2148347cac63bd94ed576e9e127996d7419284c432d3a68b0c65986b5a44fa00ee466b30c1822302e5ad0b012edd840fe7af71efdf87b91f0e5a938f8b00660c36899c72f32555f492a4d2435a8a34c44c8a3c3b3cc31763e25e42a4005c34457022b7ee8916b916755b69a9d135524e8da9da4ca4232b34b6bc20692df232f5515be7ce278d86199a35f325fb5eefc9ee6f944261261ac4c09fd57a6366df0a9ad3a7f01dc5b995c57e305f6c3295c98f7799a6588082fdb06a1d73cc2d0675651872297ea65c3ae581ee2a1d4fb383f48fc324f6a17dfebdc4b35da806f83ddeaf46b76b99480a96073f3f831a7c8a574ee0c9715d9ad70c993e6bb0e798389205ed87cb898004c3dd6c92b56d27038ae572571579ff65c671ba2143156fc5217085bccc800dc76001ea859ef2d4f8793f3045db0abc7a5d18f607555ca8af8e8f206bf435ca4eea15957e9ad89c47f2740ab4d39571a3010f59568c3d6f344e7cc21f59f80f254ce9b5e6663f7966192f1278c9f5d5f7e29cc1e96e6f088ca11fbaf4dd03bf869b2b48bce664694b7cda7845be7a091ba3073ce670a9e2111b62fcb0f3cd6c8719c37c2ae57a2515feaa80c31666b1ac5a446e11c21b69716f5dd7f23080eeb034c4f2234cb0565d0315ff19d39ee78a1047d44f41b5b77743b890a4302822717ef235521233d8e2e0f2c2d3de2ff23483bc124e15386e07c9aa357bc0ec9154e3b2a9fd0ba0bf009f9f3311129291756d7cf63ec6200cd54ce2d4127c910d818e704b0eb4267f045868b3fb2f504da257c79d90ecf00130015120827ba8733b275073917a016e380d60416f2bded0f2b05954cd4c7057be9027f0b718902a5efb70ad6cd02215b0c7d341f5f300841c8ae455102b603f68ac8460d3faedf8bba4ed9eefc6f37eef3c120e9a7b9623cde12fbad4bd4d709fd4184d6b6a146e9cbf764b9670a46d2f9b579d38730a314ee65b687c8619c09638b59909dacf7d2707c3ee3f47146af71a49a97b155cb4a46c542e1f167ea5a8b9ebe426a659b781c0036ccfae317ea5e7d8fbf2ca4aede211536c99b9f23e73b687e3e09898c5b8b3b31b7e80aa01fe7f62518dfc42e941bf0126752b1215251912c8b1b86ecd76f65ca6138d79a401651006cbb4fa8fca4542cdf415ad635db49e201e94775ae4a9960620ab697a597ee11b91df15807fd565bc2479133a003dfbe80df9ace393d01deb0a3a7374e1a4027f063117f6f0d0b591f1823fe836204c8f0d7600c8e41d7569f3020059b9a7dcc93bdeb76755d39bf5f34c6ea20c7e5c7d02cf46e50de376ad55ad5a956314dfcd2101dbb76fab19cdd7d4dfd8bcac5e77f73182307d389b42cfbc007fd9c64a2d63feafc75fc3c9ac5dae4fa10b16d53e867fd4e350d0b510158480ca22833131a3a0b0755a89fce9dd7890429a08e388efc036d206a68d7d5214de083c1e364bf9474a441ffd21c5dd99ea1b715b5655820eeaf21d05b1257325816f193b182b9c4f9ff9ddbdcbabe8c945f1e7baf5b437f3d66c0dbc7b95e028ed9044507672fe4d87abdea0bbe41b5919714404b45ddb7e716a64327e62c7c53814d9a0710dfba08a225110c65bb12a4749c0c47815fb973e9884601cc346170244419fd347be5ec3a31facba0556e404305b0ac85e45e451f38ea6472c6ff5baa7af6dc0cca9e19f3895663744f9c60418258b0496e6b22c3ab2df58859dfae98f9f8fee546af7b59eba628eac6d2ffc682b5e261e2850f76b6b4d61b973502d3edd1d256fb91da2a2c47f8a8ace62f51f9e3bd19d9bb70e4c34d0d5925a81e6c0def2a51cfbfaf185b8620e09046bd47540f1b74026c9c4724ce3eb610cf204e136bb05d26adec28f5f7234d13bf1cb292804203ed2f60721bae12a9a5a1948ebd9"}, {0xe8, 0x101, 0xffffff07, "666147cb33560b97123f5f92bc3965c55b18f0a756425a1e68b22a6559f38edada5e2deb6822c56a6d0119adb6dae92ace49aed1cb43caf62708dec62d10d9f37b60f8e0bff2dc35b9a84cb6b2dbb0bf5e5daf3d265a3e5b65d1c8f3626ca58330bbe4ab56cdc556c43308b352417e6d3ae6bd280a0bc7fda81c0b67704907dde320b0ec1efcca6bbf9abc30cc81af6e89b510082862fce0b84c3e07425505e1f33abd399b273fff02b0853b2ce03728f858337d08f29f776e7df74d9ead663a59a26c3c6a9d4e7d2a6ebe54a4ddc604ebae3b"}, {0xa0, 0xff, 0x6, "49105c930ff80cf98c523fc1135f15824956bbbcedad5a35c3df826b62abb6cb0713eb5ce2f3bc48a5a8b554e75f0ade7b2a2ddba27f7d172d9e55db323c80579ad34fe1cc7347fcd850451186b8db8acc190f49f4994517057265644bbfe4599ea32f1cb603a4850237a06235c45a5c0e39c684bfb06f52be3f63e19748089bce35ca30a362649a02d8afc5ca0446"}, {0x68, 0x110, 0x9, "6d50781544cf0e036cc6b6fbab353e06a305962d7c272bb6600a2225bf8434dd5a8e0fdf4677362266b49ee4c0d9666d474ed346f38633b24bc088a3a77d064509df389816bd7f25a63c411de33814efa4"}, {0xb8, 0x0, 0x7, "50caf9315a90d495041ce5d04c01120dc26c160d62a8486c3641fc7297cf02993d9b702d1d7cb3aaf4e28692ea9f51ac4bdb5a287ef7d17aedce9f3280492588f9ab3ad599d943a0993b0d496e14e2e7ffa21b9437bd3df762c7281528e2648cd7301888791a66b713d571f8ecadc6bee43972f8ba84e9fb7a871e2cea7fb3b8eb1af576ba8c0484185adf96ee70aae19f28cb8be3c65d5552a240290542009491e3214ab8a6f5"}], 0x13a8}}, {{&(0x7f00000016c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000001740)="c5f5c4797ebcdb5292c2faa9f82e3b0f65cc767908fcca0d75f4aa3804aadb6a1a057e76101313365b95f953e7e1c5124e21e633a4c8ad209b3a55f2", 0x3c}, {&(0x7f0000001780)="7b6d4efe4bcb9bcd13414b68fefe93e122fe46ee43dbec4de7bd87cd99db198b707ae650565b40559fd8159cceb08097787d1e35c5a42824837f03b4edd5e48d7758aac845bbb2aca467c1becad679a4a30fd831719648e96bc5edd02daf60e29b17763f3728c1ca07f961ee4bdae6d2aedda5b452fc138887fd3e", 0x7b}, {&(0x7f0000001800)="c020e7282581056ca6792634877b3503827ad2e6cc2e7d636b66dc32d4f7f2929e14ce0eb2bf6034bad900baea756a9ad7bc42a749a21164b33184dfc1809f154f765d57684691f63a32c71acbbb2b53f44d00d60a0ccaece4202711771c994d284af213095279b0a95f00d2cf50b871cb2e9b1a8a573cb673f4aa7f6430c888b2126874b2bce80c548e7824e2918024b7cd85d7c3074fb91c14e357105a6c6bc44adcce3384f4e6e0837a64e5b384fae53bb02fff1b2db0e94f35e64f4bbf34651f7b385785a20df3fc6b7606376738956c301fd6b10e4e9beb45bb2440e47113bac28747ec201662fb09c815c00cd5002a", 0xf2}, {&(0x7f0000001900)="0714cc2cdeafd8456200599c53e9bb404efcbf335484f9950da80a2f5c911446a134b06188ffb81f26cce14e5dd5fb65c400f85139060fb31d1d7a8b494fa3a78b0300cef5e64a28fe57519a79d8d7de06df08c77b599907a3e52ced808ee6d082ad490a0fa3bf067981e9382ec0f9918f", 0x71}, {&(0x7f0000001980)="6b3e53fbf6cf5239424069cd9656fdc9033e96c140fa9a11f3fa26fe50b592091635d484a6315c199533b22d58b1094db67ea8821d768430f4927a9c3d850b946ea6a652ba539ba6d3afa944ad8df0b1eef86f0e1db72ed64f56b6ae762b40c320abcadfa232a0f9776d9d1f8a2a6bbb1398a6ccf8119db411da7e1d217da91cae2c9024233e785235b808758bc80d6349b89196af9b266171a5c31cc8625422ccb6c575131381f015d108f005f325e3b6d488ae82e28c98a7b53cdd8b5de75c06f0c077e9fd4586f26dae2cd65b49e1bcfff4e0e1cd7d5d2660c6e2deb4c5cbd6ee473874d93e2448577e8b3103f3904e79973f7895a64cd4a9b467d6ef54c230442b3b3c7c03640b158d280ef2602c429e134bed886e670751f2282dcb11d7cabe290b2bdad256549a43c810b469c38ef5f65523bc81d377ec9bf9be4fec3c14d04a63ae706bd231cb9d866629692bbb7f1dc2eb077be699e7b8fbbe5e364fb1c1c8bfc78f825d716ae00eeb2c9f356e9f0ffba82be4b361eb1f5a08977efa33387a374c1cc96b39e89e866ddb99beff053cea908e02c22f04ec8d6972a890dead9e441baa806111a1a4de4a784ca457b20611344778a06c4d288d9313e6214e2cdac015bb77f9c8c78bedebdaf8d2a2c114005c5a10004879b49a4decbd44eb8515b4ecb7cea73af3d2cdf7abe0a37aaf34aa38cd76920e0498cc88f0374715470ea4e783c502dee8f0559c8650ddc1e96351071ecb613a067a512807439a33515230696814b7b6abf87e2b2e9906bd14e628637d754b2e2b7949a8187be41c28fd9a3a50a901615dbc1ea70759fce0d4d7c4e597a999922a5c2c7b2c8fd56a0f7b14923e40be2602b44f52bb273a8e488208ba61a17557986830c37d35b66a4223b52d05457ae61418780c11e53479dbbb97aed14dbefeb485db0b796f0764a557f73e2c35d671d848991a5a2397894ebcbcfb4a81d0b8c84f1a098a3c6c502292a944d540ef0d096db3b8ffcefab9f4f9d2d1b37089d447e4ad6a94f6a6fe32e6383fd4ad46b951ef40635a5007fd7c1cc55013183f4dfd0f9a304ccdac5a402447bebabe8b6316f49ebfadd3ed1b9df59187731b6cb71ac57cb383e356cd82604d4f4da4bdcee93251ad71e80099273133fee6c63a187c8ed732f1f970f5054c5a01a1a1bea3adb7aa4d9ba9c95db367752fe09d7eab16c5930dfbca8a400b0f1441e9fcb4af1f526b1fdc58d2737d5b699c00a5480f182ae21a6392f1f8b754aee38cb8f5109a6179e42c41c3ab60974771aed8bd66820dd7c8f94efa05c43f690819a37e899b3aeb0475a52b87826843feb912cebe2ad407f751aad558510d844b7ea7f33a98d63b47a9bfab0c5f1d3ad52888a2db2d64754a36fa0132332c46ef9a1eaa7172cd52880352f6ac3b1d76c74296dc4aa5de58b30beb2fb59bc1376fd1742ae0f1db59137df0255f6051598f375a2ad98ca488b1a6ce221af65e0b4dff6de3334307b156ab568518e283bda7604dec378384803e6ab6d486afdc1eeacc8e002deb4a85821394741f29b085287733afc23c793f9a84e3bf116c584ef8f5e27b679b6b611a5ed88b73a45d17320c4a37ba2a717b7263778c23c5aec4d1b0b85cf408975610b46a5005dedfb72b58d8e72189e40a9160115deba8fad2981bb03a1a23a0b5de22f52ecedd882401b2b336a8e6c8b617944a0f3b0396fa813f7738d1727926c31f8b381edb5ac8e5edf3ff8ba3c999b97d5f2aee30154b3f1aa36fb6f4a67087306b73ddedcbda173c581c5ef74dd9cbf80bb79c03335ba3fd1808b4933ff9b3d7a3747d7257bc82f1a12df2300ce5e44fe94047f10a952ecf276834463f5c887fa0871713c92fbebe88412a18f072464d5254b8fe1ac29254a7063e26c4e7da8f72b350a2742c31030cdbfe3d867bd150c0eeb443706e3fe60397c6b6da39ec6e72ff5d07fee0c214629a962d171ee4fdb4a50ed4f1ac64d7ca1920ed7c1eed5b6410b355f9adab98ebd0d982dfc9470a245f555239e159cd167c94d83332a63b296e11531e2ab335995b50e0b6aeb0a8ac3639def2c90dfe666355fb51e8937066be8d966c33fb27888751fb55948a561083f072893d559de20399ed1caec6fa410b8a867887f917d709f1c4cb6e69d52a71371c57d4f4babbe2b898e2524e7024933a04463115b5cbd633889b364a5dacfcc68bf6a33b29e4dcc6c86b538fa4fbf6a0652bdfbeb771039598bb8a938281d2bb4359b8c9dd68fab3f86a79769943fe90d675e2042930f2ac1c7f77f3c6be274f11dae4fda62deccdda9799f8c2751f4f059d00a69910dc236a3f8bdfba908cf5bb124bdf2ff796dd9ede6eca3a83cd889191980db2c4019ca46dba89a32feac08f74e4793a9919bc230862dddc7e438805d862598d7dd8b80d18cdb789fa3bdb69a1172095b100f7bc41d00c893420da96f524d65835218dc777c44c0afc8a843b5b3ee4b3837d8fe8526648f4a61662d029b4952d84048c7ef7ae0ed7572db4855810a3a951f22c9279aa905f03f84fc0415886a7f063c8814ffae699806096d0ffc8718dee9c49acaf5e55d595cad72053db902e29707f8f6225d0eecee926b6b06bfa612628f73c0942bafef55ec0861e71f522f9c6f101d136728250df02c33118df1d31e586eb16324e963a3c99a7ce5cd69fd3201dd9bf7ce9e203bc10599bcbd0cd02442263c7c70b7f42a7a0beead109677122aece1024bb1c8f3bcba25424edb4b80227608b4849fb56808d35bca6e786169756429edab29dca3287f97417495c24438f9246053b29885742d949632b8230472d0fdb26cec12f43f4cb4359fca071560f09e5641fb01bb0df7de807d6cf845c006eb29a706d53fc699bb18282aca919ddc0b09dea38466980d2b00b463c05a1d2e3412a533d953cd7418a4e56ed0b465f196ae26b4d570df70304faeffa143f989f4139b46658863c615ea8797332c25d9c3d281f11f9596f9f3da982d26a18ecc2aa7317e4702d7b175b122bb004b25fd45320a696158be348f547cdabf4646e2122608ffa9201c7904a0986ba7b99e9892d4e20e4d8a4223c39598342d097ddddee5a498c51fdebfa77b4ae7162241b194787bdfe1b20114185594d1ea7651fa7d87e0e0822a6926819b94c1573e471eedb969c28bc193824f91bb1593848aecf1e26c0ccb67e135425299323180de60c7da561528fb7d48664500bc0a20efa7dc46e074e9bdb3f546162416fe9408008d18f76eeb0dc0241fe0b10ff856226f58d6827e57321d221e9d0a1f73dfc5e13b44eb4885d70d3cc6660a78c0e980dd6deb6ed67d7db485241e8ad7377a428eb058a2d5a7dbb566615f4d6fe78bf41544b4cff773faddfc7afe053d4c497aa656d3bd21bddbfeebc6fe1ba1c14cd34aecf3ab926f7ac5be21167d4bc483e111d7f783625c56a221b6bdb38af2bfb294baefe3deecdff5ad2a733baa96ac8d3e61fa8593fea11830a6b6cd7a8385326ec4fba090edd1de4435964777e042d5035d926154944bc4d60c5ef59203690be316ac478a0e4cd73d3f0cae9b39e5bac759629a50274573cfd252e910445c7dbf73038c2f08d5a5a29aa5205c4c2c96f86c50e695ece2910fcfa49e8580740821fe3832d402138d576594767354214f56dfbc992b03db5fa1c851452d13f6b0c393a820fe3cb513b1626620018e21ea2f23afd670817b759315a18b831d07712db8576f78156e65608e998a08017557ff2f2358445e0bf808fd3f61d5876977aeb90c0786857b400780bc6cec56374e79e913a871133eeb060dc0162e9fbe0dd535733df8fab02cb80c4e54f6a7288986773cd1037473c9e987c290625c2568b7e59378dc96d6529df1c971ddb5a97287a0df6511f99c166da8a270f6be3724f73956821a74b0c4c976a4baad4ba1f19eb808aa951440609ac2c730cba4b7c389ad0e0b6f7ff5f51b3b2d4a0f32861e1237eee37de119f9cdf82f771ad2ae1704705d3168c0460912ab6465f5b3c782e5eb57fabe95a595dcf920aa1a07df1e31393bb95482e500a1f4618376bdf267789de9bd49e9ba0d8a0673222a226dc9b6661424c03e4570bbb939c88a2715080e46bfb65a85d58275514f99726e23e4b0d5a191af767b3e0696075ee5b55d4aa2e3a4449d5d82b8166d8b252dd5e704ac5557fa15eed7c41f2498a74d98d24cbe3dd858e5c4a0269e1759ae4c72ab4dde3b373454fe426044e79cffecabc6cbcf8ba2c526a895b2298c0d7b332a98f46f7b4c71c48ccf5a477425fe357aaf590cfebcc8ee7116d27b873a3fbd5d0e36bc8eabd7976509ed9b0e0e71d76821f6258432a20a1088369bd20897cd9474f4d30dd88fc15fbf6e2f644f97675db7b164a6d1a1d5b4952c1571a0f6795ecfaaa99232e1f90b7cd2d4d997bbe40fb2a677a3d39bd09a06a4d304ed71c7d32bb1da7c2a18c62f9f6c983f36cf7e46c95636074caa01b2cf55305057cf48fe2f46f6367983b86e033cf819c7b2eda3ad7ac46d6ecc957ac61d0667eb3472ec6610de5b1492714271441a8c8d9cb34fc006385c2bc87b91546ad9b0a01bb4451a000505ad406e443a10b5279151bfb1ca9a6cf1838b9250e65b6d8449628746137584cb93294aa1f89d32d5e8f9d17a6902dd8313cd850367c558178a448df388848e702ca5b3ae9ddeeec9ec20e6e5e684adf96faf4c1b3ef3655dae60cdfcc0d9ebc90d0f38d07326286543e65d7716fc95b262ea795d761d06d1d53655ae82aeeacb38fc2686795ea2ca3c5e321b506e62a24cc806397c17a5ac1a5360abc34c4385af430bd69f21eff04efca45de13df9b95f97f9d0295d64c7b641921c5dddd68348b57a57cbe20094c64d83007115325e3138296e03d03628c3d1caccb1eeb40026b35f7a7b781167eb61e26543debec8086e8c3b400b4a8daea7cf1119766c5c70ebf6c102101413792a32d95d1846b4cbf7d643d6af61f4b103bfd3a67b600e9332f20d8efcf164d32f27d480c65939002086dd5a1f0ace0b06dfb87f0558257d39ac6cc776f9e0bed7ed504036b266d9127a53d52be6386828938223c4bfe52db49d9e7b83daf24d8b1c94c890658e9e23b7de829ca235e08700e66b7667d224377738b7bd912cd01aa0f5078f9d9784176d4d68f4e5dd09e9bb30420ced0e79e43d00271715a41de1cb8291f8d08627a953940d3af3f8881c812942c44bd23920f7b93e48b1a46f1d9f49cdc284b8252e7a0f73d153b19b3fac42bb1aa765403a439630e8b9ddd4a7d18d632992979bf75d562f5e7d0ed9b3451e271e5ad8e0ce9e2ba7e83a715d2cfe98774f8db90682aeb61642607bd2b2186220434ec0388465e980dec929b7aea76d5e6ae8dedb38bdc82a8554dc99460b8df56f117ddb81630811649b985abe569fbeb76173fdf8cb00c7a1379a0c731cf760454c5fa74756a4748a53779a17ea5e2c80c64360c00583e9e9181464c4c1300a5d5bf8a7e8c5b07bc5629b2fb1f169e949098bafa93adf0e0fd52b715e1e2979860fca4d47c5fb1c47bec1fde0df91c4fff64cadc5ff7bf39c64c414ebee9c6c8db1dd856089c6ba359047dee583a815e876bebcb27e6dc6452a96eac4cc21f8b88dbda45ba4e36e16ab800fcd4b0ca11dccf43d4673cfade684c431455394c9b6af41daa7ddec781f5ebc0b8e01265c10d7ba70daaeb7890cafe0c2ef394c765dd2d67e70da6a9826e726b955c2997752917ff851e269b9c6f78cfb727b695c126b0f823aa339304", 0x1000}, {&(0x7f0000002980)="e8bbb4f6", 0x4}, {&(0x7f00000029c0)="9ec57bcb3036bf24a4029df60062b03d26fe4b9dd20ebb4a0c44f5c7a0fa6fa18478d9b3d53d68f147b59fb80d98c9f597662cd9480db4deb439ca9520663865c293eb62fcf76837da1ff7a707f317e76b55c15f255f7f093f35ebe5e603bece8dcb7ab9b26f28026fa9162f35674d523f14b546b0fde8eb25f3170b72cd20c5ff14d3f0c536c6b80deefcbff1e8dca9ae633fb362b5771fab18bb9c3b1965011d501990de843f3a569bb0d9d098e1c46d86a469ad6c39aa2b5fcd7f58d9a3cd6fb2e3bdb177c17e6c89ca753faa7e300db6883ed004ab11f0e6239071efb0607f4e8805e4bebd8725665a88db42ec7d1aa4be8235273a4dc24dd0fde92eeaa0706ef80d287ad4ac6f383a9d26dc78d07f87a83549b3ded4f673eb256bf93e40a550eaad01f81579762eca17cbd5e67329cad672c0c1d0036b322c759ebc26b7a82342af829e5b7e7314f1a9eb127d151ed9c36d7846b0eee2bf89f3937d0b56c6f705cdda38d91fd0710461ea3bc9b9420335c10157a6a2a4ed4ef9f841cb845e406df4e5417e2f38720617b1478dab438c6fdaad1c5f79b32c059a53818096a441102f935f072e358cfb53359b1509d699b0ca5559715e186395cc28d0fdaca0cc7e64a273b97af8ea49934734f67c23774e4e610b7b3e6cc5c34cd3c6156afc359d65a223ad19bd3ca8431bf9ca8aa53a9dbee74e77bd83fa162499b8122f5281e0b9609d747d6118861c995322074aed4cc08f1d669565504aa05e335720de297220c614b1ea03ea08b28a4826a628b3f7942f6f6b810fd358628df5ede6f847f1720e2f39a0bb92e8c136c56c1eda5356d6b341725f672fc9e8742e841bdb9aa4f3a3386a54f07fb6895643bb32551294d8dc9583e564c538a55c5adc4e321bb60aff6949ee5843a55c91c13763ea8b1ab502992032680207277eeaad4f3e2fee6cd115533a98aad40c8e6a69ebeb65a1368f126847632172e257f469a2d5505263397e5ce0072f93cb3476233cc156132e618b5ede6e10f6bb6167f9f690f668148427c3892d6884b434af70c3cd3be8ff1b1a42593279d9e35c81fbe7dabecb7b432689cd5934d3e7bd7b7c7fb6f6eb8d2599489fdd2e97dff63d2191ba2dabfd38509bd21e2fc6894add6465d7676843257126a1d0277b79a23aa8a6f4b0b9db53edf691e7695b33a57973088ab7c92699497cfced8b90d1f02066dd8cd2617e5188eee297a1ccefc5edfe03a384d0eea7810c61c8dca42183948460833fc096d1f20ff9142fdd047a42cd0519088d77cccf6db42084b94419b778e0862c3b9d545d1893475aacf339fb00cc28019c67b2820435f9219d678a99c130e3f1337b6e693239b867825d1e20aeaca50b1254bbdf2100cd56288b0c00fa817d2e4af870e0ba96507528a703ee123d8300d11530e4a076b53202d836b5451505de6b7c5e234878e62ecc0e7f718ad1818b8820d5b585a231ee01fbb7ba281c4c355b8d01df14418a27c2de14edb94409097c0c08b48f0797e17b99505f47609a74cc0b66d28ae3de796a97726cc44de0916ea02acaaa7a8cfe8df4ebb7a9c58a6b7029c40dc7de1474a82a251328b1cad993f09cb71e5332e2422b221d0ddd2d16a59603596c0f4bd08f2e6aa93aac147ad4ef053c731ecc6c916af96729c54d0a7a9ca6056f28470946ef0a86d65233dc03efdfc7bc7fc210432021be17db66ccf5409f1dd7f4b5b0abf4ab45cb164278c91011f24e96fff10cdeb7fb6ee0c75c1611bd04ce794473b3ba4d4463e40d98e44c9290132399589ca692b13d516c726ca32b841e39218a3e9043a0a1307ba614fb8fc76aab9958102403e9146021d3eec19f31958dd2c4b93672daf7e9726063bd1960bd825180e223460ee44a3b711e0134cb3dbc701c96b049c123159c8373e825a92cbd5cb75cc6186e549f0cab0db2c6b39804af5fe54b7068375fbc75f996c30cada40cab539e6746a5e3df76d6cb40388a3c83f86c8c088782e4449559ca0829fa3d36c7493169124f2f5ccd5527ddfcce5b8827a036e36d6fb37d173114e523015cb3d8da371070636325955b5478cda954218f00080d20c2ba6036bb9dc1ac7e9fd059d12e882fa64f56020e9a0220eb63c6dcf58721840087e855d3e2e02bb9eefdfdb7cc72c524ea11483539aaaa245b7d454bd6a2927d665309da1e252fba185bbff1c92a04d08421af228364c10023131cb52f44b195ba6b3427a9a1c03163e4fb50c6366c5c7418bd58d39ed3f70ef77a28e512594b674a0c864ee5d542f3ee72f4cd658fd728f307ffd20b6d2112eb29c6db38a23fd52b94cce2674b56c9f2b15b9d05988483941803fb75d74d37ccce8a688c218baeec5b82df80cf40211eff92bcec50e71d5811a0bf9c930dd9b6a05ebc9e2d6030c1cb6d80f287775a59161c8ced8c33f91fed41f621ac0216d05b02004a39222e3cb985f80b9621dc3663ba23251bfdefd105ccbef62ebcca705f883bd8c3dbbac92af214d7763fb8cf5746efef4a4a4e9263f17ae7505300f844ecc152491858c714381400672ae76bc1666d94b96ee33348497a3cfd236fc807b39d0ef61a12fdebbf3375b358ff1420fb6d2ab2915d178145e5ad6f3a76d697b59d0a99516a0cfd0aeb64b1f791669420ba974faab8d9b7afb2d3030f647d2d03376d06c052cf07028e997619bb6afb4dc9c44c0361a919566b14fcd9288eabe7cd78fc82f7e3f8d51c5b33599fb8aef2d076706cc61f0b5cb7abbd8cb03eb4afdc7e0f6583a0cbf9c569c9506a901267762af2cd6cdbce7d34338a8b26ba3f618cf425ecf06f18840403cf510ec224fa6a47ef1c01a41385c63195d2a5d5a2f0c3aaa8ff41852acfd5e8f16bf291b991f14e28f338871f52cf11a5d2c8e06f8e2a5d5efec765c477d79ee9ac07d9d27bfd32b6ad3eed2369b0e2aabb4c766cc9748d5674ce19eee50b26ba9df4c89a363cccb44571150c85c25460161edc0aa71cf12b397ab2ea642610665e37738d6428632f8462b34236b495880c75d6b26ac34c14b6fdc2b3d6d5e18d1b6a236ff62e3c3d8ae102f18b67509a9a2cd7202b927a5a076e95d0c3f72c4660bd23de721d3ad4719bb43ccc73f053415119e094042ac2d8b7d2a659428ceeb07a233282146b5538588ba09d05338adb3b9357ee9f196ac8f801a7b1e5808a547ed715dc662578a881087213fadb51071ddd4c8d868cd29d095c26f3059671b7f1a4685fdc1391c5585326ea6c68f5ca2293ef752f1faf58b403f59f455788002cdefcfb7cb790581db5a6ba9983a0007d63dbd3c53654e4e9f7731b75460386f2b0318fef8f8a4645d3e6addb39e2850d5450d60e00a76f0f9c08205c399319e57623f996673b79ccdea4654b766467567c5f4fb7717b884b77eb56371cc06f78363d1fff7cbbf7e9460b2d12d205fce471d70c0524575088ccc224001aa99aae4cd38d55440cb71ef0dbb6706766bc3654d97c7db78b3f7e98bf273025e7e4a8e63a9b2b54d47bb26e81582d459b522ea8276aef1a2ba807608e2f377c4c464637e120b3ec1ccb72125713c6e159b2e32abfe35462a7708c7ade8e6f2d35f0bfcccf1d03f7f898bd14b9dd9ec32221f5a55344ddec781566234deb5335b85f5b35fb66a022ec1c34838129d3d0e3aeba6b3f89f0a1a480c83639aabe68d5afc2a25d461ab5525688fd7d394c0b19a85c94a0f539978fcccb70a3bb95cca5d517c6e5422437f3e0f62eeed831020c5bf955044d56f56502de90557b0335236b4129f75d826d1fba756ee19b38e1d80ce6e400b2ac56f18911d72b1654cd6ffac57ea713d9b96ac865945285786130c876b8f4f07f807e876a095401c6d7c59e2fc3b901dfac3beef2c0cf74bdb8325cbb5b51fde83f0ad13d6644563aba6106759e9e55a62da50daaf9ebf57fd116791e6662739b0df38b6143d54f3f0c4216d6c29cdc1d29d34325c846517fc26f860aa060d447c5cfaf6a636efb6a8c749d45282867af3324d1a107c1531fde10f3f3b2239b7f0aeae51ddb3566a95d256286d048a6af684925883a4a34850f70f28c0f2fe4d2ec525cb3aff183cfbec20b4cc4f47c08cb5de71ff15b0f248a97c769063c1561d490a8e3eccd342fba02383af6518104e74e83b8854aefffa435a1ce1cfcbd93d75108b2e88a56e23c67cabc1874ef42379d375df785075037527d4f1654b613812879646eb4aebe0c7a163f99b28a57baf94a660e6ea0772b3f1c1a8f1370735a348766dd1706907d28ab93f87a507aa337f3174894572940b745784daba37afd7d2dda6d1dec0f296cc5c6f1f4b7b8a8c5127b3cf946b6a6c8786baf3e1a94a86952dbe4ef767766a7176c443c8c281c41811eecbc9b4106dfa2456c921781dbdb2c322f36f9cf6c24562ad5d3d6879bd65df875eefb48030f088c45b39d0957d9d59f66c9ba61ba0030be5c2c33dbcb8410716c8d8f46f2e0b8b09f08d16981e0c40b6dddae45dceaf2fc646ddd374ef0c42c6415a0041368bda47a7f4122a96716b9f22f0858d453f8432c631772e62dda062f22d761fce5c45f5c0dad87d10368a800b31ad4f60c6944345879ee07611fa85346e6b1ca68746b43e70980bcbdd8dabb8a72d69b96804512ec95dd9215aaf647794fe8688a0f9093ab27a76b2d48cb435fe824993a7cc32060845de5c6e3c12cf2964d40f2e27ebae1733836302f1bd03dc01e7c44f83c24b11dc6d0975b12ab58ad2faac36272bd4224cc33ed7ee76343f756a20c5541e4c2394426e886251d24b6cbe5e542bd8d486ee47b2738a0cdc52e088a1ae5cb2922d0c7dd9afe9ee6b8497dd1410ad01f3074f9ab7bef73df68f71cba8f25e0d907b8048e5382cccdc0fd8c55d0dda520ffece822340ea061cbbffd2975ef8dec212faa6ccff0510426b518c8c6df0773103503c542e089f7b2f1962407328853d91678e4b9235a0310d7a56bbe7570814ab94d7fb0440b758775a0b303a36abdc5ecf0cf40765e25ab89160c3c659d42d07f6c2f9bc793819e5c8c503246270483ed5f44a38a40504bb01f7716899217d67405865f2a5176dbb0a3c856317c3045392e3281963e8970b5eb5d995f874f952478fb57fd3929b2e92a5755575bed0ebcc7032605c77bba6d370ee884a2ec883c37c254c2f3430a34e037aaab34b2450117aa8ea2749a137cd4d10285950943b679302f76e38d5c30b024e8ae4f0cab59913a2c99dc307baafefb5dd59273f08894e0ba85b102c68f69b1acfbb278f78788bf7f2c848f5d13c30d32023540892a8683426f571bbe887018f8853b34a6ec0188d5b34d1687f8e476ddb8d19124439859a9c59038b255b48f5ebbd9dd5e81083e44dca921168b890971a71deafee79558e5fa688e2e035d69048091005942669a0aa2f6b5590058711491a334b10abf62ad4b8bf46b1fa62be15bbeeb90c57c66a6077e975d8c7b0c3cc275633ac5f6ec0b5c52c8fc475182dedf7274e573b78da64e44b2799a51b566e5eb0614b528f44cf2492764df06718aaba40370e522fda616efe5da5774d21a286516257d3847d9a973b25a31f918c93eaa46270a86108c41223c3a8cda74865b6c9230778c7eb814fc1f28d24d0a509eb954ac35af7c66e0a3d6b991754ef46a88fbe7dc03aff71ff949bd669dddf3fd2b571151072082e05510643b59b223c9a46ca99f977c784993b60ea4b3739bbe91d94929d1ebdb759250353fab846d04dbd9ca47a33c4ce43e74e113b5fef8fe943f19a953644937fe", 0x1000}, {&(0x7f00000039c0)="cc23490bf3a2365d07a97a949aa9a7ef2560a39ce57d4b2aef7986084f9ccc108b64a152dc08a5de442cabb27c050dfd3f7eb0a67f3a502a9436626982fd5112538de77b2242f4", 0x47}], 0x8, &(0x7f0000003ac0)=[{0xa0, 0x10e, 0x7, "e96ef374facb7f8d4394d784571dfb1dc37b77756c8128f78cca967e1fcb039659ab4f54afb9dd1833e368468f9278518e3f6aa005de0ec56bd42565e42fcbe1487a4ef87bb3848090b78d5fe0358ff38a4190e3f7043f5a24ad0a99c91ffa281ccdfcfe8691526bb90dc59137a06388066e0e8b813797656eb240145f426073d650c63adac41555790f600ca010"}], 0xa0}}, {{&(0x7f0000003b80)=@llc={0x1a, 0x0, 0x45, 0x1, 0x6, 0x3, @broadcast}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c00)='.', 0x1}, {&(0x7f0000003c40)}, {&(0x7f0000003c80)="d3a052bd17b45fc5a985409a8e37e6dc5dc8ab21a28b650219752d0ac1e384983e174001f2809fea1f7b303b89ad1c890854d392919707b126ce907e21e5837a30cbf7b101ae7c570d787c7c845aecadf54cef29e26777ff16a0c39b78b2d6a7170b81aeb47eaf3979b9085441f4dc1288a68fe956118b5b8d78fa93714541ba162fe02f2ab9c86d71eac573b2222dac2d5278e46f", 0x95}], 0x3, &(0x7f0000003d80)=[{0xe0, 0x10f, 0x5, "a7f59793d16be034f6fb26b3e19d1a2e3fff057f6ce348603e424b34465f3bc51e143ebeaa00df0dce2e78959b0e79b9a1a83e1b88e69dcc0507c852b993d91275a1e1ad17f1ae0182deb7115a716d146432eb55ede4c2081b64ae6402fd42611a3101268214e42c85516f71c0af7628b1b7f87067838e4ef1e93925b35f26f07eb9c655ff01c1aa4e773492ce600ed16776409d050ceefb54fa822ce9696d46c9b5a6479600afba0daa277549ccb22f593cf8cdd2c563011ab2d98c03664190f5961807c81b9bfb1e0ec6672b"}, {0xa0, 0x107, 0x1, "55c1ad32862087c404ac9de796903b020db24abe067ba424982c32417e46afe9942cb9c5557583e6fc3587ea5afb17d9ff24dbd12b426d54e9627f79efb1cc88a4b06e7193340995a7f9d57d244a6f7aa20b8d96faee23776ea9865ace5022516d4c39ce7e73aad3e48dc70e224b53c7e54753ff43063d1369ca0201c2e3a7e4394313c2af159acb91c26fcc"}], 0x180}}, {{&(0x7f0000003f00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000005200)=[{&(0x7f0000003f80)="69fc6edfc338c6e59ceb9b93dcf1a85714e4daf2cb58b2c7f6649eb82314eac9b49f00dfc66665472ff32cb0553e1f3fee862b471530f6852c6bceb54d894f513ae2e25159c72e972eefd87649540b1d6d04ec70", 0x54}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="3dc5384cf114985f42cf136a468156e090d7a96e898de995dc768620df95a26f93ffe7a6d2730ed23a755066f1f46a6cdd1711232aea6672cc6d1f7aeffdd359d198bb20d07d47cd189cd07b9a95061d3dab465e0a586235319c5f63371f99c2f65db7", 0x63}, {&(0x7f0000005080)="a31a7e86e2a024adc3ef01c940ec5786af10a4319614ee9fad1211ce568a5f47700957812cf093f1a94850521384c5515c7a62478395a0cb5e1e741f67270c3de9da31b96c19c19bd33f2a130a4d85cad7fe1bd205427a23cbfae0fe7e8cd4b84e3a9e9853", 0x65}, {&(0x7f0000005100)="429a23489538ae6ae731827f03378c1af5245277e421b7ab5898286eabb23137a0ddca7ad146cab051b8e5a68d6dab0c8fbd24bfcef36fd179bdcecc53cbf2ae2a5e6862b46ecaf5a81dc7ad666041f5e6e641684f3ee36278969388ea017356ac60a9fb7082751f6db4527e5c1b413cb93c5b20d06c6f94ad52b3c05843e0d7ad05f4faa325bbfb2a1a2140f26be20677c32a1a12913a53776c275c957666d31ad4383556e367401b3e7ad5948e9cca68664f54aff9e12e2b1b10d140a9b0457179e6f6bcea163ad2670a0fcaf9541a1fe66c63575ba9d9ffbc8b18fd200baba5bf258711e4d3a077de01247da780f4570372afc35b", 0xf6}], 0x5, &(0x7f0000005280)=[{0x40, 0x112, 0x0, "c795aa7881d4c341745a0c88bd60d61a1a4b96544ffc3c5d92f763459f55dac8cf121e509c2afa816f6b23a5cf"}, {0x58, 0x84, 0x400, "c837e755032a9a4e1a63fa6ec4014a698281c8e7be41d7046d1a6825f3e13ebaee2e11b23a37fe780a49e6c35565298cc39847dddf3789ac4ffd63a774511e0ade96d9cc886c39"}, {0x108, 0x3a, 0x9, "a03c903beaca2c47953a535b6cea34ab38ed39e7089bd4899b1e24e853e3ae7d750c0943add31fdc2956761355b3cb3b85820736457d6178dae448a0f8882f4b30a6839e4312a1168d675d07ea03db8b648e5a385d92b2c161b30b0f3159ea7c353fa56e9b1cdce0264977bbf664e4c4a15443e358ccb29c1be22402eeab7110260e2014c6c78451f5f1e88b2b446d64edfd3206b0292d9f11e8b0ca5f83e028972fa4bdc9f92ff71f5c39775cb3ed882dbe790f0debcb60abd34817adab308a435ab34fe32819daee1b49a962999da422780a82e1896d3d1c854f56756142f17a4907d68daee399c2f53f5c7dd4d53ef5cfe8bbaa"}], 0x1a0}}, {{&(0x7f0000005440)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x80, &(0x7f0000006800)=[{&(0x7f00000054c0)="8aa2688aac2b084be033b4067b64af93e84f66efa34d7f9a128be371221a5195ed2ed31f2971eb126cfe97ba7bdccdaff0cbb869eca944a25248c42a65d310e67cc13b4391654ecee76e929a54b9e1732b075489923eb5c7d2889178292bf6466d6b061e6277a444fbb42a78378eef61e2085979a6d173", 0x77}, {&(0x7f0000005540)="64b536cbf872616bbda933ad7cac7e490d3f12bfec1bc16b8099fbbc846e682fc34f953b0e67b8081d197313808848eae76d557881003342d463e3500b14cbbfd318788030950922167c82bcaf26d59c1dc2f3a9e39ffd440fac7dabbec3536ff00dead6f3aa2d", 0x67}, {&(0x7f00000055c0)="9cfcd504916c828bb40758a5371a9ee19f5cc101ea5e1f3addec3ff8e4c5b2c07cbdd7646434408e8aa1c0e35fdfa59324fb456b464ff7b550e5e6305bcf0da7c7a8bb9902377ec4b0dc097fa79f690a1ea27b34f92f53fde407a065f7cdabf0f398f84205f9bc164870b2a7c0484aa87cead7b009301b29f51cae81afbc433e53bf864b0226e4fe625dd72f34a6530fb9370140621f9d7e5be50b646eeb4b074cc6ad9c17bd7ab96901067ef568a2032795265691c6ea05c8420a1cc1450ac4ac9dd211d6c537ae5370c673f612407aab25d5e23c54fa19c640f4b640d8b07080", 0xe1}, {&(0x7f00000056c0)="5d427bc97c5d45d2ea4c056e483559ca09fa9e0b6e65ba0aad1d59d57302fdb4b43bfb1c52583be1a75fe6890bca9be6ec42", 0x32}, {&(0x7f0000005700)="952ff0d5dbd867dbcf53e05e23d57b", 0xf}, {&(0x7f0000005740)="6db75dd4bfac471e8238ac4cee39bb2b033e122f89bc3ed5348790f85a4fee8908a96652ee3134e5d71f528ef426f2ce83c8ae76f6b9023c3d2a398cd0d1ba469535df8955a24e8b13f0bb59160ef4e73c4928d2f7d48535b7e3be36968ea4b097d016abe68cd25998d6e5980619b3f2c45e07c67c", 0x75}, {&(0x7f00000057c0)="6d3efada195b2994fb2f275537b09168ffe5dce7e08d7ae8834031ac346975630dc523603ebfa9b5362415ce9d026264a59a683e60da4ab734dffc30a3f25069d19767cc31a7b5a2d6bf9a515741f3817899c2f8b19575d0a73da7f6381cc4e1d7141639b1cb5a807b762eb75492f87065e4788b905861bff3eac578599d8c53e3d1d4b08c5990966232aa3fbcb8e6e31ea0313b4efc1d617e8fcdd9577c5c6ef31f556f3f981c5a28484ebead347a0129a4789de2314399b6e88148efeb07397643a1dd43fc7e98059e679015537b04269c497369bd11b32a5ae7a005127ab2ef473149e4b7ced8471ceebcf7f21af07c06db74877b74d50c67debd738f476c5cd055aa48e322339a64c712e51efcd9439d91f7bf21fb8e8cc9da1748d0a9d36ef9a1f230504021a9cc8ada281e40256d3ee04d565b6d2b64f36754215c89ad66cb7e66a0beb27aebdb320ceadaf391ccf134e52816b21a10c20aa29e1dee909836147c62b39bf3c50fe0ab1dce421b729dff1c02f3d67741c080f363f16409462b1c27df011fd5b5062b40247f736e8f38cbed77cc4d47d63be31abf7ce91841611bfbb8ac41ef4bcb943c228cd62677edbe61dda452260845a12332af312fb6649f94ef3a6c244116cf0b53b986ee25b97a82edd82c6f6de176ce6ce4a75c624972c56135327e6a872fa74d4d30fdeb9c931f829fe2d216594b787835c84e780cff35c376057c7e72b9cdefa7741f8baf5f4ad03ab1a6fb49dabecce75a3a037d2961c8796790c36b522fba965cbdc32953b70025387d6ad19f81aead54f7082b7476dbfa0c04fc7a9f4ee1f4b622844c63858054b176d8f3a2af8d8f2461cfc6cb4e4052abae4a381742532f85ee75741ef409dc9c1f33f7bb1514923150e096fe3ddbaca80c9b578f1ef6c6560aa4ae697c0229b853b4b236ce3274e84406f705fd942c6e2406708c3b5bb3fd62b2035acd902d7ce82df3c1cd58e76ead3a8e276f2c3724cd9c36fdf6b52a1f97132ef030ec50f9600f068f29a8e00c6abffa6906dc7d6e8fa11821328752c8c6fc9385c1c27e96b10d37618624a9bc241c410bd3b79efa0a1a6418f8acf337f1f3f0a9e167070fbc6500bba8b8f7e0eb622c8da2464fd2b74462d9ef1248eb81d74df0931ed92c91eaab0b584234494b05f472386fcefe7f99598e9674c89ed0fee39ffbf24fd0186bda3812dd286113f2daf6ab68a3874bdaa00687ce896868ff61bd8b6f3be0377724506013fc02f3e816664f444afe45ebbed1e43454b89f8ec1e3549949d70dff03abb07a7f73bcd522150a3bb4a4a42ee7be21a92605b5353bdc2d1347477fe611122a584a439698c67fbc812c2142f80e9ede9b9b02e14b39ab2a6303af668e1d2961e71a3466c22f55cf310b25af663a47b3a81c4f9ca28be7e0d22ac544ca8532e0af706b0928188f3e6d036ee27ca2738313facf3411dba2e8770ac50250bc884aa7de22ed569285991cd32b50d2340b0f623ee506a4dcaf7a7a73be4099bb3146d4b9a44dcb4a1351c951579719195358a6723135e89914f4d751a014d9e4d106cc3c1716dcfd196372f7cc4e8b25a728b95247ecc25124c6e51a498394b55ed36e29c46ce529c38605d6cca4a2c9540af76fbac51d3bce67747dc768178a408092884cc0ca0337bf4fa54ed3889e518ca531a1f80838a7965eec2b7c97d0974bb0ce88d57b01891d80bef591b7fe536559de38b90ab6bb89991d4b5539b423b271cdebe377497787d60b0f4bbd1d3b1f273d24d8152bac58f9ea5fda629d08792891605593a7887c0d414ecbb556c08e94add31d0c82e5206be9ec9cd53e70cc6a81a80ac3394acf209cd862384eb23e74c775361c46c271ea16343b57615db4ef6ea8a5000ee38cf8e8026058baeeb8989c80a0e1500bd5d05f0365ce7aa0770162964e76f36ccc93d15cbb79f1dd7ef9042e0a0786df806a81b3314f46ce5f1f9a3eaa194ff36b15b8d18ee66ea4701b5aaa9bbad6bce25f3268b650ae21963f41bbbfba8f733e3672fc60c2a521b44931594aa46afe2a0e20bebaadc1b02fb5064594d2fee41039e537061c9e5865d519368737398df85960f66cb6075e67625bd221d0710500d3976237140b995807296d7aa45b9e11d1ad190f4e69ceb69f9afafafb2a36e80c9d8e8ec120beb2a02e46969170d59cc454c135ddc78119d8d8436be48c3e664c8d2be4ab741c0c676d62f3446e63add2cf02667f62af9958a92e37667215f47d10c59a759e1506d03e0b4b30e8eeb6b6bd2dcde58a9b9d2904a5a8b9708e79d93f41800842feb372d197a82a18dce3d659d4ad77023c845c1cf2849d8c1ffb5496d286655a56309e04a1e387c8c96edfd3f86b4917b4792ac0a775e5cd288534b7c982d0a306c8097176a358cf844b90d787d54594abeef160483648bdce7022db6e49df55e96a82fdf307e5f7c5ca2a8369ccbb7b71c68f99851cb0fabf92cf250598360a1255d61d21ef5c9fd87a7d9b007ac2548b2be153ea377ddc1aeeb71f80a2aea0f674e840930333a3c195d43719265e596c6e802904c1971a8d555ab9e57833312ddaf711914e22a015d88398e36599cf268eda5351da3dbcf639b9e21abf84bb82d6d77d81436313ca0ededdea27377e183e9731939ef2b964fcf70489e224a618304bfd22b22a9e90fa62c5dc17be780f69341adb5ae275e8fc80aebb0dfb2a40b14cd1530eca5ffe091188d12ae8c30f459f47a9a1f16a54c257e233502638d04d15aa6088c6f1a2f9e5371d98fd701b082aa0bfec96c59c181dec9201c72212a5f31f6b4fbd273e38f2d60cbe90aeb50805c0a80c57d963da82fc114f3a60eb8d213a353ff36ddd1fc438dc554658a1519692dcdc7ed0dd0fed7afbc21fe409d45d3a9e8fa27c07290e75d92e635fcfab7b2dd5660217b3fa7a0c3e36c4b7be4188b7b03bfb2513e7b650269c8092988f36c93261c028a1e96fe6d0f77032272db747cef635dbcdc7e7d3f2692953722270d1777d6e99fbd7ab6d6bac48f530b96cddc7240ec7552950b93a66a9a5c0f1088e69073e6905dd888eaa888bda8577d6970e20c94523bbcc82153b6faac3995a7a09ba80df547c1ad72246c9fec9e083aa92da8ae0200a7f84af19dbc1d5fa51bb5219f9556a7c3927b725dafb238dd9c249e90572a87271f19a0a0403a76ec2e5a308dcdc2292cfc55c7219e6de530ca6a32fd4214842ae7b675b66eed9164dc8af1a0d1bf311d78dbaacf94d20abc20c3535ac031b6de675504057cbd3fb35a571e64d70ed29047dbfb9844cc951a86e35bb5dc7e2de7ee4d8f9b1367e4edb0ed36136bbb7e30cbbe95da792e76fad58b88f0099a31f846f61924cfc5e0881a27f4bd250c984e66875a0091fc75a6304d5ab202f2ed00ec593ca05b564b0e2709f5f3f9c1db0e336326d98d780b8029add8ba7534189766bf44357b2685fcb28724bdcbf7fdc9de6429af6f2809b16dbbd6ccd4bed325904fe5ac4e13c611117498593efdc180f0966d4c0f4f121f7746d7db88a4fcd41153e759eea6458a8b51c2b5fee6f29212dfe953444b4f34016f36d68dae6341ba0ef4536282c7e9ab648949a29e39f25e2cb8d93373ceec0ae51760cb015d849f526b71c14554b4b82f9ccfa481b385a787617626971c61ba0f52e0e8ba9e0ff113b50683954cf12517a8d95c1a264da8f3313599dc39f88104ec7cf14da7c1be91030b648e37e018934375fdda890998032817756d1bb431f3121c8d979d8fac096d9ffd9ca4288386ad7c2d42aa9dd4dfb5881c4f7ed6893ac9b845383d30109d2b2003067b78235fb9db4493db170466364767fe020a7991ea727a98766b08f4f6bed6914f16c8e582b06c922999fc4b1474ff59ba93ed83c584de8182dd14970107981e5fab0607babe7bd68d85cec9dc95023613bf0b6d5e67182a93bab37696e40f8dd0f6e49d0744dbc56000b3de7b8430008af292d90d275ba346323d4fca74f69328ea913c84bcb762c4eff001b01b240a22e0d946cff3fa3bb8d29f4837a1b0ad834abbea8d10b311e78a55c845437478c6176b5804eaedd0450e042eb9a0132b31167372b5be3c225b20ad6950a7dd6f4a68b36bfe03a7a4b8e06eac18a4c4a510661b5057e92b5037e55b97a1a25c92b73b0bdf3c89ea5b2a88eb646ac8eff12d2fb3cf5e3563c36908eea677945e89f140f3bc4fc365768c221d1d9af61d48861c226e5f1f7f12e6ece2630598bb5c377f54239795b359a315e338eb7fcb4a67d19de387cf46a98fb6303b708e7fa39e8948dec23ff2846de43502ff57bb9832c636201b1a6f05e4722eed25f60c193f4eb2bb69ebf3befb0050a97ac9a806119c773b223c151d3446c8aa8bd9b418a2902169080d51b446e633e76b9eb17984be42ac0cbedaeccddba288ab7bfd0fd194a9f2c10acf265391895a1ba7c63c52717be4a1a78927c2933acd07ed13e2174bfb9ae380bf89b6fa7308eb21ed3223f288503ba2856b3a5077c0124f3be106ca756e4140a3b95028f900ae2547a983dc42a4a8889400a8c37c1c99f4a529e9ae34903c4f730b852799f1b1dc22966a19e437223d9dee80142545250053290cc81f448adcb71c9292e65ff2f3255f84baf6019fc4d85df777e598b0f7bf3a10e11c679bdcf783d9a0536b6b8394eb1bb1d8f2aa06c3cdab625a6b5a6745cd92ac6820a295b2d570fd77259bfc975b200834457bd68e1d48e74b651e7a136299ff203cbff0cd97ea58edd9a223e803b3a8a7ec2773e3ef3a05a0107c6dd4d528801b911314d96ea78142396cbaf9de06b631a1379cd03f27077004ee5ba8513ef54a791bfd5adf5a0fd2f531fe704ccca87880479af38469b6fc23141f2c10230d49484425ee4e3dd9a8af71d2eccf2bb2b4f28ef4528b33b5f14e44129e0db0ef24579f9668d91eacf225bcbd2fd6406d20fa5e6871de3c2290eaa99f4b6cff2d75d24ad9d256deeeb03de9f9a5739f2818772da63ceef1ee3a98024f85dc9a809a328b7a1ff2d6d2dc4061a0f8ec59c4a06a9cff90608cc856cb0fca0d963c0f7e18c61f8d4fefb88ff56167bfcbd9c51ab74011a899b263507cbe4758ceda842bcbdb3f3021233c2036e4d9c48b3437e2b7fc069a5d5e2a946e5821d7869d0c776a1c1a0851d37f18af6837f617ab6ea036ab722acde0c66e683f68c4391cb9719b9d3b5bcb3f87a0fade9651c9fda6206cb5310a9f1622aa6ecee61722dcfe11709da94f3a6aad9e67c1c588a0ce65a946071f12bc19e052441b7ee2be53d5b5860d4e1aa62ccd000cf61a4ef08f3cd3c60f28be2b6c4969fa12d09f37123c08047b1de228c8af2b7c0c86c16f6f877db184d0450ca746bed28d15daac4e048659b7d16f9d17faeed8bd49f919a8ed3532cb1f8ab8c652ff664506cae28a9e64ecba000b159826ca0897325077a01046a056640e1d6414fda4f5c490bc83e9099593f73e3b3ca8c3436fe3a6dd89c085bb90b38d27a908c4d13e9403d56c509f8e84f38a73fda1860fe1ed1ce34865ff2170dfd7a3c42dea6306adf598b4039f42cc5e57abbb57fc0a64d6c3f43150fefd721b4894b27afcbf74e1f8fbb92dd2d06d72d8f4f7f3fc5c92b6f9dacb84da38f4719889400abe1ad5a6aab130d9f6bc6ad08dca3d5c29beff154ce9748586ed12dd7d41bdacd1fe68ae7b7de5c9b5efc369f8183b4f4e9bf8931d5bef8acc5faf6e925befc4d24f8b38a6e46cb8dfc1d7631e82e64fe630b569e5066ef307055e0", 0x1000}, {&(0x7f00000067c0)="3094932eb5b57aa08dd44d4c923f8a965b888ac2364ed0b4fbb88b3452bee473829016397e2af5f9515f2917a38badd0c2452d79", 0x34}], 0x8}}, {{&(0x7f0000006880)=@l2={0x1f, 0x0, @none, 0x6, 0x1}, 0x80, &(0x7f0000007c00)=[{&(0x7f0000006900)="135b0a6640a8559367227706daa1ccb3c7e1554174c446c95c9ef7348f2b68ec5410e2fc76c44134bdab669df5dcecadf6", 0x31}, {&(0x7f0000006940)="a0f1bc4aa51bd959e786d2cda2ca23c7bc0d2b1d199397d2d23abd5dee6f7c0271f8c52547e6a4d86d742fee652fcd36bf858ba1642dbbe461fe110a23e85ae6e90abc46927c34e6992f62114287e98acd96e97a084ca68692406366b20cdf90e3ad5be1d821fb5fa4a010b5a08fe990cf97e2ca41503e9655a15fed6d0fa1f286", 0x81}, {&(0x7f0000006a00)="1af982838dc1479045368b0897053063f5d3a4bd6e6dca343fd774f64f2cfb29b8cb2ac0f4747cff3c13754a6f663951dfa59420ed712d77771cf455223bb06d", 0x40}, {&(0x7f0000006a40)="786346af607f8ab5dfe2b083ffe2f8c1f693e9346ce30c0797cb6f9fb9e4d4d0a0afc0ef9754c893aec3e164d03c81a5713594956e5295f2b83ec59e919106b72fdc857646ed6a2a024b2d26f348e089b2f6f0e18bd8db9d9e58495b3e0659d1ed98db32a6ac2617bcdc8a58c34418b5d85fcd6746fc62aa09789d2bbb0c448647259bf33ecf0862159c68ca6393febb78fba91f39", 0x95}, {&(0x7f0000006b00)="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", 0x1000}, {&(0x7f0000007b00)="ab07532b83e1d9c5078b9f2855700418c80cc3f3208f0745845393308b23d5b9f89d328e92e9d25258edaf4c2d71ef6e11fa5148da457283d1e28b00dd660447bb7968d2376adbd0d5d6265e446a2293a58f65444f5482fa07e7b33e84b59b7d22075a4765294db11c4811e4dfdbb1d3b14fc6cbf241c2a62f9fe1aa6399cebe21ce7176058fd363a48b9b32efcc11a4eb4bb02cccf4b2bd69afd4c7d01fc2fef9b7ae2e06f25dee7abcef9a922d986fc274f81f42e16e1680f1d64017e4b0eabb4122f53cace965d20eb7d30588fad95aca9ff1b97b18d1c56e848f0c62e62b22a6fd", 0xe3}], 0x6, &(0x7f0000007c80)=[{0x30, 0x119, 0x9e0e, "7ac8e91299c4210e63f8cf7f211e65ec5f926c8e06b15b3dd1b947bca9b453"}, {0x1010, 0x102, 0x1, "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"}, {0x38, 0x114, 0x7, "6c612b4ba1a3b33c7928478e72143778f9e72d4e26a1747d08ff050bd137bdf5d6"}, {0xb8, 0x102, 0x0, "e1e5382e67a69345c94ed9b08406807da899922ed4bc063785bcb8c5a0649e908afec38700c2adc7c0a5cbe92e9b0f2f4f75641c4e3b7698c1eac56786f77642f262ba8181c7e5fae54466ad6e19e2f4554045868efd5a86b1442daf14064c2c43a8a5276ce5478c6a19cecf7e10bd4f1f442afabce0b71c625e4c3f29030e5aace1e0831ad63576f315cf31a3f7c1e7ad5063ed217f846eed1c774e08543e7d8436747d6b"}, {0x90, 0x29, 0x3ff, "b1a62ed9e471d37adbae59fd13e8fe99e8671091229d7cecd61b210df8a56d8029c02a4c1207810a894d063bb8079597ee9cf832ed0a957e3886eb456b68395640d9efc55f6468cb40bb7d04ca1c0e0d32fad32fefd5dd530b83047a9fb1a5d6e08f7442ff183d654d667a314e9637b3e0e0deb5486cdbcf69"}, {0x80, 0x118, 0x6, "382ae8f3f6ced00167ded9af1aa4e4563c3235d544c5de90207921f2e0e4fee42f8f06a3812de7c84d24c46b7421814090031eb2ac0176208ae2c74947819f04f845938d9e7627d5e24105ce0da9431015910713fd5ede006389a6677ea435014ec8bda3d257e3ff3f8410f28d"}, {0x88, 0x119, 0x1f, "fd3f8e19d1cfb747bb9bd7cc06c80e14277f80dc669f4798b184a855dc138adfb87080ccca8f30d9fe272fd5a3906ffc3dab3f7e6f3536b37fa51b7ce0d3929d9bb01fd78a1f46e5857c3336709f75f427c699be3c06fcd78fd8b70bac01333f01396f27b8a59436f56758e4517cd304d3f7"}, {0xd0, 0x29, 0x10001, "76016717600e6084014a1674b87d721cb0533f2e4bccf6dc32662057361a98424d0967e3e4805161da2d588cc59b2582bb81271e03d81912668ac3d5d0f25bde6bcecea26d05064f55fc973aa46f65c61784287251480a099fc7a50c5332695f5570f271544471c5914b8b2ac8fdc3c665f7dacc99ca3825b6c834c2a2e83904511921796532d3d7ccfee9b448d5f9cecf41be2a8237bef93b9d8f4805f09bd5461ed2779ec507615b274fcde606a11b3d8eed121c62ad4eaa060e"}], 0x1398}}, {{&(0x7f0000009040)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000009100)=[{&(0x7f00000090c0)="dbe7db1835554c078b48751aaf1e9d524773580b3f4a646bdfe048635293ba06fe462800d2588fc836b7d371532e00", 0x2f}], 0x1, &(0x7f0000009140)=[{0x1010, 0x111, 0x101, "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"}, {0xb0, 0x101, 0x6, "9b0814b9365c040fa5ab569c2cbcbd315104a7b3dd6c69ef7305bb3d558bf8cc985e125df5bb5d161fdc49fb6e47ab837a04b04ef0053ac52a753f4fb88a48b2369b58a723c97597397f7791a670896d97211ac02b3314c36c2b8e2bc81782c1bc46659c3731fc1e9ed389730a6f2153542a5bae7b0adf69e0e1deab8025bec6f5b06503f889b7d4aa46283264136b31b77a8deeeb043afcc270051a3116"}, {0x48, 0x29, 0x1, "e376b51649c4d8b327903800b4a2448650b66c435cbadd15aba885569afa043246254ed30e895880cc2f7e789fbd6db559a85194d26a"}, {0xa8, 0x117, 0x6, "f516158464f467c17b0e487b705c220e9f75783b66fd78da497b4cef9ff8929f0a7d19aea09f451ce06fee5b735acd45de19fb123f2328cd4780bdf7e2c910cdb18205ec9c94235ef09b18954df53a7651ea9b8d881ef36a0e739237f9a669030d1e7766f35a0fbc63e1030b5dd63fa7cb6101c8bc44890d85726935c58fa40874d76f718d8e98798eb9b1e03693def615"}], 0x11b0}}, {{&(0x7f000000a300)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f000000a700)=[{&(0x7f000000a380)="c2ee0227449177494a48a1f9c95e4646554f7b450f2c1086f379769f8c7be77b14e138c6b04b3093f9d352f8cb0e35ffa813f58df10cadbd073f331a6e091ca6015ab425cdfdc4658c12837d9f634d12bb3ea2245b4644cae42c5c1d6051354b7e89cb588ff667ff3de00e5ddae9fbe9704e0241452e8016bd2c6572f9a187ce671c21145855d091e5a66b0de5967f69e37d8ceef565e2136d55bab75e56844d15d72a53a4a4482d5ca7694f7fdaf45c9deb8a2f52ce0ace094e06010cf0301ce60aa2d5da46f9ff90fb8afb48f8abc4779b3a6862e6e55221fe2d857a76db122d2647a12f7f170d3014c4fd855a30d7a016a79b93a9", 0xf6}, {&(0x7f000000a480)="20ef8b30a354345b1d913869412428cc507612d14f1dc84f6a12cc9ddccaf6c1dcee128337f66761167bae59d3993c151f418e214d372de0b11969c3cee9041d6cdec1191e635f5a568f006d5bec8e9cb3bf59d934ffcd0c05533ddda1a7", 0x5e}, {&(0x7f000000a500)="7697e8d01bc7a0a92aa65e5808b5d0fe5d7221fb57ed1061709ca9c5d9ddb55329d2368d118c217102a485cb7f3682008820500f4d2f54bdb71b188b9bf5dfb8b4f4656563aee85c1c4a5baabe8a640228253944d2e368a21c5b9936995f43e10c5eb6405502a5185be652616e804645b5047ae639ab68d6aa9b67795077193e9c2a4065d91bb2d30e9435a7c5fe4e333e51ad47bd5ccf240911b2fd309a131db05921e44accf035639cd50afbe86feba80e7f9ab2c8c6921638a16c4e42", 0xbe}, {&(0x7f000000a5c0)="d1228db3fecc5bc8e80c44a72cf88998339b90bc69d196db0a53614870ab87accf269bdbf1dec1e7ac48bae30e8561f1ff9b49c931008d860af920e8ed4c233c5c4006", 0x43}, {&(0x7f000000a640)="0f2d98ce54ebf2532eb73ff52e1670171bee3ad26fdefc2f469de9ee08766bcf492820e7d959d2b1074bf4e06b8db9a016fff4b032898675b61bf62a6db54e8a08e38419ddf0270763355458b2781fed8a807890a075a3b7c12089766f8f506c34fbab510036d740513ee747b229c550a759a015d2772bacacb7afa501b5a1c88aea02f0380b361d844b81c0bfcebd993fc104f918ba335408eb9ca83195d233f978aeb5fb2b8d427d6c2f331541e7b87a65b66be0d8043775edb5", 0xbb}], 0x5}}], 0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x404280, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) [ 1994.516759][T29246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.527679][T29248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.534580][T29213] Bluetooth: hci3: Frame reassembly failed (-84) 18:34:42 executing program 3: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000580)=0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xe) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[]) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r3 = getpid() sched_setattr(0xffffffffffffffff, &(0x7f0000000040)={0x38, 0x3, 0x1000006a, 0x4, 0x7, 0x7a1, 0x1}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}], 0x60, 0x800}, 0x4040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={0xffffffffffffffff, 0x6, 0xfffffffffffffffb}) ioctl$KDADDIO(r5, 0x4b34, 0x5) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000100)=0x1) r7 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x8, 0x1, 0x1, 0x8, 0x9, "2f75ed22a3f07e244e91c5ef4b1e48b43ec335"}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x1) [ 1994.616676][T29253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.633122][T29253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1994.689088][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 1994.694354][T21258] Bluetooth: hci11: command 0x1003 tx timeout [ 1994.701396][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1994.708346][ T6588] Bluetooth: hci11: sending frame failed (-49) 18:34:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)=0x132) 18:34:43 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) 18:34:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 1996.507018][T29213] Bluetooth: hci4: Frame reassembly failed (-84) [ 1996.541897][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 1996.548361][T25004] Bluetooth: hci3: sending frame failed (-49) [ 1996.769080][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 1996.775272][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 1996.775326][T25004] Bluetooth: hci11: sending frame failed (-49) [ 1996.782814][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 1998.539185][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 1998.546176][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 1998.608977][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 1998.615068][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 1998.848945][ T8568] Bluetooth: hci2: command 0x1009 tx timeout [ 1998.848974][T18633] Bluetooth: hci11: command 0x1009 tx timeout [ 2000.619102][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 2000.625974][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2000.689173][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 2002.689085][T23206] Bluetooth: hci4: command 0x1009 tx timeout 18:34:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x6000000) 18:34:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x2, 0x5, 0x80000000, 0x8, 0x17, "275a9022d456e928e51cbf2cba4a3c8c383bcb"}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x108) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000100)=0x8e0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x8000, 0x3ff, 0x8001, 0x7fff, 0x0, "1048a05f1f56b8ad"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x13) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r3, 0x800) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:34:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x4b34, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x5f5703, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000500)={0x0, 0x0, 0xa, 0x20, 0x69, &(0x7f0000000100)="74eaf1714ab2479e2acce8b8f882338e28e0935795d66e2f08f99f53d72d7ad4157212b1677bf9bef0bf884a0f12e7857335bdaeff2d3b4fcee204401ede0d00a390d019a290e8b066ed774516e500c1aeb05797548240d85dabd44c47c259e71727f7aff7ed2ce0754706fc680712912495abbaffc83d16fe96eca53ca9c099304887ba9c116922e3e5477681307dd5fc69d34d6d346ae8ed9cc4a9718155313d2e37530dcfdce7b9ca071774186f0e18e684703f514e48982c51ed8c441f2d396d8862be03fca0f9f7cbf8dc5fa8e10ccf80f48904b27de91a3d3e36303be221be4b6a0c14af82f572e2c4de0dda7f1562d1e453a2cf8e16e40d295ed387df771ba8e316e840bd8142489da808f2678405f6c3f0191185c0711a89bcec539ce4578f7e7be18bb1e1aeb70d1582419e01afeb36e098fe663c989fd5289e6fcc672baf8ded91d77f411334529ec04c83616f4360eacf900016abbeb5d6c949f4322b284b50ac5fccf33f8f84004acdb01419e4cab604537bae3a87ec04d530c3e3f9932745b53aa9618270caed81fbde2b4801b79a9115de64ca83f253b6f1e404ef2e609bcf50a89e066e1a3c1605145c5a2a4ce710301a7f40a7b50b7aeb52cc62c62ebf67cb51b76d8ae768b6e2253707b7d086a49d511d045b0ba12943f9c5f9de2c5c99be6abc13b8705d02514cb2c724a6d86959880100a7a337cdcad4ecfab3d4846278fcb76b69e951ef1a0481dc6d9f16813d39537cf513b373631952469cbbfd5a06f985e25e40396ec2be57bd24fd64ed93351ce0bf70db08fdec6468eaaf7dab666302229148b615f07c294d7746b61dcb6186179126d74cf5c16d52e08e13326dbaccfe63b738095772d4c682bd21bedc68c5929266b17a1fe32227cb4c45afc2443a368496ffec5aa3f9a1a893548005088c66c38fa8fb819f6efc61a34883427bcbdc0f99d754779f945c8683e2dba8ae547252b5dc95fd1d3b5409223913f0a661863c10bc1d0c10e7781dc6f7fd7dc9e8a312c6902950136dbfc154e2efc78137647bdd3b1efe3f6398464c61c781ab0781bc2af2b3338e7bea1a3176b550135309171cbca7dce3bb716bf325d2aa10280858f52d701c5471093f2ca3122237301e75d2725b5470e8d23a26bfb0d8ef14c22195717451e37ca2273111146f88a7fea59d7db588134f354c3e524c3a7c470f4cf01c3df46898d1308e2ff7da4da4ceb43a2ec9b37ac66415d1a825b72d2ce78820a48ba63bc96444fe9fac70bd177d9fa8e9f31920920d5dabe54416ffdcd90bad346eb8c2cfa82e95252b00461bc0b96150f57ee30eb25c4c72d88358268a91e5622048aacabca7d62f42a79bede3f65300aa4511371f1ec0268c8f9ee0e87241e5ece1f0097b9f627c31a6df4c596e00478c077b5b6f765ce5f7cd2b4bbb57ce932c0202"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000005c0)=0xfffffff7) ioctl$KIOCSOUND(r2, 0x4b2f, 0xf92) dup3(r2, r0, 0x723f15dc9fb403c0) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000540)=0x17) 18:34:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) write(r1, &(0x7f0000000100)="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", 0x1000) r2 = dup3(r0, r0, 0x80000) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0xc) [ 2002.843566][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 2002.888003][T29293] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2002.894769][T29288] Bluetooth: hci2: Frame reassembly failed (-84) [ 2002.910711][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) 18:34:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x50402, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x100, 0x4, 0x1b, "6b4c194a4026fe8d30874ddba92618f2f72b18"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xe0, 0x24, 0x8, 0x3, 0x7, "ce5ef559eb3bc5e174315e9c83061c7c65d630"}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000acbf009500000000000000c3e889102570d64754c0f733f97709a95b5a00000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000300)=0x10, 0x800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000001cc0)={{r7}, 0x0, 0x2, @unused=[0x1, 0xfe, 0x6, 0x2], @devid=r11}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYRESOCT, @ANYRES32=r8, @ANYRES64=r9, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000200)={r11, 0x4, 0x5}) [ 2003.112654][T29303] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2003.128170][T29213] Bluetooth: hci11: Frame reassembly failed (-84) [ 2003.176791][T29309] xt_CT: You must specify a L4 protocol and not use inversions on it 18:34:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000000)=0x132) 18:34:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x100000000) 18:34:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2004.843031][T29213] Bluetooth: hci3: Frame reassembly failed (-84) [ 2004.849883][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 2004.857389][T25004] Bluetooth: hci2: sending frame failed (-49) 18:34:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x40133) ioctl$TCFLSH(r0, 0x540b, 0x0) [ 2004.929050][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 2004.937396][T25004] Bluetooth: hci10: sending frame failed (-49) [ 2005.169049][ T8483] Bluetooth: hci11: command 0x1003 tx timeout [ 2005.175657][T25004] Bluetooth: hci11: sending frame failed (-49) 18:34:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)=0x132) 18:34:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2006.848991][ T6678] Bluetooth: hci3: command 0x1003 tx timeout [ 2006.855275][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2006.929022][ T6678] Bluetooth: hci2: command 0x1001 tx timeout [ 2006.935634][T25004] Bluetooth: hci2: sending frame failed (-49) [ 2007.008962][ T6678] Bluetooth: hci10: command 0x1001 tx timeout [ 2007.015166][T25004] Bluetooth: hci10: sending frame failed (-49) [ 2007.249095][ T6678] Bluetooth: hci11: command 0x1001 tx timeout [ 2007.255808][T25004] Bluetooth: hci11: sending frame failed (-49) 18:34:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2000000f) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x180140, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x6, 0x7, 0x200, 0x1, 0xc, "7211d6dd47112ab2804e263da718b683272cdd"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2008.688923][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 2008.695519][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2008.928917][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 2008.935036][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2009.008965][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 2009.088946][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 2009.338986][T23206] Bluetooth: hci11: command 0x1009 tx timeout [ 2010.769005][T23206] Bluetooth: hci4: command 0x1001 tx timeout [ 2010.776453][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2011.009089][T23206] Bluetooth: hci3: command 0x1009 tx timeout [ 2012.858983][T23206] Bluetooth: hci4: command 0x1009 tx timeout 18:35:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x7000000) [ 2013.168152][T29359] Bluetooth: hci2: Frame reassembly failed (-84) [ 2013.180226][T29213] Bluetooth: hci2: Frame reassembly failed (-84) 18:35:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000140)={0x40, 0x10001, 0xf0d63ab21c578f7d, 0x8, 0x2, [0x1f, 0xff, 0x1f, 0x80000001]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x16) 18:35:01 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x2, 0x9, 0x90, 0x0, 0xffffffffffff3782, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xfbf, 0x8001}, 0x1, 0x9a51, 0x6faae04e, 0x3, 0xac, 0x4, 0x0, 0x0, 0x6e0f, 0x0, 0xd1a2}, r0, 0xa, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nf_conntrack_ftp', 0x428e00, 0x0) r3 = accept$packet(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x14) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f0000000580)=""/224, 0xe0}], 0x6, &(0x7f0000000700)=""/117, 0x75}, 0x80}, {{&(0x7f0000000780)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/11, 0xb}, {&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/74, 0x4a}, {&(0x7f0000000980)=""/247, 0xf7}, {&(0x7f0000000a80)=""/89, 0x59}], 0x5, &(0x7f0000000b80)=""/230, 0xe6}, 0x7}, {{&(0x7f0000000c80)=@can, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/39, 0x27}, {&(0x7f0000000d40)=""/27, 0x1b}, {&(0x7f0000000d80)=""/118, 0x76}, {&(0x7f0000000e00)=""/69, 0x45}, {&(0x7f0000000e80)=""/225, 0xe1}], 0x5, &(0x7f0000001000)=""/230, 0xe6}, 0x9}, {{&(0x7f0000001100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/96, 0x60}, {&(0x7f0000001200)=""/45, 0x2d}], 0x2}, 0x80000000}], 0x4, 0x100, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) 18:35:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x81) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2013.730692][T29213] Bluetooth: hci10: Frame reassembly failed (-84) [ 2013.794759][T29378] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:35:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000000)=0x132) 18:35:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) 18:35:02 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x1, 0x2, 0x1, 0x0, 0x4ae9, 0x80801, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1fe, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x100, 0x6, 0xfc, 0x6, 0xfffffffffffffffa, 0x7, 0x1f, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r0, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000100)=0x80000003, 0x4) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x4, 0x32fe3cf0}, 0x14) shutdown(r1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x13) 18:35:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x8, 0x3f, 0x5, 0x200, 0x14, "7b02d1ca923e87db6217f9212013f866684494"}) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2015.169301][T27617] Bluetooth: hci2: command 0x1003 tx timeout [ 2015.176209][T24244] Bluetooth: hci2: sending frame failed (-49) [ 2015.809142][ T8483] Bluetooth: hci10: command 0x1003 tx timeout [ 2015.816060][T24244] Bluetooth: hci10: sending frame failed (-49) 18:35:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)=0x132) 18:35:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="61a03e300b652058a4330e1e7053cbb17ba4ccb68fd23284715320f67695e02aa1f53b313df1f112a34a37bcc779d1a7c5d72cf7fb80b3a41c9a857010ddd5d617cfd27f396a18f3b66cd27cdc76ea73ceaa7a9a5b81faa21fe9565ca7894e505b23fe89ab81b0fd8019e55f52344a0b5a4df6db87e3e48f11dff46fd8ffc90606369a29fc694d008c44aed82a484bb8c072ef392a3e3bfe6c801e3101c8286fd8209094467d3efd6df2909bcce389be9a89cb67ba97dda70b050a2103d4d94943af6c3bfb145ab4437a606056c63ac6569f0fa92dd75ef6000d783d56403230239820097acc309e9080a6416394ea6838f08d8b5f3a2b6ddcc37dd6324d4e78") ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x4}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) syz_open_pts(r3, 0x84000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x5, 0x81, 0x3, 0x14, "95d7d92a7057c6356299faaa904e65231387c9"}) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000000)=0x133) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) [ 2016.967135][T29406] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2016.978401][T29406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2017.099057][T25046] Bluetooth: hci3: command 0x1003 tx timeout [ 2017.105675][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2017.259020][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 2017.265429][T25004] Bluetooth: hci2: sending frame failed (-49) [ 2017.892460][T21258] Bluetooth: hci10: command 0x1001 tx timeout [ 2017.898963][T25004] Bluetooth: hci10: sending frame failed (-49) [ 2019.008970][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 2019.015705][T25004] Bluetooth: hci11: sending frame failed (-49) [ 2019.022502][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 2019.028644][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2019.178945][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 2019.186179][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2019.329016][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 2019.968895][T21258] Bluetooth: hci10: command 0x1009 tx timeout [ 2021.088997][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 2021.095692][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2021.102664][T21258] Bluetooth: hci11: command 0x1001 tx timeout [ 2021.110216][T25004] Bluetooth: hci11: sending frame failed (-49) [ 2021.259070][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 2023.168919][T21258] Bluetooth: hci11: command 0x1009 tx timeout [ 2023.175212][T21258] Bluetooth: hci4: command 0x1009 tx timeout 18:35:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x8000000) [ 2023.351988][T29426] Bluetooth: hci2: Frame reassembly failed (-84) [ 2023.364983][T29213] Bluetooth: hci2: Frame reassembly failed (-84) 18:35:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x13) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000200)={0x0, 0x7, [0x8, 0x0, 0x2, 0xfff, 0x0, 0x6]}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x1f, 0x3, 0x4, 0x9, 0x13, "48bef6bfb118d32521e57429bde50f16389afa"}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) fstat(r3, &(0x7f0000000180)) 18:35:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000018002000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00(./file0\x00']) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x400, @mcast1, 0xffffcbd6}}}, 0x30) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FICLONE(r1, 0x40049409, r2) 18:35:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x25c4, 0x1, 0x610b, 0x95ad, 0x13, "7dffb5db3d786cf24383eb1fc63d015a906be0"}) 18:35:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x882d2000) 18:35:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000000)=0x132) 18:35:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x78, 0xf, [0x401, 0xfef, 0x1, 0x7fff, 0xfff, 0x80000000], 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/15}, &(0x7f0000000280)=0x78) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffeff}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) r2 = mq_open(&(0x7f0000000540)='\x00', 0x1, 0x40, &(0x7f0000000580)={0x7, 0x5, 0x8, 0x5}) close(r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x0, 0x7}}, './file0\x00'}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x8, 0x7ff, 0x400670d, 0x207, 0xad, "0d918ee89b4984811a8000"}) 18:35:12 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) listen(r0, 0x6) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x139e, @rand_addr=' \x01\x00', 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa971}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x92}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20050010}, 0x4824) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x3, 0x40, 0x3f, 0x5, 0x0, 0x48, 0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000580), 0x8}, 0x1001, 0xfff, 0xe3d, 0x1, 0x2, 0x3, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r2, 0x400455c8, 0x6) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1b, 0x3, &(0x7f0000000240)="f60584683b984eea22509a9389e26f2b12b28c369f3cca6864436755b679f983920923c74cf9884459f5a25e9d0adaeb65d3d25959df6500702dcd923a6b07d7e8", 0x7fffffff, 0x0, 0x1, {0x1, r4}}, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 2025.225322][T29452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2025.240801][T29453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2025.249419][T29456] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2025.269635][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:35:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) r2 = syz_open_pts(r0, 0x321100) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000140)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x1) [ 2025.414315][T21258] Bluetooth: hci2: command 0x1003 tx timeout [ 2025.424259][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 2026.063414][T29462] xt_CT: You must specify a L4 protocol and not use inversions on it 18:35:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)=0x132) 18:35:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = signalfd(r0, &(0x7f0000000080)={[0x7]}, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x18) 18:35:14 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x7, 0x1ff, 0x800000a, 0x8, 0x1a, "591ed6b0d2e7893c1c1f007e6dbda2f73374cc"}) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x3, 0x42001) syz_open_pts(r0, 0x511200) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x133) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x2) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = pidfd_getfd(r3, r1, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000140)={0x0, 0x5, 0x1, 0x8, 0xfb7, 0x1000}) ioctl$FIONREAD(r4, 0x560e, &(0x7f00000000c0)) ioctl$TCFLSH(r4, 0x540b, 0x1) [ 2027.328983][ T8483] Bluetooth: hci3: command 0x1003 tx timeout [ 2027.335283][T24244] Bluetooth: hci3: sending frame failed (-49) [ 2027.489076][ T8483] Bluetooth: hci2: command 0x1001 tx timeout [ 2027.495404][T24244] Bluetooth: hci2: sending frame failed (-49) [ 2029.249036][T21258] Bluetooth: hci4: command 0x1003 tx timeout [ 2029.255244][T24244] Bluetooth: hci4: sending frame failed (-49) [ 2029.408906][T21258] Bluetooth: hci3: command 0x1001 tx timeout [ 2029.414968][T24244] Bluetooth: hci3: sending frame failed (-49) [ 2029.568956][T21258] Bluetooth: hci2: command 0x1009 tx timeout [ 2031.328871][T21258] Bluetooth: hci4: command 0x1001 tx timeout [ 2031.335866][T24244] Bluetooth: hci4: sending frame failed (-49) [ 2031.489001][T21258] Bluetooth: hci3: command 0x1009 tx timeout [ 2033.409085][T21258] Bluetooth: hci4: command 0x1009 tx timeout 18:35:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) 18:35:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x14, 0x401, 0x0, 0x6, 0x9, "acf9d3329f07b4fbbf60913245f7e92c06c068"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x1f000000) [ 2033.577889][T29213] Bluetooth: hci2: Frame reassembly failed (-84) [ 2033.597410][T29503] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:35:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x9c, 0x7f, 0x101, 0x81, 0x18, "353d9deeccc3355ef08c6767b76043f193acd6"}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x215580, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x15) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) [ 2033.718458][ T1372] Bluetooth: hci10: Frame reassembly failed (-84) [ 2033.733969][T29511] Bluetooth: hci10: Frame reassembly failed (-84) [ 2033.752553][ T1372] Bluetooth: hci10: Frame reassembly failed (-84) [ 2033.838384][ T1372] Bluetooth: hci11: Frame reassembly failed (-84) [ 2033.851931][ T1372] Bluetooth: hci11: Frame reassembly failed (-84) 18:35:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000000)=0x132) 18:35:22 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x40, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008fc0)={0x0, 0x0, &(0x7f00000062c0)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, &(0x7f0000008400)={0x60, 0x0, 0x0, {{0x0, 0x0, 0xfffffffffffffffe, 0xc6, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000085c0)={0x90, 0xb, 0x0, {0x5, 0x0, 0x100, 0x4, 0x5, 0x10006, {0x2, 0x0, 0x0, 0x2b75, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6000, 0x10001, 0x0, r6, 0xc}}}, 0x0, &(0x7f0000002c40)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000008000300000000000000030000000000000001800000000000000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0004000007000000000200000100000000000000b0000000000000000100", @ANYRES32=r5, @ANYRES32], 0x0, &(0x7f0000008f80)={0x20, 0x0, 0x2, {0x0, 0x0, 0x0, 0x7}}}) lstat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002c00)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000008fc0)={0x0, 0x0, &(0x7f00000062c0)={0x18, 0x24, 0x0, {0x1}}, 0x0, 0x0, 0x0, &(0x7f0000008400)={0x60, 0x0, 0x0, {{0x0, 0x0, 0xfffffffffffffffe, 0xc6, 0xc0dd, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000085c0)={0x90, 0xb, 0x0, {0x6, 0x0, 0x100, 0x4, 0x5, 0x10006, {0x2, 0x0, 0x0, 0x2b75, 0x0, 0x0, 0x0, 0x9, 0x4000, 0x6000, 0x10001, 0xee00, r11, 0xc}}}, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="000008000300000000000000030000000000000001800000000000000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r9, @ANYRES32=r10, @ANYRES32], 0x0, &(0x7f0000008f80)={0x20, 0x0, 0x2, {0x0, 0x0, 0x0, 0x7}}}) getgroups(0x3, &(0x7f0000001cc0)=[0xee01, 0x0, 0xee00]) clock_gettime(0x0, &(0x7f0000005b00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005a00)=[{{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/238, 0xee}], 0x1, &(0x7f0000001ec0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001f00), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001f80)}, {&(0x7f0000001fc0)=""/216, 0xd8}, {&(0x7f00000020c0)=""/222, 0xde}, {&(0x7f00000021c0)=""/15, 0xf}, {&(0x7f0000002200)=""/10, 0xa}, {&(0x7f0000002240)=""/47, 0x2f}, {&(0x7f0000002280)=""/37, 0x25}, {&(0x7f00000022c0)=""/212, 0xd4}], 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="2000000000bd03000000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x20}}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/21, 0x15}, {&(0x7f00000044c0)=""/57, 0x39}], 0x4, &(0x7f0000004540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000005900)=[{&(0x7f0000004700)=""/119, 0x77}, {&(0x7f0000004780)=""/76, 0x4c}, {&(0x7f0000004800)=""/247, 0xf7}, {&(0x7f0000004900)=""/4096, 0x1000}], 0x4, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x4, 0x16002, &(0x7f0000005b40)={r13, r14+10000000}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000005b80)={{}, {}, [{0x2, 0x2, r1}, {0x2, 0x4, r3}, {0x2, 0x7, 0xee01}], {0x4, 0x4}, [{0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x4, 0xee00}, {0x8, 0x0, r11}, {0x8, 0x0, r12}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x6, r15}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x3) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r16, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r16, 0x5412, &(0x7f0000000000)=0x133) 18:35:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/bnep\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0x16) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ftruncate(r1, 0xff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x1, 0x6c9bcba8, 0x211, 0x7, 0x5, "05f45b5150b5e9c2d052eb090c828f6bbc8516", 0xe6b9, 0x200}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESOCT, @ANYBLOB="ff7fa801300000000000000000b2ed6ad90000"]) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000500)={0x190, 0x11, &(0x7f0000000100)="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"}) [ 2035.510476][T14535] Bluetooth: hci3: Frame reassembly failed (-84) [ 2035.649202][T25046] Bluetooth: hci2: command 0x1003 tx timeout [ 2035.656066][T25004] Bluetooth: hci2: sending frame failed (-49) [ 2035.738890][T27617] Bluetooth: hci10: command 0x1003 tx timeout [ 2035.745357][T25004] Bluetooth: hci10: sending frame failed (-49) [ 2035.889267][T25046] Bluetooth: hci11: command 0x1003 tx timeout [ 2035.895635][T25004] Bluetooth: hci11: sending frame failed (-49) [ 2036.689816][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.689972][ T8513] kworker/dying (8513) used greatest stack depth: 21712 bytes left [ 2036.696376][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 18:35:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)=0x132) 18:35:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) 18:35:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x2133) [ 2037.452000][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2037.569355][T21258] Bluetooth: hci3: command 0x1003 tx timeout [ 2037.575632][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2037.728986][T27617] Bluetooth: hci2: command 0x1001 tx timeout [ 2037.735801][T25004] Bluetooth: hci2: sending frame failed (-49) [ 2037.808874][T27617] Bluetooth: hci10: command 0x1001 tx timeout [ 2037.815350][T25004] Bluetooth: hci10: sending frame failed (-49) [ 2037.969053][T27617] Bluetooth: hci11: command 0x1001 tx timeout [ 2037.975364][T25004] Bluetooth: hci11: sending frame failed (-49) 18:35:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDSETLED(r1, 0x4b32, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xc) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0xfffff700, 0x8, 0x101, 0x80000000, 0x14, "49e23567007e09c2aef5cab06d88a3e3f6e870"}) 18:35:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$KDADDIO(r1, 0x4b34, 0x7ff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2039.488804][T27617] Bluetooth: hci4: command 0x1003 tx timeout [ 2039.497050][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2039.649036][T27617] Bluetooth: hci3: command 0x1001 tx timeout [ 2039.656859][T25004] Bluetooth: hci3: sending frame failed (-49) [ 2039.808911][T27617] Bluetooth: hci2: command 0x1009 tx timeout [ 2039.893727][T27617] Bluetooth: hci10: command 0x1009 tx timeout [ 2040.048983][T27617] Bluetooth: hci11: command 0x1009 tx timeout [ 2041.578882][T27617] Bluetooth: hci4: command 0x1001 tx timeout [ 2041.585443][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2041.739070][T27617] Bluetooth: hci3: command 0x1009 tx timeout [ 2043.648889][T18633] Bluetooth: hci4: command 0x1009 tx timeout 18:35:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x20000000) 18:35:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1528, 0x3, 0x291, 0x7, 0x12, "74a047cb161486666e97764ffdb52ff8464611"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2043.842981][T29579] Bluetooth: hci2: Frame reassembly failed (-84) [ 2043.859821][ T6584] Bluetooth: hci2: Frame reassembly failed (-84) [ 2043.915118][T29585] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:35:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0xf, 0x2, 0x6, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x66, 0x0, 0x80, 0x518d26c3bf23eb75, 0x0, @rand_addr=0x64010100, @broadcast, {[@lsrr={0x83, 0x1f, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @remote, @private=0xa010101, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010102, 0xfffff001}, {@private=0xa010102, 0x8}]}, @end]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e24, 0x0, 0x4e23, 0x10d, 0x2, 0x0, 0x80, 0x33, r2, 0xee00}, {0x9, 0x8000, 0x7, 0x10001, 0xffffffffffffff7f, 0x6e, 0x3, 0x23}, {0x9, 0x1, 0x5, 0x10d33233}, 0x1, 0x6e6bb6, 0x0, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d6, 0x3c}, 0xa, @in6=@local, 0x3504, 0x3, 0x0, 0x0, 0x4, 0x2, 0x9}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0xb, 0x2, 0x0, 0x0, @str='batadv\x00'}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x2f, 0x45, 0x8, 0xcc0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @loopback, 0x40, 0x7818, 0x9, 0x7}}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000019c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f00000003c0)={0x1588, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\''}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(-(o)\\@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "cf02aef9d982ef21519924a872e10f9fa2b77d3c18ce8ea0f57eef7eb51e4da5fc0d56e67e06a0b7fac2596f8e22b3041e73e6ff1aaa89"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "c6f58ff0b19ef36f"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x458, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc94c}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[\xa8(#:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ']&@[/@]^})^,[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30bf}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\'&\'#{&\\)]\\e)}^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\v[@/)\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x98, 0x5, "ffbd8c8b6e9207d1e8a6688773b0b6f60549abd5e8044e7ce25c1690826793fcf425da28fd38e86e94a1e0ec620198b8e20188ed1c1a554e65c17f3692cd4becdcb237de779760fd0e24b7111d55fe695df7f1cbd1421b44be368782d5fe80ccd4886f59d610756f9097c223e600a17f9bd0d55f409ca1e94155b88b33104ab438d202bbf454166b7bb8915cd57a39c1e4752d2b"}, @ETHTOOL_A_BITSET_BITS={0x1b8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '^+\'{,!\x02{((#^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-%$%#---!\xed\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8caa}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb04}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!&.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*\xbb.*.\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc4c2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "912289ba4a3ef3190d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x1588}, 0x1, 0x0, 0x0, 0x4041}, 0x20004015) [ 2044.426707][T29593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2044.448233][T29593] device veth9 entered promiscuous mode [ 2044.466181][T29606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:35:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000000)=0x132) 18:35:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x2, 0x1, 0x7, 0x5, 0x2, 0x8, 0x800000, 0x800, 0x4ca], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/151) 18:35:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2045.739103][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 2045.741174][T29613] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:35:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x9) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2045.828312][ T1372] Bluetooth: hci3: Frame reassembly failed (-84) [ 2045.889242][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 2045.895803][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 2045.969080][T25046] Bluetooth: hci10: command 0x1003 tx timeout [ 2045.975580][ T6588] Bluetooth: hci10: sending frame failed (-49) 18:35:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)=0x132) 18:35:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x3) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x1, 0x7, 0x9, 0xb2f6, 0x0, "b029c983b481eac65f3f9831e181ff01a7ea5e"}) 18:35:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2047.667075][ T6584] Bluetooth: hci4: Frame reassembly failed (-84) 18:35:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xa) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x401, 0x57c9, 0x5, 0x2, 0x1, "1c3e24434007c7f7e3700bd0763236ced68fc7"}) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101200, 0x190) getdents64(r3, &(0x7f0000000140)=""/62, 0x3e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x9) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfb, 0x2, 0x1, 0x31, 0x0, 0x8, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x12800, 0x2, 0xfef4, 0x3, 0x7, 0x8001, 0x7f, 0x0, 0x751, 0x0, 0x401}, r4, 0x3, r2, 0x1) [ 2047.808947][T27617] Bluetooth: hci11: command 0x1003 tx timeout [ 2047.815226][T27617] Bluetooth: hci3: command 0x1003 tx timeout [ 2047.815275][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 2047.832479][ T6588] Bluetooth: hci3: sending frame failed (-49) 18:35:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xaa1, 0x5, 0x80, 0x4, 0x12, "42dbd92263aca3607075f485be7444bb5b04f8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x7ff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r2, 0x937e, 0x2, 0x641381d3}) [ 2047.964291][T29654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2047.980019][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 2047.986213][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 2048.059078][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 2048.066343][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 2048.747872][T29655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2049.728984][T25046] Bluetooth: hci4: command 0x1003 tx timeout [ 2049.735187][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2049.898952][T25046] Bluetooth: hci3: command 0x1001 tx timeout [ 2049.905264][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 2049.912231][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 2049.920061][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 2050.059058][T25046] Bluetooth: hci2: command 0x1009 tx timeout [ 2050.129013][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 2051.819030][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 2051.826342][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2051.968924][T25046] Bluetooth: hci11: command 0x1009 tx timeout [ 2051.975534][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 2053.888984][T23206] Bluetooth: hci4: command 0x1009 tx timeout 18:35:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x30000000) 18:35:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x8) [ 2054.137714][T29213] Bluetooth: hci2: Frame reassembly failed (-84) [ 2054.147951][T29666] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2054.186695][T29673] Bluetooth: hci10: Frame reassembly failed (-84) [ 2054.223294][T29213] Bluetooth: hci10: Frame reassembly failed (-84) 18:35:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)=0x132) 18:35:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00006d6563736563001da975366c55000400028008000500000000866d89c73471f8000000000000000000001b9d00ac879cc2", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r1, 0x80, &(0x7f0000000100)=@ll={0x11, 0xc, r4, 0x1, 0x1, 0x6, @multicast}, 0x0, 0x0, 0x1}, 0x69ca) 18:35:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) 18:35:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = fsmount(0xffffffffffffffff, 0x0, 0xfb) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4) [ 2056.002910][ T6584] Bluetooth: hci3: Frame reassembly failed (-84) [ 2056.069072][T29693] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2056.079671][T14535] Bluetooth: hci11: Frame reassembly failed (-84) [ 2056.080384][T29693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.209040][ T6678] Bluetooth: hci10: command 0x1003 tx timeout [ 2056.215560][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 2056.224490][T18633] Bluetooth: hci2: command 0x1003 tx timeout [ 2056.233893][ T6588] Bluetooth: hci2: sending frame failed (-49) 18:35:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x132) 18:35:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x7) 18:35:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x400, 0x29, 0x10}, 0x18) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x218) 18:35:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2058.059073][T18633] Bluetooth: hci3: command 0x1003 tx timeout [ 2058.072570][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 2058.129038][T24697] Bluetooth: hci11: command 0x1003 tx timeout [ 2058.135718][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 2058.288915][T24697] Bluetooth: hci2: command 0x1001 tx timeout [ 2058.295081][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 2058.301328][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 2058.307519][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 2059.968899][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 2059.975181][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2060.128892][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 2060.135810][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 2060.208970][T24697] Bluetooth: hci11: command 0x1001 tx timeout [ 2060.215343][ T6588] Bluetooth: hci11: sending frame failed (-49) [ 2060.368906][T24697] Bluetooth: hci2: command 0x1009 tx timeout [ 2060.368980][T18633] Bluetooth: hci10: command 0x1009 tx timeout [ 2062.059462][T27617] Bluetooth: hci4: command 0x1001 tx timeout [ 2062.066337][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2062.209072][T27617] Bluetooth: hci3: command 0x1009 tx timeout [ 2062.290248][T27617] Bluetooth: hci11: command 0x1009 tx timeout [ 2064.128839][T25046] Bluetooth: hci4: command 0x1009 tx timeout 18:35:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x31000000) 18:35:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xff, 0x10000, 0x7fffffff, 0xffffffff, 0x5, "adc2617cf54a3fb3a86ffd3314f689d1c30a5c"}) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0xfffffffffffffff9, 0x4, 0x1f, 0x9, 0xffff, 0x960}) r3 = memfd_secret(0x80000) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x200133) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x800) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r5, 0x560e, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee01}}, './file0\x00'}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000280)) 18:35:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x38000, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ftruncate(r1, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) [ 2064.334655][T29740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2064.369739][T29741] Bluetooth: hci2: Frame reassembly failed (-84) [ 2064.387865][T14535] Bluetooth: hci2: Frame reassembly failed (-84) [ 2065.167715][T29750] xt_CT: You must specify a L4 protocol and not use inversions on it 18:35:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000000)=0x132) 18:35:53 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200440, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x50, r0, 0xdd7f6000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x137) 18:35:53 executing program 3: ioperm(0x0, 0xffffffff, 0x8000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:35:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x3}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r2, 0x4e83, 0x1000042, 0x9fc}) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8000) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2066.220992][T29759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2066.236766][T29759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2066.275818][T29213] Bluetooth: hci3: Frame reassembly failed (-84) [ 2066.296538][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 2066.334052][T29759] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2066.374291][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) [ 2066.448964][T21258] Bluetooth: hci2: command 0x1003 tx timeout [ 2066.456147][T15237] Bluetooth: hci2: sending frame failed (-49) 18:35:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x132) 18:35:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000007440)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c52c1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)=0x800) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) 18:35:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2068.150023][T29780] mkiss: ax0: crc mode is auto. [ 2068.185587][T14535] Bluetooth: hci4: Frame reassembly failed (-84) [ 2068.215223][T29780] mkiss: ax0: crc mode is auto. 18:35:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x135) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) [ 2068.298994][T23206] Bluetooth: hci3: command 0x1003 tx timeout [ 2068.305382][T15237] Bluetooth: hci3: sending frame failed (-49) [ 2068.375493][ T6678] Bluetooth: hci10: command 0x1003 tx timeout [ 2068.382528][T15237] Bluetooth: hci10: sending frame failed (-49) 18:35:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x182, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x6bb8, 0x80000001, 0x8, 0x1c63, 0x1, "0ad11ae99efc259ae2978295aaef58e3e23901"}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1f7002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) ftruncate(r4, 0x200002) sendfile(r3, r4, 0x0, 0x80001d00c0d0) fremovexattr(r3, &(0x7f0000000180)=@random={'security.', ']:@.:\x00'}) openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) [ 2068.536544][T23206] Bluetooth: hci2: command 0x1001 tx timeout [ 2068.543535][T15237] Bluetooth: hci2: sending frame failed (-49) [ 2070.218980][ T8483] Bluetooth: hci4: command 0x1003 tx timeout [ 2070.226108][T15237] Bluetooth: hci4: sending frame failed (-49) [ 2070.379019][ T8483] Bluetooth: hci3: command 0x1001 tx timeout [ 2070.386260][T15237] Bluetooth: hci3: sending frame failed (-49) [ 2070.458818][ T8483] Bluetooth: hci10: command 0x1001 tx timeout [ 2070.465705][T15237] Bluetooth: hci10: sending frame failed (-49) [ 2070.608982][ T8483] Bluetooth: hci2: command 0x1009 tx timeout [ 2072.299001][ T8483] Bluetooth: hci4: command 0x1001 tx timeout [ 2072.305732][T15237] Bluetooth: hci4: sending frame failed (-49) [ 2072.448977][T23206] Bluetooth: hci3: command 0x1009 tx timeout [ 2072.539080][T23206] Bluetooth: hci10: command 0x1009 tx timeout [ 2074.379336][T23206] Bluetooth: hci4: command 0x1009 tx timeout 18:36:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x32000000) 18:36:01 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{0x9, 0x6, 0xbf, 0x20, 'syz1\x00', 0x3}, 0x1, [0x7ff, 0x7a3e, 0x80, 0x8, 0xffffff0000000000, 0x1, 0x1, 0x3, 0x100000000, 0x5, 0xdc, 0x2, 0x7fff, 0xfff, 0x0, 0x9, 0x7fff, 0x100000000, 0x9, 0x2becc184, 0x7, 0x100, 0x1, 0x2, 0x49e, 0x401, 0x0, 0xffffffffffffffab, 0x74, 0xffff, 0x9, 0x200, 0x7ff, 0xb223, 0x0, 0x6, 0x1, 0x5, 0x1, 0xd0, 0x9b0, 0x9, 0x8, 0x4f35, 0x4, 0x1, 0x1000, 0xb3c, 0x401, 0x567, 0xfffffffffffffffb, 0x400, 0x3, 0x20, 0x0, 0x1, 0x3, 0x5, 0x6, 0xbfb4000000, 0xffffffffffffffe0, 0x10001, 0x8001, 0x8000, 0x4d7e8b7a, 0x7, 0x80000000, 0x9, 0xc74a, 0x4, 0xff, 0x8, 0x5, 0x7, 0x7, 0xfffffffeffffffff, 0x7ff, 0xff, 0x9, 0x5, 0xf115, 0x5, 0x4, 0x400, 0x0, 0x9, 0x5, 0x5, 0x800, 0x1f08, 0xffffffffffff477b, 0xffffffffffffffff, 0x7, 0x100000001, 0x2, 0x4, 0x7ff, 0x6, 0x5, 0x1, 0xfffffffffffffff7, 0x8, 0x2, 0x8, 0x2, 0x8001, 0x1, 0x7, 0x7ff, 0x0, 0x80000001, 0x7, 0xffffffff, 0x81, 0x1ff, 0x6, 0xfffffffffffffff8, 0x5, 0xfffffffffffff001, 0x10001, 0x100, 0x8002, 0x3ff, 0xfffffffffffffffc, 0x5, 0x8, 0x5, 0x2]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) syz_open_pts(r0, 0x121400) 18:36:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2074.554554][T29838] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2074.567647][T29213] Bluetooth: hci2: Frame reassembly failed (-84) [ 2074.602512][T29840] Bluetooth: hci11: Frame reassembly failed (-84) [ 2074.630312][ T6584] Bluetooth: hci11: Frame reassembly failed (-84) 18:36:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x132) 18:36:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4a01, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x4442, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000540)={0x8, 0x9, 0x9, 0x8, 0x6, "1e00cac8c6ff4299ebd32eca3e7b3deabb8db8"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) syz_open_pts(r0, 0x203) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x5, 0x1, [0x3ff, 0x10001, 0x55, 0x60991fcc, 0xac], [0xffffffff, 0x230a, 0x3, 0x5bf, 0x8000, 0x7ff, 0x80, 0x7f, 0x7f, 0xfffffffffffffffb, 0x1fffffffc0, 0x7, 0x9, 0x8000, 0x9000000000000, 0x49c, 0x8, 0x4, 0x2, 0x2ae, 0x1, 0x0, 0x280000000000000, 0x393b, 0x0, 0xffffffffffffff81, 0x3, 0x4, 0x7, 0x400, 0x5, 0x0, 0x1, 0x8, 0x9, 0x8, 0x8000, 0xfffffffffffffffe, 0x6, 0x0, 0xf72, 0xffffffffffffff00, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x2, 0x100, 0x65, 0x7, 0x0, 0x7f, 0x5, 0x8000, 0x7, 0x7fff, 0x4a, 0x8, 0x634a, 0x3, 0x7, 0xfffffffffffffffd, 0x8, 0x81, 0x5, 0x3, 0x80000000, 0x1, 0x3, 0x7, 0x1000, 0x8, 0x0, 0x7, 0x13, 0x7e2, 0x1, 0x1, 0x6, 0x0, 0x6898, 0xa, 0x4, 0xde2d, 0x81, 0x8, 0xfffffffffffffffa, 0x101, 0x14, 0x3af1, 0x6, 0x4, 0x8, 0x5, 0x7, 0xb, 0xe74e, 0x4, 0x100, 0xcf1c, 0x4, 0xe8e, 0x8, 0x3ff, 0x401, 0x7f6aca05, 0x7ff, 0x9, 0xffffffff, 0x5f, 0xbc33, 0x7, 0x80000000, 0x1, 0x9, 0x5, 0x85cf, 0x1, 0x400, 0x9, 0x81]}) 18:36:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x711002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:36:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x402400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/152, 0x98}], 0x2, 0x80000000, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$audion(&(0x7f0000001200), 0x2, 0x319880) write$cgroup_type(r3, &(0x7f0000001240), 0x9) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0xb) r4 = fsmount(0xffffffffffffffff, 0x1, 0x9) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) [ 2076.619305][ T8483] Bluetooth: hci2: command 0x1003 tx timeout [ 2076.625640][T25004] Bluetooth: hci2: sending frame failed (-49) [ 2076.688908][T24697] Bluetooth: hci11: command 0x1003 tx timeout [ 2076.695202][T25004] Bluetooth: hci11: sending frame failed (-49) 18:36:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000000)=0x132) 18:36:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="080101ff94010000f100000000100000080200000600000000000000000000001ab1a4bed031f9184d10734e553a404a0f9ad8b110aa23294aa523e11b820732b9c48343b233b96c053ac4ec57528df228d2078ee1cf7becf7b4248fc28b0fd2ad0d152a96f5bf9ac18c3e5cf21dc356bcbad5735d36d3540279fc245333e7664ec500"/1399], 0x582) r1 = dup2(r0, r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000680)=0x13) 18:36:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x9, 0xfff, 0x3, 0x18, "91755d1069ac986523b225cead754b738a4def"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2078.421700][T29879] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 2078.444043][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) 18:36:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2078.532404][T24697] Bluetooth: hci3: command 0x1003 tx timeout [ 2078.544401][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 2078.688929][ T6678] Bluetooth: hci2: command 0x1001 tx timeout [ 2078.695049][ T6588] Bluetooth: hci2: sending frame failed (-49) [ 2078.768836][ T6678] Bluetooth: hci11: command 0x1001 tx timeout [ 2078.775092][ T6588] Bluetooth: hci11: sending frame failed (-49) 18:36:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2080.448808][T24697] Bluetooth: hci10: command 0x1003 tx timeout [ 2080.455606][ T6588] Bluetooth: hci10: sending frame failed (-49) [ 2080.463435][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 2080.469966][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2080.608924][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 2080.615146][ T6588] Bluetooth: hci3: sending frame failed (-49) [ 2080.768843][T24697] Bluetooth: hci2: command 0x1009 tx timeout [ 2080.848962][T24697] Bluetooth: hci11: command 0x1009 tx timeout [ 2082.528900][T24697] Bluetooth: hci4: command 0x1001 tx timeout [ 2082.534938][T24697] Bluetooth: hci10: command 0x1001 tx timeout [ 2082.535798][ T6588] Bluetooth: hci4: sending frame failed (-49) [ 2082.547119][T18171] Bluetooth: hci10: sending frame failed (-49) [ 2082.689303][T24697] Bluetooth: hci3: command 0x1009 tx timeout [ 2084.608885][ T6678] Bluetooth: hci10: command 0x1009 tx timeout [ 2084.618734][ T8483] Bluetooth: hci4: command 0x1009 tx timeout 18:36:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x33000000) 18:36:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 18:36:12 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x28000, 0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x222800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x200e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x100, 0x9, 0x81, 0x2, 0x9, "b3f7818f6714aaa8be2b94c67d9bbb6d47097d"}) ioctl$FIONREAD(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x133) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/129, 0x81}], 0x2, 0x1, 0x49678ddb) [ 2084.822215][ T6792] Bluetooth: hci2: Frame reassembly failed (-84) [ 2084.830073][T29905] Bluetooth: hci2: Frame reassembly failed (-84) [ 2084.885493][ T6792] Bluetooth: hci11: Frame reassembly failed (-84) [ 2084.895726][T29912] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 18:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000000)=0x132) 18:36:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000480050003000100000008000100040000000800020003000000"], 0x30}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_pts(r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x133) 18:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x420002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x20, 0x1}, {0x5, 0x7}]}) [ 2086.686528][T14535] Bluetooth: hci3: Frame reassembly failed (-84) 18:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x137) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x3ff, 0xa7, 0x9}) [ 2086.849088][T18630] Bluetooth: hci2: command 0x1003 tx timeout [ 2086.855635][T18171] Bluetooth: hci2: sending frame failed (-49) [ 2086.938913][ T6678] Bluetooth: hci11: command 0x1003 tx timeout [ 2086.945250][T18171] Bluetooth: hci11: sending frame failed (-49) 18:36:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x132) 18:36:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) 18:36:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x10) [ 2088.662154][T25004] Bluetooth: hci4: sending frame failed (-49) [ 2088.679420][T29946] Bluetooth: hci10: Frame reassembly failed (-84) [ 2088.688863][T24697] Bluetooth: hci3: command 0x1003 tx timeout [ 2088.696192][T18171] Bluetooth: hci3: sending frame failed (-49) [ 2088.700667][ T6792] Bluetooth: hci10: Frame reassembly failed (-84) 18:36:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) syz_open_pts(r1, 0x480) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) socket$inet6(0xa, 0x2, 0x5) [ 2088.929358][T25046] Bluetooth: hci2: command 0x1001 tx timeout [ 2088.940896][T18171] Bluetooth: hci2: sending frame failed (-49) [ 2089.008849][T25046] Bluetooth: hci11: command 0x1001 tx timeout [ 2089.015098][T18171] Bluetooth: hci11: sending frame failed (-49) 18:36:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2090.688877][T24697] Bluetooth: hci10: command 0x1003 tx timeout [ 2090.695318][T18171] Bluetooth: hci10: sending frame failed (-49) [ 2090.703099][T24697] Bluetooth: hci4: command 0x1003 tx timeout [ 2090.709594][T18171] Bluetooth: hci4: sending frame failed (-49) [ 2090.768999][T24697] Bluetooth: hci3: command 0x1001 tx timeout [ 2090.775127][T18171] Bluetooth: hci3: sending frame failed (-49) [ 2091.009113][T24697] Bluetooth: hci2: command 0x1009 tx timeout [ 2091.089007][T24697] Bluetooth: hci11: command 0x1009 tx timeout [ 2092.768874][T25046] Bluetooth: hci4: command 0x1001 tx timeout [ 2092.775596][T18171] Bluetooth: hci4: sending frame failed (-49) [ 2092.783650][T25046] Bluetooth: hci10: command 0x1001 tx timeout [ 2092.790368][T18171] Bluetooth: hci10: sending frame failed (-49) [ 2092.849072][T25046] Bluetooth: hci3: command 0x1009 tx timeout [ 2094.848988][T25046] Bluetooth: hci10: command 0x1009 tx timeout [ 2094.855171][T25046] Bluetooth: hci4: command 0x1009 tx timeout 18:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x48000000) 18:36:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x560e, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x105011, r2, 0x1ab8b000) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb8fe) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001b40)) ioctl$TIOCSIG(r3, 0x40045436, 0x29) r4 = signalfd4(r0, &(0x7f0000000080)={[0x5]}, 0x8, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000001b80)=""/4096, 0xfffffffffffffdeb}, {&(0x7f00000011c0)=""/163, 0xa3}, {&(0x7f0000001280)=""/167, 0xa7}, {&(0x7f0000001340)=""/77, 0x4d}, {&(0x7f00000013c0)=""/174, 0xae}, {&(0x7f0000001480)=""/128, 0x80}], 0x6, 0x3, 0x4) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)=0x137) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0x7fffffff, 0x7, 0x5, 0x80000001, 0x5, "b57f5c3beaf27276c8ec1d55f49e47d4120350", 0x2b0, 0x8000}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) vmsplice(r6, &(0x7f0000001a80)=[{&(0x7f00000015c0)="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", 0xfd}, {&(0x7f00000016c0)="8d82ed87faf8cd0246894bc372b9eb778a4b170ef69002ca346bc0b6d41e5cc3a02f77ae4d8ab59ddbbaeda8095bf4ff574e600dc86daac655f158611fd0d6413cdf34ce3c625aae46d498c5845acb3739412ccc2f34b11e56fbdb0cdf595c16d6ec0f17470321db5ef56378a32ca4e923395a54ea2915a553cf6572ac98e3e5a46a0fde3b8bf76a50df7a49ee594868acf4a8f402f2b4f3ba9392aaa17532fcc20a3b1a5f835f49fc2edd5eb2c05f665f1ed2aaf5ce372535816e2bde74201a0dbaa1aaabb0", 0xc6}, {&(0x7f00000017c0)="c8a2eea9d42fc173a0aac3c3523d3b25f3d989897a1e902bbb9754fbb7401eef5502316a543afcbc4f43fe4b81afd2179bfb34b011d478045a16b4dc5604472d35992dba", 0x44}, {&(0x7f0000001840)="13654dea3507fc16b94313b3643a126cd9d20dd5e9edb21a5d5bcaae", 0x1c}, {&(0x7f0000001880)="5af2939d52da9ec5582df761c39d572893addfd3e129a0615209c0ccbd5867e1f3970e2b2842a45fa4f920296e8c4358266f4306af544f37b5ae0d1240901d", 0x3f}, {&(0x7f00000018c0)="e509ad774979c92b6037d08dc78df2fbb18da75798394e3c6b9d1d29c0e4dd1ea0034f43aedb2668c8ee4818ec3e6424a5550d65e0b7066220d7836b5a96b3caf19cf7c8f678d093f1ef5de707b638155881932b62169c23a9bb5353fad8b5f7b16e6f143d5ae6edf5e5e41347c3135c3b77a9ec240f58d4700c64db709dc25c5a2b8cadb1f750", 0x87}, {&(0x7f0000001980)="12265cf2e7f825a0e3dd9ddbb1dba2270a0482e37e7ccd9383cbfc42de69830f6e7b260677c3a845be8392ae43321806d492ad37a63bc9954fbd86adaed01d9bc8710d96edc5cd0102bbb77c8ec31ae989bfda5f0830bebd04bc1d1f1e69e16f4214082d6f758596252010a6a62e44e39b2778bae3718752fd4057196c216fc3e75fece17e66fe9457382de655841908402b81c6e5405bbe5515015f8f3f95ccbced000220bd536f3fb19e5d21fa018d73a2e32477a55071854217fe0d013e2db6", 0xc1}], 0x7, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001b00)=0x9) 18:36:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xe007db6ca5e84f80, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r3, 0x560e, &(0x7f0000000000)) r4 = fcntl$dupfd(r1, 0x406, r3) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) ioctl$FIONREAD(r4, 0x560e, &(0x7f00000006c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r5, 0x560e, &(0x7f0000000000)) ioctl$FIONREAD(r5, 0x560e, &(0x7f00000000c0)) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="3c104189d347470efa7517b6ae82a07b504a23f0cd7e7a14b4af7ff39306930069d73b6213fdf191430e9a58ba414b9c6451f2d4918103df4587649f5f8f3758c33d3b526fbdc8f3321174b158caa7cc1158fda3d77ab2a8e9ba097a1d3484066857beb025c78dbeca3f9c814f5f61c7aeecb56d1aab7d1acc502e487e914b2848176c761ee2b511e22907a8bb105315894ab5b638b700a366006719dbd01e522b7bb6ad0ec27e1e7c79a3a52be8aedbdcdcf4094738fa0037753d5aa83705f2daccbf23c86b425dc6529a64f63f038467b7ab2d74a174ea3a139909d815751dbe82e99eb0a6b2afba6bb1de88e6741a80730529ebe4d81810a47bc092e27216") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000680)) ioctl$FIONREAD(r6, 0x560e, &(0x7f0000000000)) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000640)={0x146, 0x13, &(0x7f0000000240)="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"}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x133) [ 2095.102902][T29979] Bluetooth: hci2: Frame reassembly failed (-84) [ 2095.118843][T14535] Bluetooth: hci2: Frame reassembly failed (-84) [ 2095.252679][ T1372] Bluetooth: : Invalid header checksum [ 2095.259263][ T1372] Bluetooth: : Invalid header checksum [ 2095.264952][ T1372] ================================================================== [ 2095.273375][ T1372] BUG: KASAN: null-ptr-deref in __pm_runtime_resume+0x154/0x180 [ 2095.281033][ T1372] Write of size 4 at addr 0000000000000388 by task kworker/u4:5/1372 [ 2095.289095][ T1372] [ 2095.291429][ T1372] CPU: 1 PID: 1372 Comm: kworker/u4:5 Not tainted 5.15.0-rc7-syzkaller #0 [ 2095.299950][ T1372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2095.309996][ T1372] Workqueue: events_unbound flush_to_ldisc [ 2095.315895][ T1372] Call Trace: [ 2095.319175][ T1372] dump_stack_lvl+0xcd/0x134 [ 2095.323773][ T1372] kasan_report.cold+0x66/0xdf [ 2095.328555][ T1372] ? __pm_runtime_resume+0x154/0x180 [ 2095.333831][ T1372] kasan_check_range+0x13d/0x180 [ 2095.338762][ T1372] __pm_runtime_resume+0x154/0x180 [ 2095.343865][ T1372] h5_recv+0x2c4/0x680 [ 2095.347933][ T1372] ? h5_slip_one_byte+0x150/0x150 [ 2095.352983][ T1372] hci_uart_tty_receive+0x24d/0x710 [ 2095.358191][ T1372] ? hci_uart_send_frame+0x6c0/0x6c0 [ 2095.363474][ T1372] tty_ldisc_receive_buf+0x14d/0x190 [ 2095.368773][ T1372] tty_port_default_receive_buf+0x6e/0xa0 [ 2095.374502][ T1372] flush_to_ldisc+0x20d/0x380 [ 2095.379186][ T1372] process_one_work+0x9bf/0x16b0 [ 2095.384140][ T1372] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2095.389520][ T1372] ? rwlock_bug.part.0+0x90/0x90 [ 2095.394444][ T1372] ? _raw_spin_lock_irq+0x41/0x50 [ 2095.399549][ T1372] worker_thread+0x658/0x11f0 [ 2095.404223][ T1372] ? process_one_work+0x16b0/0x16b0 [ 2095.409417][ T1372] kthread+0x3e5/0x4d0 [ 2095.413499][ T1372] ? set_kthread_struct+0x130/0x130 [ 2095.418870][ T1372] ret_from_fork+0x1f/0x30 [ 2095.423750][ T1372] ================================================================== [ 2095.431809][ T1372] Disabling lock debugging due to kernel taint [ 2095.445431][ T1372] Kernel panic - not syncing: panic_on_warn set ... [ 2095.452122][ T1372] CPU: 1 PID: 1372 Comm: kworker/u4:5 Tainted: G B 5.15.0-rc7-syzkaller #0 [ 2095.462004][ T1372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2095.472053][ T1372] Workqueue: events_unbound flush_to_ldisc [ 2095.477859][ T1372] Call Trace: [ 2095.481128][ T1372] dump_stack_lvl+0xcd/0x134 [ 2095.485808][ T1372] panic+0x2b0/0x6dd [ 2095.489707][ T1372] ? __warn_printk+0xf3/0xf3 [ 2095.494326][ T1372] ? preempt_schedule_common+0x59/0xc0 [ 2095.499782][ T1372] ? __pm_runtime_resume+0x154/0x180 [ 2095.505099][ T1372] ? preempt_schedule_thunk+0x16/0x18 [ 2095.510459][ T1372] ? trace_hardirqs_on+0x38/0x1c0 [ 2095.515553][ T1372] ? trace_hardirqs_on+0x51/0x1c0 [ 2095.520567][ T1372] ? __pm_runtime_resume+0x154/0x180 [ 2095.525843][ T1372] ? __pm_runtime_resume+0x154/0x180 [ 2095.531130][ T1372] end_report.cold+0x63/0x6f [ 2095.535708][ T1372] kasan_report.cold+0x71/0xdf [ 2095.541156][ T1372] ? __pm_runtime_resume+0x154/0x180 [ 2095.546532][ T1372] kasan_check_range+0x13d/0x180 [ 2095.551456][ T1372] __pm_runtime_resume+0x154/0x180 [ 2095.556563][ T1372] h5_recv+0x2c4/0x680 [ 2095.561073][ T1372] ? h5_slip_one_byte+0x150/0x150 [ 2095.566098][ T1372] hci_uart_tty_receive+0x24d/0x710 [ 2095.571283][ T1372] ? hci_uart_send_frame+0x6c0/0x6c0 [ 2095.576554][ T1372] tty_ldisc_receive_buf+0x14d/0x190 [ 2095.581827][ T1372] tty_port_default_receive_buf+0x6e/0xa0 [ 2095.587539][ T1372] flush_to_ldisc+0x20d/0x380 [ 2095.592206][ T1372] process_one_work+0x9bf/0x16b0 [ 2095.597137][ T1372] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2095.602495][ T1372] ? rwlock_bug.part.0+0x90/0x90 [ 2095.607419][ T1372] ? _raw_spin_lock_irq+0x41/0x50 [ 2095.612436][ T1372] worker_thread+0x658/0x11f0 [ 2095.617103][ T1372] ? process_one_work+0x16b0/0x16b0 [ 2095.622289][ T1372] kthread+0x3e5/0x4d0 [ 2095.626354][ T1372] ? set_kthread_struct+0x130/0x130 [ 2095.631539][ T1372] ret_from_fork+0x1f/0x30 [ 2095.637086][ T1372] Kernel Offset: disabled [ 2095.641398][ T1372] Rebooting in 86400 seconds..