92a4c19ef79a05d5aed131d9e571e10b94cbb17c5cc00ee011af789b92852feda14910d25b49d4883b8f8f41e381a5172ca56c7145836be252c4b30f5d2b49da5e5efbb66fc9389513bf3ded9df3e40bae04d9b2c7bd22a39c9f7b1ebab270c98f204e4f8a47dde5cdb21a2c0fd36b3a1c8ef2d84e68c06b548fdef1776bc41e19d895ac41f81357df6861ffb5f54c"}, @NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@chsw_timing={0x68, 0x4, {0x20, 0x5}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7f, 0x5, 0x7f80}}, @random={0xfc, 0x47, "bc4ec126b2dd1fe85cb8ed0ec727c1a25d357d25cf4b47e905c6117f3c43c9f60024299ec8f5407dadb06ca3c2fd86642a50ef355729c66fab691dd0fd644427ca6a637e8930e3"}]}, @NL80211_ATTR_BEACON_HEAD={0x5b7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="0b446df5838b", {0x8, 0x7f}}, 0x42, @random=0x6, 0x10, @void, @val={0x1, 0x2, [{0x6c}, {0x48, 0x1}]}, @void, @void, @void, @val={0x5, 0xfe, {0x0, 0xc3, 0xfc, "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"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x3f, 0xe, 0x4}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2c, "c34c49b73756cacfbc64fa4aa38b79667c675b76be6b1215f3dce3ddfec00d4f7176803cb6879f9000513e98"}, {0xdd, 0x8e, "9b1e2d70d0eee97fc780efe14946a2a13513050ba936817ac3f7986712d75e4b01af28bfe617f119f99228f6261ef39c610efca1b7f80ddaa26b4dcb668e86ab2bd941f65e13bc81e52d4f0e163ded88f0b16de55fba0273d1b966cfefce40c0ca1f51fbc1ee75461ee0bd606f393dec8f53273b30d92b4889471c32c8d599bce0c11422dad9249ee1381a90515b"}, {0xdd, 0xa5, "a154904395cdab1f92c72f7dece3f1cb582a048805287e14d449d1fe6a7a2cbdcace3ad5f78f185b5ddfc312ba9b7c644aeafc45c2673810460c8962af126f557160533e4d98d7f0d0779972ecf6350b4c34179cc72728b73d4ab7c3d6f16d42203a606d24e58943a49d5b908f9ce8facb9ca482d78e611ae4a7c94fdd61de361d830614cdc00464bce7aa63acd89d5e5e7bedd62c2858110b270fe4b8d1a195cf330fdc90"}, {0xdd, 0x70, "4c913640c8a946f80ab605e75e75b54c78a256535cdd16bb462e959c855bc42677c0b365d65d2c3d3a65bb86a33911f559a69406d91cafb0ae671ae19cb65e10af9fe0d7cc8696f3a17b688cbcba70e3788ec15bbb136436af5f868126412d1fa4076e79123bcad723361892933ce84a"}, {0xdd, 0xf3, "c18c4a6080ca93b44f7f34d3e34c7d146381dbfd5694b6809bb31d57aa5d4337983a0305777e52944ba9f9eed56a4eda5c96eba03a0770c42b541db424375da84de27b431aa3e0b6b44b22eb83df3a684c71e3e666378064cac4567789c8f7fbea9a6d83e945a5c38af33b9ed1a9f88c2eff169f8c2ea4c2917f87b4c4e651c9839fc2db60aba732252cf7f715760572b26f31381dfd2ba9cd48a2836c7d306e3500d6f9b86e8af2bb6ffe06b59db73a5f8f487934e9b7fe838604224416580afa0878934043460ff1071efd088ec1b96b65241e5fd96d4e32d2b6aff039a6c6ffca68e7a5ef42336099975ddc3143f450e167"}, {0xdd, 0xaa, "a6bd993ea7275b6eb31dac679b2b7b440896d294070da2b1c930e6024d157fd2c555a3c5c653b4a0acec4da06d6b517dcfe759c6fba79fc68f0c0d31f6e3c68ca02c6e7048da27effb9f36f43d6d418e97b45af8003d46ec67da9430d4479c45a869bcdcc937c0cdb038d2c69da1b13472555c59dcb2d4688b0ab68517d1cdd442eb85f12b4be4de325b3c406e6b10ec81e3102a5777843b80c3b57ad4cd2895c343fa4c55ae34602dc9"}, {0xdd, 0xfa, "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"}, {0xdd, 0x7, "a630beef71084b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @broadcast, 0x2, @device_a, 0xfffffeff, 0x860, @device_b, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "331275a60ea25014a37524b7183cb6928023b7d42df0a5e765a2cad07c4db0998fdc04808eb9e7269aa72b0c3c6b90c9481747e4f7261d216c9dd51caceff2965809ae8b2801b1352e21"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x269, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x6c1d, 0x7, 0x3, 0x98, 0x0, 0x2, 0x8000, 0x4, 0xf138]}]}]}, 0x39ec}, 0x1, 0x0, 0x0, 0x200448c1}, 0x48800) (async) 02:32:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x60, r2, 0x10, 0x7, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x40084) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000018c0)={0x39ec, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2c2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x6, 0xeb7, 0x0, 0x7f, 0x9, 0x4, 0xfffe]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2420, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "bcf572e81a6fa911b2f5542c29032ba03ec213849d447a47ca08229cd284e7074349805c30555ae8ace7ff6da0f2fb6f8da7bc2763aa9e2d655661248518e8646eb86cb77a6fd269ef91fe49e6f9a2809b75865fb394d591a070138b080ca4167e66c5437d1a7ecde716805213f593e913f068dc359d61f6c5691de1dd5f6b5bd73d9e0bfcae086add8290785506eaf62c86d72c748adb464948c33f7ff668d721e5aa3a80f41e051cd83c034166090ea8ef6cff3d6062fc82f0e786b5cdaf11225f806b17faefe96750bfef892ebf616e7215bb99d3e3105e9331afc427835e3abd4e96db317ed4339f6b10505c657b5b594357aa0954480bd368b54a2e0b35e16b6bf08e3edf6f477ae6626221fca9949546e335da49795536dba8978b1ade1404d708baef8a478f8c0e231416eb0460aeb3769f526149e0742c90b811026b9cca2a61cc18b757ad4ae398fce79a43f08a8055b8e86c2b4348f9b0466cbc96a4a93ddef0ec1d72ee1ce6ceee58b4c612b71f49ec4984daef6e12799dd3d799bdb6e82ce55b6042c76dc4d7546880b9c7d4bfe7feea0210e0550fd576ea04c5b77d7bed9a326660de9c577b43b7394eaac374d34fdefda9218e43e2026f674cf1a475a8536c63e615fff76b29679aeb413c810a3a1963f2b8eb76545dbaa57dd28ec64273ff0c43f37cc99cca182db484f6a45547f1002f9d1cb08aec4f6785aa587ca86abe70ed6a5ab0bd7de4de1796dc1142886f42ee003090f15b0f124fdabfadabbf8891ab57974735ebe264ba630afdc1608b9cd98abf7a4926bdc1da3975f8622beccdebc06a6a4bc20293e80780ce4b5ab73a79dc7ecf72a4d158563862739bc562fa1f20987422b3710dfb58b72edb226a34e87b11b9b853d660f80f93134f9f473230c2efdbb26c994364417ade4cd68488c59929924af03dccef71338b3957d054f2a1de9ef6cf186aa03b3ddd2e826fc307d0f1286087e8cdb7b56f06f2eeceabe4c0a2e057d896587a3d5a80ab46b462294f33e0d4cb95c37229df477eb9428440754964cc5a48b1d204a9ba3bcd4f45558bb7bb499232f04e9a2f30254965f71d07d91ff2f1f55d0f741757ba08cdbaf2de52e1658a2df600771747293c7858a93fc0201a1f1a7081c2f07a477ea399f03e89470c5c6f409e78b1a0d9f2df5fd079f6d0caa68b381c347ccda26b8035d8be281fb47acd37745372715c8a392782f3c3e13293a17bedeb7f46a8760fdb5055fc400baece4f21ff2fbfe9caadb2c4748934cecf3fdbc0a6c209b3a2009112a4ee7f93c46e04df2f6bdbab648edb350f7cc18f328a80bd79f2894322c3fb973a9b8fe4638baf0e4a791ccd1a9fe1b224b6c016b83caee06fd4b8f33c72a89b52d31b7e2aaf2f153126866606a6f72a96130b353d4b4e8a46e9c74569bc526496851fdab65f0d684f7f96546e34af24f2e333ff00cc819a120f038003460e18ab4abc216158414fb3eabfab266bb3d0f2d5bd0acd2519373cf92182439f6a1195b6147dd4c598420f8932ee468be68c6c082511248923c5941c07e7caf30efcec2a81bc1a0d11e375b1243761dc6da0336ee59d9858e5ce5165b5f9cbcc2828b383b43c41a6f055ac992a053107bb33e89d312bee1288b22bfcf0207467863d83eed35b8b901914369f2535a070ec517c0f3a419657560c5ffdb736639f07b8b4dfef66608ae0b81fec8e4fa51ce31b30aebd4255708707c678553e384f875dc4de6f13ed1834be738324583b6ea36b8a2e8587176d1470900f725cea8f6b9053295efb720a3ac0bdd2221e16bdaef343357beef321ff49a62dad19c3323b80151a43bae7ce84370a1902f14eaf2bcfba8ca194b7b9d37fa93495056089940204d2aa88a0909843178477dac4c7e0df5bf9826fc585979ceccac4003d8ce072442852b74414d8bef5c541504cc21116d50c1c72b1771c85facd6c2d051ccf4cf214d470cb8f595de5998ff171247667e8d39dd456b227b24627e0a9a8caf8fabc2fa98d9a2fb00164ccd6e3ffd337003353b97ae7c3ad4e91034290b5d548ab7a9cc3b40fcdccaa7fd059416f8a22fa7c95118307db77cc376595045f816d381770ba6b10a592863785621febea13fce7f8ad3e52c8d8da807d36c759cd80485909c14af51c4d44dc6cbad7ebc6c57b0d15b89086f2c7b3b2471644e21255e88ed21ade79a3304ac2c2fac8b8a5e46036d531fcf696aff40cc30d3e63f74a7da2d60bcc44e7cf04a52f9a9cac57b32b160f07e8d3ee1adf2cdfcae196172c77647ad439cfd3eee71c821e3334edb0d35677275384c5afebcef84544975bdabc61912d7dcbf3c7d070ba799398b8edc122af1fa196e4c69656071bd291dc360b1efc517299eff5373b791527348f576403e140ce17bef4441d6cb3a0d70ed0242ab40fd387f8a72300b63ba36d23767c19603a5c0df59c1e0f34ca250e97b2d57e30d15229f8312365626bc70c1ab455d5499ca97d9958bd8327a6d687722897eaba5438cf6cdc0e7aa5b2d737451efd57944b57a24c28ad4293a21e76f27f795afd7b191a67abe7a04097bb61c52d85974c15704e01aaf6c3180132174002a83fa6e81f152b542277311b48ac0762d4ac285d233a58586014178c842b17e80655740a7af30daed8b14ffee09e450a70acdf68c85bce1c9414c99be265706dc6ee9a320f2109fdb904d0ea94f4c22b95490326e5379e73710405c0d91c2dbaf193cd37bf312f28de1bcee1e09a72bc9104a06c17f8318be101007953b315019b8c559984e3f07de9095fbc0062e825a6304627c14ba47ea1f06ce340c03c6f6891eed106eb665281b79e253c4a84ff9aa91c05280551ab774b460c1391041470847fd737d82e9abd8a590ba6aabe735beaa4343cfc7cba6d12bc3668ad80f0989a1b485b256ef6a77e9cd511a899edfb0e6b8083f59233e34c3644f63dcefe45f552b82615e187e17c2537ed1d2b3de9a1ece53ae7ed06d5a0aef874152c4fbcde6d72533f879c34cccfef774bf093f61c0e05916dbac1611fc793e0f2f42d9942c6bee26b8b19df560f9254874ad0a49b1f9629a6d0fd0a7d110e4e8b3e40cd6c54cf6acc06a318a19fa16c31d059d1019bb50bae4c0e54bde5af78f7c7e9210bd8da3beae619a7642033ad4164e95813b4a81e4a93db4be24fa4545c3da486375ec4f2b51374ee5c6a007bf8adfd9117b19067ebb2fca989d371b618818f1d97fa8e9e17fa89e7f1616d41a2e8681751c54eeef5cd73b8293efae2b57ae29d10fa77bc34a39fbb234d5fa38b23fc0af9d4775551c28d05db48c2e3a95b6e6b2ce0beaa7c26b69946b7fd5010f124d48e91fb36bf6e9e0b0922fbbe5f45c227a4f624b4a7c4fc807a53852fba3429a6502ac5159f6835dfc86eed656aca6aedf398271ff819a262a1b783f5a62079c5e658370de31581dcf75842a9958af3104a843eac54faf3753b985abb55ed13ecf5ca780ac32566b82f2d24cd8419d6ae450c16a8195d24bfa3bbc64ebd0237960173a0350a077a2e71ff02991dae2ad7f245c4ca27474cdf1bcce3981687d3ee895e43fb90288479f41c431ca9b39f915e4f71c296139018776ab30c28d51294be031186d0a3db8ae76ab52157a484f56deb4931df72b77d17e63e5dcada2013e438bcc360b3459028078e20dffb8b8ef9cadb63bba44444a401850c68a9f518883109c3fc279e01df52cb8e552561a85466c8d4645a2b296514c9a67dd3a1adccd932213162320e3cb0bb32afaacdc4c19886eb84960fb37b9d8096ff57c67859731b1db22bfcee98e6adc0c4a5666e189e7e4cee6bf7fe012f455fd5d27494fc30bf26995bcf9323330c6fe7a4aaf25a681db792605932881ea56fbe170ff3bd4a9d8363dbbe4487379cb942eb9c7a5dbf550cc123e6d13d03548ae3ee53c6f7896e6a9b2552c9f12a1a6fd65755404359c8100234402518968974ed0284a02d145a1f0ea5684efd26e3abd312f61e6d993ffc6ce94b3faa1b18f68640fc97aa150994c5babd99cdbc3a9b9b6f615871a82a72d6d5a2a1fa288386cedd8ca23f8931c615b84dcd1816b89d8ef8c78d1217d021bd850e8f624d946e77bd3db36ea254bea1d81355675ff67e206070b2a8439567c5d11d555c9c544755acb5c69939eed7ad119cebfc3d812af16dc3f259171e974368c542a69637beb1e879f50014d53ebb8d760021fceea5a597fa198a21e466ea96db4ae6a863c7a4114afa1c207dbd1fc73f21a17584103a2805028be46a959c063d60fb0a2c43dabbb182d294cc382143ffde297fadea15d6fe9d4b3635c3658f9a8d624be56f5dea434a0abb638c3568ec70533c640d8dc4b1caac43bd737d32640b0ac475a0ad0ba9f7910ecf4903e717bc3fadb536a5b018efdd6fe031dc119ad966b05451236f5debb6b5a4ba9b5a4f97be3e452c3a6d6febf2b04bc8d9a5d0c437cc22e073a08c8691249da0c5980ff6fa186eec12fcb3aa9eb8d4333158552b3ba6bdc058417355ea6507f61b0a62465deabc3342e13aaf90749caa7bf25641ec814ae9d3e7854b2463db1abfe26aa59572258ce41391cd5bc9e83a98e7b6db14eaa36b784745c6f2bd4316c81ca417fba2db127171d50c93a30c01532f7ababf210b846700a15e76a7021dc199f5d647a8cbf0e8402ac92150e1baa41941000e6fdf82bc896bfbcd0a5ccf1e3522bdc16fbbcd1307dc9eb22772f5ec8f9b748ff9ac22249db76e1549c7214e3c76eb43a67db78c498506b6e71a906ceab854c093379925f8770f784cd97c562edb8b0380202ba878afa0447fc5a6efdc80672e47b2322ebe0e9d004cd05a6d41f4ceeb1b77f6f369bff91fd0210a8910d8ba11130ef42c0f945dc0a84c99eeeff222e776415830ba99e5fe14d7deccbdac5d6ee0718a11cf847938c23ab163c9bf6f57a41fd8e29b749862f484989fcd71cdf229e09c4a21c7ff70b0888a12ac3c1d3b0b68c3cce9faed0a882408e7e67201b44fe931be27376e45827aba13f01a76f8404bfdf12af3fa76953f458586db9b6c7f677cd961352bddf68e9c471a1962fdfc14851ab7a2f61db2714765fa7f096624365fdf5e02f9be30e592bd2bb13dea1409e64a29a0425380df64278c9d71f66fe958723dcc589a82203bd36cc9e2d46d7d4c6f2495c245ae103f0bf1bb3ed6e9f07d15ecc2b95ca80cfb0fdc4dd3a4925440f6e089bbe0bdc04d8cd24dfe9261bb25019c605108ee1a24f2a0cd1767c74ab3a545fe71cda1d928ab88c858d33cc765c78da5509aa2cf73391b556a9bb40cabf881ba762a848b1457348ef73b798592796f2106bd00944931afc46ce56016f298fdcc66b744e4b9e268d878c3f9ccc1053f3ee553127e3f124a2ccfeb70832b12f9d6c8e3e12cf6ac693107f8432a1fe47776175d51affe27ef2b710d910b4b906a2f91f4c6302783fdf62e4ca0688ccc5f7e95b460c939640a127bab4136a8d1b56b969cca3239c137e6705ef69871e7eb8717e9559da0fd1c63e41ac160d2989d06eda97c3dc454146cd751b3f03ad6db1f63cda27d2f742dae7cad91b60485f28a75e1ce9ef88baa50dccd50b479deae4e9e04a8df0f8903be90a51018476f87a21638227f870fabf58dab9f606fab1d5477bea71d30578713ccd8f36770de772eead06049bf4fb98383b24de73b6a061ebac3fadef8564b027912b37079fb396940d7de0b1e590a6ad680f35543022d5b8c0e04ddd2a9d48bbfee0551fc7b9e253dfa2af04bfdbfa79b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9a, 0x3, "730f8a1d938fbf6bd988ac171c0dba5910d80ce2ea4fcc99bc1e9bee2e566c57699f417c5043d4c01b323ab5643575c74d881dd868b120d70bc6ca9472f5cf0824b11817854529dcaedeb1aaf38a9bdae6feac299a2227d8b8cf64813e3a34cec8e4e4371884df6e776ad466380af279d23c163ee9e329f43715a0e3f0966387ec49a5c6615b233ce83bf1d636ffa27ef0a11ee40c06"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "698b853be03d99595e52f3d88ec9fb29ebd09341df9a26cee6282113c5e9b6c8717d5da0308a92dc5b589b9c8d2715068ede1bf3c1fe7884476bcba34a95dbcdd971155b8a712ff103fdbe2721d29dcaa7fb88009e282de82d895a722c5efcb66b198a21efbfe0c99e296652294250bc07f316b50d9d941532eac34d62140232aa967cdb5fcdd9a02c1bff9006a27e"}, @NL80211_FTM_RESP_ATTR_LCI={0xc2, 0x2, "21e4253633abac38df2b06776975b4aca09a9c187bfb4ca6f7374ec084eea6d10792450d31af5be4a722dcc9d70212f2444f5c27c2125349c6616fcdcea4635fbcab155f9c82d59dc40b3cf20569700e869cdf784eee3c6fe256d78cc14bce1e8814d800239309ad46318a481eeb2a96daf6bb850923ff0c8f75616102288b2989b9d61eb36760b0df7deb63c2abb3a5ad3ca3fd5b56d090727b6cccf670e716115931d4e703ec795a78ca7f6c8c6991c6a75794d16e8934efa6f31548f9"}, @NL80211_FTM_RESP_ATTR_LCI={0x7c, 0x2, "12a9b4b4cd71fd395318dc785ccf4a1884106e3e055263274990b90bc01f2989ede3ead5db9037f771fa3470d097720e8836c6c774c872aba5cfe51c36abe4be862569668695d4f4e2f4afc5cc25c2f8df08376c27e47d03f2089af2a6cb8be7163aa2e8565332e3ba1b61b65c2526d4cd9c88e390be3ee9"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "39abf45bcf71e4b490c53a260e03a139fc59345c9d07d77a6f7168ccb7f82c5f05909825f9023a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x73, 0x3, "7f36a0991d290042e85ef12515e3f8d228420391deace2dccf7011b39b95d0f0700ec1d25bfd21deca8446b5f5553b7eefbbeb2687274f8de531566c02307e5c31bcd8bb8df823eb276b31afca22eb7d0bb0aab35e30f9e33d347e0f7e9a84daf60c1cf1006cea377eb0f65dcdcd94"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "3997d558f5cec4e184eac1449e9d7b81248a7012ebe21e151364bb32e854dfdeda2b805ba242a1e4c10159564b28aee27dad473c04513dcf7ce393d8f3b4524b5351359568de4f978d13f759d27069b44e6963e538135b25f97028ff4a715710981aff9de6c368d4665f90dfc39f5355ab8462"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "73e430e7c7703005e0947c33ddf1d8e61d785793c978808be5cbf03a88374dbc029c76127badcacd84e4e90b3bbafd17f6eb17789e2b53f0002ca230e0de8240f930ad1c24206eddd3bea3d5c139bb5fc64a048c9a64747563bf703c08e22e4efe9ce44594d8de2002d03159f579cdb54d8157016b30bd812f0572b396df11a726ae63b0e23ba468cc9a17fb9b5a1f798039a5b2422811c90a2848d3629bba516c00d39dd07262841003cb8ab5628ba27df682da40e8b14c635f6f029657eade7a741deafaa1c08b326214ad018a90e8585cf0a73ecdd75bc1903be8cc059928471fb878fbf95697393e3f76700bcc202de0f896bd80df465fe27366586e0ea44b7bc68ba85ed97b15ebe806c48a784cc938b155a9bf4f383c4cbc61b0e0e3e1800f1f221fb18eba2ece22446c6bf2691eb8f89b38507b67566875a849253e2e29e0ea3eb24a1fafbf711157c1a618a84efcd2e7187d54ca7bdb951d4433a18716bf7663912bfd996f66f9e805d63ef8bd7ed284dfb202de63eb2f227f0a5dc68876c45b9249dca05dff7584673275e29897bc24823d38c646961f5db190b05bf76ff590d9ca506157f0599f3f65cb38ad9dbdac595d6a856f386efd3a8085761f88a62d8e9e19aa2fa194ed1115f26eb8708039dbfb0dabc2b0120b0bcf5824e0cffa1b5db1076f311a8509acad8a83e98bbd55f37d1de0084b2a2294861e31db60c94d769b5b0ac7bb85b6073c3010fea2c7ef398adc86c351ef394394065cdfa12c66a8f512a16ed2b59ab1476ef7d9dae28f8cd400f71e1406369f926563911d036af249e99566f34e38101e8b9ebe09a48a9107f6a4113062a7ec19c08b8c7fe499574882355ff70e730e1d1abf006d5240db11b7e26560a082205392419534914e32a97f87c34cf66bdd7c2153b29fee6286e63addcd00305662e9726e1346b3e045f11b0b85ea6be0966cef76a5fbfc90f54d3fb320c72c62816db3c9d492e35184377e6d56a19264770736d2f8778a125d4b2049afa2552acd23bc191d1b2163748063d946d9acad652b48d85e85823d446f7b11977aede8a467fef784bd298dc756012ee4d4d6e08520289c285e3a093627e8bf6a36bd1b0df21aaa841b8cc290fa150ee8d8fff1c4d47c5fb8cf486a338050d432a9ba81a04a70b5179152dd89e36b39365e8a77416cb292438ab4c0ebd28f4878da5aa7a71fc3d71a85944de96b830b8ffa372631656589c43dd48e58a781be821b58bf54f2ff9ace1f9072f16acce5b188a40ced13bcb0fa8dd0c99fad11d5ef38f540901caa4b349ddda0ada696f94ede57f1fc7b91c16be52dcc5e9abb96e71b07b01338f306351c5f8dbbf2e6ae191ab03138c0667048a716c2038616e15886c4116ed4cebe49bcd21d5c3aec7e482526bc5c420655b0da40a3a1ad47aa6f65365d3e1586404854165b0794d0d201f1192d4d6f9fac95416982eb32db716752d110600a974724cf8bc8a74fd21860ff24cf300061d31b045568bd9da6d7bffbe30ac01df85c2eb3eba61c3aef82eeb8b2672e2acd5941d5e7465ba6c4748560801ffd609e8ef30cd82a5c46dd5703fd9061e3d72fc17ae174cdd7c5f2465c7f347bbb38c1452af0a37d836b49f09037b50a07c2ead875b0af1c46f161eafab7be439f53764ecdfdf7c312894378c93e71055f1cba6954d9276fa8a34aa82ab086440abc071e404f7f8514e0d01b8ef58e16ce2df7f473885c3b9f73d44b0fb99cd084ca02fba4d9f6496c830ed92e4ff1a28d9028805d371f59049617b97e787b89a5cfb01a9b64bb8695bcb9cc94db46ccc92e8c2b3b44e40ba84648f09a2e539b9a0039743e7892edb9699f3213f9b7481896dd8fbeafe1e814c89981bbb629f2f3ed197eee3c68cae92076ecb06ba8483609f557e2b1f02f15974c87fcdca057ce2d2251176a63ae9c5dd5a8485b41063f25fcc6ec2d160f524505478dc1199e54fe81b3dc06a304c8ecd4db1e5c71f94f38977915725bd7fed3407b994bb856547778016ac78e38ffb22b9748842effb051e5b9d981bee395a2d1bc5323e5182522f4d4eee82610db2baedaa261d7b8a96f45cb5c15ddd82c969f5236e6b5e208cdc8c61404fa4ea56b5985d3b3c68ae3417bfc8974a395f77e59fe12238f82be38dc5d1d3bd8ccff9a906697d66a770437901c00c83019205052a0e79c8c5905bd34c1489bd2a0fd8ff5610a4a5f8b5c0171821b553b9674d04bf7b8d70b251de754274b91cc3e220046e1a7e2728634f942ca582fe0097730cbe652e7c8e65ebc493eacf80cf7c4e66a4d781509edc76ed9b79280ed4ee178ce3dfb196ba111d66d209677f6be5e245d6647b290499fb5d19cb8316f61a26ec493d6016732164895c62c00197711ee562e344cb3e68121d1b9d6510eeadfc426b0f8c9a32c5f4ee0d8c6b1ac1b2972f9d5b9e485c9ef54e36eb663b6fed5cd710b59d7dd93f06ab56fbc0092604475873089ecf0bca5f2a63d76c32141400655533d91f765dd598f48fa8138b51e3bf6223c8329ef9f79a1303745ab80704942bb171d1a74340b56d06b7f4e45faf16ce19676b25a86fcb1a84aa5d67213d2db041ba71be4565efd165b119ea71983a97a46aa7999b64667b25e6aead0d43ab9c45a226b1855e513de2f13b575c630fc60c298b49214eae885839103b53e0cd7057cccb1a4ed00e2172f256da7b880aae237b2628438ef652bd077600a86f7a6181c70a48437b933c0d820fb5882195b74ff7e4a9d3b0ca077781d302f0f5d75520ad4a48114a373e8243900aa47b56c6e0b39d0e3515b15cc06dcc0fe602eba8797d382d9c87108c0755a677eeaaaa89068cbd02ccb88e4cae217d7903484f1217c414245331ef4100505fc21f36b9e9ed76c91a7b7c31368cab964cd58f0f74a46219c4e11944d90185e5586ab1f23e51deed5c4e479d7b2e549577adc9a43a2c74b59bb284fc2c6ac44f37bdd6d58afb8e231fe25d15a868bfea796257281bc9dd62c38d192a485ed3637e96a65a0519bc49a7050e60113a75f2dd6c619d1e3fc4ef2b94f49ac302155310145346ee24fdb570da55e82fe6c6bbce277037763b942d87f6b8c16b1bd9cb5830bccd94dfa8ef7d97d7a838cf0b82a72884dffae5cc865a959854a4c708515f41579abee6814c26befed5a06681188e12316f2688877dbe1b9be7cab44fc9b1f23bd940139281c218e9a0ec1f1e5bb0aedae3d7e92cffde774604f11cbfb8ee87e8bb3256d2f28c36705d8cb6113efdbe5191b97687b99f0f5979bda1a77d48d3f52c6b12ecceb8ca3f50204f3cf5c2b531d2b7dbcfa82c62e99e993b278aa9bf063cacc8fb807feaece8d3989cd85348233c09641af470f58b51a5507c3b4c6d11c95bd40c7c5ccb173c3dbcb99b7a732ad20b76fb638ce7ca6b66d93f5a527c732fa675aafa879b501f1f6d5f7c845d320398a896bc0ae6ba274de100b12d565217dbe0e33db8fc5d33f751ba76d8abdc591337066a74dbf9158b39fa62ef0a384aec147105a7a94410bcddd733b5401ec7e27ba19b8b06cd2058a2cd6b94061cdf8291aeafc13d01fea4c23a4072117c9d6b172deac54dbc25ae6e1ec3d3e2349233dfddd6d39f314d8c72efb2b9d46f4ddbefa12b13c67daedfd0561be3790518827d0385eea4c0b63a2b7da7534bcfad95d84b0a6b3feacb5785e5a4e47d6fbae93488d264d4e1364cbaa8909de20e184460ed2fe3b1da2de923e86ee799f20d29802d256ffd26c1de50e6b900db7c866dcdfdc16d760ff03dc39211f63c656923da6457a1d4854589cb6eb6f81c10bd5c2b3b36ad1c878c79d3bc972a6b22bd0f26cbb69e580c629ffddb7a13848e6dd1b953a6bad2269592dac5391d8f05d162cf70bd6f733c1a5ff12cd7cf4097568aa1039caa9c340722c230f75808970cece0312265d0fefd071f5e8b93043d931b26cf36a67a0e7d1a7e9d92713edf017d0406ab72ace5e4e4b9f0c5fc58b23f780056286c6be3e60484c44f04017f2e345d2bc7da02ac1e1550f8d42e24d83ba119fac1918a9c8b6a89f52fa98f251fb1386a1d2344d0c6da65d1a653bf6137a406346759bae9e242fc73972886ad306f27637956540f56e40a62e61d392bbb73a139bc34c966e46375ce3f9d05f7d7a94a9ca69b9cc6303f6ab964c7281f1d44f37280ba9b631e70a1560875fe48cd8647abbb2189f55b1516bc1fdf4da73c111a1b4cac29a9b1b30c3917e7354dea41ee25a071d21e54524c663fac385101585e230da539eea2e38f4b8f4442603ddc25ab8b27fabb4374823eb5448a1c2fa5839c3c1910084cde17d08be1f51c1973fe548822f3bdf5ced4e5663e4d87f248837e7b777bc2612eef1cdfc034a3ae53e905fdc1a08c90b3ebc8798f12d96199e5f8a6ce9732f4c0d2cc8cda3af45add4fb9bbfea389315d94ca7731262c8026ef232f5adf7a8f34f939b5888851a51771ed07f68b08765532af2d7b87d479201042774fc402ef273a16565f2251be3887372860f57fa10fd12d218b5ca39dbfe454f7e676582dc6251f9dd226e2f851ddd5e765abc1afd92941e3fa74168d2e63679f6cfbb7ee8f0d7593a9d15ac0bc4e3f8b39c2eb880299c539f353bbbbb84fbf831671c24c17f45e5c6c11a174ebbca5d4d22a7f687e5236439b54ffbc59075c48a7af7735273119692077471b46713a3a941572984aa991e4007052fdc2c7a51f5a499940c0840df2e5342eeac1c930edfeb38612625bb6ec10679b3e5f5775b099f5a7bf52f4d31082162fc651db085e87bd944a142f6e5f8117de1f819c865025fd2093bffb373ba6103799942d8aa5dc40c46f3925bf361e4ac7c9a56d9a4973ea711cfb2971b33efab608d64bd82c89ebe21830201e447b376df2c82348c8a2fd80ea2b04f0d6a0a06c54d61a01884cb73d3293a7db635d336e970e86352f925f8e04ac5cc06a6a97b485b491eccde37c529be8e1e392dcd58cde71f60a6444a0a74f0dd0c9623ffb2b650644f64b1feca201a6d15925848b2ee6785e4d60604548f019c45aac41e412760404b27dd29d0a9c4bd340f8b6c7b3683561bdd6643dc725a473c179295e5aa4ebe87816e168adeb8d26c3ba3b46458748e4c6d617dd6679a1bddb0b2e80956763fae2adab45492c3191ba27aa9e45c549fe07217e8ffa6251e4ab4044ad21421dd614b953d3e2ef78a55165893e12701d1298f2119ea1e35e56058f7ac1e91bb2bb5b6bea008b24f8c3a2f0d6185c4feedef2a6b3bcd0a2fb0cacf88f7f923b4271df477c2c3ede7ee57c31fcdd308333f9496c57b746622bdd5d63fbaee87608eb8e3bba9ac5e3475b7a3bf23f10d495f7092c91e65b89d5ff4842b53e83c565a91e7b69c441b7203af244ced398eb595b3cdcc1781a6826c66f3b5c777380b44e45b30c31f522196ba85520586140e96b942f798a7b8999b176faca11886fa664ecf7a94fc5d9cf79adc4cce51a12e49b6b9e98a3b4b5efeb832fcbeccb2133fec9a9009745d4cbe7f166602e3cee6eb0438a5d227a605d5b0adaaee1b99c4674389b36e128451be3d8bbb0a7aaf419b2f57f02fd24a37376a846a9a828d4395df097b5a7b1143f153225e705f03863286be56191bfee29cbe42506f5deae2af72d8a6447f6f4d2595c3e005d8f13c7d8d205349ccffec9a62122522466d4a0ceaf15ad2c268f97db037baec3788dd3a324f2162ba7c11cb90eb926b847e7207e138308740e9ba9e443b37a13215be8be71c178eaae7ccc2"}, @NL80211_FTM_RESP_ATTR_LCI={0x8a, 0x2, "ef55ad379940eaaae000239cc7ecb0e8206f96dd8029a46917ed9c612ecd4de25e2c629879bcc26647b8d4453d056e00a65b0d93198409ec3ba98dbddbff84a1057dad68b8b3ab56b87390107aafad3338f815f39ee59875f992694434a82a440f3213e161757cec6339e53b1925249eefdf45a9cd90e16dcb8ed5cf21a1b4c86ec91d9d6e7a"}]}, @NL80211_ATTR_IE={0x125, 0x2a, [@random_vendor={0xdd, 0xfa, "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"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0xf6c, "4afbae0ed4ab", @long="36adc1476d02349b50b1b5c7aae92708"}}]}, @NL80211_ATTR_PROBE_RESP={0x6c7, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, @NL80211_ATTR_CSA_IES={0xd70, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x1000, 0x1, 0x7, 0x37, 0x47, 0x8000, 0x101, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x5, 0x2, 0x5, 0x3, 0x3f, 0x4, 0x1, 0x9228]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@challenge={0x10, 0x1, 0x43}]}, @NL80211_ATTR_IE={0x48, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x80, 0x5}}, @ibss={0x6, 0x2, 0x8001}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x1, 0x0, {0x0, 0x1c9, 0x0, 0xff, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x8, 0x8}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x7, 0x69, 0x7f}}]}, @NL80211_ATTR_BEACON_TAIL={0x2a, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x38}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfb, 0x78, 0x4}}, @mesh_id={0x72, 0x6}, @supported_rates]}, @NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@random={0x3f, 0xa, "fdebabb1fa325374fe39"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x26e, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_a, @random="c566e7de38bc", {0x6, 0x80}}, 0x3f, @random=0x99ea, 0x800, @void, @val={0x1, 0x6, [{0x1, 0x1}, {0x2}, {0xc}, {0x24}, {0x36}, {0x9}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x6}}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x2, 0x0, {0xdf9, 0x81, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x800, 0x9f9, 0x3f}}, @void, @val={0x71, 0x7, {0x8, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6d, 0x48}}, @void, [{0xdd, 0x9d, "ca2dbbec05b26364bf8df844adbc7df815353153c76b01992c9ddc6aedb065cf4423c36f01fc78363355f623aca8a0a9110fa9f2fd036f5dc487f8974125f99481ff3cf517e094918242854aa846a21a2f45d82257519f9b911243d638a5221d82d298537591476810489d330ecfd48348106baee41e9d4544b9bb50b8817bc259510f5b261bb23ff5e1f91f57db1003804e7ba9412da3666f2ce49321"}, {0xdd, 0x19, "bbf8521be124c68e0c350e8b25278960637beded8c08799e7f"}, {0xdd, 0xdf, "7d870750f1c2b7718e6e1893a25eae40dac28400eea17ac768642556ab0bebff3ce9733349f992a9181c7a74d3d69c89e7bcdd71fdfb4e9f45edd3b4a14b8c1a26f8633407802b246ccd426a1abab3c30f9f440a88f0a875d7039d0f16b9bf4bb8acf573eb8879ba6767258b3eec20a3a0108221ee96de53d26b6ac462712f2a643284266f78f6872bbae3274ec9914e5ef7010388bdcef2723b6930b4689f9530042f3bf90aae9ea0cf1d4ad890384148482ba96a11ea66270f8883c0679c1e3fa2baec5815722bbba331f937f00f95dffc75ab9104b55d3e4bde7499c0aa"}, {0xdd, 0x77, "09214ae90624d973d6e7cd20ac79e179761ebadd43ea62043317d5037ce37666b229111def0b550f9f692d19c48853e632612c3ccf486d14014fb53d188d862506e6c5ebbcb918679f565fa23462a90e0c24c06d15501fb04b671c5081c617e561910ea3f3e4dc5591b1e134507bf1274a28139c9b1e96"}]}}, @NL80211_ATTR_PROBE_RESP={0x3a0, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@chsw_timing={0x68, 0x4, {0x20, 0x5}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7f, 0x5, 0x7f80}}, @random={0xfc, 0x47, "bc4ec126b2dd1fe85cb8ed0ec727c1a25d357d25cf4b47e905c6117f3c43c9f60024299ec8f5407dadb06ca3c2fd86642a50ef355729c66fab691dd0fd644427ca6a637e8930e3"}]}, @NL80211_ATTR_BEACON_HEAD={0x5b7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="0b446df5838b", {0x8, 0x7f}}, 0x42, @random=0x6, 0x10, @void, @val={0x1, 0x2, [{0x6c}, {0x48, 0x1}]}, @void, @void, @void, @val={0x5, 0xfe, {0x0, 0xc3, 0xfc, "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"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x3f, 0xe, 0x4}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2c, "c34c49b73756cacfbc64fa4aa38b79667c675b76be6b1215f3dce3ddfec00d4f7176803cb6879f9000513e98"}, {0xdd, 0x8e, "9b1e2d70d0eee97fc780efe14946a2a13513050ba936817ac3f7986712d75e4b01af28bfe617f119f99228f6261ef39c610efca1b7f80ddaa26b4dcb668e86ab2bd941f65e13bc81e52d4f0e163ded88f0b16de55fba0273d1b966cfefce40c0ca1f51fbc1ee75461ee0bd606f393dec8f53273b30d92b4889471c32c8d599bce0c11422dad9249ee1381a90515b"}, {0xdd, 0xa5, "a154904395cdab1f92c72f7dece3f1cb582a048805287e14d449d1fe6a7a2cbdcace3ad5f78f185b5ddfc312ba9b7c644aeafc45c2673810460c8962af126f557160533e4d98d7f0d0779972ecf6350b4c34179cc72728b73d4ab7c3d6f16d42203a606d24e58943a49d5b908f9ce8facb9ca482d78e611ae4a7c94fdd61de361d830614cdc00464bce7aa63acd89d5e5e7bedd62c2858110b270fe4b8d1a195cf330fdc90"}, {0xdd, 0x70, "4c913640c8a946f80ab605e75e75b54c78a256535cdd16bb462e959c855bc42677c0b365d65d2c3d3a65bb86a33911f559a69406d91cafb0ae671ae19cb65e10af9fe0d7cc8696f3a17b688cbcba70e3788ec15bbb136436af5f868126412d1fa4076e79123bcad723361892933ce84a"}, {0xdd, 0xf3, "c18c4a6080ca93b44f7f34d3e34c7d146381dbfd5694b6809bb31d57aa5d4337983a0305777e52944ba9f9eed56a4eda5c96eba03a0770c42b541db424375da84de27b431aa3e0b6b44b22eb83df3a684c71e3e666378064cac4567789c8f7fbea9a6d83e945a5c38af33b9ed1a9f88c2eff169f8c2ea4c2917f87b4c4e651c9839fc2db60aba732252cf7f715760572b26f31381dfd2ba9cd48a2836c7d306e3500d6f9b86e8af2bb6ffe06b59db73a5f8f487934e9b7fe838604224416580afa0878934043460ff1071efd088ec1b96b65241e5fd96d4e32d2b6aff039a6c6ffca68e7a5ef42336099975ddc3143f450e167"}, {0xdd, 0xaa, "a6bd993ea7275b6eb31dac679b2b7b440896d294070da2b1c930e6024d157fd2c555a3c5c653b4a0acec4da06d6b517dcfe759c6fba79fc68f0c0d31f6e3c68ca02c6e7048da27effb9f36f43d6d418e97b45af8003d46ec67da9430d4479c45a869bcdcc937c0cdb038d2c69da1b13472555c59dcb2d4688b0ab68517d1cdd442eb85f12b4be4de325b3c406e6b10ec81e3102a5777843b80c3b57ad4cd2895c343fa4c55ae34602dc9"}, {0xdd, 0xfa, "7358585d98ceb3d1e52709d9c0fed1e9d0c455130dc949d118eb5d660718c06e7f97b8efcccc438b69df2bc0bbb7d3a5d7f1bc311d3c1a603008309da5713d06baed92e84ade9f4b56fc816fe68fa91161f15bf52a91d64ee3d67e8896512ef722856c0d4343f402cd9e1b2219f30994d866e0008f3a0ba6fc674845cf0903b2fec3e7eca7f15a23d703538183b8d337600ccde65ba41436df1f2d88eac820952d9325122252af9d677f2e5d75b271bf159078a62a4796e14a3687042967df90551130f9f8e8f0b0ac833de114b9aec4f33668b40d0879b1870f189f2344b98a8e5020698e947ee001b632b88ff228e0a87381b1ac372dde7caf"}, {0xdd, 0x7, "a630beef71084b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @broadcast, 0x2, @device_a, 0xfffffeff, 0x860, @device_b, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "331275a60ea25014a37524b7183cb6928023b7d42df0a5e765a2cad07c4db0998fdc04808eb9e7269aa72b0c3c6b90c9481747e4f7261d216c9dd51caceff2965809ae8b2801b1352e21"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x269, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x6c1d, 0x7, 0x3, 0x98, 0x0, 0x2, 0x8000, 0x4, 0xf138]}]}]}, 0x39ec}, 0x1, 0x0, 0x0, 0x200448c1}, 0x48800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x60, r2, 0x10, 0x7, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x40084) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000018c0)={0x39ec, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x2c2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x4, 0x6, 0xeb7, 0x0, 0x7f, 0x9, 0x4, 0xfffe]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2420, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9a, 0x3, "730f8a1d938fbf6bd988ac171c0dba5910d80ce2ea4fcc99bc1e9bee2e566c57699f417c5043d4c01b323ab5643575c74d881dd868b120d70bc6ca9472f5cf0824b11817854529dcaedeb1aaf38a9bdae6feac299a2227d8b8cf64813e3a34cec8e4e4371884df6e776ad466380af279d23c163ee9e329f43715a0e3f0966387ec49a5c6615b233ce83bf1d636ffa27ef0a11ee40c06"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "698b853be03d99595e52f3d88ec9fb29ebd09341df9a26cee6282113c5e9b6c8717d5da0308a92dc5b589b9c8d2715068ede1bf3c1fe7884476bcba34a95dbcdd971155b8a712ff103fdbe2721d29dcaa7fb88009e282de82d895a722c5efcb66b198a21efbfe0c99e296652294250bc07f316b50d9d941532eac34d62140232aa967cdb5fcdd9a02c1bff9006a27e"}, @NL80211_FTM_RESP_ATTR_LCI={0xc2, 0x2, "21e4253633abac38df2b06776975b4aca09a9c187bfb4ca6f7374ec084eea6d10792450d31af5be4a722dcc9d70212f2444f5c27c2125349c6616fcdcea4635fbcab155f9c82d59dc40b3cf20569700e869cdf784eee3c6fe256d78cc14bce1e8814d800239309ad46318a481eeb2a96daf6bb850923ff0c8f75616102288b2989b9d61eb36760b0df7deb63c2abb3a5ad3ca3fd5b56d090727b6cccf670e716115931d4e703ec795a78ca7f6c8c6991c6a75794d16e8934efa6f31548f9"}, @NL80211_FTM_RESP_ATTR_LCI={0x7c, 0x2, "12a9b4b4cd71fd395318dc785ccf4a1884106e3e055263274990b90bc01f2989ede3ead5db9037f771fa3470d097720e8836c6c774c872aba5cfe51c36abe4be862569668695d4f4e2f4afc5cc25c2f8df08376c27e47d03f2089af2a6cb8be7163aa2e8565332e3ba1b61b65c2526d4cd9c88e390be3ee9"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "39abf45bcf71e4b490c53a260e03a139fc59345c9d07d77a6f7168ccb7f82c5f05909825f9023a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x73, 0x3, "7f36a0991d290042e85ef12515e3f8d228420391deace2dccf7011b39b95d0f0700ec1d25bfd21deca8446b5f5553b7eefbbeb2687274f8de531566c02307e5c31bcd8bb8df823eb276b31afca22eb7d0bb0aab35e30f9e33d347e0f7e9a84daf60c1cf1006cea377eb0f65dcdcd94"}, @NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "3997d558f5cec4e184eac1449e9d7b81248a7012ebe21e151364bb32e854dfdeda2b805ba242a1e4c10159564b28aee27dad473c04513dcf7ce393d8f3b4524b5351359568de4f978d13f759d27069b44e6963e538135b25f97028ff4a715710981aff9de6c368d4665f90dfc39f5355ab8462"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "73e430e7c7703005e0947c33ddf1d8e61d785793c978808be5cbf03a88374dbc029c76127badcacd84e4e90b3bbafd17f6eb17789e2b53f0002ca230e0de8240f930ad1c24206eddd3bea3d5c139bb5fc64a048c9a64747563bf703c08e22e4efe9ce44594d8de2002d03159f579cdb54d8157016b30bd812f0572b396df11a726ae63b0e23ba468cc9a17fb9b5a1f798039a5b2422811c90a2848d3629bba516c00d39dd07262841003cb8ab5628ba27df682da40e8b14c635f6f029657eade7a741deafaa1c08b326214ad018a90e8585cf0a73ecdd75bc1903be8cc059928471fb878fbf95697393e3f76700bcc202de0f896bd80df465fe27366586e0ea44b7bc68ba85ed97b15ebe806c48a784cc938b155a9bf4f383c4cbc61b0e0e3e1800f1f221fb18eba2ece22446c6bf2691eb8f89b38507b67566875a849253e2e29e0ea3eb24a1fafbf711157c1a618a84efcd2e7187d54ca7bdb951d4433a18716bf7663912bfd996f66f9e805d63ef8bd7ed284dfb202de63eb2f227f0a5dc68876c45b9249dca05dff7584673275e29897bc24823d38c646961f5db190b05bf76ff590d9ca506157f0599f3f65cb38ad9dbdac595d6a856f386efd3a8085761f88a62d8e9e19aa2fa194ed1115f26eb8708039dbfb0dabc2b0120b0bcf5824e0cffa1b5db1076f311a8509acad8a83e98bbd55f37d1de0084b2a2294861e31db60c94d769b5b0ac7bb85b6073c3010fea2c7ef398adc86c351ef394394065cdfa12c66a8f512a16ed2b59ab1476ef7d9dae28f8cd400f71e1406369f926563911d036af249e99566f34e38101e8b9ebe09a48a9107f6a4113062a7ec19c08b8c7fe499574882355ff70e730e1d1abf006d5240db11b7e26560a082205392419534914e32a97f87c34cf66bdd7c2153b29fee6286e63addcd00305662e9726e1346b3e045f11b0b85ea6be0966cef76a5fbfc90f54d3fb320c72c62816db3c9d492e35184377e6d56a19264770736d2f8778a125d4b2049afa2552acd23bc191d1b2163748063d946d9acad652b48d85e85823d446f7b11977aede8a467fef784bd298dc756012ee4d4d6e08520289c285e3a093627e8bf6a36bd1b0df21aaa841b8cc290fa150ee8d8fff1c4d47c5fb8cf486a338050d432a9ba81a04a70b5179152dd89e36b39365e8a77416cb292438ab4c0ebd28f4878da5aa7a71fc3d71a85944de96b830b8ffa372631656589c43dd48e58a781be821b58bf54f2ff9ace1f9072f16acce5b188a40ced13bcb0fa8dd0c99fad11d5ef38f540901caa4b349ddda0ada696f94ede57f1fc7b91c16be52dcc5e9abb96e71b07b01338f306351c5f8dbbf2e6ae191ab03138c0667048a716c2038616e15886c4116ed4cebe49bcd21d5c3aec7e482526bc5c420655b0da40a3a1ad47aa6f65365d3e1586404854165b0794d0d201f1192d4d6f9fac95416982eb32db716752d110600a974724cf8bc8a74fd21860ff24cf300061d31b045568bd9da6d7bffbe30ac01df85c2eb3eba61c3aef82eeb8b2672e2acd5941d5e7465ba6c4748560801ffd609e8ef30cd82a5c46dd5703fd9061e3d72fc17ae174cdd7c5f2465c7f347bbb38c1452af0a37d836b49f09037b50a07c2ead875b0af1c46f161eafab7be439f53764ecdfdf7c312894378c93e71055f1cba6954d9276fa8a34aa82ab086440abc071e404f7f8514e0d01b8ef58e16ce2df7f473885c3b9f73d44b0fb99cd084ca02fba4d9f6496c830ed92e4ff1a28d9028805d371f59049617b97e787b89a5cfb01a9b64bb8695bcb9cc94db46ccc92e8c2b3b44e40ba84648f09a2e539b9a0039743e7892edb9699f3213f9b7481896dd8fbeafe1e814c89981bbb629f2f3ed197eee3c68cae92076ecb06ba8483609f557e2b1f02f15974c87fcdca057ce2d2251176a63ae9c5dd5a8485b41063f25fcc6ec2d160f524505478dc1199e54fe81b3dc06a304c8ecd4db1e5c71f94f38977915725bd7fed3407b994bb856547778016ac78e38ffb22b9748842effb051e5b9d981bee395a2d1bc5323e5182522f4d4eee82610db2baedaa261d7b8a96f45cb5c15ddd82c969f5236e6b5e208cdc8c61404fa4ea56b5985d3b3c68ae3417bfc8974a395f77e59fe12238f82be38dc5d1d3bd8ccff9a906697d66a770437901c00c83019205052a0e79c8c5905bd34c1489bd2a0fd8ff5610a4a5f8b5c0171821b553b9674d04bf7b8d70b251de754274b91cc3e220046e1a7e2728634f942ca582fe0097730cbe652e7c8e65ebc493eacf80cf7c4e66a4d781509edc76ed9b79280ed4ee178ce3dfb196ba111d66d209677f6be5e245d6647b290499fb5d19cb8316f61a26ec493d6016732164895c62c00197711ee562e344cb3e68121d1b9d6510eeadfc426b0f8c9a32c5f4ee0d8c6b1ac1b2972f9d5b9e485c9ef54e36eb663b6fed5cd710b59d7dd93f06ab56fbc0092604475873089ecf0bca5f2a63d76c32141400655533d91f765dd598f48fa8138b51e3bf6223c8329ef9f79a1303745ab80704942bb171d1a74340b56d06b7f4e45faf16ce19676b25a86fcb1a84aa5d67213d2db041ba71be4565efd165b119ea71983a97a46aa7999b64667b25e6aead0d43ab9c45a226b1855e513de2f13b575c630fc60c298b49214eae885839103b53e0cd7057cccb1a4ed00e2172f256da7b880aae237b2628438ef652bd077600a86f7a6181c70a48437b933c0d820fb5882195b74ff7e4a9d3b0ca077781d302f0f5d75520ad4a48114a373e8243900aa47b56c6e0b39d0e3515b15cc06dcc0fe602eba8797d382d9c87108c0755a677eeaaaa89068cbd02ccb88e4cae217d7903484f1217c414245331ef4100505fc21f36b9e9ed76c91a7b7c31368cab964cd58f0f74a46219c4e11944d90185e5586ab1f23e51deed5c4e479d7b2e549577adc9a43a2c74b59bb284fc2c6ac44f37bdd6d58afb8e231fe25d15a868bfea796257281bc9dd62c38d192a485ed3637e96a65a0519bc49a7050e60113a75f2dd6c619d1e3fc4ef2b94f49ac302155310145346ee24fdb570da55e82fe6c6bbce277037763b942d87f6b8c16b1bd9cb5830bccd94dfa8ef7d97d7a838cf0b82a72884dffae5cc865a959854a4c708515f41579abee6814c26befed5a06681188e12316f2688877dbe1b9be7cab44fc9b1f23bd940139281c218e9a0ec1f1e5bb0aedae3d7e92cffde774604f11cbfb8ee87e8bb3256d2f28c36705d8cb6113efdbe5191b97687b99f0f5979bda1a77d48d3f52c6b12ecceb8ca3f50204f3cf5c2b531d2b7dbcfa82c62e99e993b278aa9bf063cacc8fb807feaece8d3989cd85348233c09641af470f58b51a5507c3b4c6d11c95bd40c7c5ccb173c3dbcb99b7a732ad20b76fb638ce7ca6b66d93f5a527c732fa675aafa879b501f1f6d5f7c845d320398a896bc0ae6ba274de100b12d565217dbe0e33db8fc5d33f751ba76d8abdc591337066a74dbf9158b39fa62ef0a384aec147105a7a94410bcddd733b5401ec7e27ba19b8b06cd2058a2cd6b94061cdf8291aeafc13d01fea4c23a4072117c9d6b172deac54dbc25ae6e1ec3d3e2349233dfddd6d39f314d8c72efb2b9d46f4ddbefa12b13c67daedfd0561be3790518827d0385eea4c0b63a2b7da7534bcfad95d84b0a6b3feacb5785e5a4e47d6fbae93488d264d4e1364cbaa8909de20e184460ed2fe3b1da2de923e86ee799f20d29802d256ffd26c1de50e6b900db7c866dcdfdc16d760ff03dc39211f63c656923da6457a1d4854589cb6eb6f81c10bd5c2b3b36ad1c878c79d3bc972a6b22bd0f26cbb69e580c629ffddb7a13848e6dd1b953a6bad2269592dac5391d8f05d162cf70bd6f733c1a5ff12cd7cf4097568aa1039caa9c340722c230f75808970cece0312265d0fefd071f5e8b93043d931b26cf36a67a0e7d1a7e9d92713edf017d0406ab72ace5e4e4b9f0c5fc58b23f780056286c6be3e60484c44f04017f2e345d2bc7da02ac1e1550f8d42e24d83ba119fac1918a9c8b6a89f52fa98f251fb1386a1d2344d0c6da65d1a653bf6137a406346759bae9e242fc73972886ad306f27637956540f56e40a62e61d392bbb73a139bc34c966e46375ce3f9d05f7d7a94a9ca69b9cc6303f6ab964c7281f1d44f37280ba9b631e70a1560875fe48cd8647abbb2189f55b1516bc1fdf4da73c111a1b4cac29a9b1b30c3917e7354dea41ee25a071d21e54524c663fac385101585e230da539eea2e38f4b8f4442603ddc25ab8b27fabb4374823eb5448a1c2fa5839c3c1910084cde17d08be1f51c1973fe548822f3bdf5ced4e5663e4d87f248837e7b777bc2612eef1cdfc034a3ae53e905fdc1a08c90b3ebc8798f12d96199e5f8a6ce9732f4c0d2cc8cda3af45add4fb9bbfea389315d94ca7731262c8026ef232f5adf7a8f34f939b5888851a51771ed07f68b08765532af2d7b87d479201042774fc402ef273a16565f2251be3887372860f57fa10fd12d218b5ca39dbfe454f7e676582dc6251f9dd226e2f851ddd5e765abc1afd92941e3fa74168d2e63679f6cfbb7ee8f0d7593a9d15ac0bc4e3f8b39c2eb880299c539f353bbbbb84fbf831671c24c17f45e5c6c11a174ebbca5d4d22a7f687e5236439b54ffbc59075c48a7af7735273119692077471b46713a3a941572984aa991e4007052fdc2c7a51f5a499940c0840df2e5342eeac1c930edfeb38612625bb6ec10679b3e5f5775b099f5a7bf52f4d31082162fc651db085e87bd944a142f6e5f8117de1f819c865025fd2093bffb373ba6103799942d8aa5dc40c46f3925bf361e4ac7c9a56d9a4973ea711cfb2971b33efab608d64bd82c89ebe21830201e447b376df2c82348c8a2fd80ea2b04f0d6a0a06c54d61a01884cb73d3293a7db635d336e970e86352f925f8e04ac5cc06a6a97b485b491eccde37c529be8e1e392dcd58cde71f60a6444a0a74f0dd0c9623ffb2b650644f64b1feca201a6d15925848b2ee6785e4d60604548f019c45aac41e412760404b27dd29d0a9c4bd340f8b6c7b3683561bdd6643dc725a473c179295e5aa4ebe87816e168adeb8d26c3ba3b46458748e4c6d617dd6679a1bddb0b2e80956763fae2adab45492c3191ba27aa9e45c549fe07217e8ffa6251e4ab4044ad21421dd614b953d3e2ef78a55165893e12701d1298f2119ea1e35e56058f7ac1e91bb2bb5b6bea008b24f8c3a2f0d6185c4feedef2a6b3bcd0a2fb0cacf88f7f923b4271df477c2c3ede7ee57c31fcdd308333f9496c57b746622bdd5d63fbaee87608eb8e3bba9ac5e3475b7a3bf23f10d495f7092c91e65b89d5ff4842b53e83c565a91e7b69c441b7203af244ced398eb595b3cdcc1781a6826c66f3b5c777380b44e45b30c31f522196ba85520586140e96b942f798a7b8999b176faca11886fa664ecf7a94fc5d9cf79adc4cce51a12e49b6b9e98a3b4b5efeb832fcbeccb2133fec9a9009745d4cbe7f166602e3cee6eb0438a5d227a605d5b0adaaee1b99c4674389b36e128451be3d8bbb0a7aaf419b2f57f02fd24a37376a846a9a828d4395df097b5a7b1143f153225e705f03863286be56191bfee29cbe42506f5deae2af72d8a6447f6f4d2595c3e005d8f13c7d8d205349ccffec9a62122522466d4a0ceaf15ad2c268f97db037baec3788dd3a324f2162ba7c11cb90eb926b847e7207e138308740e9ba9e443b37a13215be8be71c178eaae7ccc2"}, @NL80211_FTM_RESP_ATTR_LCI={0x8a, 0x2, "ef55ad379940eaaae000239cc7ecb0e8206f96dd8029a46917ed9c612ecd4de25e2c629879bcc26647b8d4453d056e00a65b0d93198409ec3ba98dbddbff84a1057dad68b8b3ab56b87390107aafad3338f815f39ee59875f992694434a82a440f3213e161757cec6339e53b1925249eefdf45a9cd90e16dcb8ed5cf21a1b4c86ec91d9d6e7a"}]}, @NL80211_ATTR_IE={0x125, 0x2a, [@random_vendor={0xdd, 0xfa, "03408651c1152c20a1050a67c6d542345d6173aaabdf17fd3f38ec35ccb189c22189c1a6eba58d97da990eb31afacf9ec8235e9178c38942b1baa5064a483e749b0b0b44f1f74d5ad6a8e3d97df2b493f1f1f029150a084cfa9d4c1830826b62314d74fe926f99846dcc3231c4e73ddc7f5ededb7c91d623862fe7035be7c684eb73b30da70d67b6d66356b5731177d85251872d88d8decf915c851fdb9741cebf2cb6df745fc63b3d00982541c55a3743c32f5ea07befeacedaab148d3937b94b7a80395a2dc21f6746d8f2e7b8771c5345b6bd37ba0bb417bb49bbbd38dac8740a7a092e15887ba991dc32ab1f053eaebf3dc9ee7e64656a22"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0xf6c, "4afbae0ed4ab", @long="36adc1476d02349b50b1b5c7aae92708"}}]}, @NL80211_ATTR_PROBE_RESP={0x6c7, 0x91, "d32a3d63ca2396a488635b95fef6b85230dcaffbf4c71c5527938ede1d7e1766865634e8a07c341843dd04253a52470b0b27f7a7c68e4b0daa021231de3ad892f46ddf952e474ed10b220164cafcd2a8abda692c3836ab522e70a6f3b17645457675a08b18ed914f8e3e514caa2873b442a999a36fba24c7099e4d9e2307efb3f7c92efe0a7774a2cb3b005041535a52d9456c3dff05fd2d5f9b7d8fe5f1e4ba6be33b2ee6bb2e3289db07280efad46f5a274fa8a8154589979d1b653d60eec63d7076ce5dc0e6974b32527b13d1c84447b62927f223462121144861bf8d3abad3007ee01ae7511e7a38b9ff4afbc979e370a8a03df06cb0323246dfd528cf77b088b4ea9a03c30e4ba7be705e761965da40f5cc399a44375951d124b39b643360bbfa536d0200eb471eb01ee15e0468289c82558aa6879cdf182039829cc6f1b6eb3ff4e6ff7b80d95c8cd45268fb7e7e99fb776fc85501eb05f1a02cee5b64216f64abdef3dbb29c77af1b8fbc818a366dc2fb61c0d06acc80f2e53d9b189dc94cb2e59e0d073cf88b0aafd0707cee466762b26bd6aaa567b378dccfa03235ce6b1b90c42fec00884662027a58a4f161784bf1044912e4a69b52e07a608101f733061e39059b65642edfea246917cd3b9c36b10b5d590cd9108c89bed70126e4c2a514f6cccf5aaf5b4b01ac3a0e731401c39e4760bf430533b0d65290b287b09d7c5cb8f939276d6a0d0e54dfa3d9a6c6102f942cdff5ba6bacfc1f1db3e35359a55b365c37b77a3c63f6a7b9c40ef9cc44d029dccf056d4e53b84a75a9001736702e8d92ae76d28cda67a684d0624167a0069fcf26844f697559212761cfa9bbfdc69a056cde64479bef96e5408b41d16a5873fb4803462a55cd99a62308e06b56627795d81347d0a62d3784a624c4c0f37974ea1ab13e0abde9eaa903705c25fc91fab9a7b6c8681743d9a249de10389854c76f821b712f3a1378c09e1a66020463df9698a022f8e7fc09ed14c4aa91d675d95dcda403b2cd02f1141d0f96699b402880ff2447d960cedd1829da6b5100a519f3f92ef62dea30f290f47a57502fa9597692491e0d5bbfd026ff0caf00452572fe83d1c588d04b6f42a6e0491c946def7ac32a270ce6bfcee762fb997d81977e7c7d59ccc39d2384e173970e77ac5fb77afa493d274d9eb413ef8c70bfd7ae1ef942e0a9186caf9075fc80eaf5523a0962dd722b0ddad4cf3b8d3c0f9f873760df3dc630366b4e8bfb18a1473b24d85a73e79022f649372c9e0f4ba562c1e108ff31b82c670928c9fe765d0f03b5d978f06bf30dcadf1051e528810a579c6b5a50bb93bcba09443134066b4d74e47747a2221e92214ac9d0fa4bd48829fd6524af01652114dd2597228bde105d777582e099c5300e629e736e036376f91c0617d32666d7bfb5306e0f4ef84687e2c4d406f48274582f6489978256f3a24134f26c5a39e470eed51f5127f63fb51e7f2a0d63e700a472f4b58710e17d7fcea0ca48879c3bb495a496cf0d47be3f9177644dd72db518c44a5d92558898d215f4bf77be007ceefda02e669b9f29ed1c8fa85721b04ab627c08f334ea347fa25e767e95897ddd809f9f2831ee195b4fabe939897b802932c12084f09116d8c0c4db42a7855de75af93acd59e278215914e73b775044407cfb0ad9960b7c5b00a54a99f74ba5d83240038b3b4d13d081d3771c72f20da57aa9f2a71c0473cb7cc57728fa66849e7eee470f3022b40df8c75fbfcc34836c74115aa3e474f9e04d6eb5f9c92d8cfeef74c4776df5f89728a17c0bf89eecfef028ed2b8ed5e30dedba934572166b1af6ba72527b2e858f70620ca8b0d7d31cc6df7c33415d288162bf7ddf8b1679acea76409d396a64b18c0f720ca6dce759b8272bdc0aa7999bfe4ab6a5e7bcd5a9f49b7da520dadd8c87b6f6b52c0dc0dd7adcdc72e734ba06f128e8d2b29e6381b029702351397bfdc6714622a1480a4c497d8e0547eb85e164c783b11f2637ba0b6b0f47be718891aebc3c8af73b57c2c1463a79b610fe75ac4af47b6971e1db0b65f25aa1a4aad18eb14b78611a0c73757f33bc6efc470c43f7e16af8d5f5645a6359a42130783618f27ca5a1fc85f921e1a82803fa78e01c095742db4f0b040f00a13209c575354de4fdcca909fa3affe49326ff8e9b726dee5677c5245a8d93434c3d9233ad21455224c5775b487fc783ba270fc3a12565c2ad0ccf02f920ff1051a4e12262fff8caed877bde275fd6c1ad20c360ca0681fd7ca4731458e2bccf1820bb9f0007b84b9b25fe0f0268904d24e5ca8004f1afd6edbc58ca44dfcaccc1fef25b200beef3d9bf113298bab0fb81f121791178d7c325de9c74f343a682ea7ed9b3cf7f08db1c6133ea77b40ea14434a0480ea9f0fab3a86b0efa47acc43ca433b8bfc03e9"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, @NL80211_ATTR_CSA_IES={0xd70, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x1000, 0x1, 0x7, 0x37, 0x47, 0x8000, 0x101, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x5, 0x2, 0x5, 0x3, 0x3f, 0x4, 0x1, 0x9228]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@challenge={0x10, 0x1, 0x43}]}, @NL80211_ATTR_IE={0x48, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x80, 0x5}}, @ibss={0x6, 0x2, 0x8001}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x1, 0x0, {0x0, 0x1c9, 0x0, 0xff, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x8, 0x8}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x7, 0x69, 0x7f}}]}, @NL80211_ATTR_BEACON_TAIL={0x2a, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x38}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfb, 0x78, 0x4}}, @mesh_id={0x72, 0x6}, @supported_rates]}, @NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@random={0x3f, 0xa, "fdebabb1fa325374fe39"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x26e, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_a, @random="c566e7de38bc", {0x6, 0x80}}, 0x3f, @random=0x99ea, 0x800, @void, @val={0x1, 0x6, [{0x1, 0x1}, {0x2}, {0xc}, {0x24}, {0x36}, {0x9}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x6}}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x2, 0x0, {0xdf9, 0x81, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x800, 0x9f9, 0x3f}}, @void, @val={0x71, 0x7, {0x8, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6d, 0x48}}, @void, [{0xdd, 0x9d, "ca2dbbec05b26364bf8df844adbc7df815353153c76b01992c9ddc6aedb065cf4423c36f01fc78363355f623aca8a0a9110fa9f2fd036f5dc487f8974125f99481ff3cf517e094918242854aa846a21a2f45d82257519f9b911243d638a5221d82d298537591476810489d330ecfd48348106baee41e9d4544b9bb50b8817bc259510f5b261bb23ff5e1f91f57db1003804e7ba9412da3666f2ce49321"}, {0xdd, 0x19, "bbf8521be124c68e0c350e8b25278960637beded8c08799e7f"}, {0xdd, 0xdf, "7d870750f1c2b7718e6e1893a25eae40dac28400eea17ac768642556ab0bebff3ce9733349f992a9181c7a74d3d69c89e7bcdd71fdfb4e9f45edd3b4a14b8c1a26f8633407802b246ccd426a1abab3c30f9f440a88f0a875d7039d0f16b9bf4bb8acf573eb8879ba6767258b3eec20a3a0108221ee96de53d26b6ac462712f2a643284266f78f6872bbae3274ec9914e5ef7010388bdcef2723b6930b4689f9530042f3bf90aae9ea0cf1d4ad890384148482ba96a11ea66270f8883c0679c1e3fa2baec5815722bbba331f937f00f95dffc75ab9104b55d3e4bde7499c0aa"}, {0xdd, 0x77, "09214ae90624d973d6e7cd20ac79e179761ebadd43ea62043317d5037ce37666b229111def0b550f9f692d19c48853e632612c3ccf486d14014fb53d188d862506e6c5ebbcb918679f565fa23462a90e0c24c06d15501fb04b671c5081c617e561910ea3f3e4dc5591b1e134507bf1274a28139c9b1e96"}]}}, @NL80211_ATTR_PROBE_RESP={0x3a0, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@chsw_timing={0x68, 0x4, {0x20, 0x5}}, @mesh_chsw={0x76, 0x6, {0x3, 0x7f, 0x5, 0x7f80}}, @random={0xfc, 0x47, "bc4ec126b2dd1fe85cb8ed0ec727c1a25d357d25cf4b47e905c6117f3c43c9f60024299ec8f5407dadb06ca3c2fd86642a50ef355729c66fab691dd0fd644427ca6a637e8930e3"}]}, @NL80211_ATTR_BEACON_HEAD={0x5b7, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="0b446df5838b", {0x8, 0x7f}}, 0x42, @random=0x6, 0x10, @void, @val={0x1, 0x2, [{0x6c}, {0x48, 0x1}]}, @void, @void, @void, @val={0x5, 0xfe, {0x0, 0xc3, 0xfc, "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"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x3f, 0xe, 0x4}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x2c, "c34c49b73756cacfbc64fa4aa38b79667c675b76be6b1215f3dce3ddfec00d4f7176803cb6879f9000513e98"}, {0xdd, 0x8e, "9b1e2d70d0eee97fc780efe14946a2a13513050ba936817ac3f7986712d75e4b01af28bfe617f119f99228f6261ef39c610efca1b7f80ddaa26b4dcb668e86ab2bd941f65e13bc81e52d4f0e163ded88f0b16de55fba0273d1b966cfefce40c0ca1f51fbc1ee75461ee0bd606f393dec8f53273b30d92b4889471c32c8d599bce0c11422dad9249ee1381a90515b"}, {0xdd, 0xa5, "a154904395cdab1f92c72f7dece3f1cb582a048805287e14d449d1fe6a7a2cbdcace3ad5f78f185b5ddfc312ba9b7c644aeafc45c2673810460c8962af126f557160533e4d98d7f0d0779972ecf6350b4c34179cc72728b73d4ab7c3d6f16d42203a606d24e58943a49d5b908f9ce8facb9ca482d78e611ae4a7c94fdd61de361d830614cdc00464bce7aa63acd89d5e5e7bedd62c2858110b270fe4b8d1a195cf330fdc90"}, {0xdd, 0x70, "4c913640c8a946f80ab605e75e75b54c78a256535cdd16bb462e959c855bc42677c0b365d65d2c3d3a65bb86a33911f559a69406d91cafb0ae671ae19cb65e10af9fe0d7cc8696f3a17b688cbcba70e3788ec15bbb136436af5f868126412d1fa4076e79123bcad723361892933ce84a"}, {0xdd, 0xf3, "c18c4a6080ca93b44f7f34d3e34c7d146381dbfd5694b6809bb31d57aa5d4337983a0305777e52944ba9f9eed56a4eda5c96eba03a0770c42b541db424375da84de27b431aa3e0b6b44b22eb83df3a684c71e3e666378064cac4567789c8f7fbea9a6d83e945a5c38af33b9ed1a9f88c2eff169f8c2ea4c2917f87b4c4e651c9839fc2db60aba732252cf7f715760572b26f31381dfd2ba9cd48a2836c7d306e3500d6f9b86e8af2bb6ffe06b59db73a5f8f487934e9b7fe838604224416580afa0878934043460ff1071efd088ec1b96b65241e5fd96d4e32d2b6aff039a6c6ffca68e7a5ef42336099975ddc3143f450e167"}, {0xdd, 0xaa, "a6bd993ea7275b6eb31dac679b2b7b440896d294070da2b1c930e6024d157fd2c555a3c5c653b4a0acec4da06d6b517dcfe759c6fba79fc68f0c0d31f6e3c68ca02c6e7048da27effb9f36f43d6d418e97b45af8003d46ec67da9430d4479c45a869bcdcc937c0cdb038d2c69da1b13472555c59dcb2d4688b0ab68517d1cdd442eb85f12b4be4de325b3c406e6b10ec81e3102a5777843b80c3b57ad4cd2895c343fa4c55ae34602dc9"}, {0xdd, 0xfa, "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"}, {0xdd, 0x7, "a630beef71084b"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@sec_chan_ofs={0x3e, 0x1}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x5, @broadcast, 0x2, @device_a, 0xfffffeff, 0x860, @device_b, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x5c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "331275a60ea25014a37524b7183cb6928023b7d42df0a5e765a2cad07c4db0998fdc04808eb9e7269aa72b0c3c6b90c9481747e4f7261d216c9dd51caceff2965809ae8b2801b1352e21"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @NL80211_ATTR_CSA_IES={0x24, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x269, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0x6c1d, 0x7, 0x3, 0x98, 0x0, 0x2, 0x8000, 0x4, 0xf138]}]}]}, 0x39ec}, 0x1, 0x0, 0x0, 0x200448c1}, 0x48800) (async) [ 2556.555892][T19680] Bluetooth: hci3: command 0x1003 tx timeout [ 2556.561928][T19680] Bluetooth: hci2: command 0x1003 tx timeout [ 2556.562001][T16177] Bluetooth: hci3: sending frame failed (-49) [ 2556.568292][T19680] Bluetooth: hci0: command 0x1003 tx timeout [ 2556.574007][T14039] Bluetooth: hci2: sending frame failed (-49) [ 2556.580148][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2557.195867][T20192] Bluetooth: hci5: command 0x1003 tx timeout [ 2557.195881][T19680] Bluetooth: hci4: command 0x1003 tx timeout [ 2557.202044][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2557.208316][T14039] Bluetooth: hci4: sending frame failed (-49) [ 2558.635923][T19680] Bluetooth: hci0: command 0x1001 tx timeout [ 2558.635942][T20210] Bluetooth: hci2: command 0x1001 tx timeout [ 2558.642140][T14039] Bluetooth: hci0: sending frame failed (-49) [ 2558.648468][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2558.660252][T20210] Bluetooth: hci3: command 0x1001 tx timeout [ 2558.666608][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2559.275955][T19680] Bluetooth: hci4: command 0x1001 tx timeout [ 2559.275960][T20210] Bluetooth: hci5: command 0x1001 tx timeout [ 2559.276015][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2559.282087][T14039] Bluetooth: hci4: sending frame failed (-49) [ 2560.715923][T19680] Bluetooth: hci0: command 0x1009 tx timeout [ 2560.715945][T17082] Bluetooth: hci3: command 0x1009 tx timeout [ 2560.728003][T17082] Bluetooth: hci2: command 0x1009 tx timeout [ 2561.355980][T17082] Bluetooth: hci5: command 0x1009 tx timeout [ 2561.355985][T19680] Bluetooth: hci4: command 0x1009 tx timeout 02:32:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x541b, 0x0) 02:32:54 executing program 1: r0 = syz_io_uring_setup(0x9f8, &(0x7f0000000340)={0x0, 0xf56, 0x2, 0x1, 0x2d}, &(0x7f000014c000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r1, 0x20, &(0x7f00000002c0)=[{&(0x7f0000000000)="b54c4a95b43f86c1c7b84244b59609d4516f2aad30238782ff5304e974fcb7a6ad1722ae8f431f798cae153e0ba902b2ea1c9f378d7b6146dcd346310296779bf8feab970d24217635c6488fac5c91cbe719de4961a42e524a6d2b874c5c863aadfad5d3a2", 0x65}, {&(0x7f0000000080)="497e55220c97b749847423db5c30ef3aa20cbc4cd3f9d7cf9937ea319bd570935fa7a0287bc669b09cc88f999ff79289ead25f044368137c7cbda5a56d815575cd3ed54e5cf1f83bad06333f962b9b0df648a22178d36a34bf0cbb4c5b114a16c7eeb8e46cb006390c129305d5246331", 0x70}, {&(0x7f00000001c0)="c91e6192915a97666c9a1084002f1681ecaa0960f864d5102bffd9a1e5522ca33d3e475db8fa7f49359eaaeb65e8c029d9941878c8c2e1281a7b672bcc90eabee09b88034dd75072b1a1ff1ac978073e3d7520bdf3495568fdee6b55c072ac86c97e4871a06d39f0ae5854f99ce6459cb5185329f2aab642596b2548bc9f87b54ea0bd60d86a51fb5824c027aaa132979cd3e675d50fc8de7d1e7037fbd9703cee37c1561a3a62ce27773ed7a947798faab9f2126167f96712cb55c3d74193a18d363b21a1cea2041ca2e60df76f79366b53da24ecbb90bba10703b7ce4978b16a5efaf106b961b84f4496dc", 0xec}], 0x3, 0x8, 0x1, {0x2}}, 0xfffffff9) 02:32:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000300)=0x3) 02:32:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f00000000c0)=0x4) [ 2564.741248][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 2564.750191][T11079] Bluetooth: hci2: Frame reassembly failed (-84) [ 2564.751093][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2564.764087][T17034] Bluetooth: hci3: Frame reassembly failed (-84) 02:32:54 executing program 1: r0 = syz_io_uring_setup(0x9f8, &(0x7f0000000340)={0x0, 0xf56, 0x2, 0x1, 0x2d}, &(0x7f000014c000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r1, 0x20, &(0x7f00000002c0)=[{&(0x7f0000000000)="b54c4a95b43f86c1c7b84244b59609d4516f2aad30238782ff5304e974fcb7a6ad1722ae8f431f798cae153e0ba902b2ea1c9f378d7b6146dcd346310296779bf8feab970d24217635c6488fac5c91cbe719de4961a42e524a6d2b874c5c863aadfad5d3a2", 0x65}, {&(0x7f0000000080)="497e55220c97b749847423db5c30ef3aa20cbc4cd3f9d7cf9937ea319bd570935fa7a0287bc669b09cc88f999ff79289ead25f044368137c7cbda5a56d815575cd3ed54e5cf1f83bad06333f962b9b0df648a22178d36a34bf0cbb4c5b114a16c7eeb8e46cb006390c129305d5246331", 0x70}, {&(0x7f00000001c0)="c91e6192915a97666c9a1084002f1681ecaa0960f864d5102bffd9a1e5522ca33d3e475db8fa7f49359eaaeb65e8c029d9941878c8c2e1281a7b672bcc90eabee09b88034dd75072b1a1ff1ac978073e3d7520bdf3495568fdee6b55c072ac86c97e4871a06d39f0ae5854f99ce6459cb5185329f2aab642596b2548bc9f87b54ea0bd60d86a51fb5824c027aaa132979cd3e675d50fc8de7d1e7037fbd9703cee37c1561a3a62ce27773ed7a947798faab9f2126167f96712cb55c3d74193a18d363b21a1cea2041ca2e60df76f79366b53da24ecbb90bba10703b7ce4978b16a5efaf106b961b84f4496dc", 0xec}], 0x3, 0x8, 0x1, {0x2}}, 0xfffffff9) 02:32:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5460, 0x0) 02:32:54 executing program 1: r0 = syz_io_uring_setup(0x9f8, &(0x7f0000000340)={0x0, 0xf56, 0x2, 0x1, 0x2d}, &(0x7f000014c000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x4, 0x4000, @fd=r1, 0x20, &(0x7f00000002c0)=[{&(0x7f0000000000)="b54c4a95b43f86c1c7b84244b59609d4516f2aad30238782ff5304e974fcb7a6ad1722ae8f431f798cae153e0ba902b2ea1c9f378d7b6146dcd346310296779bf8feab970d24217635c6488fac5c91cbe719de4961a42e524a6d2b874c5c863aadfad5d3a2", 0x65}, {&(0x7f0000000080)="497e55220c97b749847423db5c30ef3aa20cbc4cd3f9d7cf9937ea319bd570935fa7a0287bc669b09cc88f999ff79289ead25f044368137c7cbda5a56d815575cd3ed54e5cf1f83bad06333f962b9b0df648a22178d36a34bf0cbb4c5b114a16c7eeb8e46cb006390c129305d5246331", 0x70}, {&(0x7f00000001c0)="c91e6192915a97666c9a1084002f1681ecaa0960f864d5102bffd9a1e5522ca33d3e475db8fa7f49359eaaeb65e8c029d9941878c8c2e1281a7b672bcc90eabee09b88034dd75072b1a1ff1ac978073e3d7520bdf3495568fdee6b55c072ac86c97e4871a06d39f0ae5854f99ce6459cb5185329f2aab642596b2548bc9f87b54ea0bd60d86a51fb5824c027aaa132979cd3e675d50fc8de7d1e7037fbd9703cee37c1561a3a62ce27773ed7a947798faab9f2126167f96712cb55c3d74193a18d363b21a1cea2041ca2e60df76f79366b53da24ecbb90bba10703b7ce4978b16a5efaf106b961b84f4496dc", 0xec}], 0x3, 0x8, 0x1, {0x2}}, 0xfffffff9) 02:32:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa1) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) ftruncate(r3, 0x5) write(r0, &(0x7f0000000340)="4b816cd67bffee21c5b4083fd7dc601669426ad9054b377dd929ac0e8a0f70d83cfab4ce8b5294a10f6f9a1dc3af0efbd996d07a9b90586dee29dc0df4465b780bd36b98b6225f44aea030b6ec338a6abbda47687afd47f683bf89f0b1c9b82f76d6082d5bd6207b4f7d7e587270665ed526479b94a53be3a7830955444c3cd8da1b59877d924ef412acdad9401e37e5528a6edd4924e21748007906db789b5085708bf241c3793e568ff752c6e7a130db8db129a2c7d40ca88338f8c3706b84052074b2dfff", 0xc6) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x13) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB="cc0200f46da8fd0d18a9b17e28ffb8c76925c479066afaca7bc5c9fdf2600dfc0ea8906e9c4b2e0dd9bcb607ccab5c7f5691d99015f170530eb258ea9d7197", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x2cc}}, 0x40001) [ 2565.379435][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2565.391398][T20406] Bluetooth: hci6: Frame reassembly failed (-84) [ 2565.396290][T20395] Bluetooth: hci5: Frame reassembly failed (-84) [ 2565.399711][T17034] Bluetooth: hci6: Frame reassembly failed (-84) 02:32:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420081, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r0, r0, r0, r0], 0x5) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000200)=0x3, 0x4) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x9, 0xa31a, 0x0, 0x2, 0x5, 0x0, {0x0, r6}}, 0x1) 02:32:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420081, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r0, r0, r0, r0], 0x5) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000200)=0x3, 0x4) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x9, 0xa31a, 0x0, 0x2, 0x5, 0x0, {0x0, r6}}, 0x1) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420081, 0x0) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r0, r0, r0, r0], 0x5) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000200)=0x3, 0x4) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x9, 0xa31a, 0x0, 0x2, 0x5, 0x0, {0x0, r6}}, 0x1) (async) 02:32:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420081, 0x0) (async) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r2, r0, r0, r0, r0], 0x5) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000001880)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000200)=0x3, 0x4) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r6) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x9, 0xa31a, 0x0, 0x2, 0x5, 0x0, {0x0, r6}}, 0x1) 02:32:55 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) io_uring_enter(r0, 0x543a, 0x14e9, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) [ 2566.795855][T19680] Bluetooth: hci3: command 0x1003 tx timeout [ 2566.801896][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2566.807993][T19680] Bluetooth: hci2: command 0x1003 tx timeout [ 2566.814010][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2566.820121][T19680] Bluetooth: hci0: command 0x1003 tx timeout [ 2566.826302][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2567.435885][T17082] Bluetooth: hci6: command 0x1003 tx timeout [ 2567.435929][T19680] Bluetooth: hci5: command 0x1003 tx timeout [ 2567.442114][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2567.447905][T19680] Bluetooth: hci4: command 0x1003 tx timeout [ 2567.448300][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2567.454372][T16177] Bluetooth: hci4: sending frame failed (-49) [ 2568.875939][T19680] Bluetooth: hci0: command 0x1001 tx timeout [ 2568.882249][T19680] Bluetooth: hci2: command 0x1001 tx timeout [ 2568.882341][T16177] Bluetooth: hci0: sending frame failed (-49) [ 2568.888740][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2568.901683][T19680] Bluetooth: hci3: command 0x1001 tx timeout [ 2568.907740][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2569.515980][T19680] Bluetooth: hci5: command 0x1001 tx timeout [ 2569.515985][T17082] Bluetooth: hci4: command 0x1001 tx timeout [ 2569.516009][T17082] Bluetooth: hci6: command 0x1001 tx timeout [ 2569.522150][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2569.528625][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2569.534707][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2570.955929][T19680] Bluetooth: hci3: command 0x1009 tx timeout [ 2570.955951][T17082] Bluetooth: hci0: command 0x1009 tx timeout [ 2570.961947][T19680] Bluetooth: hci2: command 0x1009 tx timeout [ 2571.595924][T19680] Bluetooth: hci5: command 0x1009 tx timeout [ 2571.595929][T17082] Bluetooth: hci6: command 0x1009 tx timeout [ 2571.608032][T19680] Bluetooth: hci4: command 0x1009 tx timeout 02:33:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x541d, &(0x7f00000000c0)=0x4) 02:33:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x541d, 0x0) 02:33:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000300)=0x3) 02:33:04 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) io_uring_enter(r0, 0x543a, 0x14e9, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) io_uring_enter(r0, 0x543a, 0x14e9, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) (async) [ 2574.976940][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2574.989484][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:33:04 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) io_uring_enter(r0, 0x543a, 0x14e9, 0x2, &(0x7f0000000000)={[0x3]}, 0x8) 02:33:05 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0}, 0xfffffffe) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0xa, 0x6, @local}, 0x14) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) 02:33:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40049409, 0x0) 02:33:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa1) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) ftruncate(r3, 0x5) (async) write(r0, &(0x7f0000000340)="4b816cd67bffee21c5b4083fd7dc601669426ad9054b377dd929ac0e8a0f70d83cfab4ce8b5294a10f6f9a1dc3af0efbd996d07a9b90586dee29dc0df4465b780bd36b98b6225f44aea030b6ec338a6abbda47687afd47f683bf89f0b1c9b82f76d6082d5bd6207b4f7d7e587270665ed526479b94a53be3a7830955444c3cd8da1b59877d924ef412acdad9401e37e5528a6edd4924e21748007906db789b5085708bf241c3793e568ff752c6e7a130db8db129a2c7d40ca88338f8c3706b84052074b2dfff", 0xc6) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x13) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB="cc0200f46da8fd0d18a9b17e28ffb8c76925c479066afaca7bc5c9fdf2600dfc0ea8906e9c4b2e0dd9bcb607ccab5c7f5691d99015f170530eb258ea9d7197", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x2cc}}, 0x40001) (rerun: 32) [ 2575.611109][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2575.658033][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2575.661144][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2575.670928][T20445] Bluetooth: hci6: Frame reassembly failed (-84) 02:33:05 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0}, 0xfffffffe) (async, rerun: 32) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0xa, 0x6, @local}, 0x14) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) [ 2577.035917][T19658] Bluetooth: hci3: command 0x1003 tx timeout [ 2577.042134][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2577.048234][T19658] Bluetooth: hci2: command 0x1003 tx timeout [ 2577.054675][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2577.060808][T19658] Bluetooth: hci0: command 0x1003 tx timeout [ 2577.067184][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2577.675901][T19658] Bluetooth: hci6: command 0x1003 tx timeout [ 2577.681938][T19658] Bluetooth: hci5: command 0x1003 tx timeout [ 2577.688109][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2577.694179][T19658] Bluetooth: hci4: command 0x1003 tx timeout [ 2577.700310][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2577.706544][T17034] Bluetooth: hci6: Frame reassembly failed (-84) 02:33:08 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0}, 0xfffffffe) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1c, 0x0, 0x1, 0xa, 0x6, @local}, 0x14) (async, rerun: 32) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (rerun: 32) [ 2579.115952][T19658] Bluetooth: hci0: command 0x1001 tx timeout [ 2579.122007][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2579.128705][T19658] Bluetooth: hci2: command 0x1001 tx timeout [ 2579.134735][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2579.141167][T19658] Bluetooth: hci3: command 0x1001 tx timeout [ 2579.147200][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2579.755880][T19680] Bluetooth: hci4: command 0x1001 tx timeout [ 2579.761922][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2579.768314][T19680] Bluetooth: hci5: command 0x1001 tx timeout [ 2579.774313][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2579.780752][T19680] Bluetooth: hci6: command 0x1001 tx timeout [ 2579.786911][T17034] Bluetooth: hci6: Frame reassembly failed (-84) 02:33:10 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) syz_io_uring_setup(0x5335, &(0x7f0000000000)={0x0, 0xe8c, 0x10, 0x2, 0x2b0, 0x0, r0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f00000001c0)="f6ed2ee04b09a8cd2e134878c3625b6d942aff8646ff76b8a368aa928210f3194aa68263321514635ecbd167fc47430f310376284f98d60f630e9464f7f311235135de09f60a69ae35ba039c7ff469784b07824efaa3a8c34d0477873084cfa5f6b5fa62cbf8389580d9359e43791314dfbba0bf414e4d7b388afc55e62c23770f7baf15777efc11b4d0e716b32da6258732", 0x80, 0x0, 0x1, {0x2}}, 0x4) 02:33:10 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) syz_io_uring_setup(0x5335, &(0x7f0000000000)={0x0, 0xe8c, 0x10, 0x2, 0x2b0, 0x0, r0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f00000001c0)="f6ed2ee04b09a8cd2e134878c3625b6d942aff8646ff76b8a368aa928210f3194aa68263321514635ecbd167fc47430f310376284f98d60f630e9464f7f311235135de09f60a69ae35ba039c7ff469784b07824efaa3a8c34d0477873084cfa5f6b5fa62cbf8389580d9359e43791314dfbba0bf414e4d7b388afc55e62c23770f7baf15777efc11b4d0e716b32da6258732", 0x80, 0x0, 0x1, {0x2}}, 0x4) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) syz_io_uring_setup(0x5335, &(0x7f0000000000)={0x0, 0xe8c, 0x10, 0x2, 0x2b0, 0x0, r0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f00000001c0)="f6ed2ee04b09a8cd2e134878c3625b6d942aff8646ff76b8a368aa928210f3194aa68263321514635ecbd167fc47430f310376284f98d60f630e9464f7f311235135de09f60a69ae35ba039c7ff469784b07824efaa3a8c34d0477873084cfa5f6b5fa62cbf8389580d9359e43791314dfbba0bf414e4d7b388afc55e62c23770f7baf15777efc11b4d0e716b32da6258732", 0x80, 0x0, 0x1, {0x2}}, 0x4) (async) [ 2581.196045][T19680] Bluetooth: hci3: command 0x1009 tx timeout [ 2581.202046][T19680] Bluetooth: hci2: command 0x1009 tx timeout [ 2581.208318][T19680] Bluetooth: hci0: command 0x1009 tx timeout [ 2581.835918][T19680] Bluetooth: hci6: command 0x1009 tx timeout [ 2581.841953][T19680] Bluetooth: hci5: command 0x1009 tx timeout [ 2581.848881][T19680] Bluetooth: hci4: command 0x1009 tx timeout 02:33:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f00000000c0)=0x4) 02:33:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x541e, 0x0) 02:33:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000300)=0x3) 02:33:14 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) syz_io_uring_setup(0x5335, &(0x7f0000000000)={0x0, 0xe8c, 0x10, 0x2, 0x2b0, 0x0, r0}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f00000001c0)="f6ed2ee04b09a8cd2e134878c3625b6d942aff8646ff76b8a368aa928210f3194aa68263321514635ecbd167fc47430f310376284f98d60f630e9464f7f311235135de09f60a69ae35ba039c7ff469784b07824efaa3a8c34d0477873084cfa5f6b5fa62cbf8389580d9359e43791314dfbba0bf414e4d7b388afc55e62c23770f7baf15777efc11b4d0e716b32da6258732", 0x80, 0x0, 0x1, {0x2}}, 0x4) [ 2585.219086][T20395] Bluetooth: hci0: Frame reassembly failed (-84) [ 2585.228829][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2585.233563][T18602] Bluetooth: hci3: Frame reassembly failed (-84) 02:33:14 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140), &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:33:14 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140), &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:33:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40086602, 0x0) 02:33:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa1) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (rerun: 64) ftruncate(r3, 0x5) (async) write(r0, &(0x7f0000000340)="4b816cd67bffee21c5b4083fd7dc601669426ad9054b377dd929ac0e8a0f70d83cfab4ce8b5294a10f6f9a1dc3af0efbd996d07a9b90586dee29dc0df4465b780bd36b98b6225f44aea030b6ec338a6abbda47687afd47f683bf89f0b1c9b82f76d6082d5bd6207b4f7d7e587270665ed526479b94a53be3a7830955444c3cd8da1b59877d924ef412acdad9401e37e5528a6edd4924e21748007906db789b5085708bf241c3793e568ff752c6e7a130db8db129a2c7d40ca88338f8c3706b84052074b2dfff", 0xc6) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x13) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000440), 0x1) (async, rerun: 64) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000e00)=ANY=[@ANYBLOB="cc0200f46da8fd0d18a9b17e28ffb8c76925c479066afaca7bc5c9fdf2600dfc0ea8906e9c4b2e0dd9bcb607ccab5c7f5691d99015f170530eb258ea9d7197", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf258100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x2cc}}, 0x40001) (rerun: 64) 02:33:15 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140), &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (rerun: 64) [ 2585.847789][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2585.909150][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2585.920441][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2585.929690][T20490] Bluetooth: hci6: Frame reassembly failed (-84) [ 2587.275880][T19658] Bluetooth: hci3: command 0x1003 tx timeout [ 2587.281939][T19658] Bluetooth: hci2: command 0x1003 tx timeout [ 2587.282004][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2587.288462][T16177] Bluetooth: hci2: sending frame failed (-49) [ 2587.300098][T19658] Bluetooth: hci0: command 0x1003 tx timeout [ 2587.306261][T16177] Bluetooth: hci0: sending frame failed (-49) [ 2587.915870][T19658] Bluetooth: hci5: command 0x1003 tx timeout [ 2587.921995][T16177] Bluetooth: hci5: sending frame failed (-49) [ 2587.928324][T19658] Bluetooth: hci4: command 0x1003 tx timeout [ 2587.934336][T16177] Bluetooth: hci4: sending frame failed (-49) [ 2587.995887][T20210] Bluetooth: hci6: command 0x1003 tx timeout [ 2588.001986][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2589.355919][T20210] Bluetooth: hci3: command 0x1001 tx timeout [ 2589.355923][T19658] Bluetooth: hci0: command 0x1001 tx timeout [ 2589.355975][T16177] Bluetooth: hci0: sending frame failed (-49) [ 2589.361937][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2589.368376][T19658] Bluetooth: hci2: command 0x1001 tx timeout [ 2589.386337][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2589.995934][T19658] Bluetooth: hci4: command 0x1001 tx timeout [ 2590.001959][T19658] Bluetooth: hci5: command 0x1001 tx timeout [ 2590.002013][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2590.008356][T16177] Bluetooth: hci5: sending frame failed (-49) [ 2590.075953][T19658] Bluetooth: hci6: command 0x1001 tx timeout [ 2590.082066][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2591.435948][T19658] Bluetooth: hci0: command 0x1009 tx timeout [ 2591.435952][T20210] Bluetooth: hci2: command 0x1009 tx timeout [ 2591.435971][T20210] Bluetooth: hci3: command 0x1009 tx timeout [ 2592.075926][T19658] Bluetooth: hci5: command 0x1009 tx timeout [ 2592.075930][T20210] Bluetooth: hci4: command 0x1009 tx timeout [ 2592.155952][T19658] Bluetooth: hci6: command 0x1009 tx timeout 02:33:24 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:33:24 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) 02:33:24 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 32) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (rerun: 32) 02:33:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x541e, &(0x7f00000000c0)=0x4) 02:33:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x541e, 0x0) 02:33:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000300)=0x3) [ 2595.458310][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2595.464746][ T8093] Bluetooth: hci2: sending frame failed (-49) 02:33:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40087602, 0x0) 02:33:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x7, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0x8ddf}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r2, &(0x7f0000000000)=0xe3d6, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 2596.159817][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2597.515864][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2597.515881][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2597.521931][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2597.527859][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2597.533898][ T8093] Bluetooth: hci3: sending frame failed (-49) [ 2597.539873][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2598.155925][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2598.162014][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2598.235848][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2598.241961][T11231] Bluetooth: hci5: sending frame failed (-49) 02:33:28 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r2}}, 0x5) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(r5, 0x2417, 0x5506, 0x2, &(0x7f00000001c0)={[0x7]}, 0x8) 02:33:28 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async, rerun: 64) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r2}}, 0x5) (async, rerun: 64) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(r5, 0x2417, 0x5506, 0x2, &(0x7f00000001c0)={[0x7]}, 0x8) [ 2599.595865][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2599.595903][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2599.601900][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2599.607860][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2599.613837][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2599.620281][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2600.236106][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 2600.242264][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2600.315923][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2600.322122][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2601.675867][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 2601.675884][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2601.682178][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 2602.315901][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 2602.398674][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:33:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5420, 0x0) 02:33:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000300)=0x3) 02:33:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5421, &(0x7f00000000c0)=0x4) [ 2605.698941][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2605.708711][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:33:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x7, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0x8ddf}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) sendfile(r1, r2, &(0x7f0000000000)=0xe3d6, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:33:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x4020940d, 0x0) [ 2606.329686][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2606.336711][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2607.755864][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2607.755876][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 2607.762204][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2607.767956][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2607.773931][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2607.780693][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2608.395884][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2608.401941][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2608.402008][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2608.408259][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2609.835917][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2609.836176][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2609.841943][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2609.847955][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2609.860192][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2609.866473][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2610.475922][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2610.475935][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2610.482078][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2610.488094][ T8093] Bluetooth: hci4: sending frame failed (-49) 02:33:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r2}}, 0x5) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) io_uring_enter(r5, 0x2417, 0x5506, 0x2, &(0x7f00000001c0)={[0x7]}, 0x8) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x36b, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000080)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, &(0x7f00000000c0)=0x327c, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r2}}, 0x5) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) (async) io_uring_enter(r5, 0x2417, 0x5506, 0x2, &(0x7f00000001c0)={[0x7]}, 0x8) (async) [ 2611.915882][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2611.915888][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2611.915906][T19652] Bluetooth: hci0: command 0x1009 tx timeout 02:33:41 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x6, 0x3, 0x9, 0x1, 0x6, 0x3}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000fb4b00000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1002, 0x183) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 2612.069248][T11079] Bluetooth: hci6: Frame reassembly failed (-84) [ 2612.075614][T20574] Bluetooth: hci6: Frame reassembly failed (-84) [ 2612.555901][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 2612.555905][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2614.075884][T12161] Bluetooth: hci6: command 0x1003 tx timeout [ 2614.081922][T11231] Bluetooth: hci6: sending frame failed (-49) 02:33:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5421, 0x0) 02:33:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f00000000c0)=0x4) 02:33:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000300)=0x3) [ 2615.940358][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2615.945875][T11079] Bluetooth: hci3: Frame reassembly failed (-84) [ 2616.155885][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 2616.161914][T11231] Bluetooth: hci6: sending frame failed (-49) 02:33:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045432, 0x0) 02:33:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x7, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0x8ddf}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r2, &(0x7f0000000000)=0xe3d6, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x7, 0x2, 0x6, 0x1, 0xffffffffffffffff, 0x8ddf}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) sendfile(r1, r2, &(0x7f0000000000)=0xe3d6, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) [ 2616.573110][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2617.995859][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 2617.995880][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2618.001969][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2618.008305][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2618.013902][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2618.013933][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2618.235877][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2618.635887][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2618.641905][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2618.648275][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2618.654262][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2620.075912][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2620.075917][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2620.075972][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2620.082035][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2620.088458][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2620.106183][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2620.715961][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2620.722081][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2620.722173][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2620.728467][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2622.155929][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2622.155948][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2622.169728][T19652] Bluetooth: hci0: command 0x1009 tx timeout 02:33:51 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async, rerun: 32) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x6, 0x3, 0x9, 0x1, 0x6, 0x3}) (async, rerun: 32) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000fb4b00000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1002, 0x183) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 2622.407475][T11079] Bluetooth: hci6: Frame reassembly failed (-84) [ 2622.795890][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2622.795894][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2624.475900][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2624.481957][T11231] Bluetooth: hci6: sending frame failed (-49) 02:33:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5424, &(0x7f00000000c0)=0x4) 02:33:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000300)=0x3) 02:33:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5422, 0x0) [ 2626.180850][T11079] Bluetooth: hci0: Frame reassembly failed (-84) [ 2626.189228][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2626.555886][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 2626.561924][T11231] Bluetooth: hci6: sending frame failed (-49) 02:33:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045440, 0x0) 02:33:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TCXONC(r1, 0x540a, 0x3) [ 2626.811187][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2628.235882][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2628.235908][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2628.242082][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2628.248281][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2628.260253][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2628.266274][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2628.635928][T12161] Bluetooth: hci6: command 0x1009 tx timeout [ 2628.875858][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 2628.875862][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2628.882583][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2628.888176][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2630.315920][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 2630.315925][T20519] Bluetooth: hci2: command 0x1001 tx timeout [ 2630.327913][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2630.334068][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2630.340207][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2630.346240][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2630.955911][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2630.955915][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2630.955967][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2630.961936][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2632.395905][T12161] Bluetooth: hci3: command 0x1009 tx timeout [ 2632.401902][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2632.408245][T12161] Bluetooth: hci2: command 0x1009 tx timeout 02:34:02 executing program 1: syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x6, 0x3, 0x9, 0x1, 0x6, 0x3}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000fb4b00000000", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1002, 0x183) (async) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 2632.659497][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2633.035880][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2633.035884][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 2634.715891][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2634.721926][ T89] Bluetooth: hci6: sending frame failed (-49) 02:34:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5423, 0x0) 02:34:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000300)=0x3) 02:34:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5425, &(0x7f00000000c0)=0x4) [ 2636.413405][T16177] Bluetooth: hci0: sending frame failed (-49) [ 2636.423169][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2636.433431][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2636.795877][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 2636.801918][ T89] Bluetooth: hci6: sending frame failed (-49) 02:34:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80086601, 0x0) 02:34:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = dup(0xffffffffffffffff) ioctl$TCXONC(r1, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$TCXONC(r1, 0x540a, 0x3) (async) [ 2637.054823][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2637.060168][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2638.475849][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2638.475854][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2638.478659][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2638.482089][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2638.500203][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2638.506226][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2638.875855][T12161] Bluetooth: hci6: command 0x1009 tx timeout [ 2639.115848][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 2639.121979][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2639.128275][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2639.134281][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2640.555869][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2640.555873][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2640.555887][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2640.562018][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2640.568327][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2640.573829][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2641.195842][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2641.201911][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2641.201979][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2641.208251][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2642.635917][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2642.635921][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 2642.635943][T20531] Bluetooth: hci2: command 0x1009 tx timeout 02:34:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)=0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1dc6, &(0x7f0000000080)={0x0, 0xf039, 0x1, 0x2, 0x1de, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r5}}, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x9) 02:34:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)=0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1dc6, &(0x7f0000000080)={0x0, 0xf039, 0x1, 0x2, 0x1de, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r5}}, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x9) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x1dc6, &(0x7f0000000080)={0x0, 0xf039, 0x1, 0x2, 0x1de, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r5}}, 0x4) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x2) (async) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x9) (async) 02:34:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)=0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1dc6, &(0x7f0000000080)={0x0, 0xf039, 0x1, 0x2, 0x1de, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r5}}, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x2) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x9) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_setup(0x1dc6, &(0x7f0000000080)={0x0, 0xf039, 0x1, 0x2, 0x1de, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r5}}, 0x0) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x400, 0x0, {0x0, r5}}, 0x4) (async) syz_io_uring_submit(r2, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4}, 0x2) (async) syz_io_uring_submit(r2, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}}, 0x9) (async) [ 2643.275886][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2643.275890][T12161] Bluetooth: hci5: command 0x1009 tx timeout 02:34:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x6, 0x422, 0x7f, 0x0, 0x1, 0x6000, 0xd000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000380)={0x0, 0x7, 0x1ff, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000780)={r4, 0x0, 0x0, [0x0, 0x2, 0xfff, 0x80000001, 0xd70], [0x7ff, 0x0, 0xe4, 0x8, 0x1, 0x8, 0x0, 0x80000001, 0x1000, 0x5, 0x1, 0x0, 0x6, 0x368, 0x7, 0x1, 0x100000001, 0x7, 0x200000000000, 0xb13f, 0x8, 0xedd1, 0x3f, 0x5, 0x8, 0x80000000, 0x8, 0x2, 0x101, 0x2, 0x9, 0x3, 0x40, 0xa79, 0x100000000, 0x7, 0x200, 0x9, 0x8000000000000001, 0x20, 0xffffffffffffffff, 0xd7c, 0x9, 0x8000000000000001, 0x9, 0x7, 0x101, 0x7, 0x8, 0x4, 0x117, 0x80000000, 0x47, 0x6, 0x3ff, 0x2, 0x9, 0x9, 0x1, 0x8, 0x1f, 0x1, 0x6, 0x8000000000000001, 0x8000, 0x40, 0x8000, 0x1000, 0x5, 0x8, 0x0, 0x1, 0x13, 0x1, 0x0, 0x6, 0x8, 0x40, 0xffffffffffffffff, 0x7, 0x99, 0x80, 0x8000000000000000, 0x7, 0x8, 0x3f, 0x8, 0x9, 0x8, 0x8000000000000000, 0xffffffffffff8000, 0xc39, 0x7fff, 0x3, 0x2, 0x8, 0x0, 0x5a1, 0x24b, 0x8000, 0x5, 0x1, 0x1, 0x4, 0x3, 0x8001, 0x7, 0x800000, 0x8000000000000001, 0x10001, 0xfffffffffffffeff, 0x3, 0x8, 0x400, 0x5, 0x675d, 0x9, 0x3, 0x71, 0x0, 0xffffffffffffffff]}) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:34:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x6, 0x422, 0x7f, 0x0, 0x1, 0x6000, 0xd000}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000380)={0x0, 0x7, 0x1ff, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000780)={r4, 0x0, 0x0, [0x0, 0x2, 0xfff, 0x80000001, 0xd70], [0x7ff, 0x0, 0xe4, 0x8, 0x1, 0x8, 0x0, 0x80000001, 0x1000, 0x5, 0x1, 0x0, 0x6, 0x368, 0x7, 0x1, 0x100000001, 0x7, 0x200000000000, 0xb13f, 0x8, 0xedd1, 0x3f, 0x5, 0x8, 0x80000000, 0x8, 0x2, 0x101, 0x2, 0x9, 0x3, 0x40, 0xa79, 0x100000000, 0x7, 0x200, 0x9, 0x8000000000000001, 0x20, 0xffffffffffffffff, 0xd7c, 0x9, 0x8000000000000001, 0x9, 0x7, 0x101, 0x7, 0x8, 0x4, 0x117, 0x80000000, 0x47, 0x6, 0x3ff, 0x2, 0x9, 0x9, 0x1, 0x8, 0x1f, 0x1, 0x6, 0x8000000000000001, 0x8000, 0x40, 0x8000, 0x1000, 0x5, 0x8, 0x0, 0x1, 0x13, 0x1, 0x0, 0x6, 0x8, 0x40, 0xffffffffffffffff, 0x7, 0x99, 0x80, 0x8000000000000000, 0x7, 0x8, 0x3f, 0x8, 0x9, 0x8, 0x8000000000000000, 0xffffffffffff8000, 0xc39, 0x7fff, 0x3, 0x2, 0x8, 0x0, 0x5a1, 0x24b, 0x8000, 0x5, 0x1, 0x1, 0x4, 0x3, 0x8001, 0x7, 0x800000, 0x8000000000000001, 0x10001, 0xfffffffffffffeff, 0x3, 0x8, 0x400, 0x5, 0x675d, 0x9, 0x3, 0x71, 0x0, 0xffffffffffffffff]}) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:34:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) (async) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0x6, 0x422, 0x7f, 0x0, 0x1, 0x6000, 0xd000}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000380)={0x0, 0x7, 0x1ff, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000780)={r4, 0x0, 0x0, [0x0, 0x2, 0xfff, 0x80000001, 0xd70], [0x7ff, 0x0, 0xe4, 0x8, 0x1, 0x8, 0x0, 0x80000001, 0x1000, 0x5, 0x1, 0x0, 0x6, 0x368, 0x7, 0x1, 0x100000001, 0x7, 0x200000000000, 0xb13f, 0x8, 0xedd1, 0x3f, 0x5, 0x8, 0x80000000, 0x8, 0x2, 0x101, 0x2, 0x9, 0x3, 0x40, 0xa79, 0x100000000, 0x7, 0x200, 0x9, 0x8000000000000001, 0x20, 0xffffffffffffffff, 0xd7c, 0x9, 0x8000000000000001, 0x9, 0x7, 0x101, 0x7, 0x8, 0x4, 0x117, 0x80000000, 0x47, 0x6, 0x3ff, 0x2, 0x9, 0x9, 0x1, 0x8, 0x1f, 0x1, 0x6, 0x8000000000000001, 0x8000, 0x40, 0x8000, 0x1000, 0x5, 0x8, 0x0, 0x1, 0x13, 0x1, 0x0, 0x6, 0x8, 0x40, 0xffffffffffffffff, 0x7, 0x99, 0x80, 0x8000000000000000, 0x7, 0x8, 0x3f, 0x8, 0x9, 0x8, 0x8000000000000000, 0xffffffffffff8000, 0xc39, 0x7fff, 0x3, 0x2, 0x8, 0x0, 0x5a1, 0x24b, 0x8000, 0x5, 0x1, 0x1, 0x4, 0x3, 0x8001, 0x7, 0x800000, 0x8000000000000001, 0x10001, 0xfffffffffffffeff, 0x3, 0x8, 0x400, 0x5, 0x675d, 0x9, 0x3, 0x71, 0x0, 0xffffffffffffffff]}) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000100), 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000001880)) 02:34:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001880), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 02:34:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5424, 0x0) 02:34:16 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="6b5e703a980080"]) 02:34:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000300)=0x3) [ 2646.657585][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2646.665213][T11079] Bluetooth: hci2: Frame reassembly failed (-84) 02:34:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) r1 = dup(0xffffffffffffffff) ioctl$TCXONC(r1, 0x540a, 0x3) 02:34:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5427, &(0x7f00000000c0)=0x4) 02:34:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80087601, 0x0) 02:34:16 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 02:34:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) 02:34:16 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_setup(0x7, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x91, 0x0) [ 2647.289658][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2647.304706][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2647.320192][T11079] Bluetooth: hci5: Frame reassembly failed (-84) 02:34:16 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), 0x0, 0x0, 0x0) 02:34:16 executing program 1: pselect6(0x30, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 02:34:16 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x801c581f, 0x0) [ 2648.715869][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2648.721881][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2648.721947][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2648.728420][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2649.355857][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 2649.355870][T20519] Bluetooth: hci4: command 0x1003 tx timeout [ 2649.362641][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2649.368086][T20519] Bluetooth: hci3: command 0x1003 tx timeout [ 2649.373902][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2649.380032][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2650.795922][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2650.795927][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2650.795991][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2650.801958][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2651.435970][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2651.435974][T20519] Bluetooth: hci3: command 0x1001 tx timeout [ 2651.447973][ T8093] Bluetooth: hci3: sending frame failed (-49) [ 2651.454091][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2651.460194][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2651.466199][ T8093] Bluetooth: hci5: sending frame failed (-49) [ 2652.875926][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 2652.875930][T20519] Bluetooth: hci0: command 0x1009 tx timeout [ 2653.515918][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 2653.521923][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2653.528113][T12161] Bluetooth: hci3: command 0x1009 tx timeout 02:34:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5425, 0x0) 02:34:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 02:34:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000300)=0x3) [ 2656.897512][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:34:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r0, &(0x7f0000000000)=0xa9, 0x8) 02:34:26 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x10, 0x7, 0xfff, 0x7, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x64, 0x0, 0x74, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0x99, [@private=0xa010101, @broadcast, @private=0xa010100]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x4, [0x10001, 0x80000000, 0x5, 0x9]}, @timestamp={0x44, 0x8, 0x5d, 0x0, 0x7, [0x1]}]}}}}}) r1 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='){(\x17}}\xd5](-.\\!\x00', 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r1, 0x1) keyctl$assume_authority(0x10, r1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr=' \x01\x00', r0}, 0x14) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="92", 0x1, 0xfffffffffffffffd) 02:34:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0045878, 0x0) 02:34:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5428, &(0x7f00000000c0)=0x4) 02:34:27 executing program 1: add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)='i', 0x1, 0xffffffffffffffff) 02:34:27 executing program 1: add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 02:34:27 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'rmd256\x00'}}, 0x0, 0x0) 02:34:27 executing program 1: io_setup(0x3d3, &(0x7f0000000000)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)='di', 0x2}]) [ 2657.544944][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2657.549892][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2657.555326][T18602] Bluetooth: hci3: Frame reassembly failed (-84) 02:34:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="910475e8f40000010000bc67b39a00009a76041e9cf576015d8bdcd2ad4a1785cbcfd133ef5d9b"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f0000000100)=""/135, 0xfffffe9c, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}}) [ 2657.785933][T20732] device õv]‹ÜÒ­J…ËÏÑ3 entered promiscuous mode [ 2658.955864][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2658.955877][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2658.961913][ T8093] Bluetooth: hci0: sending frame failed (-49) [ 2658.968982][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2659.595876][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2659.595881][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2659.596228][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2659.602053][ T8093] Bluetooth: hci5: sending frame failed (-49) [ 2659.620002][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2659.626023][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2661.035972][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 2661.035986][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2661.042721][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2661.048374][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2661.675933][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2661.675950][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2661.681995][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2661.688411][ T8093] Bluetooth: hci3: sending frame failed (-49) [ 2661.694095][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2661.706414][ T8093] Bluetooth: hci5: sending frame failed (-49) [ 2663.115925][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 2663.115930][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 2663.755915][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 2663.755920][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2663.767950][T19679] Bluetooth: hci3: command 0x1009 tx timeout 02:34:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5427, 0x0) 02:34:36 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1, 0x0) read$hidraw(r0, &(0x7f0000000280)=""/110, 0x6e) 02:34:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 2667.137517][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2667.144614][T11079] Bluetooth: hci2: Frame reassembly failed (-84) 02:34:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r0, &(0x7f0000000000)=0xa9, 0x8) 02:34:37 executing program 1: io_setup(0x7bf6, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, 0x0, "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", "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"}) 02:34:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f00000000c0)=0x4) 02:34:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0045878, 0x0) [ 2667.786096][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2667.793753][T18602] Bluetooth: hci4: Frame reassembly failed (-84) 02:34:37 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5452, &(0x7f0000000200)) 02:34:37 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x3, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x0, 0x0]) 02:34:37 executing program 1: request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='l\x00', 0xfffffffffffffffe) 02:34:37 executing program 1: add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc4}, 0x0, 0x0, 0x0) 02:34:37 executing program 1: request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 2669.195896][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2669.201902][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2669.201946][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2669.208069][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2669.835862][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 2669.835891][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2669.842003][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2669.847849][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2669.848390][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2669.853948][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2671.275928][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 2671.275933][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2671.286257][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2671.288636][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2671.915929][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2671.915933][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2671.915955][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2671.922221][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2671.928312][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2671.933894][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2673.355957][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 2673.355970][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 2673.995928][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2673.995932][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 2673.995960][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:34:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5428, 0x0) 02:34:46 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 02:34:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000300)=0x3) [ 2677.374431][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 2677.382308][T17034] Bluetooth: hci2: Frame reassembly failed (-84) 02:34:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r0, &(0x7f0000000000)=0xa9, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) sendfile(r1, r0, &(0x7f0000000000)=0xa9, 0x8) (async) 02:34:47 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x4b47, 0x0) 02:34:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5441, &(0x7f00000000c0)=0x4) 02:34:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0189436, 0x0) 02:34:47 executing program 1: request_key(&(0x7f0000000280)='.dead\x00', 0x0, 0x0, 0x0) 02:34:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1ff) 02:34:47 executing program 1: r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='@', 0x1, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 02:34:47 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=@encrypted_update={'update ', 'default', 0x20, 'trusted:'}, 0x18, 0x0) 02:34:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x200, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) [ 2678.022449][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2678.034918][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2679.435892][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2679.442068][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2679.448152][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2679.454147][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2680.075913][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2680.081940][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2680.088157][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2680.094156][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2680.100356][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 2680.106369][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2681.515905][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2681.521936][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2681.528278][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2681.534296][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2682.155910][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2682.161939][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2682.168287][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2682.174275][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2682.180516][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2682.186516][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2683.595910][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2683.601927][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2684.235939][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2684.241935][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2684.248113][T20530] Bluetooth: hci3: command 0x1009 tx timeout 02:34:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5429, 0x0) 02:34:57 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_sset_info}) 02:34:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000300)=0x3) [ 2687.618840][T20395] Bluetooth: hci0: Frame reassembly failed (-84) [ 2687.627054][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:34:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xt_quota2', 0x105000, 0x21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:34:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4e, 0x0) 02:34:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5450, &(0x7f00000000c0)=0x4) 02:34:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc020660b, 0x0) 02:34:57 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) clock_settime(0x0, &(0x7f0000000100)={r0}) 02:34:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xt_quota2', 0x105000, 0x21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) (async, rerun: 32) r2 = syz_open_pts(0xffffffffffffffff, 0x0) (rerun: 32) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (rerun: 32) 02:34:57 executing program 1: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0xfff}, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 02:34:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xt_quota2', 0x105000, 0x21) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) dup2(r0, r0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xt_quota2', 0x105000, 0x21) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:34:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) [ 2688.254421][T20395] Bluetooth: hci3: Frame reassembly failed (-84) [ 2689.675923][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2689.681947][T17107] Bluetooth: hci2: sending frame failed (-49) [ 2689.688155][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2689.694145][T17107] Bluetooth: hci0: sending frame failed (-49) [ 2690.315878][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2690.322266][T17107] Bluetooth: hci4: sending frame failed (-49) [ 2690.328463][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 2690.334449][T17107] Bluetooth: hci3: sending frame failed (-49) [ 2691.755956][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2691.761974][T17107] Bluetooth: hci0: sending frame failed (-49) [ 2691.768196][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2691.774220][T17107] Bluetooth: hci2: sending frame failed (-49) [ 2692.395956][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2692.401974][T17107] Bluetooth: hci3: sending frame failed (-49) [ 2692.408072][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2692.414182][T17107] Bluetooth: hci4: sending frame failed (-49) [ 2693.835991][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2693.842002][T20519] Bluetooth: hci0: command 0x1009 tx timeout [ 2694.475935][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 2694.481937][T20519] Bluetooth: hci3: command 0x1009 tx timeout 02:35:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:35:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 02:35:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000300)=0x3) 02:35:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) dup3(r1, r0, 0x0) syz_open_pts(r0, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r2, 0x4b34, 0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0xc1002, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c6578696e6f3d6175746f2c78696e6f3d6175746f2c78696e6f3d6f66662c7065726d69745f646972656374696f2c00b2049fd844dad228fa1881e7f0ecf928c7575b50fcb019ff08d1e82bc6f0138446163f14f03032f8d61422c7cf0f5464a02bc5596dc819ccb777077f2729e60d781cbcc3c7cbdb596fa64bd4443ff2395a55d355f4e0a046b303ee0b3b76c12dc8d8605dea8a1efb690072c542e723658aefde63f1bb38e1fb9782d94c89516453d9ecaad4155a2a3b0be45ad83b4df80e76c30a4c9b3d357122ab4fbaaf1d5b3a"]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.:file0']) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 2697.853517][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2697.859972][ T22] audit: type=1400 audit(1657852506.579:309): avc: denied { create } for pid=20830 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2697.872315][T18602] Bluetooth: hci5: Frame reassembly failed (-84) 02:35:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="90edd705a0ae62b98c5c0a24b164937859c916822921d7df4316e3687060e211344239919ef0fe465f403eefdac49c39795e53b8a5c4a6e999ac2f6f18c976062395558be212c8b81869e1543c7b2f48b824327809efc2309310e8b7e20a", 0x5e, r0) [ 2697.886580][ T22] audit: type=1400 audit(1657852506.609:310): avc: denied { write } for pid=20830 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2697.911496][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2697.918962][T20838] Bluetooth: hci6: Frame reassembly failed (-84) [ 2697.978585][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2697.985045][T20843] Bluetooth: hci7: Frame reassembly failed (-84) [ 2697.993806][T20843] overlayfs: overlapping lowerdir path 02:35:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5451, &(0x7f00000000c0)=0x4) 02:35:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x8) 02:35:07 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f00000018c0)) 02:35:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b2f, 0x0) 02:35:07 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000c100)={&(0x7f000000bfc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}}, &(0x7f000000c040)=""/173, 0x2a, 0xad, 0x1}, 0x20) 02:35:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x61}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2698.493142][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2698.496959][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2699.915929][T20519] Bluetooth: hci6: command 0x1003 tx timeout [ 2699.921962][ T8093] Bluetooth: hci6: sending frame failed (-49) [ 2699.928092][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 2699.934102][ T8093] Bluetooth: hci5: sending frame failed (-49) [ 2699.940204][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2699.946276][ T8093] Bluetooth: hci2: sending frame failed (-49) [ 2699.952385][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2699.958444][ T8093] Bluetooth: hci0: sending frame failed (-49) [ 2699.995868][T20519] Bluetooth: hci7: command 0x1003 tx timeout [ 2700.001972][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2700.555862][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2700.555866][T20519] Bluetooth: hci3: command 0x1003 tx timeout [ 2700.555927][ T8093] Bluetooth: hci3: sending frame failed (-49) [ 2700.562151][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2701.995917][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2702.002095][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2702.002174][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 2702.008577][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2702.020499][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2702.026534][T20858] Bluetooth: hci5: sending frame failed (-49) [ 2702.032581][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 2702.038584][T20858] Bluetooth: hci6: sending frame failed (-49) [ 2702.075937][T20519] Bluetooth: hci7: command 0x1001 tx timeout [ 2702.082032][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2702.635935][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2702.635939][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2702.635994][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2702.641958][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2704.075936][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2704.075940][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2704.075962][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2704.093879][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2704.155955][T20530] Bluetooth: hci7: command 0x1009 tx timeout [ 2704.715921][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2704.715925][T20530] Bluetooth: hci3: command 0x1009 tx timeout 02:35:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000300)=0x3) 02:35:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000080)={{r0}, "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"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:35:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5441, 0x0) 02:35:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async, rerun: 32) dup3(r1, r0, 0x0) (async, rerun: 32) syz_open_pts(r0, 0x1) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r2, 0x4b34, 0x7) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0xc1002, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c6578696e6f3d6175746f2c78696e6f3d6175746f2c78696e6f3d6f66662c7065726d69745f646972656374696f2c00b2049fd844dad228fa1881e7f0ecf928c7575b50fcb019ff08d1e82bc6f0138446163f14f03032f8d61422c7cf0f5464a02bc5596dc819ccb777077f2729e60d781cbcc3c7cbdb596fa64bd4443ff2395a55d355f4e0a046b303ee0b3b76c12dc8d8605dea8a1efb690072c542e723658aefde63f1bb38e1fb9782d94c89516453d9ecaad4155a2a3b0be45ad83b4df80e76c30a4c9b3d357122ab4fbaaf1d5b3a"]) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.:file0']) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:35:16 executing program 1: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) [ 2708.098759][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2708.159226][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2708.166085][T20872] Bluetooth: hci5: Frame reassembly failed (-84) [ 2708.172873][T20872] Bluetooth: hci5: Frame reassembly failed (-84) [ 2708.179412][T20874] Bluetooth: hci7: Frame reassembly failed (-84) [ 2708.179507][T20872] Bluetooth: hci5: Frame reassembly failed (-84) [ 2708.187515][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:35:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5452, &(0x7f00000000c0)=0x4) 02:35:17 executing program 1: bpf$OBJ_GET_PROG(0x2, 0x0, 0xa4e) 02:35:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x10) 02:35:17 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{4-\x00', 0xfffffffffffffffe) 02:35:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:17 executing program 1: request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)='\x00', 0xffffffffffffffff) 02:35:17 executing program 1: bpf$OBJ_GET_PROG(0x1e, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0x10) [ 2708.734896][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2708.743670][T20395] Bluetooth: hci3: Frame reassembly failed (-84) [ 2710.155863][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2710.161886][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2710.161992][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 2710.168404][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2710.235911][T20530] Bluetooth: hci7: command 0x1003 tx timeout [ 2710.241944][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2710.248181][T20858] Bluetooth: hci6: sending frame failed (-49) [ 2710.254271][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2710.260529][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2710.260533][T20395] Bluetooth: hci5: Frame reassembly failed (-84) [ 2710.795873][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2710.795886][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2710.802048][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2710.808430][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2712.235934][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2712.235938][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2712.247943][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 2712.254021][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 2712.315920][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2712.321946][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 2712.328016][ T9876] Bluetooth: hci6: sending frame failed (-49) [ 2712.334087][T20530] Bluetooth: hci7: command 0x1001 tx timeout [ 2712.340158][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2712.346568][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2712.875926][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2712.875943][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2712.881948][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2712.888185][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2714.315925][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2714.321936][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2714.395980][T20530] Bluetooth: hci7: command 0x1009 tx timeout [ 2714.401976][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2714.408175][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2714.955920][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2714.955924][T12161] Bluetooth: hci3: command 0x1009 tx timeout 02:35:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000300)=0x3) 02:35:27 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff}) fcntl$getflags(r0, 0x401) 02:35:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5450, 0x0) [ 2718.339215][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2718.351707][T17034] Bluetooth: hci2: Frame reassembly failed (-84) 02:35:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) dup3(r1, r0, 0x0) (async) syz_open_pts(r0, 0x1) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r2, 0x4b34, 0x7) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000680)='./file1\x00', 0x0) (async) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0xc1002, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c6578696e6f3d6175746f2c78696e6f3d6175746f2c78696e6f3d6f66662c7065726d69745f646972656374696f2c00b2049fd844dad228fa1881e7f0ecf928c7575b50fcb019ff08d1e82bc6f0138446163f14f03032f8d61422c7cf0f5464a02bc5596dc819ccb777077f2729e60d781cbcc3c7cbdb596fa64bd4443ff2395a55d355f4e0a046b303ee0b3b76c12dc8d8605dea8a1efb690072c542e723658aefde63f1bb38e1fb9782d94c89516453d9ecaad4155a2a3b0be45ad83b4df80e76c30a4c9b3d357122ab4fbaaf1d5b3a"]) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.:file0']) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:35:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff, 0x0, "9c175013a365532093d4bf9419de5cc148f8e4"}) [ 2718.423200][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2718.429064][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2718.435746][T20395] Bluetooth: hci7: Frame reassembly failed (-84) [ 2718.442407][T20908] Bluetooth: hci6: Frame reassembly failed (-84) [ 2718.446268][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:35:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x545d, &(0x7f00000000c0)=0x4) 02:35:27 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) fcntl$getflags(r0, 0x0) 02:35:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x3f00) 02:35:27 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x490c82, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 02:35:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3f9, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:27 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x11) 02:35:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b31, 0x0) [ 2718.972796][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2718.979563][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2720.395876][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2720.401997][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2720.402092][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2720.408480][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 2720.475924][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2720.475951][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 2720.481985][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2720.488523][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2720.493942][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2720.500672][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 2721.035886][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2721.041952][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2721.048215][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2721.054201][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 2722.475931][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2722.475954][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2722.482015][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 2722.488369][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2722.555930][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2722.555935][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2722.555979][T20858] Bluetooth: hci5: sending frame failed (-49) [ 2722.562024][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2722.567964][T12161] Bluetooth: hci7: command 0x1001 tx timeout [ 2722.586383][T11079] Bluetooth: hci7: Frame reassembly failed (-84) [ 2722.592704][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2723.115971][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2723.122002][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2723.128297][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2723.134281][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2724.555925][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2724.555929][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 2724.635920][T12161] Bluetooth: hci7: command 0x1009 tx timeout [ 2724.635925][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2724.647895][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 2725.195919][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2725.201918][T12161] Bluetooth: hci3: command 0x1009 tx timeout 02:35:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000300)=0x3) 02:35:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b36, 0x0) 02:35:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5451, 0x0) [ 2728.578586][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:35:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r1, 0x400455c8, 0x81) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:35:37 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0xf) [ 2728.658743][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2728.667207][T20944] Bluetooth: hci5: Frame reassembly failed (-84) 02:35:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5460, &(0x7f00000000c0)=0x4) 02:35:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x100000) 02:35:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:37 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/68, 0x44) 02:35:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3803, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2729.211421][T11079] Bluetooth: hci3: Frame reassembly failed (-84) [ 2729.223069][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2730.635865][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2730.641925][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2730.648027][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2730.654071][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2730.715928][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 2730.721960][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2731.275873][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2731.281952][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2731.288232][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2731.294279][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2732.715924][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 2732.721979][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2732.728186][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2732.734169][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2732.795929][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2732.801952][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2733.355949][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2733.362063][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2733.368606][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2733.374624][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2734.795921][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 2734.802105][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2734.875917][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 2735.435942][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2735.441944][T12161] Bluetooth: hci3: command 0x1009 tx timeout 02:35:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000300)=0x3) 02:35:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r1, 0x400455c8, 0x81) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x81) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:35:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5452, 0x0) 02:35:47 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 02:35:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 2738.820012][T20966] Bluetooth: hci0: Frame reassembly failed (-84) [ 2738.829431][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:35:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f00000000c0)=0x4) 02:35:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x1000000) 02:35:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000300)=0x3) 02:35:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) 02:35:48 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 02:35:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:48 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x4) [ 2739.454135][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2740.875865][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2740.875901][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2740.881960][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2740.888007][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2741.515870][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2741.515894][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2741.522002][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2741.528337][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2741.534135][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2741.540333][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2742.955932][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2742.955946][T20519] Bluetooth: hci2: command 0x1001 tx timeout [ 2742.961974][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2742.968395][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2743.595923][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2743.595927][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2743.607913][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2743.614054][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2743.620203][T20519] Bluetooth: hci3: command 0x1001 tx timeout [ 2743.626234][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2745.035943][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 2745.035974][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2745.675924][T20519] Bluetooth: hci3: command 0x1009 tx timeout [ 2745.682011][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 2745.688151][T20519] Bluetooth: hci5: command 0x1009 tx timeout 02:35:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x81) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:35:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x545d, 0x0) 02:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xfc, &(0x7f00000000c0)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:35:57 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)={0x20}}) [ 2749.060231][T11079] Bluetooth: hci0: Frame reassembly failed (-84) [ 2749.072250][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2749.079893][T21005] Bluetooth: hci2: Frame reassembly failed (-84) 02:35:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f00000000c0)=0x4) 02:35:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d32ebdb6beceaf6f93bbab5d3435010a70f89e8787ce79505948a129f8752004e62311890f11e8cce724ac6a0bedec082de3e0d54444ec75c4119dd4f866a6bd"}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r0, 0x0, 0x0) 02:35:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x8000000) 02:35:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x40087602, &(0x7f0000000300)=0x3) 02:35:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x540e, 0x0) 02:35:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc1}, &(0x7f0000001840)={0x0, "30b396d6055c3bb12b78e9bd8a1a78836e703cdaee52e2a237ba655d63a57e9c7a17c147218297a9d9db3a5e5fc76bdb45633e99e157cd081ba2820b89abfc44"}, 0x48, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 02:35:58 executing program 1: pipe(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x40b) 02:35:58 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) [ 2749.697225][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2749.703861][T11079] Bluetooth: hci4: Frame reassembly failed (-84) [ 2751.115851][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2751.121858][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2751.121938][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2751.128515][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2751.755866][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 2751.755879][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2751.761941][T20519] Bluetooth: hci4: command 0x1003 tx timeout [ 2751.767901][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2751.774266][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2751.779900][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2753.195938][T20519] Bluetooth: hci2: command 0x1001 tx timeout [ 2753.195943][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2753.196000][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2753.202017][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2753.835970][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2753.835984][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2753.841988][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2753.847994][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2753.854202][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2753.860016][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2755.275915][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2755.275920][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 2755.915930][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 2755.915949][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 2755.921978][T20519] Bluetooth: hci3: command 0x1009 tx timeout 02:36:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/88}) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:36:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5460, 0x0) 02:36:08 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc1}, &(0x7f0000001840)={0x0, "30b396d6055c3bb12b78e9bd8a1a78836e703cdaee52e2a237ba655d63a57e9c7a17c147218297a9d9db3a5e5fc76bdb45633e99e157cd081ba2820b89abfc44"}, 0x48, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, "5a4290530f76ac3d6ceec280f0f137f10522118ac675c8cf60e6e3ed9559d56f078772755bc2c177105c3e13bdc07af23d027a63f3760f03386dae88e4e31875"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 02:36:08 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f00000017c0), &(0x7f0000001800)={'fscrypt:', @desc1}, &(0x7f0000001840)={0x0, "30b396d6055c3bb12b78e9bd8a1a78836e703cdaee52e2a237ba655d63a57e9c7a17c147218297a9d9db3a5e5fc76bdb45633e99e157cd081ba2820b89abfc44"}, 0x48, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x0) [ 2759.299319][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:36:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x40087602, &(0x7f00000000c0)=0x4) 02:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @dev}}}, 0x108) 02:36:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x3f000000) 02:36:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000300)=0x3) 02:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @dev}}}, 0x108) 02:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @dev}}}, 0x108) 02:36:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x0, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @dev}}}, 0x108) 02:36:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r0, 0x0) [ 2759.946179][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2759.953987][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2761.355866][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2761.362021][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2761.362043][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2761.368427][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2761.995869][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 2761.995900][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2762.002226][T20519] Bluetooth: hci3: command 0x1003 tx timeout [ 2762.008091][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2762.014534][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2762.020136][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2763.435874][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2763.435932][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2763.442030][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2763.447903][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2764.075866][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2764.075871][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 2764.075884][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2764.081889][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2764.087877][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2764.106007][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2765.515940][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 2765.515944][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2766.155973][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2766.155977][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 2766.156000][T19679] Bluetooth: hci3: command 0x1009 tx timeout 02:36:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/88}) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/88}) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:36:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40045431, 0x0) 02:36:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x1d}]}) 02:36:18 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000140)={@remote, @remote, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @dev, @local, @private2}}}}, 0x0) [ 2769.539984][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2769.546893][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:36:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f00000000c0)=0x4) 02:36:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x4, 0x0, 0x0) 02:36:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0xfeffffff) 02:36:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000300)=0x3) 02:36:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000480)="a5e1cc8fc83f90ef997a502a2b3d98f6dfe7176e063235f0f3de553088fb38409ae0cf9ed0eb5c7eb05af128a4bff0542a22dddea7fed487cd9af641542e24b190a4f40b138d037292a5e6fecd2a26e0902bf176ea0addb3ed6d07d585b0f6e891c25d9e118234971bbc017a030c1d825dd580f559057ef353c7d146840a98bc2b39c3bfc1f99246ccf29229e80ccccf6eec5babc2705ae643b443fc69621b1bc9d00803c7b5f760a53648fa2ac8a2c7926d40bd5f1a85dd4349f9976c65164b3c8336e647c8ce6422229f7243ae120cd10aa5d2f7cd8cfb8a7124563b5951a0dadf0c8ed891b62908379175ddb5fa02e719055120a97df60da77f23400d5bfe8ad82faf7fc6514504428a32a1442a8962180c07fc220a9c05a1d6cff49204cf47454ce63c59fc43002f002b0a18bd57dae53ba4641dc38a485d57c64d6e041c8dab0b2499f32316a1ac5e748d58acb9bd27c093ee38a24fb81a253e7275a7e4872a58a4105cd95149c4b50cceb9777d458396b934b26c4b03ecfa0559cac75dfb041ddd2bccc43f75eee58176383e8ac5d6949adf748813aba75a12dacb02bd8c86686a919754d0bafa864a745254e240651c6e7bc5ae48280b65a34c99bf383e6b78f32ee70a94f1c64c859d984b7fbeaaedafe0d1ce3ef986dedb74c227bf2514e99cf26347e2f2acc6d1f77e43bbad34b49b7debe589c87ce54b2dab5893fc20cc2ed93aeb9bb1473d98db9bbbd9911e6001431597d260f5f46c457bcf7c750f1e5fd3ded9508c09945ca790725f4017a929b274631bb31881a675a4150cba64b387d22cadcab2556aa80724634b22bd9ea4f576f0ac39ec33af9630cb519a89b689d27e273bc90845507c0b6b87cb9f985ed7464ccd2f9ef53e0707f9125d142167a491301da6f4149fc4491ef27fd9e2c4dcff5491d96c2f3ab09ae9cf2fb9e2a727e3e71bb991a6283c00ac92e97efc52746e4a413ec1d00bfb6b3be6a49d032df0b05dc905298569b0691c1c0dbf60d1f9acdb5e5bc20dd090365477b98269aea872189b318bb0c7e7409295ac80bfac0d4c4a8a9735a9303413990d8bb6377c50754b8ac010771014cf73eb013dde2c485f182ee5abdfa9fef2e6f85cc805a7ca1179baf4ff68381b5787a1861be1162c5fda64c2b05fd0b6f9314c3f4ca581ba689e6c52458e5e5c6fa7fc26bfb5d4315022ba723279abb56323ee23516d1d6b47bbf5efc31ed4f4c1b92e69a791b2abdd1b2cdc9fd83ae280dbb3cc1785d4b8d3894dfc2fc9ff56c55ed4f798b98685681b797afebb620dc865ac9e8afe7cb8ff16f63e38e1bd925d53a6f6f04cd1dfc9329f35ded0199de4e433bc41220cae4ec09306f3ce9fc573e880693b5738df5dfc60b6002edf3377c718212b9c8b9ebeec514c41448308cfc0194e4d1c49233086c3438b9e8a92eafe1f1b14eb5043611d05851d801d8289f5d972a724b242ffbd739526b4c3aad307b25679300c1453f409f531317c414971a5a24a77e57998507341d3dbdcfa4217acb570b7d3797442cd108881574ef9b4de81f3e7236c9ff266e93890bb0ab503a41df3ed8f0e1decd402afca5546713cb40c8453b032021a1cebe3306450c33d2f3d87076491852da73671fb80cb55e01bca764038491bee3d667ed63fa46cd11939ab208cb23232cecee4a7c286711488693c2ff3f2a8ab4fe272e777ee5eafee30ad791f4f0705fca87b2e4c25086bb0", 0x4d0}], 0x1}, 0x0) 02:36:18 executing program 1: prctl$PR_SET_SECCOMP(0x21, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:36:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x40001) 02:36:18 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000480)="a5", 0x1}], 0x1}, 0x80fe) [ 2770.175097][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2770.181541][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2771.595860][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2771.595864][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2771.601995][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2771.608216][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2772.235858][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2772.241911][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2772.248120][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2772.254160][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2772.260381][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2772.266418][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2773.675963][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2773.675978][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2773.681996][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2773.687956][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2774.315927][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2774.321937][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2774.322010][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2774.328446][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2774.340158][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2774.346162][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2775.755934][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 2775.755938][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2776.395934][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2776.395938][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2776.395965][T20531] Bluetooth: hci5: command 0x1009 tx timeout 02:36:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/88}) (async, rerun: 32) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (rerun: 32) 02:36:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x0) 02:36:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x70, 0x0) 02:36:28 executing program 1: prctl$PR_SET_SECCOMP(0x22, 0x0, 0x0) [ 2779.773724][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2779.786424][T17034] Bluetooth: hci2: Frame reassembly failed (-84) 02:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f00000000c0)=0x4) 02:36:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x34}]}) 02:36:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000300)=0x3) 02:36:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0xffffff7f) 02:36:29 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000900)="a5a2e0875218909c", 0x8, 0xfffffffffffffff9}], 0x0, 0x0) 02:36:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 02:36:29 executing program 1: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}) [ 2780.417770][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2780.427085][T20395] Bluetooth: hci5: Frame reassembly failed (-84) 02:36:29 executing program 1: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x111c, &(0x7f0000000080)={0x0, 0x0, 0x2}) [ 2781.835874][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 2781.841882][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2781.847974][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2781.853965][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2782.475888][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2782.475908][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2782.481917][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2782.488032][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2782.493948][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2782.500106][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2783.915917][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2783.921926][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2783.922001][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2783.928308][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2784.555924][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2784.555928][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2784.555950][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2784.561959][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2784.568391][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2784.573950][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2785.995924][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 2785.995928][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2786.635923][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2786.635935][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2786.641926][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:36:38 executing program 4: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x12d, 0x71b, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:36:38 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 02:36:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 02:36:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) [ 2790.019276][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2790.027345][T21120] Bluetooth: hci2: Frame reassembly failed (-84) [ 2790.034076][T20395] Bluetooth: hci2: Frame reassembly failed (-84) [ 2790.040597][ T89] Bluetooth: hci6: sending frame failed (-49) 02:36:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f00000000c0)=0x4) 02:36:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000000080), 0x0, 0x6}, {0x0, 0x0, 0xcf87}], 0x0, &(0x7f0000000400)={[{@huge_always}, {@huge_never}], [{@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}, {@subj_type={'subj_type', 0x3d, '-@\x14'}}]}) 02:36:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000300)=0x3) 02:36:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0xfffffffe) 02:36:39 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x453, 0x0, 0x0, 0x0, '#'}, 0x14}}, 0x0) [ 2790.657361][T20395] Bluetooth: hci3: Frame reassembly failed (-84) [ 2790.667419][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2790.683269][ T22] audit: type=1400 audit(1657852599.399:311): avc: denied { audit_write } for pid=21132 comm="syz-executor.1" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 02:36:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) 02:36:39 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x0]}}]}) [ 2790.704834][ T22] audit: type=1107 audit(1657852599.409:312): pid=21132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 2790.726847][ T22] audit: type=1326 audit(1657852599.449:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21134 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ad415c109 code=0x0 02:36:39 executing program 1: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) [ 2790.783952][ T22] audit: type=1400 audit(1657852599.499:314): avc: denied { mount } for pid=21136 comm="syz-executor.1" name="/" dev="tmpfs" ino=81836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2790.808522][ T22] audit: type=1400 audit(1657852599.529:315): avc: denied { unmount } for pid=321 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2792.075872][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2792.075876][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2792.075895][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2792.082020][ T89] Bluetooth: hci6: sending frame failed (-49) [ 2792.088286][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2792.093966][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2792.715878][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2792.715883][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2792.715936][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2792.721941][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2792.740177][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 2792.746205][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2794.155926][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2794.155930][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 2794.156259][ T89] Bluetooth: hci6: sending frame failed (-49) [ 2794.162031][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2794.168177][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2794.186174][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2794.795923][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2794.795928][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2794.795954][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2794.801945][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2794.807917][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2794.814314][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2796.235923][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2796.235928][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2796.235957][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2796.875925][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2796.875930][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2796.875952][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:36:49 executing program 4: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x12d, 0x71b, 0x2}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:36:49 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}, {@size={'size', 0x3d, [0x38, 0x32, 0x6b, 0x30]}}]}) 02:36:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:36:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) [ 2800.322201][T21146] tmpfs: Bad value for 'size' [ 2800.330893][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 2800.337604][T17034] Bluetooth: hci6: Frame reassembly failed (-84) 02:36:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f00000000c0)=0x4) 02:36:49 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 02:36:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f0000000300)=0x3) 02:36:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x1000000000000) 02:36:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{&(0x7f0000000840)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 02:36:49 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x107802, 0x0) 02:36:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0xa, 0x20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts={{0x18}}, @tclass={{0x14}}], 0x30}}], 0x1, 0x0) 02:36:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x64}]}) [ 2800.897541][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2800.908108][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2800.917790][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2802.395870][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2802.395875][T20531] Bluetooth: hci6: command 0x1003 tx timeout [ 2802.402710][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2802.408507][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2802.414826][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2802.422871][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2802.955900][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2802.961928][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2802.968130][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 2802.974196][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2802.980515][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2802.986520][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2804.475929][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2804.475933][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2804.475989][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2804.481944][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2804.500026][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 2804.506455][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2805.035943][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2805.041941][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2805.041998][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2805.048291][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2805.060097][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2805.066569][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2806.555942][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2806.555947][T20531] Bluetooth: hci6: command 0x1009 tx timeout [ 2806.555969][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 2807.115959][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 2807.115963][T20519] Bluetooth: hci3: command 0x1009 tx timeout [ 2807.127963][T19652] Bluetooth: hci4: command 0x1009 tx timeout 02:36:59 executing program 4: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x12d, 0x71b, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x12d, 0x71b, 0x2}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:36:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 02:36:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40049409, 0x0) 02:36:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) [ 2810.567757][T20395] Bluetooth: hci0: Frame reassembly failed (-84) [ 2810.580864][T21177] Bluetooth: hci2: Frame reassembly failed (-84) [ 2810.587318][T20395] Bluetooth: hci2: Frame reassembly failed (-84) [ 2810.592116][ T22] audit: type=1400 audit(1657852619.309:316): avc: denied { write } for pid=21179 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2810.613547][T20395] Bluetooth: hci6: Frame reassembly failed (-84) 02:36:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f00000000c0)=0x4) 02:36:59 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, 0x0, 0x0) 02:36:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000300)=0x3) 02:36:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x10000000000000) [ 2811.134873][T20395] Bluetooth: hci3: Frame reassembly failed (-84) 02:37:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5424, 0x0) 02:37:00 executing program 1: futex(&(0x7f0000000140), 0xa, 0x0, 0x0, 0x0, 0x2) 02:37:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "c8866460015f78c39c2ac92ddb6b13e64bdc3e"}) 02:37:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000010c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x0) [ 2812.635912][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2812.635932][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2812.641965][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2812.647983][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2812.654591][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2812.660494][T20395] Bluetooth: hci6: Frame reassembly failed (-84) [ 2813.195921][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2813.195970][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2813.202093][T20858] Bluetooth: hci5: sending frame failed (-49) [ 2813.207969][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2813.214040][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2813.220105][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 2814.715955][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 2814.715985][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2814.721987][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 2814.728004][T20519] Bluetooth: hci2: command 0x1001 tx timeout [ 2814.740239][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 2814.740356][T20395] Bluetooth: hci6: Frame reassembly failed (-84) [ 2815.275938][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2815.275942][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2815.275964][T20519] Bluetooth: hci5: command 0x1001 tx timeout [ 2815.282245][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 2815.288338][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2815.293909][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 2816.795945][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 2816.795949][T20519] Bluetooth: hci6: command 0x1009 tx timeout [ 2816.807942][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2817.355929][T20519] Bluetooth: hci5: command 0x1009 tx timeout [ 2817.355948][T12161] Bluetooth: hci3: command 0x1009 tx timeout [ 2817.367930][T12161] Bluetooth: hci4: command 0x1009 tx timeout 02:37:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x4b34, 0x2) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x7ff, 0x101, 0x4, 0x3, 0x40, 0x7}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) lseek(r0, 0xdf, 0x0) 02:37:09 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x50040, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0) 02:37:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40086602, 0x0) 02:37:09 executing program 1: io_uring_setup(0x1b1d, &(0x7f00000000c0)={0x0, 0x0, 0x4}) [ 2820.806628][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:37:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f00000000c0)=0x4) 02:37:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000100)) 02:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x100000000000000) 02:37:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000300)=0x3) 02:37:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x4020940d, 0x0) 02:37:10 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 02:37:10 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000340), 0x0, 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000900)="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", 0xff8, 0x9}], 0x0, &(0x7f0000000540)) 02:37:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 2821.378211][T11231] Bluetooth: hci3: sending frame failed (-49) [ 2821.384711][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2821.386789][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2822.875899][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2822.875904][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2822.875975][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2822.882191][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2823.435912][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2823.435916][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2823.435934][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2823.441967][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2823.448379][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2823.454094][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2824.955934][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2824.955938][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 2824.967958][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2824.974152][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2825.515943][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2825.515947][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2825.516002][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2825.521971][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2825.528163][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2825.546133][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2827.035916][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2827.041998][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2827.595948][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2827.595952][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 2827.595974][T19679] Bluetooth: hci3: command 0x1009 tx timeout 02:37:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x4b34, 0x2) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x7ff, 0x101, 0x4, 0x3, 0x40, 0x7}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) lseek(r0, 0xdf, 0x0) 02:37:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5451, 0x0) 02:37:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x40087602, 0x0) 02:37:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x24000001) [ 2830.974031][T20395] Bluetooth: hci0: Frame reassembly failed (-84) 02:37:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f00000000c0)=0x4) 02:37:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5417, 0x0) 02:37:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x800000000000000) 02:37:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000300)=0x3) 02:37:20 executing program 1: openat$ptmx(0xffffffffffffff9c, 0x0, 0x400200, 0x0) 02:37:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002540)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f00000037c0)=[{&(0x7f0000002700)=""/4096, 0x7ffff000}], 0x8c, 0x0) 02:37:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000300)=0x3) 02:37:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2831.613345][T20395] Bluetooth: hci3: Frame reassembly failed (-84) [ 2831.622152][T20395] Bluetooth: hci4: Frame reassembly failed (-84) [ 2833.035893][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2833.035906][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2833.041923][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2833.048336][T11231] Bluetooth: hci0: sending frame failed (-49) [ 2833.675868][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2833.675872][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 2833.675922][T11231] Bluetooth: hci4: sending frame failed (-49) [ 2833.681947][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2833.688007][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2833.705957][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2835.115932][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2835.115936][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2835.128033][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2835.134119][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2835.755935][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 2835.755939][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2835.768017][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2835.774113][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2835.780194][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2835.786221][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2837.195928][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2837.201931][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2837.835939][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 2837.841952][T20530] Bluetooth: hci3: command 0x1009 tx timeout [ 2837.848272][T20530] Bluetooth: hci4: command 0x1009 tx timeout 02:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x4b34, 0x2) (async, rerun: 64) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x7ff, 0x101, 0x4, 0x3, 0x40, 0x7}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) lseek(r0, 0xdf, 0x0) 02:37:29 executing program 1: memfd_create(&(0x7f0000000500)='/proc/timer_list\x00', 0x0) 02:37:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x4020940d, 0x0) 02:37:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5435, 0x0) [ 2841.220514][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:37:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f00000000c0)=0x4) 02:37:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x540c, 0x0) 02:37:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x3f00000000000000) 02:37:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) 02:37:30 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000900)="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", 0x701}, {&(0x7f0000001900)='K', 0x1}], 0x0, 0x0) 02:37:30 executing program 1: getresuid(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000900)="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", 0xff8, 0x9}, {&(0x7f0000001900)='K', 0x1}], 0x800000, &(0x7f0000000540)={[{@gid}, {}], [{@obj_user={'obj_user', 0x3d, 'hash'}}]}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5401, 0x0) [ 2841.856105][T17034] Bluetooth: hci3: Frame reassembly failed (-84) 02:37:30 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x40, 0x1, 0x32}, 0x48) 02:37:30 executing program 1: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r0, 0x1}, 0x14}}, 0x0) [ 2841.962840][T21296] tmpfs: Unknown parameter 'obj_user' [ 2843.275877][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2843.275890][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2843.281975][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2843.288620][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2843.915911][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2843.915936][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2843.921940][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2843.928983][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2843.941045][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2843.947070][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2845.355973][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2845.355977][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 2845.356030][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2845.362009][T11231] Bluetooth: hci2: sending frame failed (-49) [ 2845.995950][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2845.995954][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2845.996011][T11231] Bluetooth: hci5: sending frame failed (-49) [ 2846.002046][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2846.020169][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2846.026240][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2847.435922][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 2847.435927][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2848.075942][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2848.075947][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 2848.087950][T12161] Bluetooth: hci3: command 0x1009 tx timeout 02:37:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000001, 0x85, 0xd, 0x4, 0x40, "e701f369758f9ec1404a0b28f2ed0e7baf53ed", 0x5, 0x7f}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4000) ioctl$KDMKTONE(r3, 0x4b30, 0x0) 02:37:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 02:37:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x0) 02:37:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 2851.463758][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 2851.474613][T21310] Bluetooth: hci0: Frame reassembly failed (-84) [ 2851.482958][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2851.484383][T21310] Bluetooth: hci7: Frame reassembly failed (-84) [ 2851.495714][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2851.502105][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:37:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x3, 0xbd, &(0x7f0000000240)=""/189, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:37:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f00000000c0)=0x4) 02:37:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0xfeffffff00000000) 02:37:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) 02:37:40 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8929, &(0x7f0000000000)={'vlan1\x00'}) 02:37:40 executing program 1: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 02:37:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 02:37:40 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 2852.097130][T20395] Bluetooth: hci3: Frame reassembly failed (-84) [ 2852.113892][T20395] Bluetooth: hci5: Frame reassembly failed (-84) [ 2852.121333][T21323] Bluetooth: hci5: Frame reassembly failed (-84) [ 2852.139686][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 2852.152955][T21323] Bluetooth: hci9: Frame reassembly failed (-84) [ 2852.160249][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2852.167131][T21323] Bluetooth: hci9: Frame reassembly failed (-84) [ 2852.173475][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2853.515873][T20519] Bluetooth: hci7: command 0x1003 tx timeout [ 2853.515888][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2853.521894][T20519] Bluetooth: hci6: command 0x1003 tx timeout [ 2853.527928][T21330] Bluetooth: hci2: sending frame failed (-49) [ 2853.534509][ T8093] Bluetooth: hci6: sending frame failed (-49) [ 2853.539939][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2853.552084][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2854.155906][T20519] Bluetooth: hci8: command 0x1003 tx timeout [ 2854.155910][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 2854.155927][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2854.162028][T21331] Bluetooth: hci8: sending frame failed (-49) [ 2854.167989][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2854.174109][ T8093] Bluetooth: hci4: sending frame failed (-49) [ 2854.180203][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2854.186108][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2854.235887][T12161] Bluetooth: hci9: command 0x1003 tx timeout [ 2854.242446][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2855.595943][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2855.595948][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2855.595969][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2855.602018][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2855.608371][T21330] Bluetooth: hci6: sending frame failed (-49) [ 2855.613897][T12161] Bluetooth: hci7: command 0x1001 tx timeout [ 2855.632059][T20395] Bluetooth: hci7: Frame reassembly failed (-84) [ 2856.235945][T20519] Bluetooth: hci8: command 0x1001 tx timeout [ 2856.235962][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2856.243023][T21330] Bluetooth: hci8: sending frame failed (-49) [ 2856.248975][T21332] Bluetooth: hci3: sending frame failed (-49) [ 2856.255175][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2856.267027][T20519] Bluetooth: hci5: command 0x1001 tx timeout [ 2856.267052][T21332] Bluetooth: hci4: sending frame failed (-49) [ 2856.273077][T20395] Bluetooth: hci5: Frame reassembly failed (-84) [ 2856.315955][T12161] Bluetooth: hci9: command 0x1001 tx timeout [ 2856.322068][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2856.328511][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2857.675946][T20519] Bluetooth: hci7: command 0x1009 tx timeout [ 2857.675950][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 2857.675977][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2857.681940][T20519] Bluetooth: hci6: command 0x1009 tx timeout [ 2858.315950][T20519] Bluetooth: hci5: command 0x1009 tx timeout [ 2858.315954][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2858.315993][T12161] Bluetooth: hci3: command 0x1009 tx timeout [ 2858.321975][T20519] Bluetooth: hci8: command 0x1009 tx timeout [ 2858.395947][T12161] Bluetooth: hci9: command 0x1009 tx timeout 02:37:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000001, 0x85, 0xd, 0x4, 0x40, "e701f369758f9ec1404a0b28f2ed0e7baf53ed", 0x5, 0x7f}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4000) ioctl$KDMKTONE(r3, 0x4b30, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000001, 0x85, 0xd, 0x4, 0x40, "e701f369758f9ec1404a0b28f2ed0e7baf53ed", 0x5, 0x7f}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4000) (async) ioctl$KDMKTONE(r3, 0x4b30, 0x0) (async) 02:37:50 executing program 1: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 02:37:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045432, 0x0) 02:37:50 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, 0x0, 0x0) 02:37:50 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) [ 2861.826229][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 2861.831544][T21341] Bluetooth: hci2: Frame reassembly failed (-84) [ 2861.843100][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2861.850661][T20395] Bluetooth: hci6: Frame reassembly failed (-84) [ 2861.851941][T21341] Bluetooth: hci7: Frame reassembly failed (-84) [ 2861.864514][T11079] Bluetooth: hci7: Frame reassembly failed (-84) 02:37:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0xffffff7f00000000) 02:37:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x0) [ 2862.334318][T18602] Bluetooth: hci3: Frame reassembly failed (-84) 02:37:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7f) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) 02:37:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x2) 02:37:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:37:51 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 02:37:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@empty}}]}, 0x70}}, 0x0) [ 2862.412225][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2862.419555][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2862.427195][T21370] Bluetooth: hci8: Frame reassembly failed (-84) [ 2862.433551][T21373] Bluetooth: hci4: Frame reassembly failed (-84) [ 2862.440434][T11079] Bluetooth: hci8: Frame reassembly failed (-84) [ 2862.448144][T21370] Bluetooth: hci8: Frame reassembly failed (-84) [ 2863.835878][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 2863.841943][T12161] Bluetooth: hci0: command 0x1003 tx timeout [ 2863.848123][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2863.915875][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2863.915880][T12161] Bluetooth: hci7: command 0x1003 tx timeout [ 2863.915930][ T89] Bluetooth: hci7: sending frame failed (-49) [ 2863.922043][T11079] Bluetooth: hci6: Frame reassembly failed (-84) [ 2864.395869][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2864.401932][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2864.475873][T12161] Bluetooth: hci8: command 0x1003 tx timeout [ 2864.475878][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2864.476879][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2864.481893][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 2864.488111][T11079] Bluetooth: hci8: Frame reassembly failed (-84) [ 2864.494266][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2865.915931][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 2865.921949][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2865.928154][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 2865.995891][T12161] Bluetooth: hci7: command 0x1001 tx timeout [ 2865.995895][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2865.995992][T11079] Bluetooth: hci6: Frame reassembly failed (-84) [ 2866.001928][ T89] Bluetooth: hci7: sending frame failed (-49) [ 2866.007853][T11079] Bluetooth: hci6: Frame reassembly failed (-84) [ 2866.475950][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2866.481983][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2866.555939][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2866.555944][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2866.555962][T20530] Bluetooth: hci8: command 0x1001 tx timeout [ 2866.561964][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2866.568263][T11079] Bluetooth: hci8: Frame reassembly failed (-84) [ 2866.573939][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2867.995912][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2868.001908][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2868.075947][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2868.076224][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 2868.555938][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2868.635937][T20530] Bluetooth: hci8: command 0x1009 tx timeout [ 2868.635941][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2868.635960][T19652] Bluetooth: hci5: command 0x1009 tx timeout 02:38:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000001, 0x85, 0xd, 0x4, 0x40, "e701f369758f9ec1404a0b28f2ed0e7baf53ed", 0x5, 0x7f}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4000) ioctl$KDMKTONE(r3, 0x4b30, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000001, 0x85, 0xd, 0x4, 0x40, "e701f369758f9ec1404a0b28f2ed0e7baf53ed", 0x5, 0x7f}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffffffffffff, 0x4000) (async) ioctl$KDMKTONE(r3, 0x4b30, 0x0) (async) 02:38:00 executing program 1: mount$fuseblk(&(0x7f0000000c80), 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000002dc0)) 02:38:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 02:38:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x0) 02:38:00 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) [ 2872.069016][T11079] Bluetooth: hci0: Frame reassembly failed (-84) [ 2872.072988][T21389] Bluetooth: hci2: Frame reassembly failed (-84) [ 2872.083902][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 2872.090944][T21389] Bluetooth: hci7: Frame reassembly failed (-84) [ 2872.091849][T11079] Bluetooth: hci9: Frame reassembly failed (-84) [ 2872.102191][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 2872.103992][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 2872.118632][T21392] Bluetooth: hci2: Frame reassembly failed (-84) 02:38:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) socketpair(0x1a, 0x2, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x9, 0x400, 0x5, 0x0, 0x0, [{{r1}, 0x8000000000000000}, {{r0}, 0x80000000}, {{r0}, 0x8}, {{r2}, 0x1}, {{}, 0x1}]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:01 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={0x0, 0x112c}}, 0x0) 02:38:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7f) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) (async) 02:38:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1058, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) [ 2872.567360][ T22] audit: type=1400 audit(1657852681.289:317): avc: denied { create } for pid=21405 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2872.589252][ T22] audit: type=1400 audit(1657852681.309:318): avc: denied { create } for pid=21407 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 02:38:01 executing program 1: add_key$fscrypt_v1(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 02:38:01 executing program 1: add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 02:38:01 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}, &(0x7f0000000080)={0x0, "6d2f4230de7426966c4bb0fa9d444a7a74cd60d09ecec4d579141ac83396c5ed5b3cc1649c74ce6140d8485198d321500ed64bd0a6f45d50366ccec1c1ab6c23"}, 0x48, 0xfffffffffffffffd) [ 2872.644370][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2872.651046][T21412] Bluetooth: hci4: Frame reassembly failed (-84) [ 2872.658784][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 2872.671436][T21412] Bluetooth: hci8: Frame reassembly failed (-84) [ 2872.677873][T21412] Bluetooth: hci8: Frame reassembly failed (-84) [ 2872.690832][T21343] Bluetooth: hci8: Frame reassembly failed (-84) [ 2874.075873][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2874.081921][T21332] Bluetooth: hci0: sending frame failed (-49) [ 2874.155864][T20531] Bluetooth: hci9: command 0x1003 tx timeout [ 2874.155891][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 2874.161874][T20531] Bluetooth: hci7: command 0x1003 tx timeout [ 2874.167882][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2874.174252][T21330] Bluetooth: hci7: sending frame failed (-49) [ 2874.179921][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 2874.186128][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2874.635863][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2874.641944][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2874.715915][T19679] Bluetooth: hci8: command 0x1003 tx timeout [ 2874.721933][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 2874.721969][T21330] Bluetooth: hci8: sending frame failed (-49) [ 2874.729043][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2874.740221][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2874.740863][T21343] Bluetooth: hci5: Frame reassembly failed (-90) [ 2876.155934][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2876.162027][T21330] Bluetooth: hci0: sending frame failed (-49) [ 2876.235940][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 2876.235945][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2876.236002][T20531] Bluetooth: hci7: command 0x1001 tx timeout [ 2876.241940][T19679] Bluetooth: hci9: command 0x1001 tx timeout [ 2876.248266][T21330] Bluetooth: hci7: sending frame failed (-49) [ 2876.253884][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2876.260077][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 2876.715914][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2876.721971][T21332] Bluetooth: hci3: sending frame failed (-49) [ 2876.795937][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2876.795971][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2876.802026][T11079] Bluetooth: hci5: Frame reassembly failed (-84) [ 2876.807924][T20519] Bluetooth: hci8: command 0x1001 tx timeout [ 2876.814503][T21343] Bluetooth: hci5: Frame reassembly failed (-84) [ 2876.821234][T21332] Bluetooth: hci8: sending frame failed (-49) [ 2876.826716][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2876.839142][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2878.235925][T20519] Bluetooth: hci0: command 0x1009 tx timeout [ 2878.315934][T20519] Bluetooth: hci7: command 0x1009 tx timeout [ 2878.315939][T19652] Bluetooth: hci9: command 0x1009 tx timeout [ 2878.327905][T20519] Bluetooth: hci6: command 0x1009 tx timeout [ 2878.333986][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2878.795902][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2878.875905][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2878.875919][T20519] Bluetooth: hci8: command 0x1009 tx timeout [ 2878.882071][T19652] Bluetooth: hci5: command 0x1009 tx timeout 02:38:11 executing program 1: bpf$BPF_PROG_DETACH(0x19, 0x0, 0x0) 02:38:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3}]}, 0xc, 0x3) 02:38:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x0) 02:38:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000280000000000000080000000c4011800fcffffffd1d20700ff351fab957bb2be1ccdcaa1"], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x94, &(0x7f0000000140)=""/148, 0x41000, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0xfffeffff, 0x400}, 0x10, 0x1e103, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) dup3(r1, r2, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 02:38:11 executing program 1: bpf$BPF_PROG_DETACH(0xe, 0x0, 0x0) [ 2882.369209][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 2882.374815][T21442] Bluetooth: hci2: Frame reassembly failed (-84) [ 2882.385617][T21343] Bluetooth: hci2: Frame reassembly failed (-84) 02:38:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) socketpair(0x1a, 0x2, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x9, 0x400, 0x5, 0x0, 0x0, [{{r1}, 0x8000000000000000}, {{r0}, 0x80000000}, {{r0}, 0x8}, {{r2}, 0x1}, {{}, 0x1}]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 2882.805313][ T22] audit: type=1400 audit(1657852691.519:319): avc: denied { getopt } for pid=21446 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2882.826720][T14039] Bluetooth: hci3: sending frame failed (-49) 02:38:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:38:11 executing program 1: add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='G', 0x1, 0xffffffffffffffff) 02:38:11 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x2}, 0x10) 02:38:11 executing program 1: r0 = socket(0x2b, 0x1, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0x21, 0x0, 0x0) 02:38:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 02:38:11 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x2, &(0x7f0000000300)=@string={0x2}}]}) [ 2883.185903][T19652] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2883.425874][T19652] usb 2-1: Using ep0 maxpacket: 16 [ 2883.545945][T19652] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2883.715966][T19652] usb 2-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.40 [ 2883.725057][T19652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.733291][T19652] usb 2-1: Product: syz [ 2883.737589][T19652] usb 2-1: SerialNumber: syz [ 2883.776487][T19652] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2883.978582][T19652] usb 2-1: USB disconnect, device number 5 [ 2884.395908][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 2884.401925][T20858] Bluetooth: hci6: sending frame failed (-49) [ 2884.408252][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 2884.414346][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2884.420449][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2884.426454][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2884.875862][T20519] Bluetooth: hci3: command 0x1003 tx timeout [ 2884.882144][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2884.955860][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 2884.961919][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2886.475939][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2886.482100][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2886.488314][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2886.494391][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2886.500574][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 2886.506602][T20858] Bluetooth: hci6: sending frame failed (-49) [ 2886.955928][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2886.961951][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2887.035964][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2887.042108][T20858] Bluetooth: hci4: sending frame failed (-49) [ 2888.555947][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2888.561978][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2888.568252][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2889.035927][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2889.115929][T19652] Bluetooth: hci4: command 0x1009 tx timeout 02:38:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3}]}, 0xc, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3}]}, 0xc, 0x3) (async) 02:38:21 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000600)={&(0x7f0000000040), 0xc, &(0x7f00000005c0)={0x0}}, 0x0) 02:38:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80045440, 0x0) 02:38:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000280000000000000080000000c4011800fcffffffd1d20700ff351fab957bb2be1ccdcaa1"], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x94, &(0x7f0000000140)=""/148, 0x41000, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0xfffeffff, 0x400}, 0x10, 0x1e103, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async, rerun: 32) dup3(r1, r2, 0x0) (rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) [ 2892.432898][T21343] Bluetooth: hci2: Frame reassembly failed (-84) [ 2892.441737][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 2892.448943][T21472] Bluetooth: hci5: Frame reassembly failed (-84) 02:38:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) socketpair(0x1a, 0x2, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x9, 0x400, 0x5, 0x0, 0x0, [{{r1}, 0x8000000000000000}, {{r0}, 0x80000000}, {{r0}, 0x8}, {{r2}, 0x1}, {{}, 0x1}]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0xff00, 0xd3, 0x0, 0x0) 02:38:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:38:21 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x461, 0x4e05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 2893.325879][T20519] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2893.685943][T20519] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2893.697189][T20519] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2893.707295][T20519] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2893.875962][T20519] usb 2-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.40 [ 2893.885324][T20519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.893539][T20519] usb 2-1: Product: syz [ 2893.897734][T20519] usb 2-1: Manufacturer: syz [ 2893.902316][T20519] usb 2-1: SerialNumber: syz [ 2894.186034][T20519] usbhid 2-1:1.0: can't add hid device: -22 [ 2894.192101][T20519] usbhid: probe of 2-1:1.0 failed with error -22 [ 2894.201948][T20519] usb 2-1: USB disconnect, device number 6 [ 2894.475868][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 2894.475938][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2894.481983][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2894.488310][T11507] Bluetooth: hci5: sending frame failed (-49) [ 2894.500059][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2894.506101][T11507] Bluetooth: hci0: sending frame failed (-49) 02:38:23 executing program 1: r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) 02:38:23 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0x31, &(0x7f0000000000), 0x4) 02:38:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {}]}, @func]}}, &(0x7f00000011c0)=""/152, 0x42, 0x98, 0x1}, 0x20) 02:38:23 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000010c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000011c0)=""/152, 0x1a, 0x98, 0x1}, 0x20) [ 2895.115901][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2895.115905][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2895.115958][T11507] Bluetooth: hci4: sending frame failed (-49) [ 2895.122648][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2896.555946][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2896.555950][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2896.555966][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 2896.561999][T20858] Bluetooth: hci0: sending frame failed (-49) [ 2896.567947][T11507] Bluetooth: hci2: sending frame failed (-49) [ 2896.586258][T11507] Bluetooth: hci5: sending frame failed (-49) [ 2897.195939][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2897.195943][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2897.196000][T11507] Bluetooth: hci4: sending frame failed (-49) [ 2897.201995][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2898.635948][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2898.635961][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 2898.648079][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 2899.275931][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2899.275935][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:38:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3}]}, 0xc, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3}]}, 0xc, 0x3) (async) 02:38:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x4, 0x0, [{}]}]}}, &(0x7f00000011c0)=""/152, 0x2e, 0x98, 0x1}, 0x20) 02:38:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000280000000000000080000000c4011800fcffffffd1d20700ff351fab957bb2be1ccdcaa1"], &(0x7f0000000100)='syzkaller\x00', 0x7fff, 0x94, &(0x7f0000000140)=""/148, 0x41000, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0xfffeffff, 0x400}, 0x10, 0x1e103, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) dup3(r1, r2, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 02:38:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455ca, 0x0) [ 2902.657200][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 2902.669654][T11079] Bluetooth: hci2: Frame reassembly failed (-84) 02:38:32 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x97000000, 0x0, 0x0, 0x2}}, &(0x7f00000011c0)=""/152, 0x1a, 0x98, 0x1}, 0x20) 02:38:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4300, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10500, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x7, 0x80000000, 0x4, 0x7ff, 0x8, "2d0995abd7d0498dfd05cb4a20b09954b5c17d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x4, 0x1, 0x401, 0x200, 0x4, "0a458d05fc54ed1148ddf5cb79f2f737702b53"}) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:38:32 executing program 1: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000001280)={0x0, &(0x7f00000011c0)=""/152, 0x0, 0x98}, 0x20) 02:38:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x16, 0x0, 0xa8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 02:38:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) 02:38:32 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 02:38:32 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="cfacfebf2ba6", @local, @val, {@ipv6}}, 0x0) [ 2903.296265][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2903.302646][T21527] Bluetooth: hci4: Frame reassembly failed (-84) [ 2904.715877][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 2904.715881][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2904.715935][T20858] Bluetooth: hci2: sending frame failed (-49) [ 2904.721891][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 2904.727919][T11507] Bluetooth: hci5: sending frame failed (-49) [ 2904.734020][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2905.355912][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 2905.355916][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2905.355969][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2905.362066][T11507] Bluetooth: hci4: sending frame failed (-49) [ 2906.795933][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 2906.795937][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2906.795992][T11507] Bluetooth: hci5: sending frame failed (-49) [ 2906.801961][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2906.808129][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2906.826099][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2907.435948][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2907.435961][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2907.442015][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2907.448492][T11507] Bluetooth: hci3: sending frame failed (-49) [ 2908.875938][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 2908.875942][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 2908.875972][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 2909.515950][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 2909.515955][T20531] Bluetooth: hci4: command 0x1009 tx timeout 02:38:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ff, 0x14000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2658, 0xa, 0xa, 0x100, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x600000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x895}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf8f}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5285}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b77}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_EXPRESSIONS={0x2408, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x12, 0x3, "6c5e12cd72813275f3eeacd28c06"}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xbc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "70867fa9022b97614c22d707a354426b7ea0669ff2630ef5f928f69a570d2eb09042ba31cce2825c53617539417392898aaf0813135589ef994f663af78fdb6faa14e4d1629bae3bbaf110c40788567a5f74806be081285f289243f63b8f76a2b543c97e3749951fe089f6e2cb264c0d9b4c39107f9912b4f8c67d81cab0b4b3784e1bf16d0747821529686dca30e1eec03aa22d94b1a90bbb697a600295dc1194d407cc296c3d99af33b4958c111803f53427"}]}, @NFTA_RANGE_TO_DATA={0x1008, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "f9ccb02312cd2c9aeb69e2d59885d5cc1fe9fe2b9bf271043f39ed601d0c42713eea9eb5e85b415fa4a1004db0bc56f1ec982332fd1f4354df856980fd62b407586e92c60ca4c6e41386ddb717c2a616305dd69ea8f733162e36d6e777c92ceaacbfd257acb0a0ecc59ed45759dd1a1c6396dbdc1bd3e7ad1590d0c1225fbbb44df3203b8ae799479039a5be38e304472da04098ff2147917c498a8ce7aa887aeba418e6fd6f915a3ba618208e89be556ddd10fb73d7fa37173e676c92d9a11203f1de6d1646da17a1c5913f8cb32ae85629da71ddaa576c34ff3bb1848c465d43f506968b62edb0d7ec044cff4caeffcdff5d74c755af5d92c0caa203c9fb1c131bb2cae234c37c6dc0e59b799b50a9993c2b593b089a6c3ddfd8930e5b19318b9e21e5ba1519ca213d497b9c14086cd3aaae8c208682b9dcbb4c5ced283ad8a27859f2701a94e5d80e3dfd1ed1938892759b417722a24ec67fbe07604d6ba1f632d69857b7639128fca85819edbc1b977f4cd9cbf18bb1e63bd152a9234d763e743a12d887a1af0a21707e4edf6d395dabb4f609f6e056b34a6f9d1a551074fb9e26c041014ddef2c86b61948bffcbe66a447f85f0d2a05035ce0ebbe697ed06fd1fcb2d3fba7d946a9fdda5d44d339c8da0e7802a9b64073a14f77a83420657013ebf423f4506a7eef14c758b149dd8a26a86026ce3160f007e48433adc25a1824227f3fe9e457c724ac184cef04829af67ecdb62cdd6306587631c444c055d128a464ba80fe1ef52094000d88bfa1f4cd9c3124ec6c2d5dca7c3dc9fa9e57d677fb65949f3bf538bef00f17a3952dc97ac81505ddd83886cb276b2bd158d544298ae0fa4bd8db8a855578c351a8b8af55e718ac8bca2cb165dc6645c5efb06363434340c512f53e788810e00143a0e61a737321cdc803574a26ee102e6c5a7f072c19acfdaf3dd9101875fc06b40d1d13ccfb774177c15c8b0e22ac175ac8ab9c2f02f26dc973f258c28ecd502fb84e1da3a9e14ecd00d642bc23d61889a26bcc92acf1a712c9dacf94ddb7ecb70a6979a3de08ad0c14f317bd8f6fe060041f08867f593c71fbd27210dd1018f4a02b27db6feee35b583e4dfdc9b25e0f339081c7e32b6796f9bc1a51316472ca32e378467f1a31443e12a048dcd4636cef025e2642600ff9eaeda29a60f8a9e76e4dbdc460b08a685801d2ef2c9ed974d6d8e628fb514d94a446d082b120266afc9809cd3b7a911fa6d903b63b2a566a629acda1986a393dde01492f9da6dc831a6b5c254bab7c62deb9f4376aa48d8b6b268541751c601b48f7371c03f748b793a4332eae33c1ea1739b9862d4cb626273a86a93861a064078be21cacfe7dd0d2bd6928de2bbd7c2d21077364b394c416fbef4b3c13fc4f7f17ee379a1aa9ae645dbb2d220af7125760d4a13a2ecf2c60ecd57dc3e2e68c389ba930f63f6caed6b85700d57c83417558c36dcf369ef9648217eabf6b86cca2023c185b1e8597d80daf09da8ce1a80aaafb91f97594e83a46cf7c6a636a9bc32d2767a19e2e30e715bace4d00a170f9e2d226ce0ecb03ff82602cf44a94e23f8cadeb2c1b936c1fcd57b3ef183ea0aafcbd0256f5e07c3c253c7e77bc78b004c76d03c3c3ea086f20270ec684d6668ba87d86e9983524599256b1c9ead7719b9da9f35f1e49bb44e5eeaa4752e4a8a2141e9237e5502dfbbd3f2418ea0cad64ac8f22497ef56ed57d11af55c42bdd257d58485262ee2e343600bc79a34ea2ba95b92863660735ba217f526cf9ec0fa6c94edc47c887042d6b89c4da2fba34eb67894a9d40e2cc4974b9d0e5156aa7d8b3a9cbed1d9a255a62d76a034345f733de1b422b2f5647378225c1cbfe3887a2e4be5ffe6398280394a05c0b719fab82da4fd959e62caf51b3ea9d85077f7f8eeadab6d7820e224fff9c3a1789729d437bf3af36e7036b2f276dd00be7a5fd108d8a779d7a2ad6fca1953adf46af286cc55dee76d9c0136fb46bbb88a900b6c2a50039e83730c91acd46796ed67eb1542e32ee8f937f93620756b76244533f737e7cd692288310843b1ee9fb84f798ef7296dfb26e405cb6057a6aaea9f9a3766852ca4cafe957f9932eba099ef209de6e9ce5ef3ee60889806b4c67e6061d6caedd23dce0f1626c3f62e47edd152506ddd542c390701ab8608a28089c19d16e94eda69753671a06d02df23295896223bad046ca5aee7cd2c38bb585b0cf63284b417ff5cfe36d4316cd51e5c84db7af811c587a98120c85cec1d266f283f71c577b79f819129d8c2721be806b93a81b281bd0f63430d4daa70071b69acaf7e606d9b2e5d5d067ed47021d3b92a4480f5ca5d5961311f2e4abab6fb7c0eeb9d3586747640bb1fa6a3f30d62ee334d3d3fa1cb1d8066817dec58b938a004768942654f0ed4a977f25d2245b02073692cc2159a8e2358492eddbfefdf23a359295ac84fdd5a2ea8c81f273e2271759fe7ad37c269e26b848882091e53edff58da25bf5867e14633f9ae03225373f57a1bb06a22c32169c46585ae9ba476385b74925701d2823be7bc7e794931205397e7dedb737259cb23c97287f73b66e72aedf7c0332b9b88912b2d37ff558c4637a08e173a4e5fd059d9eb2793a4bc1d7f470ee6d5420f1ac3f681f839bf221276f5ea5a218caeae56c12360816c3eb037c6bb4f408fe90598b37b20103b4fc920ec6015904d24c1d07fa0308de1b642a472cbdbc94392e4b159784f7b6d1577c61841321c13d80ab03ae54dcb5ed9e62c3bebea0e433d638b8177aff931cfcad9ad487d58bd7f0a5c69683a23032b804571046a8f7230d0c81447306ce3491529267e38afbc795c65a40edae0c9b37ce2ca38b1d645dceffc305de99f0cbad9149bbd53a7519fdb7d546f1a7a4799a7edb1037ed3454b53720816734d54f3efc7529d005327b787074814252334d0bb8bfe6d0b803e71ee4bbdfb5d27902b868511d7c61e2619fb102932e2fd7eb6ee1c018e6054095e76f61dd01a6e81750f6eec2463120e4a11c64aff2379c380bf285f44c5c496c21f4fc3c30283aac4d5d27374c0bce53dd0d3c4ec36786b4745fba5a17815ed4b5b9602eb764eea6691bd9d83916273c4b2ac0d459576ea9554e98c8ff9d29ea502e372ad0035d1171468dfbda9f971874bb135f17eca63de7f493a1be4abb51b868930da8a0edd2d6f003a3c61c3f1a34ffe12cffd2ce9f235b35facf3afef77990208971c3dcffd00b9216b03cf56ac5e6de98816214011316257000c627bfb16cdda77b4ca9aba03d3afc79e0cf69d95824fc7065271f74d19211bedddad56604f2670534894aa70a339362f7463a9f577cdc619b0158f8460aad02f2eff6c4df5be2d54367173300acd6bb123767322dc7bcc6cbee5b9d08301442635954931ce44c348559a1718a6073bb8381d61e6e8c24bba3eea91efc2ca33a7eb586dcffb00fbec8b05b17ee689bcdbc675bda53581297f1a0b07e5d8cb8359d3728d88a92d067f5598fd0c4ad3e6b085814dfcc307d32e6c73824fdb232ffd38e3761ffe2c5601ba1a2cff6ba950ac31cf77ec052a60676bc41fd2e2cc1505a556d554a876624a6b4260b94df492c80788fa27d4e755637a16b5293ba50c79470db937dfe5998248f10aeadfabd459cae286578036159bb7f51b0074d71a56103dc766aac98034ea9c872173975acaa9570abb045e01501dfb108c3bdcea0c745053a626d4b666266befa41f1dfe7881cddbe9a264d9a79ccf1860e20d4b3ff66fc9e52bf3ee19c0b2d480232101974ded1d517ae36ae67d2656a2171312bcf6a90caca4e31f734a697016009a9151cd05537ef82de3f96a42f4ce8074ea10e524ecb4c3069c9800901a76d2fd2f96671d8353d2a8517f43d657266c8f98aa4648a09cc0860956d9314855c24fe4ebe376b34ae4ea62cf6d015f28a40c2165997d2a0eeef1a0af51d255dc6f665d777869098262ee0cd83501964946dced6566ac8add9a81e78a34922b1d09f94e06ebce586b6dd16364e527705325fa907f0fe56910875ac02378e5651b3ab139dd48b48cc57879c7ad1ddcd13a801f8a09ba20f00cc39c7b3e1f1afbcaaea6e0ba6220aec18fafebd7a6379c51fb202a61f37ce4a8c41919a34257d2ec10a9ab573594054c35f2f9418bb8ffeea13f0edf45a44d6c78ea36b27b2796f9db4d42871f9f9e83796afdd089daeed0c1d0c9bf513a52493d2682196add73fe9beb250e865847c8308f725a7dba619d771623652bb14f529896f1a71a5aeefd2ea747d0c8a82e895e0b4048406a200b1ff6f6cf445145af4adfd6eed41f7f46b260e8e8da57235f901870bbba59b72ea8f3bf31ea06f1b2b0686e6170320ee11d2c8d73e6b3a94de46db054fdb7e1074138f686e962ee5697c3d31d7e1226dcfd75a6c24f87d16e3ae8c12ce897b847e84fb6de331e09353cdac333ef7e961e2e12e89191b448c5f318fff655d544376fbb2027c71c588ea6283233c8b1227bfdcf7af4437ad364dfdab4d1995d5747c42a00bc95fdfaaf15b627e3dd12d97285fb09b7364f5f52cb793b53ae8cb4d1d6c65ab7d77345c55730d1243b787f0eeebf484a8d2c24f5ad16cd1fe9833e550ce62b1c7d503e72bc1fa9330d523b85be78ae71524802c935037c6ecd70fc061041643d79d454d36d7e7e8bb2b18120a5b147c4d598cf3edd2ed94131c9ed00ba9c71cd0dc60be7652cb0704bd5cf892bd889264e6e5ac45b02e8b137c7597a71b5d7d3bb875069d3eec48985460ca4562524dafc9dacd241fa93401fdd3acbe91edb40407a95c060da9813fe3d7427ad45c72f473ca06b2449b3f83586c7dcfb1c774f3e1b92e246dba3348881f34d30bec10bf61f87c55f098c175a390548768d4f89daac8a5bbfa0fd2db6fe7992f8fd07487021c27328dd6344c0af4c59921005c4d8265c23ee47b85b6da9566278b680bdd78634d4754207785bd8c97a2e18203cc771d5e90ec6ba0f77bc704effb83e61b0839c7465b66034eb0c40dcc4cc57f3159fb57ab36bb6f8956369d75453c884dd1857ce3d6b4e0766a08242f16f7099ff28e10d646047441ea4c789ece0aaf826548f3c77d8872e2bad7246a04f3db5d89ec0f35a4ca9020b26c48722b886a07cea10ae75143705f4a6512c9a4df5682b424cf7b218e967609f24ec2cd106b59763d925d8d096536cb66c1d1b6d76b23639ef51d492aa232b4367e409898f5d03e7687750f72fa1eb6a8834852745ab6ee4761f8932270a2a811502bd1d4f9f10ac1bc44481cde5c46e4661e2afdc3b677957ff4eec1152c357ce7b6c7ba2967920eb4f3cee3d0e30b2e1c61e99dd48d93014dafda776d0297e54c74aa80d64b79ad6b5c3c397546cce033578ff74d35eab32b22a8c9a3e46c57ec6d8ce848d4375f281f4efbf648449353f9eae0aa0f722deaffe0f8f8a7fe6ae70023abafdc6241d8f24317f31c85cfad37017fc284965c74b5b200b9480663231be4ec08ffedb67f5f6d7ba7672072dd5c886f60074d0bd7e2df3a0e9b675c7f7dde212cb00fb8029258b591a314d9fdf899d9f147ca34b3f528941e2283b3f98f5a594c52090fe4a53bc43e2ea84bdd89ae15c4ae553513c661480b5e7f80fdf5aa90241481ab7b8191c7346e8644cff20985d8f19a66d7b9fdc94cb233996f4a6aade247808e47b4801e446d98a33ca97e4cae0b10b03322bdf22c69024ff1285dfa5d46761f574e489bfd10a2fc6ca559a32e81142f69555c0"}]}, @NFTA_RANGE_TO_DATA={0x1240, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "201e5b908ed15aed921f11d6de925db49f98e0c8ad4a2d0edbacadf51e6be1262bf753f20688eb624960dd892377816f9c0d2b56de41f6ed38abf98bae78adabe6d92c02bc55f7a0c143f7fd1642d62fb3551b61accf50dadcdf8128910ad319cc9ffbe97bfb078a38b8b8664e7b11f3e208e48a6dd078bef8d68bbf3396c6680ce0c218d9b76c8f9b81dfe7325a6c63e0835897fcbf4f09af0cdf912181d935f602c6519d19745b3925aa2d50112d84951169d10284d3e50c5078d1274ef5f3f3cc454c363000829057b2611d5c155e6759b90ef3250f89406f3d532741cec81a8254295a800e3119588439ca8b13b8de807fa70b"}, @NFTA_DATA_VALUE={0x88, 0x1, "e8a43943952d073a1622a6b5bd994743ab0fbcaf5e4c206d47a1e194b2bc0e8b8c78740b7ea0efd4ce05bc7adfefa2ca46d36745113b05f5fb68d7b169b711ab8697882f1c4551d0eeee32aec5f16e23f90082d659de9803b99cfa9bbc1f871bc682a4854b21344a0a2111549a0f1c7d2f323101f6f87b9d0a79067bed39a8baf3214b42"}, @NFTA_DATA_VALUE={0xd, 0x1, "9e98d5b8cc46a2bc5b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa2, 0x1, "e5355bf6da0804664e6fa532bd7e96b69c0ca8e963cf8d1c4c289dd1b63981ae62cd2099b1ab4a4cbff530a7e0b5a72dae97b6c0e338adcf4412a7a09f005bb6c3cd8ed3519c30bf52daf94867a898fc3451c6413bb5600f293dd69aadcab11d8306e817d77f78d75172ecb4b7bca2022e6772063e3e2ba18ef03bd2a44b2a5319e0181a9f8b797e5d77b612aa3dca28ef1a9a77279b20a7656a0099b98d"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x2658}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000810) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 02:38:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0xe57, 0x10001, 0x8, "84880fb38342a82ea37f82f6e76247cd49a748"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDSETLED(r1, 0x4b32, 0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) 02:38:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455cc, 0x0) 02:38:41 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/4091, 0xffb}], 0x1, 0x0, 0x0) 02:38:41 executing program 1: utimensat(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0) [ 2912.910308][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 2912.910506][T21546] Bluetooth: hci0: Frame reassembly failed (-84) [ 2912.931406][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 2912.939258][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 2912.948932][T21549] Bluetooth: hci6: Frame reassembly failed (-84) [ 2912.956891][T21343] Bluetooth: hci7: Frame reassembly failed (-84) [ 2912.963429][T21549] Bluetooth: hci7: Frame reassembly failed (-84) [ 2912.965902][T17034] Bluetooth: hci6: Frame reassembly failed (-84) 02:38:42 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0, 0x7}, {0x0}, {0x0, 0xfe4f}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 02:38:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCEXCL(r2, 0x540c) 02:38:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4300, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10500, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x7, 0x80000000, 0x4, 0x7ff, 0x8, "2d0995abd7d0498dfd05cb4a20b09954b5c17d"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x4, 0x1, 0x401, 0x200, 0x4, "0a458d05fc54ed1148ddf5cb79f2f737702b53"}) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:42 executing program 1: syz_open_dev$evdev(&(0x7f00000006c0), 0x0, 0x6040) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) 02:38:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x5460, 0x0) 02:38:42 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000740)) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x20, 0xb0, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffd5, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x5], 0xb1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x20, 0x9, "c22b4fc8a7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x6, 0x5, "e5ec3c75b51f59ba1c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x12, 0x2, 0x2, 0x4, "d31796", "ea"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x0, "a6b0c7636b6b503822"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0x6c, 0x9, "", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfc, 0xff, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x8, 0x4, "0349", 'H'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x8, "59a349dea4e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x51, 0x4, 0x3f, {0x7, 0x25, 0x1, 0x81, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7, 0x5, 0x3, 0x10, 0xc9}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20, 0x400}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) [ 2913.533445][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2913.545909][T21556] Bluetooth: hci4: Frame reassembly failed (-84) [ 2913.835865][T19679] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2914.076071][T19679] usb 2-1: Using ep0 maxpacket: 32 [ 2914.275949][T19679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2914.286115][T19679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2914.446006][T19679] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2914.455152][T19679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2914.464487][T19679] usb 2-1: Product: syz [ 2914.468777][T19679] usb 2-1: Manufacturer: syz [ 2914.473352][T19679] usb 2-1: SerialNumber: syz [ 2914.835971][T19679] usb 2-1: 0:2 : does not exist [ 2914.843286][T19679] usb 2-1: USB disconnect, device number 7 [ 2914.955882][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2914.955929][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 2914.962014][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2914.967889][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2914.974358][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 2914.980012][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2914.986177][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2914.998459][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2915.035870][T20530] Bluetooth: hci7: command 0x1003 tx timeout [ 2915.042073][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:38:43 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000740)) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x20, 0xb0, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffd5, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x5], 0xb1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x20, 0x9, "c22b4fc8a7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x6, 0x5, "e5ec3c75b51f59ba1c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x12, 0x2, 0x2, 0x4, "d31796", "ea"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x0, "a6b0c7636b6b503822"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0x6c, 0x9, "", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfc, 0xff, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x8, 0x4, "0349", 'H'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x8, "59a349dea4e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x51, 0x4, 0x3f, {0x7, 0x25, 0x1, 0x81, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7, 0x5, 0x3, 0x10, 0xc9}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20, 0x400}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) [ 2915.495919][T20530] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2915.595885][T19679] Bluetooth: hci8: command 0x1003 tx timeout [ 2915.601992][ T89] Bluetooth: hci8: sending frame failed (-49) [ 2915.608201][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2915.614262][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2915.620337][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2915.626556][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2915.735896][T20530] usb 2-1: Using ep0 maxpacket: 32 [ 2915.935976][T20530] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2915.946107][T20530] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2916.105961][T20530] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2916.114979][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.123239][T20530] usb 2-1: Product: syz [ 2916.127527][T20530] usb 2-1: Manufacturer: syz [ 2916.132091][T20530] usb 2-1: SerialNumber: syz [ 2916.496013][T20530] usb 2-1: 0:2 : does not exist [ 2916.504614][T20530] usb 2-1: USB disconnect, device number 8 [ 2917.035934][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 2917.035938][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2917.035993][ T89] Bluetooth: hci2: sending frame failed (-49) [ 2917.042076][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 2917.047971][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2917.066413][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2917.066466][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2917.072459][T21332] Bluetooth: hci5: sending frame failed (-49) [ 2917.115968][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 2917.122051][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2917.128390][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2917.675959][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2917.682126][T21332] Bluetooth: hci3: sending frame failed (-49) [ 2917.688349][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2917.694356][T19652] Bluetooth: hci8: command 0x1001 tx timeout [ 2917.700427][T21332] Bluetooth: hci8: sending frame failed (-49) [ 2917.707127][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2919.115936][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2919.115941][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 2919.127917][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 2919.133899][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 2919.195942][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 2919.755961][T19652] Bluetooth: hci8: command 0x1009 tx timeout [ 2919.761964][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2919.768525][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:38:51 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ff, 0x14000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2658, 0xa, 0xa, 0x100, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x600000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x895}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf8f}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5285}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b77}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_EXPRESSIONS={0x2408, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x12, 0x3, "6c5e12cd72813275f3eeacd28c06"}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xbc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "70867fa9022b97614c22d707a354426b7ea0669ff2630ef5f928f69a570d2eb09042ba31cce2825c53617539417392898aaf0813135589ef994f663af78fdb6faa14e4d1629bae3bbaf110c40788567a5f74806be081285f289243f63b8f76a2b543c97e3749951fe089f6e2cb264c0d9b4c39107f9912b4f8c67d81cab0b4b3784e1bf16d0747821529686dca30e1eec03aa22d94b1a90bbb697a600295dc1194d407cc296c3d99af33b4958c111803f53427"}]}, @NFTA_RANGE_TO_DATA={0x1008, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_TO_DATA={0x1240, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "201e5b908ed15aed921f11d6de925db49f98e0c8ad4a2d0edbacadf51e6be1262bf753f20688eb624960dd892377816f9c0d2b56de41f6ed38abf98bae78adabe6d92c02bc55f7a0c143f7fd1642d62fb3551b61accf50dadcdf8128910ad319cc9ffbe97bfb078a38b8b8664e7b11f3e208e48a6dd078bef8d68bbf3396c6680ce0c218d9b76c8f9b81dfe7325a6c63e0835897fcbf4f09af0cdf912181d935f602c6519d19745b3925aa2d50112d84951169d10284d3e50c5078d1274ef5f3f3cc454c363000829057b2611d5c155e6759b90ef3250f89406f3d532741cec81a8254295a800e3119588439ca8b13b8de807fa70b"}, @NFTA_DATA_VALUE={0x88, 0x1, "e8a43943952d073a1622a6b5bd994743ab0fbcaf5e4c206d47a1e194b2bc0e8b8c78740b7ea0efd4ce05bc7adfefa2ca46d36745113b05f5fb68d7b169b711ab8697882f1c4551d0eeee32aec5f16e23f90082d659de9803b99cfa9bbc1f871bc682a4854b21344a0a2111549a0f1c7d2f323101f6f87b9d0a79067bed39a8baf3214b42"}, @NFTA_DATA_VALUE={0xd, 0x1, "9e98d5b8cc46a2bc5b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa2, 0x1, "e5355bf6da0804664e6fa532bd7e96b69c0ca8e963cf8d1c4c289dd1b63981ae62cd2099b1ab4a4cbff530a7e0b5a72dae97b6c0e338adcf4412a7a09f005bb6c3cd8ed3519c30bf52daf94867a898fc3451c6413bb5600f293dd69aadcab11d8306e817d77f78d75172ecb4b7bca2022e6772063e3e2ba18ef03bd2a44b2a5319e0181a9f8b797e5d77b612aa3dca28ef1a9a77279b20a7656a0099b98d"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x2658}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000810) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x3ff, 0x14000) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2658, 0xa, 0xa, 0x100, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x600000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x895}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf8f}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5285}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b77}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_EXPRESSIONS={0x2408, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x12, 0x3, "6c5e12cd72813275f3eeacd28c06"}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xbc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "70867fa9022b97614c22d707a354426b7ea0669ff2630ef5f928f69a570d2eb09042ba31cce2825c53617539417392898aaf0813135589ef994f663af78fdb6faa14e4d1629bae3bbaf110c40788567a5f74806be081285f289243f63b8f76a2b543c97e3749951fe089f6e2cb264c0d9b4c39107f9912b4f8c67d81cab0b4b3784e1bf16d0747821529686dca30e1eec03aa22d94b1a90bbb697a600295dc1194d407cc296c3d99af33b4958c111803f53427"}]}, @NFTA_RANGE_TO_DATA={0x1008, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_TO_DATA={0x1240, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "201e5b908ed15aed921f11d6de925db49f98e0c8ad4a2d0edbacadf51e6be1262bf753f20688eb624960dd892377816f9c0d2b56de41f6ed38abf98bae78adabe6d92c02bc55f7a0c143f7fd1642d62fb3551b61accf50dadcdf8128910ad319cc9ffbe97bfb078a38b8b8664e7b11f3e208e48a6dd078bef8d68bbf3396c6680ce0c218d9b76c8f9b81dfe7325a6c63e0835897fcbf4f09af0cdf912181d935f602c6519d19745b3925aa2d50112d84951169d10284d3e50c5078d1274ef5f3f3cc454c363000829057b2611d5c155e6759b90ef3250f89406f3d532741cec81a8254295a800e3119588439ca8b13b8de807fa70b"}, @NFTA_DATA_VALUE={0x88, 0x1, "e8a43943952d073a1622a6b5bd994743ab0fbcaf5e4c206d47a1e194b2bc0e8b8c78740b7ea0efd4ce05bc7adfefa2ca46d36745113b05f5fb68d7b169b711ab8697882f1c4551d0eeee32aec5f16e23f90082d659de9803b99cfa9bbc1f871bc682a4854b21344a0a2111549a0f1c7d2f323101f6f87b9d0a79067bed39a8baf3214b42"}, @NFTA_DATA_VALUE={0xd, 0x1, "9e98d5b8cc46a2bc5b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa2, 0x1, "e5355bf6da0804664e6fa532bd7e96b69c0ca8e963cf8d1c4c289dd1b63981ae62cd2099b1ab4a4cbff530a7e0b5a72dae97b6c0e338adcf4412a7a09f005bb6c3cd8ed3519c30bf52daf94867a898fc3451c6413bb5600f293dd69aadcab11d8306e817d77f78d75172ecb4b7bca2022e6772063e3e2ba18ef03bd2a44b2a5319e0181a9f8b797e5d77b612aa3dca28ef1a9a77279b20a7656a0099b98d"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x2658}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000810) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) 02:38:51 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000740)) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x20, 0xb0, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffd5, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x5], 0xb1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x20, 0x9, "c22b4fc8a7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x6, 0x5, "e5ec3c75b51f59ba1c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x12, 0x2, 0x2, 0x4, "d31796", "ea"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x0, "a6b0c7636b6b503822"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0x6c, 0x9, "", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfc, 0xff, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x8, 0x4, "0349", 'H'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x8, "59a349dea4e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x51, 0x4, 0x3f, {0x7, 0x25, 0x1, 0x81, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7, 0x5, 0x3, 0x10, 0xc9}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20, 0x400}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) 02:38:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80086601, 0x0) [ 2923.140184][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 2923.146928][T21574] Bluetooth: hci0: Frame reassembly failed (-84) 02:38:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0xe57, 0x10001, 0x8, "84880fb38342a82ea37f82f6e76247cd49a748"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDSETLED(r1, 0x4b32, 0x6) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) [ 2923.212144][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 2923.221178][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 2923.221627][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2923.233906][T21590] Bluetooth: hci7: Frame reassembly failed (-84) [ 2923.425941][T20530] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2923.665888][T20530] usb 2-1: Using ep0 maxpacket: 32 02:38:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x4300, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10500, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x7, 0x80000000, 0x4, 0x7ff, 0x8, "2d0995abd7d0498dfd05cb4a20b09954b5c17d"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x4, 0x1, 0x401, 0x200, 0x4, "0a458d05fc54ed1148ddf5cb79f2f737702b53"}) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:38:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCEXCL(r2, 0x540c) [ 2923.804118][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 2923.808852][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2923.866002][T20530] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2923.876418][T20530] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2924.035945][T20530] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2924.045080][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2924.053409][T20530] usb 2-1: Product: syz [ 2924.057758][T20530] usb 2-1: Manufacturer: syz [ 2924.062537][T20530] usb 2-1: SerialNumber: syz [ 2924.425999][T20530] usb 2-1: 0:2 : does not exist [ 2924.435097][T20530] usb 2-1: USB disconnect, device number 9 02:38:53 executing program 1: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000740)) syz_usb_connect$uac1(0x5, 0xd8, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x20, 0xb0, 0x3c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffd5, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x5], 0xb1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x20, 0x9, "c22b4fc8a7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x6, 0x5, "e5ec3c75b51f59ba1c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x12, 0x2, 0x2, 0x4, "d31796", "ea"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x0, "a6b0c7636b6b503822"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0x6c, 0x9, "", "a3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfc, 0xff, 0x9, {0x7, 0x25, 0x1, 0x2, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x8, 0x4, "0349", 'H'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x8, "59a349dea4e4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x51, 0x4, 0x3f, {0x7, 0x25, 0x1, 0x81, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x7, 0x5, 0x3, 0x10, 0xc9}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x20, 0x400}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) [ 2925.095877][T20530] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2925.195879][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2925.202001][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2925.202077][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2925.208386][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2925.275885][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 2925.275897][T20519] Bluetooth: hci6: command 0x1003 tx timeout [ 2925.286166][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 2925.288019][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 2925.294313][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 2925.300748][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2925.355892][T20530] usb 2-1: Using ep0 maxpacket: 32 [ 2925.555990][T20530] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2925.566199][T20530] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2925.725953][T20530] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2925.735070][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.743437][T20530] usb 2-1: Product: syz [ 2925.747749][T20530] usb 2-1: Manufacturer: syz [ 2925.752441][T20530] usb 2-1: SerialNumber: syz [ 2925.835945][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2925.841978][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2925.848095][T19679] Bluetooth: hci8: command 0x1003 tx timeout [ 2925.854129][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 2925.860152][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2925.866292][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 2926.115987][T20530] usb 2-1: 0:2 : does not exist [ 2926.123140][T20530] usb 2-1: USB disconnect, device number 10 [ 2926.131129][T21571] udevd[21571]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory 02:38:55 executing program 1: r0 = syz_usb_connect(0x0, 0xfa, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x6f, 0x9, 0x88, 0x20, 0xe41, 0x4250, 0x287d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x2, 0x3, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x18, 0x0, 0x5, 0x76, 0x3d, 0xb4, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0x2}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '#'}]}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x3f, 0x0, 0xff}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x1f, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x32c26b34ade7fde8, 0x3f}]}}, {{0x9, 0x5, 0xf, 0x18, 0x3ff, 0x6, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x20}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xc5, 0x0, 0x4, [@generic={0x2, 0x23}, @generic={0x73, 0x22, "55f23b9acf16f9b63323cbdd45f9837a7955dacd6c3a6a825b1e91df2ee53cd0f2d8b42c01e17f732ed3192e2653c5be259452d2913378664725865f0f8e3e952767c77c9754abada3f661f02bd20180b0b1381cea01f8d6fb9c57e4b9190cef37984c17cd40c72b1c006d1c93cf020904"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x8, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0x34, 0x29}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x110, 0xc1, 0x0, 0x5, 0x0, 0x51}, 0x2c, &(0x7f0000001580)={0x5, 0xf, 0x2c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x0, 0xff07, 0x8000, [0xff00c0, 0xc0, 0x0, 0xffc000, 0x0, 0x3f00]}]}, 0x2, [{0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x1c31}}, {0x2, &(0x7f0000001640)=@string={0x2}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xad, &(0x7f0000002580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0xfd, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3}, {0x6}, [@mdlm={0x15}, @mdlm_detail={0x4}, @country_functional={0xc, 0x24, 0x7, 0x7f, 0x2, [0x0, 0xffff, 0x7]}, @mdlm={0x15, 0x24, 0x12, 0x1000}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x79}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1}}}}}}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000002ac0), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000002b40)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x5, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2}, {0x6}, [@mdlm_detail={0x4}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x0, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x40}}}}}}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000002f80), 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x17ef, 0x6004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xd0, 0xd5, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1f}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000004280), 0x4, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x61, &(0x7f0000004340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x7, 0x24, 0x6, 0x0, 0x0, "c32b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3ff, 0x0, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x4, 0x0, 0xc0e}, @ncm={0x6}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40}}}}}]}}]}}, 0x0) [ 2926.785918][T20530] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2927.025863][T20530] usb 2-1: Using ep0 maxpacket: 32 [ 2927.145929][T20530] usb 2-1: config 3 has an invalid interface number: 24 but max is 1 [ 2927.154048][T20530] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 2927.164441][T20530] usb 2-1: config 3 has no interface number 1 [ 2927.170652][T20530] usb 2-1: config 3 interface 24 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2927.183767][T20530] usb 2-1: too many endpoints for config 3 interface 0 altsetting 0: 35, using maximum allowed: 30 [ 2927.194827][T20530] usb 2-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 35 [ 2927.275873][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2927.275891][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2927.281967][ T89] Bluetooth: hci0: sending frame failed (-49) [ 2927.287862][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2927.355882][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2927.355962][T20519] Bluetooth: hci7: command 0x1001 tx timeout [ 2927.361950][ T89] Bluetooth: hci5: sending frame failed (-49) [ 2927.368006][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2927.374150][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 2927.380073][T20530] usb 2-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=28.7d [ 2927.395244][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.395313][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2927.403454][T20530] usb 2-1: Product: syz [ 2927.409791][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2927.413867][T20530] usb 2-1: SerialNumber: syz [ 2927.656505][T21605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2927.664872][T21605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2927.673038][T21605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2927.716542][T20530] hub 2-1:3.0: bad descriptor, ignoring hub [ 2927.722538][T20530] hub: probe of 2-1:3.0 failed with error -5 [ 2927.756654][T20530] usb 2-1: USB disconnect, device number 11 [ 2927.915913][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 2927.921948][ T89] Bluetooth: hci3: sending frame failed (-49) [ 2927.928650][T19679] Bluetooth: hci8: command 0x1001 tx timeout [ 2927.934777][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 2927.940800][ T89] Bluetooth: hci4: sending frame failed (-49) [ 2927.947053][T17034] Bluetooth: hci8: Frame reassembly failed (-84) 02:38:56 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x1000, 0x0) 02:38:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCEXCL(r2, 0x540c) [ 2928.213352][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2928.222777][T17034] Bluetooth: hci10: Frame reassembly failed (-84) [ 2928.229580][T21609] Bluetooth: hci10: Frame reassembly failed (-84) [ 2929.355892][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2929.355897][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2929.435874][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2929.442028][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 2929.448114][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 2929.995904][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2930.002053][T19652] Bluetooth: hci8: command 0x1009 tx timeout [ 2930.008177][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2930.235883][T19652] Bluetooth: hci9: command 0x1003 tx timeout [ 2930.235896][T20530] Bluetooth: hci10: command 0x1003 tx timeout [ 2930.241936][T21330] Bluetooth: hci9: sending frame failed (-49) [ 2930.248301][T17034] Bluetooth: hci10: Frame reassembly failed (-84) [ 2932.315938][T20531] Bluetooth: hci10: command 0x1001 tx timeout [ 2932.315957][T19679] Bluetooth: hci9: command 0x1001 tx timeout [ 2932.322134][T17034] Bluetooth: hci10: Frame reassembly failed (-84) [ 2932.329125][T21330] Bluetooth: hci9: sending frame failed (-49) 02:39:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x80087601, 0x0) 02:39:02 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3ff, 0x14000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2658, 0xa, 0xa, 0x100, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x600000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x895}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdf8f}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5285}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}]}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b77}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5fb}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x10001}, @NFTA_SET_EXPRESSIONS={0x2408, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x12, 0x3, "6c5e12cd72813275f3eeacd28c06"}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2330, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2320, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xbc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "70867fa9022b97614c22d707a354426b7ea0669ff2630ef5f928f69a570d2eb09042ba31cce2825c53617539417392898aaf0813135589ef994f663af78fdb6faa14e4d1629bae3bbaf110c40788567a5f74806be081285f289243f63b8f76a2b543c97e3749951fe089f6e2cb264c0d9b4c39107f9912b4f8c67d81cab0b4b3784e1bf16d0747821529686dca30e1eec03aa22d94b1a90bbb697a600295dc1194d407cc296c3d99af33b4958c111803f53427"}]}, @NFTA_RANGE_TO_DATA={0x1008, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_TO_DATA={0x1240, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "201e5b908ed15aed921f11d6de925db49f98e0c8ad4a2d0edbacadf51e6be1262bf753f20688eb624960dd892377816f9c0d2b56de41f6ed38abf98bae78adabe6d92c02bc55f7a0c143f7fd1642d62fb3551b61accf50dadcdf8128910ad319cc9ffbe97bfb078a38b8b8664e7b11f3e208e48a6dd078bef8d68bbf3396c6680ce0c218d9b76c8f9b81dfe7325a6c63e0835897fcbf4f09af0cdf912181d935f602c6519d19745b3925aa2d50112d84951169d10284d3e50c5078d1274ef5f3f3cc454c363000829057b2611d5c155e6759b90ef3250f89406f3d532741cec81a8254295a800e3119588439ca8b13b8de807fa70b"}, @NFTA_DATA_VALUE={0x88, 0x1, "e8a43943952d073a1622a6b5bd994743ab0fbcaf5e4c206d47a1e194b2bc0e8b8c78740b7ea0efd4ce05bc7adfefa2ca46d36745113b05f5fb68d7b169b711ab8697882f1c4551d0eeee32aec5f16e23f90082d659de9803b99cfa9bbc1f871bc682a4854b21344a0a2111549a0f1c7d2f323101f6f87b9d0a79067bed39a8baf3214b42"}, @NFTA_DATA_VALUE={0xd, 0x1, "9e98d5b8cc46a2bc5b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xa2, 0x1, "e5355bf6da0804664e6fa532bd7e96b69c0ca8e963cf8d1c4c289dd1b63981ae62cd2099b1ab4a4cbff530a7e0b5a72dae97b6c0e338adcf4412a7a09f005bb6c3cd8ed3519c30bf52daf94867a898fc3451c6413bb5600f293dd69aadcab11d8306e817d77f78d75172ecb4b7bca2022e6772063e3e2ba18ef03bd2a44b2a5319e0181a9f8b797e5d77b612aa3dca28ef1a9a77279b20a7656a0099b98d"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_TIMEOUT={0xc}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffff}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x2658}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000810) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 2933.374966][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2933.382763][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:39:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x101, 0xe57, 0x10001, 0x8, "84880fb38342a82ea37f82f6e76247cd49a748"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSCTTY(r1, 0x540e, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDSETLED(r1, 0x4b32, 0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) [ 2933.452747][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2933.457555][T21621] Bluetooth: hci6: Frame reassembly failed (-84) [ 2933.460335][T21622] Bluetooth: hci7: Frame reassembly failed (-84) [ 2933.467186][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2933.472288][T18602] Bluetooth: hci7: Frame reassembly failed (-84) 02:39:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x401, 0xee6, 0x5, 0x2, 0x4, "7a1e6685660fda98"}) 02:39:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCEXCL(r2, 0x540c) [ 2934.008749][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2934.065569][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2934.395877][T19679] Bluetooth: hci9: command 0x1009 tx timeout [ 2934.395882][T20531] Bluetooth: hci10: command 0x1009 tx timeout [ 2935.435896][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2935.441962][T14039] Bluetooth: hci2: sending frame failed (-49) [ 2935.448141][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2935.454200][T14039] Bluetooth: hci0: sending frame failed (-49) [ 2935.515912][T20531] Bluetooth: hci6: command 0x1003 tx timeout [ 2935.515920][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 2935.515983][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 2935.522731][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2935.528149][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2935.534167][T14039] Bluetooth: hci5: sending frame failed (-49) [ 2936.075898][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 2936.075914][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 2936.081953][T14039] Bluetooth: hci4: sending frame failed (-49) [ 2936.088352][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2937.515957][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2937.521990][T21330] Bluetooth: hci0: sending frame failed (-49) [ 2937.528256][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2937.534256][T21330] Bluetooth: hci2: sending frame failed (-49) [ 2937.595935][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 2937.595939][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 2937.595961][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 2937.601969][T21330] Bluetooth: hci5: sending frame failed (-49) [ 2937.609002][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 2937.613987][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2938.155959][T12161] Bluetooth: hci4: command 0x1001 tx timeout [ 2938.155979][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2938.162401][T21330] Bluetooth: hci4: sending frame failed (-49) [ 2938.168400][T14039] Bluetooth: hci3: sending frame failed (-49) 02:39:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 2938.565401][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 2939.595920][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2939.601983][T20519] Bluetooth: hci0: command 0x1009 tx timeout [ 2939.675902][T20519] Bluetooth: hci6: command 0x1009 tx timeout [ 2939.675906][T12161] Bluetooth: hci7: command 0x1009 tx timeout [ 2939.687928][T20519] Bluetooth: hci5: command 0x1009 tx timeout [ 2940.235908][T12161] Bluetooth: hci4: command 0x1009 tx timeout [ 2940.235935][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 2940.635883][T20531] Bluetooth: hci8: command 0x1003 tx timeout [ 2940.641993][T21332] Bluetooth: hci8: sending frame failed (-49) [ 2942.715928][T12161] Bluetooth: hci8: command 0x1001 tx timeout [ 2942.721972][T21332] Bluetooth: hci8: sending frame failed (-49) 02:39:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_open_pts(r1, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) ioctl$KDADDIO(r2, 0x400455c8, 0x4168) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000002800)=0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001240)={'syztnl0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x7800, 0x9, 0x1, 0x7, {{0x1a, 0x4, 0x3, 0x30, 0x68, 0x65, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0xcd, [@empty, @empty, @local, @private=0x3, @local, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x2, [{@local, 0x4f1}]}, @ssrr={0x89, 0x1b, 0x7b, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) creat(&(0x7f0000002840)='./file0\x00', 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000027c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000001280)=@newchain={0x14f4, 0x64, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0xa, 0x6}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14c0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x800, 0xbca1, 0x0, 0x7fff, 0x4, 0x4, 0x10000, 0x4e, 0x8000, 0x1, 0x80, 0x86, 0x400, 0x8, 0x3ff, 0x9, 0x5, 0x9, 0x401, 0x80, 0x800, 0x1000, 0x6, 0x8c17, 0x0, 0x7, 0x3, 0x4, 0x100, 0x1, 0x1, 0x5, 0x800, 0x3f, 0x4, 0x4, 0x1, 0x5, 0x0, 0x401, 0x6, 0x5, 0x7, 0x4, 0xf5c, 0x6, 0x3, 0x6, 0x0, 0x71b, 0x401, 0x8000, 0x800, 0x80000000, 0x1ff, 0x1f, 0x8, 0x2, 0x40, 0x8, 0xffff, 0x1ff, 0xfffffffe, 0x2, 0x5b00, 0xffff, 0x6, 0x46, 0x4, 0xd4f, 0xc, 0x8, 0x4, 0x3ff, 0x101, 0xc338, 0x1, 0x0, 0x3, 0x5, 0xb2c, 0x8d3, 0xa9a, 0xe634, 0x6, 0x5, 0x6d35e4c2, 0xfffffffb, 0x7, 0x17, 0x5, 0xbbd8, 0x4, 0x4, 0x1, 0xf73, 0x8, 0xbc3, 0x0, 0xffffff7f, 0x1, 0x6b4, 0x4, 0x10001, 0xd0, 0x7, 0x101, 0xdce, 0x6, 0x1, 0x1, 0x320, 0xa8, 0x1, 0x6, 0x8, 0x4040000, 0x1, 0xc0, 0xc6d6, 0x5, 0x4, 0x80000000, 0xe7e8, 0xb8a9260, 0x9, 0x6, 0x7, 0x100000, 0x3, 0x6, 0x6e, 0x7fff, 0x1, 0x20, 0x1cb1bed, 0x661, 0x5, 0x6, 0x3, 0xfff, 0x7fffffff, 0x7, 0x1ff, 0x82aa, 0x9, 0x8, 0x8001, 0x2, 0x6, 0x5, 0x9, 0x9, 0x8, 0x1f, 0x5, 0x80000000, 0x7, 0x7, 0x6, 0x401, 0x7f, 0x20, 0xe00, 0x1, 0x2, 0x8, 0x1, 0x409, 0x3ff, 0x5, 0x2, 0xc000000, 0x1, 0x9, 0x7f, 0x8, 0x1, 0xbe3, 0x3, 0xa4, 0x6, 0x5, 0x7, 0x1c2, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x1, 0x5, 0xfe, 0x8, 0x2, 0x7, 0x2, 0x1, 0x20, 0x2, 0x4, 0x80000000, 0x2, 0xfffffff9, 0x7fffffff, 0x200, 0x1, 0x4, 0xffff, 0x0, 0xd6, 0x7, 0x8000, 0x40, 0x3f, 0x100, 0xd8, 0xffff7ecc, 0x1, 0x400, 0xed90, 0x800, 0x0, 0xde4, 0x200, 0x6cf, 0x9, 0x225, 0x7, 0x2, 0x0, 0x2, 0x400, 0x4570d9e4, 0x1, 0x8, 0x5, 0x10001, 0x0, 0x80, 0x3, 0x7, 0x3, 0x7f, 0x3, 0x1, 0xff, 0x7, 0x63, 0x8, 0x40, 0x6, 0xe6d, 0x1, 0x800, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xf96, 0x3f, 0x0, 0xffffffb9, 0x200, 0x9, 0x80000000, 0x400, 0x2c, 0x401, 0xffffffe6, 0x8, 0x8, 0x1ff, 0x2, 0x5, 0xbaf, 0x10001, 0x2, 0x20, 0x401, 0x3, 0x3d, 0x2, 0x4, 0x20, 0x60c, 0x113, 0x10000, 0x2, 0x2, 0x200, 0xf4f, 0xfff, 0xd3, 0x17, 0x400, 0x200, 0xfffffffa, 0x3, 0xdbe, 0x203, 0x1, 0x4, 0xb38, 0x6, 0x5, 0x7, 0x6, 0x8c6, 0x63400000, 0x2, 0x0, 0x1, 0x6, 0x913, 0x7fff, 0x1, 0x7, 0x9, 0x9, 0x8, 0x9, 0xfffffffa, 0xc3c, 0x9, 0x7ff, 0x3c, 0xfffffff9, 0x6, 0x1000, 0x1, 0x7000, 0x9, 0x7, 0x7ff, 0x7fff, 0x6, 0x7fffffff, 0x800, 0x6, 0x1ff, 0x8000, 0x0, 0xe835, 0x81, 0x8a, 0x9, 0x3, 0x8, 0x4, 0xfff, 0x10000, 0x6, 0x8, 0xfffffffc, 0xfffffffb, 0x7, 0x0, 0x2, 0x401, 0x3, 0xf98, 0x5, 0xff, 0x100, 0x2, 0xfffffffe, 0x5, 0x0, 0x7, 0x100, 0x2, 0x3, 0x1, 0x5, 0x6, 0x2, 0x9, 0x0, 0x56d1, 0x4, 0x5, 0x8, 0x2, 0x4, 0xd1, 0xc14, 0x9, 0x8001, 0x7, 0x3, 0x5, 0x9, 0x3, 0x3, 0xc37, 0x3, 0x4, 0x410, 0x100, 0x3, 0x2b, 0x3, 0x1, 0x5, 0x20, 0x1, 0x9, 0x9, 0x3, 0x9, 0x3, 0x7fffffff, 0x598, 0x9, 0x9, 0x80000001, 0x5, 0x6d, 0x7, 0x6, 0x20, 0x5, 0xd81b, 0x8, 0xf8, 0x6, 0x3, 0x1, 0xac, 0x0, 0xff, 0x0, 0x40, 0xe5b8, 0x6, 0x100, 0x0, 0x3f3a4d97, 0x4, 0x80000, 0xff, 0x5180, 0x1ff, 0x40, 0x1ff, 0x9, 0x3, 0x9, 0xffff, 0x9, 0x7, 0x256b, 0x1, 0x4, 0x5, 0x1000, 0x1, 0x1ff, 0x6, 0x1fe00000, 0x9, 0x5, 0x81, 0x7fff, 0x5e, 0x200, 0x6, 0x4, 0x2, 0x1, 0x100, 0xff, 0x1, 0x8, 0x1, 0x1cdb, 0x3ff, 0x0, 0x6, 0xfc50, 0x6, 0xfb86, 0x40, 0x400000, 0x0, 0x6b9f, 0xab89, 0x5, 0x1f, 0x9, 0x5, 0x3, 0x1, 0x20000000, 0x100, 0x1, 0x86b7, 0x7fffffff, 0x5, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x1000, 0x8, 0x7, 0x20, 0x5, 0x977, 0x0, 0x5, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x5, 0x8, 0x8, 0xe, 0x0, 0x28c, 0x1, 0x401, 0x55, 0x0, 0x8000, 0xe7, 0x82, 0x2, 0x5, 0x2, 0x1, 0x10000, 0x0, 0x80, 0x376c, 0x50, 0x81, 0x6, 0x7fff, 0x7ff, 0x9, 0x8, 0x0, 0x4, 0xffff, 0x3, 0xa72, 0x1, 0x1, 0x4, 0x4d6, 0x8, 0x9, 0x2, 0x4, 0xaac, 0x72eb, 0x101, 0x5b, 0x9, 0x100, 0x7, 0xdd0, 0xfffffff7, 0x3, 0x4, 0x7fffffff, 0x1, 0xa8, 0x0, 0x7a2, 0x8, 0x40000, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x10000, 0x7fffffff, 0x8, 0x6, 0x3, 0x6, 0x5, 0x20, 0x49, 0xcc8, 0x9, 0x9, 0x8001, 0x10000, 0x4c9, 0x1, 0x6, 0x10001, 0x8, 0x1f, 0x7, 0x1f, 0xfffffff9, 0x400, 0x6f30, 0x3, 0x4, 0xfffffffa, 0xfff, 0x800, 0x5, 0x0, 0x800, 0x40, 0x4, 0x81, 0x0, 0x2, 0x80000001, 0x5, 0x1, 0x9, 0x3, 0x3, 0x20, 0xb, 0x7, 0x4, 0x3, 0x9, 0x53, 0xfffffffc, 0x3ff, 0x2, 0xaf5, 0xff5b, 0x8, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0x9, 0x2, 0xc860, 0x1, 0xfa9, 0x0, 0x5c7d, 0x7fffffff, 0x515, 0x3, 0x81, 0xfff, 0x2b, 0x8000, 0x2, 0xfffffffd, 0x8000, 0x8, 0x2, 0x0, 0x68, 0x9, 0xddf3, 0xf0, 0x1, 0xff, 0x6, 0x2, 0x3, 0x1, 0x4, 0x81, 0x6, 0x101, 0x8, 0x4, 0x200, 0x6, 0x6, 0x4, 0x1, 0xc741, 0x3, 0x7ff, 0x944, 0x1, 0x4, 0xb891, 0x7fff, 0x0, 0x2, 0x80, 0x5, 0x2, 0x3, 0x200, 0x6f8, 0x82, 0x9, 0x8, 0xfff, 0x6d9, 0x2, 0x4, 0x20, 0x6, 0xc95e, 0xffff, 0x0, 0x5838, 0x7, 0x10000, 0x7, 0x200, 0x2, 0x3f, 0x8001, 0x9, 0xfffffffd, 0x7, 0x5, 0x101, 0x3, 0x7fffffff, 0x0, 0xff, 0x1ff, 0xfffffff7, 0x10001, 0x7, 0xfffffff8, 0x6, 0x4159, 0x3, 0xfa12, 0x9, 0x400, 0x80000000, 0x7, 0x6, 0x8, 0x0, 0x1, 0x7ff, 0x7fff, 0x3, 0x9, 0x4a, 0x0, 0xfffffffa, 0xbb, 0x7ff, 0x3, 0x40, 0x47cf4ad1, 0xfff, 0x400, 0xffffffff, 0xfffffffe, 0xbd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9868, 0x2, 0x3, 0x8, 0x3, {0x3a, 0x2, 0x800, 0x1, 0x81, 0x4}, {0x81, 0x1, 0x42e, 0x5, 0x0, 0x4}, 0x10000, 0xe75}}]}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa9c2, 0x4, 0x4, 0x3f, 0xffff, {0x20, 0x0, 0x7, 0x9, 0x8, 0x4}, {0xdc, 0x0, 0xf5, 0x9, 0x3, 0x8}, 0x0, 0x81, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x81, 0x0, 0x1, 0xeb8, 0x2, 0x3, 0x5, 0x438a, 0x2, 0x5, 0x3, 0x8, 0x1e, 0x0, 0x400, 0x7, 0x3, 0xffffffff, 0x0, 0xea61, 0x4, 0x1f, 0xfffffff8, 0x800, 0x10001, 0x1, 0x8000, 0xa5, 0x800, 0x3, 0x0, 0x8, 0x100, 0xfffffc00, 0x1, 0x80000000, 0x0, 0xf38, 0x6, 0xfff, 0x4553, 0x3, 0x6, 0x1, 0x3, 0x7ea, 0x5, 0x3f, 0xfffffff8, 0x2eb, 0x7, 0x2, 0x40, 0x7, 0x0, 0x800, 0xffffffff, 0x1d73, 0x8, 0x2, 0x4, 0xffffff9b, 0x1000, 0x5, 0x80000001, 0xb07, 0x3, 0x0, 0x9, 0x7ff, 0x3, 0x2, 0xfd, 0x2, 0x1, 0xffffffff, 0x6, 0x6, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x0, 0x20, 0x5, 0xffffffff, 0x80000001, 0xc8, 0x4, 0x7, 0x5, 0x1, 0xfffffff9, 0x20, 0xffffffff, 0x0, 0x5, 0xa, 0x4, 0xfffff001, 0x2, 0x1, 0x3, 0x7ff, 0x1, 0x80, 0x6, 0x80000000, 0x9, 0x1ce, 0x3e60, 0xffffffff, 0x2d97, 0x100, 0x1000000, 0xfffffffa, 0x732e, 0x9, 0x1ff, 0x7fff, 0x4, 0x1, 0x807, 0xae, 0x90, 0xffffff81, 0x1, 0x800, 0xfb, 0x9, 0x13e0, 0x2, 0x1, 0x3, 0xffff, 0x63, 0x5, 0x8, 0x80000001, 0x9, 0x6, 0x6, 0x1000, 0x9, 0x101, 0xa341, 0x7fff, 0x42c702dd, 0xffffffff, 0x200, 0x0, 0x800, 0x8, 0x79, 0x200, 0xffff1047, 0x2, 0x5, 0x3081a982, 0x5, 0x7fff, 0x7f, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0x6, 0x1f, 0x2, 0x6, 0x3, 0x85f, 0x4, 0x1000, 0x1, 0x1, 0x2, 0x7, 0x0, 0x1, 0x100, 0x800, 0x200, 0x3ff, 0x9, 0x3, 0x5, 0x8, 0x499, 0x6, 0x2, 0x80000001, 0x7, 0x3, 0x8, 0x3a56, 0xff, 0x4, 0x40, 0x7, 0x9, 0x80000001, 0x6, 0x7fffffff, 0x0, 0x8, 0x4, 0x3, 0xe953, 0x1, 0x7, 0x0, 0x7bde, 0x80, 0xfffffffc, 0x1f, 0x6, 0x7f, 0x4, 0xdf08, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x4257, 0xfffffffe, 0x7, 0x4, 0x982, 0x6c3, 0x3, 0x2, 0x1ff, 0xdd, 0x2, 0x2, 0x6, 0x5, 0x20, 0x0, 0xb6e, 0x80, 0x1, 0x0, 0x0, 0x453e, 0x7, 0x0, 0x7, 0x0, 0x45ce50c4, 0x752]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x4, 0x9, 0x5, 0x4, 0x6, 0x2, 0x0, 0x7, 0x0, 0xfffffe01, 0xffff, 0x753, 0x5, 0x80, 0x1f, 0x5, 0x7ff, 0x1f, 0x6, 0x7, 0x4da476f4, 0xdc, 0x0, 0x4, 0xfffffffc, 0x7f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x2, 0x54d2, 0x7, 0x2, 0x3, 0x6, 0x7ff, 0x80000001, 0x7, 0x0, 0x7, 0x4f16, 0x87, 0x0, 0x1f, 0x401, 0x80, 0x7fffffff, 0x6296, 0x7, 0x81, 0xfff, 0x6, 0x0, 0x1, 0x400, 0xffffffe0, 0x401, 0x1ff, 0x7, 0x9, 0x1cc0, 0x7fffffff, 0x1, 0x7, 0x6, 0xfffffc00, 0x6, 0x57, 0x1944, 0x3, 0x19e, 0x8, 0x0, 0x3, 0x4, 0xfffffff8, 0xeb0, 0x3f, 0xfffffff7, 0x1, 0xdd7, 0x2, 0x7f, 0x34066d49, 0x5, 0x7d1, 0x8, 0x89, 0x6, 0x80, 0x7, 0x3, 0x8, 0x5, 0x8, 0x2, 0x0, 0x2, 0x101, 0x8000, 0x7, 0x0, 0x8, 0x1000, 0x8, 0x4, 0xffffff03, 0x7, 0x3f, 0x0, 0xfff, 0xffff, 0xec40, 0x4, 0x7, 0x1a2, 0x6, 0x8, 0x5, 0x1ff, 0x7f, 0xbf, 0x400, 0x5, 0x3, 0x3, 0x1, 0x0, 0x20, 0x2, 0x0, 0xba10, 0x81, 0x9, 0x7, 0x1, 0x1, 0x4, 0x78, 0x2, 0x10001, 0x2, 0x0, 0x3f, 0x0, 0xff, 0x9, 0x1000, 0x0, 0x1, 0x6, 0x9, 0x5, 0x1, 0x9, 0x100, 0x1, 0x7, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xfff, 0xffffffff, 0x670, 0x8, 0x8000, 0x8, 0x0, 0x9e08, 0x7fff, 0x3, 0x2, 0x0, 0xffffffff, 0xff, 0x2, 0x3bb, 0x4, 0x100, 0x9, 0x7, 0x1, 0x1, 0xfff00000, 0x2, 0x0, 0x1, 0x2, 0x8, 0x3, 0x7cd1, 0x4, 0xeae7, 0x1, 0x800, 0x888, 0x1, 0x2, 0x7fffffff, 0x40, 0x401, 0x81, 0x4, 0x20, 0x6, 0x372, 0x8, 0x1, 0xb3c2, 0x0, 0x80000000, 0x6, 0x2, 0x6, 0x59a, 0x4, 0x0, 0x80000001, 0xe5a3, 0x7, 0x1f, 0x400, 0x7, 0x7fff, 0x9, 0x2, 0xfffffffb, 0x2, 0x6, 0xee, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x4, 0x0, 0x1fc0, 0x9, 0x1, 0x4, 0x9, 0xfffeffff, 0x0, 0x8000, 0x8557, 0x1, 0x3, 0x688, 0x9, 0xc8ea, 0x68c1]}]}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0xd0}, 0x4) 02:39:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0045878, 0x0) 02:39:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_open_pts(r1, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x4168) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000002800)=0xa, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001240)={'syztnl0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x7800, 0x9, 0x1, 0x7, {{0x1a, 0x4, 0x3, 0x30, 0x68, 0x65, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0xcd, [@empty, @empty, @local, @private=0x3, @local, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x2, [{@local, 0x4f1}]}, @ssrr={0x89, 0x1b, 0x7b, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) creat(&(0x7f0000002840)='./file0\x00', 0x8) (async) sendmsg$nl_route_sched(r4, &(0x7f00000027c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000001280)=@newchain={0x14f4, 0x64, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0xa, 0x6}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14c0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x800, 0xbca1, 0x0, 0x7fff, 0x4, 0x4, 0x10000, 0x4e, 0x8000, 0x1, 0x80, 0x86, 0x400, 0x8, 0x3ff, 0x9, 0x5, 0x9, 0x401, 0x80, 0x800, 0x1000, 0x6, 0x8c17, 0x0, 0x7, 0x3, 0x4, 0x100, 0x1, 0x1, 0x5, 0x800, 0x3f, 0x4, 0x4, 0x1, 0x5, 0x0, 0x401, 0x6, 0x5, 0x7, 0x4, 0xf5c, 0x6, 0x3, 0x6, 0x0, 0x71b, 0x401, 0x8000, 0x800, 0x80000000, 0x1ff, 0x1f, 0x8, 0x2, 0x40, 0x8, 0xffff, 0x1ff, 0xfffffffe, 0x2, 0x5b00, 0xffff, 0x6, 0x46, 0x4, 0xd4f, 0xc, 0x8, 0x4, 0x3ff, 0x101, 0xc338, 0x1, 0x0, 0x3, 0x5, 0xb2c, 0x8d3, 0xa9a, 0xe634, 0x6, 0x5, 0x6d35e4c2, 0xfffffffb, 0x7, 0x17, 0x5, 0xbbd8, 0x4, 0x4, 0x1, 0xf73, 0x8, 0xbc3, 0x0, 0xffffff7f, 0x1, 0x6b4, 0x4, 0x10001, 0xd0, 0x7, 0x101, 0xdce, 0x6, 0x1, 0x1, 0x320, 0xa8, 0x1, 0x6, 0x8, 0x4040000, 0x1, 0xc0, 0xc6d6, 0x5, 0x4, 0x80000000, 0xe7e8, 0xb8a9260, 0x9, 0x6, 0x7, 0x100000, 0x3, 0x6, 0x6e, 0x7fff, 0x1, 0x20, 0x1cb1bed, 0x661, 0x5, 0x6, 0x3, 0xfff, 0x7fffffff, 0x7, 0x1ff, 0x82aa, 0x9, 0x8, 0x8001, 0x2, 0x6, 0x5, 0x9, 0x9, 0x8, 0x1f, 0x5, 0x80000000, 0x7, 0x7, 0x6, 0x401, 0x7f, 0x20, 0xe00, 0x1, 0x2, 0x8, 0x1, 0x409, 0x3ff, 0x5, 0x2, 0xc000000, 0x1, 0x9, 0x7f, 0x8, 0x1, 0xbe3, 0x3, 0xa4, 0x6, 0x5, 0x7, 0x1c2, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x1, 0x5, 0xfe, 0x8, 0x2, 0x7, 0x2, 0x1, 0x20, 0x2, 0x4, 0x80000000, 0x2, 0xfffffff9, 0x7fffffff, 0x200, 0x1, 0x4, 0xffff, 0x0, 0xd6, 0x7, 0x8000, 0x40, 0x3f, 0x100, 0xd8, 0xffff7ecc, 0x1, 0x400, 0xed90, 0x800, 0x0, 0xde4, 0x200, 0x6cf, 0x9, 0x225, 0x7, 0x2, 0x0, 0x2, 0x400, 0x4570d9e4, 0x1, 0x8, 0x5, 0x10001, 0x0, 0x80, 0x3, 0x7, 0x3, 0x7f, 0x3, 0x1, 0xff, 0x7, 0x63, 0x8, 0x40, 0x6, 0xe6d, 0x1, 0x800, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xf96, 0x3f, 0x0, 0xffffffb9, 0x200, 0x9, 0x80000000, 0x400, 0x2c, 0x401, 0xffffffe6, 0x8, 0x8, 0x1ff, 0x2, 0x5, 0xbaf, 0x10001, 0x2, 0x20, 0x401, 0x3, 0x3d, 0x2, 0x4, 0x20, 0x60c, 0x113, 0x10000, 0x2, 0x2, 0x200, 0xf4f, 0xfff, 0xd3, 0x17, 0x400, 0x200, 0xfffffffa, 0x3, 0xdbe, 0x203, 0x1, 0x4, 0xb38, 0x6, 0x5, 0x7, 0x6, 0x8c6, 0x63400000, 0x2, 0x0, 0x1, 0x6, 0x913, 0x7fff, 0x1, 0x7, 0x9, 0x9, 0x8, 0x9, 0xfffffffa, 0xc3c, 0x9, 0x7ff, 0x3c, 0xfffffff9, 0x6, 0x1000, 0x1, 0x7000, 0x9, 0x7, 0x7ff, 0x7fff, 0x6, 0x7fffffff, 0x800, 0x6, 0x1ff, 0x8000, 0x0, 0xe835, 0x81, 0x8a, 0x9, 0x3, 0x8, 0x4, 0xfff, 0x10000, 0x6, 0x8, 0xfffffffc, 0xfffffffb, 0x7, 0x0, 0x2, 0x401, 0x3, 0xf98, 0x5, 0xff, 0x100, 0x2, 0xfffffffe, 0x5, 0x0, 0x7, 0x100, 0x2, 0x3, 0x1, 0x5, 0x6, 0x2, 0x9, 0x0, 0x56d1, 0x4, 0x5, 0x8, 0x2, 0x4, 0xd1, 0xc14, 0x9, 0x8001, 0x7, 0x3, 0x5, 0x9, 0x3, 0x3, 0xc37, 0x3, 0x4, 0x410, 0x100, 0x3, 0x2b, 0x3, 0x1, 0x5, 0x20, 0x1, 0x9, 0x9, 0x3, 0x9, 0x3, 0x7fffffff, 0x598, 0x9, 0x9, 0x80000001, 0x5, 0x6d, 0x7, 0x6, 0x20, 0x5, 0xd81b, 0x8, 0xf8, 0x6, 0x3, 0x1, 0xac, 0x0, 0xff, 0x0, 0x40, 0xe5b8, 0x6, 0x100, 0x0, 0x3f3a4d97, 0x4, 0x80000, 0xff, 0x5180, 0x1ff, 0x40, 0x1ff, 0x9, 0x3, 0x9, 0xffff, 0x9, 0x7, 0x256b, 0x1, 0x4, 0x5, 0x1000, 0x1, 0x1ff, 0x6, 0x1fe00000, 0x9, 0x5, 0x81, 0x7fff, 0x5e, 0x200, 0x6, 0x4, 0x2, 0x1, 0x100, 0xff, 0x1, 0x8, 0x1, 0x1cdb, 0x3ff, 0x0, 0x6, 0xfc50, 0x6, 0xfb86, 0x40, 0x400000, 0x0, 0x6b9f, 0xab89, 0x5, 0x1f, 0x9, 0x5, 0x3, 0x1, 0x20000000, 0x100, 0x1, 0x86b7, 0x7fffffff, 0x5, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x1000, 0x8, 0x7, 0x20, 0x5, 0x977, 0x0, 0x5, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x5, 0x8, 0x8, 0xe, 0x0, 0x28c, 0x1, 0x401, 0x55, 0x0, 0x8000, 0xe7, 0x82, 0x2, 0x5, 0x2, 0x1, 0x10000, 0x0, 0x80, 0x376c, 0x50, 0x81, 0x6, 0x7fff, 0x7ff, 0x9, 0x8, 0x0, 0x4, 0xffff, 0x3, 0xa72, 0x1, 0x1, 0x4, 0x4d6, 0x8, 0x9, 0x2, 0x4, 0xaac, 0x72eb, 0x101, 0x5b, 0x9, 0x100, 0x7, 0xdd0, 0xfffffff7, 0x3, 0x4, 0x7fffffff, 0x1, 0xa8, 0x0, 0x7a2, 0x8, 0x40000, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x10000, 0x7fffffff, 0x8, 0x6, 0x3, 0x6, 0x5, 0x20, 0x49, 0xcc8, 0x9, 0x9, 0x8001, 0x10000, 0x4c9, 0x1, 0x6, 0x10001, 0x8, 0x1f, 0x7, 0x1f, 0xfffffff9, 0x400, 0x6f30, 0x3, 0x4, 0xfffffffa, 0xfff, 0x800, 0x5, 0x0, 0x800, 0x40, 0x4, 0x81, 0x0, 0x2, 0x80000001, 0x5, 0x1, 0x9, 0x3, 0x3, 0x20, 0xb, 0x7, 0x4, 0x3, 0x9, 0x53, 0xfffffffc, 0x3ff, 0x2, 0xaf5, 0xff5b, 0x8, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0x9, 0x2, 0xc860, 0x1, 0xfa9, 0x0, 0x5c7d, 0x7fffffff, 0x515, 0x3, 0x81, 0xfff, 0x2b, 0x8000, 0x2, 0xfffffffd, 0x8000, 0x8, 0x2, 0x0, 0x68, 0x9, 0xddf3, 0xf0, 0x1, 0xff, 0x6, 0x2, 0x3, 0x1, 0x4, 0x81, 0x6, 0x101, 0x8, 0x4, 0x200, 0x6, 0x6, 0x4, 0x1, 0xc741, 0x3, 0x7ff, 0x944, 0x1, 0x4, 0xb891, 0x7fff, 0x0, 0x2, 0x80, 0x5, 0x2, 0x3, 0x200, 0x6f8, 0x82, 0x9, 0x8, 0xfff, 0x6d9, 0x2, 0x4, 0x20, 0x6, 0xc95e, 0xffff, 0x0, 0x5838, 0x7, 0x10000, 0x7, 0x200, 0x2, 0x3f, 0x8001, 0x9, 0xfffffffd, 0x7, 0x5, 0x101, 0x3, 0x7fffffff, 0x0, 0xff, 0x1ff, 0xfffffff7, 0x10001, 0x7, 0xfffffff8, 0x6, 0x4159, 0x3, 0xfa12, 0x9, 0x400, 0x80000000, 0x7, 0x6, 0x8, 0x0, 0x1, 0x7ff, 0x7fff, 0x3, 0x9, 0x4a, 0x0, 0xfffffffa, 0xbb, 0x7ff, 0x3, 0x40, 0x47cf4ad1, 0xfff, 0x400, 0xffffffff, 0xfffffffe, 0xbd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9868, 0x2, 0x3, 0x8, 0x3, {0x3a, 0x2, 0x800, 0x1, 0x81, 0x4}, {0x81, 0x1, 0x42e, 0x5, 0x0, 0x4}, 0x10000, 0xe75}}]}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa9c2, 0x4, 0x4, 0x3f, 0xffff, {0x20, 0x0, 0x7, 0x9, 0x8, 0x4}, {0xdc, 0x0, 0xf5, 0x9, 0x3, 0x8}, 0x0, 0x81, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x81, 0x0, 0x1, 0xeb8, 0x2, 0x3, 0x5, 0x438a, 0x2, 0x5, 0x3, 0x8, 0x1e, 0x0, 0x400, 0x7, 0x3, 0xffffffff, 0x0, 0xea61, 0x4, 0x1f, 0xfffffff8, 0x800, 0x10001, 0x1, 0x8000, 0xa5, 0x800, 0x3, 0x0, 0x8, 0x100, 0xfffffc00, 0x1, 0x80000000, 0x0, 0xf38, 0x6, 0xfff, 0x4553, 0x3, 0x6, 0x1, 0x3, 0x7ea, 0x5, 0x3f, 0xfffffff8, 0x2eb, 0x7, 0x2, 0x40, 0x7, 0x0, 0x800, 0xffffffff, 0x1d73, 0x8, 0x2, 0x4, 0xffffff9b, 0x1000, 0x5, 0x80000001, 0xb07, 0x3, 0x0, 0x9, 0x7ff, 0x3, 0x2, 0xfd, 0x2, 0x1, 0xffffffff, 0x6, 0x6, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x0, 0x20, 0x5, 0xffffffff, 0x80000001, 0xc8, 0x4, 0x7, 0x5, 0x1, 0xfffffff9, 0x20, 0xffffffff, 0x0, 0x5, 0xa, 0x4, 0xfffff001, 0x2, 0x1, 0x3, 0x7ff, 0x1, 0x80, 0x6, 0x80000000, 0x9, 0x1ce, 0x3e60, 0xffffffff, 0x2d97, 0x100, 0x1000000, 0xfffffffa, 0x732e, 0x9, 0x1ff, 0x7fff, 0x4, 0x1, 0x807, 0xae, 0x90, 0xffffff81, 0x1, 0x800, 0xfb, 0x9, 0x13e0, 0x2, 0x1, 0x3, 0xffff, 0x63, 0x5, 0x8, 0x80000001, 0x9, 0x6, 0x6, 0x1000, 0x9, 0x101, 0xa341, 0x7fff, 0x42c702dd, 0xffffffff, 0x200, 0x0, 0x800, 0x8, 0x79, 0x200, 0xffff1047, 0x2, 0x5, 0x3081a982, 0x5, 0x7fff, 0x7f, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0x6, 0x1f, 0x2, 0x6, 0x3, 0x85f, 0x4, 0x1000, 0x1, 0x1, 0x2, 0x7, 0x0, 0x1, 0x100, 0x800, 0x200, 0x3ff, 0x9, 0x3, 0x5, 0x8, 0x499, 0x6, 0x2, 0x80000001, 0x7, 0x3, 0x8, 0x3a56, 0xff, 0x4, 0x40, 0x7, 0x9, 0x80000001, 0x6, 0x7fffffff, 0x0, 0x8, 0x4, 0x3, 0xe953, 0x1, 0x7, 0x0, 0x7bde, 0x80, 0xfffffffc, 0x1f, 0x6, 0x7f, 0x4, 0xdf08, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x4257, 0xfffffffe, 0x7, 0x4, 0x982, 0x6c3, 0x3, 0x2, 0x1ff, 0xdd, 0x2, 0x2, 0x6, 0x5, 0x20, 0x0, 0xb6e, 0x80, 0x1, 0x0, 0x0, 0x453e, 0x7, 0x0, 0x7, 0x0, 0x45ce50c4, 0x752]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x4, 0x9, 0x5, 0x4, 0x6, 0x2, 0x0, 0x7, 0x0, 0xfffffe01, 0xffff, 0x753, 0x5, 0x80, 0x1f, 0x5, 0x7ff, 0x1f, 0x6, 0x7, 0x4da476f4, 0xdc, 0x0, 0x4, 0xfffffffc, 0x7f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x2, 0x54d2, 0x7, 0x2, 0x3, 0x6, 0x7ff, 0x80000001, 0x7, 0x0, 0x7, 0x4f16, 0x87, 0x0, 0x1f, 0x401, 0x80, 0x7fffffff, 0x6296, 0x7, 0x81, 0xfff, 0x6, 0x0, 0x1, 0x400, 0xffffffe0, 0x401, 0x1ff, 0x7, 0x9, 0x1cc0, 0x7fffffff, 0x1, 0x7, 0x6, 0xfffffc00, 0x6, 0x57, 0x1944, 0x3, 0x19e, 0x8, 0x0, 0x3, 0x4, 0xfffffff8, 0xeb0, 0x3f, 0xfffffff7, 0x1, 0xdd7, 0x2, 0x7f, 0x34066d49, 0x5, 0x7d1, 0x8, 0x89, 0x6, 0x80, 0x7, 0x3, 0x8, 0x5, 0x8, 0x2, 0x0, 0x2, 0x101, 0x8000, 0x7, 0x0, 0x8, 0x1000, 0x8, 0x4, 0xffffff03, 0x7, 0x3f, 0x0, 0xfff, 0xffff, 0xec40, 0x4, 0x7, 0x1a2, 0x6, 0x8, 0x5, 0x1ff, 0x7f, 0xbf, 0x400, 0x5, 0x3, 0x3, 0x1, 0x0, 0x20, 0x2, 0x0, 0xba10, 0x81, 0x9, 0x7, 0x1, 0x1, 0x4, 0x78, 0x2, 0x10001, 0x2, 0x0, 0x3f, 0x0, 0xff, 0x9, 0x1000, 0x0, 0x1, 0x6, 0x9, 0x5, 0x1, 0x9, 0x100, 0x1, 0x7, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xfff, 0xffffffff, 0x670, 0x8, 0x8000, 0x8, 0x0, 0x9e08, 0x7fff, 0x3, 0x2, 0x0, 0xffffffff, 0xff, 0x2, 0x3bb, 0x4, 0x100, 0x9, 0x7, 0x1, 0x1, 0xfff00000, 0x2, 0x0, 0x1, 0x2, 0x8, 0x3, 0x7cd1, 0x4, 0xeae7, 0x1, 0x800, 0x888, 0x1, 0x2, 0x7fffffff, 0x40, 0x401, 0x81, 0x4, 0x20, 0x6, 0x372, 0x8, 0x1, 0xb3c2, 0x0, 0x80000000, 0x6, 0x2, 0x6, 0x59a, 0x4, 0x0, 0x80000001, 0xe5a3, 0x7, 0x1f, 0x400, 0x7, 0x7fff, 0x9, 0x2, 0xfffffffb, 0x2, 0x6, 0xee, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x4, 0x0, 0x1fc0, 0x9, 0x1, 0x4, 0x9, 0xfffeffff, 0x0, 0x8000, 0x8557, 0x1, 0x3, 0x688, 0x9, 0xc8ea, 0x68c1]}]}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0xd0}, 0x4) 02:39:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = syz_open_pts(r1, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) ioctl$KDADDIO(r2, 0x400455c8, 0x4168) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000002800)=0xa, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001240)={'syztnl0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x7800, 0x9, 0x1, 0x7, {{0x1a, 0x4, 0x3, 0x30, 0x68, 0x65, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0xcd, [@empty, @empty, @local, @private=0x3, @local, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x2, [{@local, 0x4f1}]}, @ssrr={0x89, 0x1b, 0x7b, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) creat(&(0x7f0000002840)='./file0\x00', 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000027c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000001280)=@newchain={0x14f4, 0x64, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0xa, 0x6}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14c0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x800, 0xbca1, 0x0, 0x7fff, 0x4, 0x4, 0x10000, 0x4e, 0x8000, 0x1, 0x80, 0x86, 0x400, 0x8, 0x3ff, 0x9, 0x5, 0x9, 0x401, 0x80, 0x800, 0x1000, 0x6, 0x8c17, 0x0, 0x7, 0x3, 0x4, 0x100, 0x1, 0x1, 0x5, 0x800, 0x3f, 0x4, 0x4, 0x1, 0x5, 0x0, 0x401, 0x6, 0x5, 0x7, 0x4, 0xf5c, 0x6, 0x3, 0x6, 0x0, 0x71b, 0x401, 0x8000, 0x800, 0x80000000, 0x1ff, 0x1f, 0x8, 0x2, 0x40, 0x8, 0xffff, 0x1ff, 0xfffffffe, 0x2, 0x5b00, 0xffff, 0x6, 0x46, 0x4, 0xd4f, 0xc, 0x8, 0x4, 0x3ff, 0x101, 0xc338, 0x1, 0x0, 0x3, 0x5, 0xb2c, 0x8d3, 0xa9a, 0xe634, 0x6, 0x5, 0x6d35e4c2, 0xfffffffb, 0x7, 0x17, 0x5, 0xbbd8, 0x4, 0x4, 0x1, 0xf73, 0x8, 0xbc3, 0x0, 0xffffff7f, 0x1, 0x6b4, 0x4, 0x10001, 0xd0, 0x7, 0x101, 0xdce, 0x6, 0x1, 0x1, 0x320, 0xa8, 0x1, 0x6, 0x8, 0x4040000, 0x1, 0xc0, 0xc6d6, 0x5, 0x4, 0x80000000, 0xe7e8, 0xb8a9260, 0x9, 0x6, 0x7, 0x100000, 0x3, 0x6, 0x6e, 0x7fff, 0x1, 0x20, 0x1cb1bed, 0x661, 0x5, 0x6, 0x3, 0xfff, 0x7fffffff, 0x7, 0x1ff, 0x82aa, 0x9, 0x8, 0x8001, 0x2, 0x6, 0x5, 0x9, 0x9, 0x8, 0x1f, 0x5, 0x80000000, 0x7, 0x7, 0x6, 0x401, 0x7f, 0x20, 0xe00, 0x1, 0x2, 0x8, 0x1, 0x409, 0x3ff, 0x5, 0x2, 0xc000000, 0x1, 0x9, 0x7f, 0x8, 0x1, 0xbe3, 0x3, 0xa4, 0x6, 0x5, 0x7, 0x1c2, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x1, 0x5, 0xfe, 0x8, 0x2, 0x7, 0x2, 0x1, 0x20, 0x2, 0x4, 0x80000000, 0x2, 0xfffffff9, 0x7fffffff, 0x200, 0x1, 0x4, 0xffff, 0x0, 0xd6, 0x7, 0x8000, 0x40, 0x3f, 0x100, 0xd8, 0xffff7ecc, 0x1, 0x400, 0xed90, 0x800, 0x0, 0xde4, 0x200, 0x6cf, 0x9, 0x225, 0x7, 0x2, 0x0, 0x2, 0x400, 0x4570d9e4, 0x1, 0x8, 0x5, 0x10001, 0x0, 0x80, 0x3, 0x7, 0x3, 0x7f, 0x3, 0x1, 0xff, 0x7, 0x63, 0x8, 0x40, 0x6, 0xe6d, 0x1, 0x800, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xf96, 0x3f, 0x0, 0xffffffb9, 0x200, 0x9, 0x80000000, 0x400, 0x2c, 0x401, 0xffffffe6, 0x8, 0x8, 0x1ff, 0x2, 0x5, 0xbaf, 0x10001, 0x2, 0x20, 0x401, 0x3, 0x3d, 0x2, 0x4, 0x20, 0x60c, 0x113, 0x10000, 0x2, 0x2, 0x200, 0xf4f, 0xfff, 0xd3, 0x17, 0x400, 0x200, 0xfffffffa, 0x3, 0xdbe, 0x203, 0x1, 0x4, 0xb38, 0x6, 0x5, 0x7, 0x6, 0x8c6, 0x63400000, 0x2, 0x0, 0x1, 0x6, 0x913, 0x7fff, 0x1, 0x7, 0x9, 0x9, 0x8, 0x9, 0xfffffffa, 0xc3c, 0x9, 0x7ff, 0x3c, 0xfffffff9, 0x6, 0x1000, 0x1, 0x7000, 0x9, 0x7, 0x7ff, 0x7fff, 0x6, 0x7fffffff, 0x800, 0x6, 0x1ff, 0x8000, 0x0, 0xe835, 0x81, 0x8a, 0x9, 0x3, 0x8, 0x4, 0xfff, 0x10000, 0x6, 0x8, 0xfffffffc, 0xfffffffb, 0x7, 0x0, 0x2, 0x401, 0x3, 0xf98, 0x5, 0xff, 0x100, 0x2, 0xfffffffe, 0x5, 0x0, 0x7, 0x100, 0x2, 0x3, 0x1, 0x5, 0x6, 0x2, 0x9, 0x0, 0x56d1, 0x4, 0x5, 0x8, 0x2, 0x4, 0xd1, 0xc14, 0x9, 0x8001, 0x7, 0x3, 0x5, 0x9, 0x3, 0x3, 0xc37, 0x3, 0x4, 0x410, 0x100, 0x3, 0x2b, 0x3, 0x1, 0x5, 0x20, 0x1, 0x9, 0x9, 0x3, 0x9, 0x3, 0x7fffffff, 0x598, 0x9, 0x9, 0x80000001, 0x5, 0x6d, 0x7, 0x6, 0x20, 0x5, 0xd81b, 0x8, 0xf8, 0x6, 0x3, 0x1, 0xac, 0x0, 0xff, 0x0, 0x40, 0xe5b8, 0x6, 0x100, 0x0, 0x3f3a4d97, 0x4, 0x80000, 0xff, 0x5180, 0x1ff, 0x40, 0x1ff, 0x9, 0x3, 0x9, 0xffff, 0x9, 0x7, 0x256b, 0x1, 0x4, 0x5, 0x1000, 0x1, 0x1ff, 0x6, 0x1fe00000, 0x9, 0x5, 0x81, 0x7fff, 0x5e, 0x200, 0x6, 0x4, 0x2, 0x1, 0x100, 0xff, 0x1, 0x8, 0x1, 0x1cdb, 0x3ff, 0x0, 0x6, 0xfc50, 0x6, 0xfb86, 0x40, 0x400000, 0x0, 0x6b9f, 0xab89, 0x5, 0x1f, 0x9, 0x5, 0x3, 0x1, 0x20000000, 0x100, 0x1, 0x86b7, 0x7fffffff, 0x5, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x1000, 0x8, 0x7, 0x20, 0x5, 0x977, 0x0, 0x5, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x5, 0x8, 0x8, 0xe, 0x0, 0x28c, 0x1, 0x401, 0x55, 0x0, 0x8000, 0xe7, 0x82, 0x2, 0x5, 0x2, 0x1, 0x10000, 0x0, 0x80, 0x376c, 0x50, 0x81, 0x6, 0x7fff, 0x7ff, 0x9, 0x8, 0x0, 0x4, 0xffff, 0x3, 0xa72, 0x1, 0x1, 0x4, 0x4d6, 0x8, 0x9, 0x2, 0x4, 0xaac, 0x72eb, 0x101, 0x5b, 0x9, 0x100, 0x7, 0xdd0, 0xfffffff7, 0x3, 0x4, 0x7fffffff, 0x1, 0xa8, 0x0, 0x7a2, 0x8, 0x40000, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x10000, 0x7fffffff, 0x8, 0x6, 0x3, 0x6, 0x5, 0x20, 0x49, 0xcc8, 0x9, 0x9, 0x8001, 0x10000, 0x4c9, 0x1, 0x6, 0x10001, 0x8, 0x1f, 0x7, 0x1f, 0xfffffff9, 0x400, 0x6f30, 0x3, 0x4, 0xfffffffa, 0xfff, 0x800, 0x5, 0x0, 0x800, 0x40, 0x4, 0x81, 0x0, 0x2, 0x80000001, 0x5, 0x1, 0x9, 0x3, 0x3, 0x20, 0xb, 0x7, 0x4, 0x3, 0x9, 0x53, 0xfffffffc, 0x3ff, 0x2, 0xaf5, 0xff5b, 0x8, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0x9, 0x2, 0xc860, 0x1, 0xfa9, 0x0, 0x5c7d, 0x7fffffff, 0x515, 0x3, 0x81, 0xfff, 0x2b, 0x8000, 0x2, 0xfffffffd, 0x8000, 0x8, 0x2, 0x0, 0x68, 0x9, 0xddf3, 0xf0, 0x1, 0xff, 0x6, 0x2, 0x3, 0x1, 0x4, 0x81, 0x6, 0x101, 0x8, 0x4, 0x200, 0x6, 0x6, 0x4, 0x1, 0xc741, 0x3, 0x7ff, 0x944, 0x1, 0x4, 0xb891, 0x7fff, 0x0, 0x2, 0x80, 0x5, 0x2, 0x3, 0x200, 0x6f8, 0x82, 0x9, 0x8, 0xfff, 0x6d9, 0x2, 0x4, 0x20, 0x6, 0xc95e, 0xffff, 0x0, 0x5838, 0x7, 0x10000, 0x7, 0x200, 0x2, 0x3f, 0x8001, 0x9, 0xfffffffd, 0x7, 0x5, 0x101, 0x3, 0x7fffffff, 0x0, 0xff, 0x1ff, 0xfffffff7, 0x10001, 0x7, 0xfffffff8, 0x6, 0x4159, 0x3, 0xfa12, 0x9, 0x400, 0x80000000, 0x7, 0x6, 0x8, 0x0, 0x1, 0x7ff, 0x7fff, 0x3, 0x9, 0x4a, 0x0, 0xfffffffa, 0xbb, 0x7ff, 0x3, 0x40, 0x47cf4ad1, 0xfff, 0x400, 0xffffffff, 0xfffffffe, 0xbd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9868, 0x2, 0x3, 0x8, 0x3, {0x3a, 0x2, 0x800, 0x1, 0x81, 0x4}, {0x81, 0x1, 0x42e, 0x5, 0x0, 0x4}, 0x10000, 0xe75}}]}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa9c2, 0x4, 0x4, 0x3f, 0xffff, {0x20, 0x0, 0x7, 0x9, 0x8, 0x4}, {0xdc, 0x0, 0xf5, 0x9, 0x3, 0x8}, 0x0, 0x81, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x81, 0x0, 0x1, 0xeb8, 0x2, 0x3, 0x5, 0x438a, 0x2, 0x5, 0x3, 0x8, 0x1e, 0x0, 0x400, 0x7, 0x3, 0xffffffff, 0x0, 0xea61, 0x4, 0x1f, 0xfffffff8, 0x800, 0x10001, 0x1, 0x8000, 0xa5, 0x800, 0x3, 0x0, 0x8, 0x100, 0xfffffc00, 0x1, 0x80000000, 0x0, 0xf38, 0x6, 0xfff, 0x4553, 0x3, 0x6, 0x1, 0x3, 0x7ea, 0x5, 0x3f, 0xfffffff8, 0x2eb, 0x7, 0x2, 0x40, 0x7, 0x0, 0x800, 0xffffffff, 0x1d73, 0x8, 0x2, 0x4, 0xffffff9b, 0x1000, 0x5, 0x80000001, 0xb07, 0x3, 0x0, 0x9, 0x7ff, 0x3, 0x2, 0xfd, 0x2, 0x1, 0xffffffff, 0x6, 0x6, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x0, 0x20, 0x5, 0xffffffff, 0x80000001, 0xc8, 0x4, 0x7, 0x5, 0x1, 0xfffffff9, 0x20, 0xffffffff, 0x0, 0x5, 0xa, 0x4, 0xfffff001, 0x2, 0x1, 0x3, 0x7ff, 0x1, 0x80, 0x6, 0x80000000, 0x9, 0x1ce, 0x3e60, 0xffffffff, 0x2d97, 0x100, 0x1000000, 0xfffffffa, 0x732e, 0x9, 0x1ff, 0x7fff, 0x4, 0x1, 0x807, 0xae, 0x90, 0xffffff81, 0x1, 0x800, 0xfb, 0x9, 0x13e0, 0x2, 0x1, 0x3, 0xffff, 0x63, 0x5, 0x8, 0x80000001, 0x9, 0x6, 0x6, 0x1000, 0x9, 0x101, 0xa341, 0x7fff, 0x42c702dd, 0xffffffff, 0x200, 0x0, 0x800, 0x8, 0x79, 0x200, 0xffff1047, 0x2, 0x5, 0x3081a982, 0x5, 0x7fff, 0x7f, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0x6, 0x1f, 0x2, 0x6, 0x3, 0x85f, 0x4, 0x1000, 0x1, 0x1, 0x2, 0x7, 0x0, 0x1, 0x100, 0x800, 0x200, 0x3ff, 0x9, 0x3, 0x5, 0x8, 0x499, 0x6, 0x2, 0x80000001, 0x7, 0x3, 0x8, 0x3a56, 0xff, 0x4, 0x40, 0x7, 0x9, 0x80000001, 0x6, 0x7fffffff, 0x0, 0x8, 0x4, 0x3, 0xe953, 0x1, 0x7, 0x0, 0x7bde, 0x80, 0xfffffffc, 0x1f, 0x6, 0x7f, 0x4, 0xdf08, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x4257, 0xfffffffe, 0x7, 0x4, 0x982, 0x6c3, 0x3, 0x2, 0x1ff, 0xdd, 0x2, 0x2, 0x6, 0x5, 0x20, 0x0, 0xb6e, 0x80, 0x1, 0x0, 0x0, 0x453e, 0x7, 0x0, 0x7, 0x0, 0x45ce50c4, 0x752]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x4, 0x9, 0x5, 0x4, 0x6, 0x2, 0x0, 0x7, 0x0, 0xfffffe01, 0xffff, 0x753, 0x5, 0x80, 0x1f, 0x5, 0x7ff, 0x1f, 0x6, 0x7, 0x4da476f4, 0xdc, 0x0, 0x4, 0xfffffffc, 0x7f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x2, 0x54d2, 0x7, 0x2, 0x3, 0x6, 0x7ff, 0x80000001, 0x7, 0x0, 0x7, 0x4f16, 0x87, 0x0, 0x1f, 0x401, 0x80, 0x7fffffff, 0x6296, 0x7, 0x81, 0xfff, 0x6, 0x0, 0x1, 0x400, 0xffffffe0, 0x401, 0x1ff, 0x7, 0x9, 0x1cc0, 0x7fffffff, 0x1, 0x7, 0x6, 0xfffffc00, 0x6, 0x57, 0x1944, 0x3, 0x19e, 0x8, 0x0, 0x3, 0x4, 0xfffffff8, 0xeb0, 0x3f, 0xfffffff7, 0x1, 0xdd7, 0x2, 0x7f, 0x34066d49, 0x5, 0x7d1, 0x8, 0x89, 0x6, 0x80, 0x7, 0x3, 0x8, 0x5, 0x8, 0x2, 0x0, 0x2, 0x101, 0x8000, 0x7, 0x0, 0x8, 0x1000, 0x8, 0x4, 0xffffff03, 0x7, 0x3f, 0x0, 0xfff, 0xffff, 0xec40, 0x4, 0x7, 0x1a2, 0x6, 0x8, 0x5, 0x1ff, 0x7f, 0xbf, 0x400, 0x5, 0x3, 0x3, 0x1, 0x0, 0x20, 0x2, 0x0, 0xba10, 0x81, 0x9, 0x7, 0x1, 0x1, 0x4, 0x78, 0x2, 0x10001, 0x2, 0x0, 0x3f, 0x0, 0xff, 0x9, 0x1000, 0x0, 0x1, 0x6, 0x9, 0x5, 0x1, 0x9, 0x100, 0x1, 0x7, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xfff, 0xffffffff, 0x670, 0x8, 0x8000, 0x8, 0x0, 0x9e08, 0x7fff, 0x3, 0x2, 0x0, 0xffffffff, 0xff, 0x2, 0x3bb, 0x4, 0x100, 0x9, 0x7, 0x1, 0x1, 0xfff00000, 0x2, 0x0, 0x1, 0x2, 0x8, 0x3, 0x7cd1, 0x4, 0xeae7, 0x1, 0x800, 0x888, 0x1, 0x2, 0x7fffffff, 0x40, 0x401, 0x81, 0x4, 0x20, 0x6, 0x372, 0x8, 0x1, 0xb3c2, 0x0, 0x80000000, 0x6, 0x2, 0x6, 0x59a, 0x4, 0x0, 0x80000001, 0xe5a3, 0x7, 0x1f, 0x400, 0x7, 0x7fff, 0x9, 0x2, 0xfffffffb, 0x2, 0x6, 0xee, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x4, 0x0, 0x1fc0, 0x9, 0x1, 0x4, 0x9, 0xfffeffff, 0x0, 0x8000, 0x8557, 0x1, 0x3, 0x688, 0x9, 0xc8ea, 0x68c1]}]}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0xd0}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) syz_open_pts(r1, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000100)={0x0, 0x7}) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x4168) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000002800)=0xa, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001240)={'syztnl0\x00', &(0x7f0000001180)={'syztnl0\x00', 0x0, 0x7800, 0x9, 0x1, 0x7, {{0x1a, 0x4, 0x3, 0x30, 0x68, 0x65, 0x0, 0xff, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x27, 0xcd, [@empty, @empty, @local, @private=0x3, @local, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x2, [{@local, 0x4f1}]}, @ssrr={0x89, 0x1b, 0x7b, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) creat(&(0x7f0000002840)='./file0\x00', 0x8) (async) sendmsg$nl_route_sched(r4, &(0x7f00000027c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002780)={&(0x7f0000001280)=@newchain={0x14f4, 0x64, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x3, 0x3}, {0xa, 0x6}, {0xffe0, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14c0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_POLICE={0xc4c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x800, 0xbca1, 0x0, 0x7fff, 0x4, 0x4, 0x10000, 0x4e, 0x8000, 0x1, 0x80, 0x86, 0x400, 0x8, 0x3ff, 0x9, 0x5, 0x9, 0x401, 0x80, 0x800, 0x1000, 0x6, 0x8c17, 0x0, 0x7, 0x3, 0x4, 0x100, 0x1, 0x1, 0x5, 0x800, 0x3f, 0x4, 0x4, 0x1, 0x5, 0x0, 0x401, 0x6, 0x5, 0x7, 0x4, 0xf5c, 0x6, 0x3, 0x6, 0x0, 0x71b, 0x401, 0x8000, 0x800, 0x80000000, 0x1ff, 0x1f, 0x8, 0x2, 0x40, 0x8, 0xffff, 0x1ff, 0xfffffffe, 0x2, 0x5b00, 0xffff, 0x6, 0x46, 0x4, 0xd4f, 0xc, 0x8, 0x4, 0x3ff, 0x101, 0xc338, 0x1, 0x0, 0x3, 0x5, 0xb2c, 0x8d3, 0xa9a, 0xe634, 0x6, 0x5, 0x6d35e4c2, 0xfffffffb, 0x7, 0x17, 0x5, 0xbbd8, 0x4, 0x4, 0x1, 0xf73, 0x8, 0xbc3, 0x0, 0xffffff7f, 0x1, 0x6b4, 0x4, 0x10001, 0xd0, 0x7, 0x101, 0xdce, 0x6, 0x1, 0x1, 0x320, 0xa8, 0x1, 0x6, 0x8, 0x4040000, 0x1, 0xc0, 0xc6d6, 0x5, 0x4, 0x80000000, 0xe7e8, 0xb8a9260, 0x9, 0x6, 0x7, 0x100000, 0x3, 0x6, 0x6e, 0x7fff, 0x1, 0x20, 0x1cb1bed, 0x661, 0x5, 0x6, 0x3, 0xfff, 0x7fffffff, 0x7, 0x1ff, 0x82aa, 0x9, 0x8, 0x8001, 0x2, 0x6, 0x5, 0x9, 0x9, 0x8, 0x1f, 0x5, 0x80000000, 0x7, 0x7, 0x6, 0x401, 0x7f, 0x20, 0xe00, 0x1, 0x2, 0x8, 0x1, 0x409, 0x3ff, 0x5, 0x2, 0xc000000, 0x1, 0x9, 0x7f, 0x8, 0x1, 0xbe3, 0x3, 0xa4, 0x6, 0x5, 0x7, 0x1c2, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x1, 0x5, 0xfe, 0x8, 0x2, 0x7, 0x2, 0x1, 0x20, 0x2, 0x4, 0x80000000, 0x2, 0xfffffff9, 0x7fffffff, 0x200, 0x1, 0x4, 0xffff, 0x0, 0xd6, 0x7, 0x8000, 0x40, 0x3f, 0x100, 0xd8, 0xffff7ecc, 0x1, 0x400, 0xed90, 0x800, 0x0, 0xde4, 0x200, 0x6cf, 0x9, 0x225, 0x7, 0x2, 0x0, 0x2, 0x400, 0x4570d9e4, 0x1, 0x8, 0x5, 0x10001, 0x0, 0x80, 0x3, 0x7, 0x3, 0x7f, 0x3, 0x1, 0xff, 0x7, 0x63, 0x8, 0x40, 0x6, 0xe6d, 0x1, 0x800, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xf96, 0x3f, 0x0, 0xffffffb9, 0x200, 0x9, 0x80000000, 0x400, 0x2c, 0x401, 0xffffffe6, 0x8, 0x8, 0x1ff, 0x2, 0x5, 0xbaf, 0x10001, 0x2, 0x20, 0x401, 0x3, 0x3d, 0x2, 0x4, 0x20, 0x60c, 0x113, 0x10000, 0x2, 0x2, 0x200, 0xf4f, 0xfff, 0xd3, 0x17, 0x400, 0x200, 0xfffffffa, 0x3, 0xdbe, 0x203, 0x1, 0x4, 0xb38, 0x6, 0x5, 0x7, 0x6, 0x8c6, 0x63400000, 0x2, 0x0, 0x1, 0x6, 0x913, 0x7fff, 0x1, 0x7, 0x9, 0x9, 0x8, 0x9, 0xfffffffa, 0xc3c, 0x9, 0x7ff, 0x3c, 0xfffffff9, 0x6, 0x1000, 0x1, 0x7000, 0x9, 0x7, 0x7ff, 0x7fff, 0x6, 0x7fffffff, 0x800, 0x6, 0x1ff, 0x8000, 0x0, 0xe835, 0x81, 0x8a, 0x9, 0x3, 0x8, 0x4, 0xfff, 0x10000, 0x6, 0x8, 0xfffffffc, 0xfffffffb, 0x7, 0x0, 0x2, 0x401, 0x3, 0xf98, 0x5, 0xff, 0x100, 0x2, 0xfffffffe, 0x5, 0x0, 0x7, 0x100, 0x2, 0x3, 0x1, 0x5, 0x6, 0x2, 0x9, 0x0, 0x56d1, 0x4, 0x5, 0x8, 0x2, 0x4, 0xd1, 0xc14, 0x9, 0x8001, 0x7, 0x3, 0x5, 0x9, 0x3, 0x3, 0xc37, 0x3, 0x4, 0x410, 0x100, 0x3, 0x2b, 0x3, 0x1, 0x5, 0x20, 0x1, 0x9, 0x9, 0x3, 0x9, 0x3, 0x7fffffff, 0x598, 0x9, 0x9, 0x80000001, 0x5, 0x6d, 0x7, 0x6, 0x20, 0x5, 0xd81b, 0x8, 0xf8, 0x6, 0x3, 0x1, 0xac, 0x0, 0xff, 0x0, 0x40, 0xe5b8, 0x6, 0x100, 0x0, 0x3f3a4d97, 0x4, 0x80000, 0xff, 0x5180, 0x1ff, 0x40, 0x1ff, 0x9, 0x3, 0x9, 0xffff, 0x9, 0x7, 0x256b, 0x1, 0x4, 0x5, 0x1000, 0x1, 0x1ff, 0x6, 0x1fe00000, 0x9, 0x5, 0x81, 0x7fff, 0x5e, 0x200, 0x6, 0x4, 0x2, 0x1, 0x100, 0xff, 0x1, 0x8, 0x1, 0x1cdb, 0x3ff, 0x0, 0x6, 0xfc50, 0x6, 0xfb86, 0x40, 0x400000, 0x0, 0x6b9f, 0xab89, 0x5, 0x1f, 0x9, 0x5, 0x3, 0x1, 0x20000000, 0x100, 0x1, 0x86b7, 0x7fffffff, 0x5, 0x6, 0x1, 0xffffffff, 0xfffffffc, 0x1000, 0x8, 0x7, 0x20, 0x5, 0x977, 0x0, 0x5, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x5, 0x8, 0x8, 0xe, 0x0, 0x28c, 0x1, 0x401, 0x55, 0x0, 0x8000, 0xe7, 0x82, 0x2, 0x5, 0x2, 0x1, 0x10000, 0x0, 0x80, 0x376c, 0x50, 0x81, 0x6, 0x7fff, 0x7ff, 0x9, 0x8, 0x0, 0x4, 0xffff, 0x3, 0xa72, 0x1, 0x1, 0x4, 0x4d6, 0x8, 0x9, 0x2, 0x4, 0xaac, 0x72eb, 0x101, 0x5b, 0x9, 0x100, 0x7, 0xdd0, 0xfffffff7, 0x3, 0x4, 0x7fffffff, 0x1, 0xa8, 0x0, 0x7a2, 0x8, 0x40000, 0xfffffffc, 0x4, 0x0, 0x8, 0x3, 0x9, 0x9, 0x4, 0x4, 0x3, 0x0, 0x10000, 0x7fffffff, 0x8, 0x6, 0x3, 0x6, 0x5, 0x20, 0x49, 0xcc8, 0x9, 0x9, 0x8001, 0x10000, 0x4c9, 0x1, 0x6, 0x10001, 0x8, 0x1f, 0x7, 0x1f, 0xfffffff9, 0x400, 0x6f30, 0x3, 0x4, 0xfffffffa, 0xfff, 0x800, 0x5, 0x0, 0x800, 0x40, 0x4, 0x81, 0x0, 0x2, 0x80000001, 0x5, 0x1, 0x9, 0x3, 0x3, 0x20, 0xb, 0x7, 0x4, 0x3, 0x9, 0x53, 0xfffffffc, 0x3ff, 0x2, 0xaf5, 0xff5b, 0x8, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3, 0x9, 0x2, 0xc860, 0x1, 0xfa9, 0x0, 0x5c7d, 0x7fffffff, 0x515, 0x3, 0x81, 0xfff, 0x2b, 0x8000, 0x2, 0xfffffffd, 0x8000, 0x8, 0x2, 0x0, 0x68, 0x9, 0xddf3, 0xf0, 0x1, 0xff, 0x6, 0x2, 0x3, 0x1, 0x4, 0x81, 0x6, 0x101, 0x8, 0x4, 0x200, 0x6, 0x6, 0x4, 0x1, 0xc741, 0x3, 0x7ff, 0x944, 0x1, 0x4, 0xb891, 0x7fff, 0x0, 0x2, 0x80, 0x5, 0x2, 0x3, 0x200, 0x6f8, 0x82, 0x9, 0x8, 0xfff, 0x6d9, 0x2, 0x4, 0x20, 0x6, 0xc95e, 0xffff, 0x0, 0x5838, 0x7, 0x10000, 0x7, 0x200, 0x2, 0x3f, 0x8001, 0x9, 0xfffffffd, 0x7, 0x5, 0x101, 0x3, 0x7fffffff, 0x0, 0xff, 0x1ff, 0xfffffff7, 0x10001, 0x7, 0xfffffff8, 0x6, 0x4159, 0x3, 0xfa12, 0x9, 0x400, 0x80000000, 0x7, 0x6, 0x8, 0x0, 0x1, 0x7ff, 0x7fff, 0x3, 0x9, 0x4a, 0x0, 0xfffffffa, 0xbb, 0x7ff, 0x3, 0x40, 0x47cf4ad1, 0xfff, 0x400, 0xffffffff, 0xfffffffe, 0xbd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9868, 0x2, 0x3, 0x8, 0x3, {0x3a, 0x2, 0x800, 0x1, 0x81, 0x4}, {0x81, 0x1, 0x42e, 0x5, 0x0, 0x4}, 0x10000, 0xe75}}]}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa9c2, 0x4, 0x4, 0x3f, 0xffff, {0x20, 0x0, 0x7, 0x9, 0x8, 0x4}, {0xdc, 0x0, 0xf5, 0x9, 0x3, 0x8}, 0x0, 0x81, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x81, 0x0, 0x1, 0xeb8, 0x2, 0x3, 0x5, 0x438a, 0x2, 0x5, 0x3, 0x8, 0x1e, 0x0, 0x400, 0x7, 0x3, 0xffffffff, 0x0, 0xea61, 0x4, 0x1f, 0xfffffff8, 0x800, 0x10001, 0x1, 0x8000, 0xa5, 0x800, 0x3, 0x0, 0x8, 0x100, 0xfffffc00, 0x1, 0x80000000, 0x0, 0xf38, 0x6, 0xfff, 0x4553, 0x3, 0x6, 0x1, 0x3, 0x7ea, 0x5, 0x3f, 0xfffffff8, 0x2eb, 0x7, 0x2, 0x40, 0x7, 0x0, 0x800, 0xffffffff, 0x1d73, 0x8, 0x2, 0x4, 0xffffff9b, 0x1000, 0x5, 0x80000001, 0xb07, 0x3, 0x0, 0x9, 0x7ff, 0x3, 0x2, 0xfd, 0x2, 0x1, 0xffffffff, 0x6, 0x6, 0xfffffff9, 0x2, 0x9, 0x3ff, 0x0, 0x20, 0x5, 0xffffffff, 0x80000001, 0xc8, 0x4, 0x7, 0x5, 0x1, 0xfffffff9, 0x20, 0xffffffff, 0x0, 0x5, 0xa, 0x4, 0xfffff001, 0x2, 0x1, 0x3, 0x7ff, 0x1, 0x80, 0x6, 0x80000000, 0x9, 0x1ce, 0x3e60, 0xffffffff, 0x2d97, 0x100, 0x1000000, 0xfffffffa, 0x732e, 0x9, 0x1ff, 0x7fff, 0x4, 0x1, 0x807, 0xae, 0x90, 0xffffff81, 0x1, 0x800, 0xfb, 0x9, 0x13e0, 0x2, 0x1, 0x3, 0xffff, 0x63, 0x5, 0x8, 0x80000001, 0x9, 0x6, 0x6, 0x1000, 0x9, 0x101, 0xa341, 0x7fff, 0x42c702dd, 0xffffffff, 0x200, 0x0, 0x800, 0x8, 0x79, 0x200, 0xffff1047, 0x2, 0x5, 0x3081a982, 0x5, 0x7fff, 0x7f, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0x6, 0x1f, 0x2, 0x6, 0x3, 0x85f, 0x4, 0x1000, 0x1, 0x1, 0x2, 0x7, 0x0, 0x1, 0x100, 0x800, 0x200, 0x3ff, 0x9, 0x3, 0x5, 0x8, 0x499, 0x6, 0x2, 0x80000001, 0x7, 0x3, 0x8, 0x3a56, 0xff, 0x4, 0x40, 0x7, 0x9, 0x80000001, 0x6, 0x7fffffff, 0x0, 0x8, 0x4, 0x3, 0xe953, 0x1, 0x7, 0x0, 0x7bde, 0x80, 0xfffffffc, 0x1f, 0x6, 0x7f, 0x4, 0xdf08, 0x7fff, 0x6, 0x6, 0x9, 0x8, 0x4257, 0xfffffffe, 0x7, 0x4, 0x982, 0x6c3, 0x3, 0x2, 0x1ff, 0xdd, 0x2, 0x2, 0x6, 0x5, 0x20, 0x0, 0xb6e, 0x80, 0x1, 0x0, 0x0, 0x453e, 0x7, 0x0, 0x7, 0x0, 0x45ce50c4, 0x752]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x4, 0x9, 0x5, 0x4, 0x6, 0x2, 0x0, 0x7, 0x0, 0xfffffe01, 0xffff, 0x753, 0x5, 0x80, 0x1f, 0x5, 0x7ff, 0x1f, 0x6, 0x7, 0x4da476f4, 0xdc, 0x0, 0x4, 0xfffffffc, 0x7f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x2, 0x54d2, 0x7, 0x2, 0x3, 0x6, 0x7ff, 0x80000001, 0x7, 0x0, 0x7, 0x4f16, 0x87, 0x0, 0x1f, 0x401, 0x80, 0x7fffffff, 0x6296, 0x7, 0x81, 0xfff, 0x6, 0x0, 0x1, 0x400, 0xffffffe0, 0x401, 0x1ff, 0x7, 0x9, 0x1cc0, 0x7fffffff, 0x1, 0x7, 0x6, 0xfffffc00, 0x6, 0x57, 0x1944, 0x3, 0x19e, 0x8, 0x0, 0x3, 0x4, 0xfffffff8, 0xeb0, 0x3f, 0xfffffff7, 0x1, 0xdd7, 0x2, 0x7f, 0x34066d49, 0x5, 0x7d1, 0x8, 0x89, 0x6, 0x80, 0x7, 0x3, 0x8, 0x5, 0x8, 0x2, 0x0, 0x2, 0x101, 0x8000, 0x7, 0x0, 0x8, 0x1000, 0x8, 0x4, 0xffffff03, 0x7, 0x3f, 0x0, 0xfff, 0xffff, 0xec40, 0x4, 0x7, 0x1a2, 0x6, 0x8, 0x5, 0x1ff, 0x7f, 0xbf, 0x400, 0x5, 0x3, 0x3, 0x1, 0x0, 0x20, 0x2, 0x0, 0xba10, 0x81, 0x9, 0x7, 0x1, 0x1, 0x4, 0x78, 0x2, 0x10001, 0x2, 0x0, 0x3f, 0x0, 0xff, 0x9, 0x1000, 0x0, 0x1, 0x6, 0x9, 0x5, 0x1, 0x9, 0x100, 0x1, 0x7, 0xffffffff, 0xffff, 0x3ff, 0x2, 0xfff, 0xffffffff, 0x670, 0x8, 0x8000, 0x8, 0x0, 0x9e08, 0x7fff, 0x3, 0x2, 0x0, 0xffffffff, 0xff, 0x2, 0x3bb, 0x4, 0x100, 0x9, 0x7, 0x1, 0x1, 0xfff00000, 0x2, 0x0, 0x1, 0x2, 0x8, 0x3, 0x7cd1, 0x4, 0xeae7, 0x1, 0x800, 0x888, 0x1, 0x2, 0x7fffffff, 0x40, 0x401, 0x81, 0x4, 0x20, 0x6, 0x372, 0x8, 0x1, 0xb3c2, 0x0, 0x80000000, 0x6, 0x2, 0x6, 0x59a, 0x4, 0x0, 0x80000001, 0xe5a3, 0x7, 0x1f, 0x400, 0x7, 0x7fff, 0x9, 0x2, 0xfffffffb, 0x2, 0x6, 0xee, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x4, 0x0, 0x1fc0, 0x9, 0x1, 0x4, 0x9, 0xfffeffff, 0x0, 0x8000, 0x8557, 0x1, 0x3, 0x688, 0x9, 0xc8ea, 0x68c1]}]}]}}]}, 0x14f4}, 0x1, 0x0, 0x0, 0xd0}, 0x4) (async) 02:39:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xec) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSIG(r3, 0x40045436, 0x35) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) [ 2943.620721][T18602] Bluetooth: hci0: Frame reassembly failed (-84) 02:39:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) r3 = syz_open_pts(r2, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) [ 2943.671771][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 2943.694086][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2943.700644][T21660] Bluetooth: hci5: Frame reassembly failed (-84) 02:39:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:39:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x401, 0xee6, 0x5, 0x2, 0x4, "7a1e6685660fda98"}) [ 2944.250582][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2944.795947][T12161] Bluetooth: hci8: command 0x1009 tx timeout [ 2945.675877][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 2945.682309][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2945.688413][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 2945.694415][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2945.756014][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 2945.762063][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2946.315910][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 2946.315915][T20519] Bluetooth: hci4: command 0x1003 tx timeout [ 2946.322116][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 2946.328463][T17107] Bluetooth: hci3: sending frame failed (-49) [ 2947.755959][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2947.762236][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 2947.762317][T17107] Bluetooth: hci0: sending frame failed (-49) [ 2947.768416][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2947.835962][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 2947.842096][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2948.395954][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 2948.395958][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 2948.407980][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2948.414085][ T8283] Bluetooth: hci4: sending frame failed (-49) 02:39:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80087601, &(0x7f00000000c0)=0x4) [ 2948.730342][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2949.835905][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2949.835909][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 2949.915972][T20519] Bluetooth: hci5: command 0x1009 tx timeout [ 2950.475889][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 2950.482233][T20519] Bluetooth: hci3: command 0x1009 tx timeout [ 2950.795937][T20519] Bluetooth: hci6: command 0x1003 tx timeout [ 2950.802248][ T8283] Bluetooth: hci6: sending frame failed (-49) [ 2952.875936][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 2952.881971][ T8283] Bluetooth: hci6: sending frame failed (-49) 02:39:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0045878, 0x0) 02:39:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) r3 = syz_open_pts(r2, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCXONC(r1, 0x540a, 0x1) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) (async) syz_open_pts(r2, 0x100) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) (async) 02:39:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xec) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x8) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSIG(r3, 0x40045436, 0x35) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) [ 2953.862176][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 2953.865554][T21681] Bluetooth: hci2: Frame reassembly failed (-84) [ 2953.876514][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 2953.882941][T17034] Bluetooth: hci5: Frame reassembly failed (-84) 02:39:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x401, 0xee6, 0x5, 0x2, 0x4, "7a1e6685660fda98"}) 02:39:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 32) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:39:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) [ 2954.955873][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2955.915869][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2955.915931][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2955.921933][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2955.927887][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2955.933911][T17107] Bluetooth: hci2: sending frame failed (-49) [ 2955.940076][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2956.555879][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 2956.555885][T20519] Bluetooth: hci3: command 0x1003 tx timeout [ 2956.556180][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2956.561998][T17107] Bluetooth: hci4: sending frame failed (-49) [ 2957.995940][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2957.995954][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 2958.001967][T17107] Bluetooth: hci2: sending frame failed (-49) [ 2958.007959][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2958.020034][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 2958.026054][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2958.635946][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2958.635951][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 2958.636007][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2958.641963][T17107] Bluetooth: hci4: sending frame failed (-49) 02:39:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xec) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSIG(r3, 0x40045436, 0x35) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) [ 2958.968162][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2960.075904][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2960.075909][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 2960.075929][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 2960.715887][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 2960.715907][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 2961.035909][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 2961.042001][T17107] Bluetooth: hci6: sending frame failed (-49) [ 2963.115941][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 2963.121963][T17107] Bluetooth: hci6: sending frame failed (-49) 02:39:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc0189436, 0x0) 02:39:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xec) (async, rerun: 32) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSIG(r3, 0x40045436, 0x35) (async, rerun: 64) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) 02:39:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000) r3 = syz_open_pts(r2, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000180)) [ 2964.101515][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 2964.108888][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2964.115301][T21726] Bluetooth: hci5: Frame reassembly failed (-84) 02:39:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) (async) ioctl$TCFLSH(r1, 0x540b, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) 02:39:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) (async) [ 2964.730279][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 2964.731977][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2965.195952][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2966.155882][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2966.155895][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2966.161986][T17107] Bluetooth: hci5: sending frame failed (-49) [ 2966.167885][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2966.180049][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 2966.186106][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 2966.795909][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2966.795913][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2966.795994][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2966.802052][T17107] Bluetooth: hci4: sending frame failed (-49) [ 2968.235953][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 2968.235974][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2968.241987][T17107] Bluetooth: hci0: sending frame failed (-49) [ 2968.247943][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 2968.254136][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 2968.266049][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 2968.875948][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2968.875952][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2968.876007][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 2968.881961][T17107] Bluetooth: hci4: sending frame failed (-49) 02:39:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f00000000c0)=0x4) [ 2969.210592][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2970.315893][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 2970.315897][T20530] Bluetooth: hci0: command 0x1009 tx timeout [ 2970.327864][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 2970.955910][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2970.955914][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 2971.275982][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 2971.282037][T17107] Bluetooth: hci6: sending frame failed (-49) [ 2973.355950][T12161] Bluetooth: hci6: command 0x1001 tx timeout [ 2973.362012][T17107] Bluetooth: hci6: sending frame failed (-49) 02:39:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0xc020660b, 0x0) 02:39:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x414600, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x80}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) 02:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x37) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 2974.345956][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 2974.350733][T21751] Bluetooth: hci5: Frame reassembly failed (-84) [ 2974.356496][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2974.365039][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2974.365056][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2974.378660][T21753] Bluetooth: hci7: Frame reassembly failed (-84) 02:39:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:39:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 02:39:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:39:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:39:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x5, 0x70, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x8, 0x4, 0xdb06, 0x3, 0x6, "30580eb11d7ceb0a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x80f) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3f) ioctl$KIOCSOUND(r3, 0x4b2f, 0xffffffffffffff12) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 2974.968960][T20858] Bluetooth: hci3: sending frame failed (-49) [ 2975.000648][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2975.007227][T21766] Bluetooth: hci4: Frame reassembly failed (-84) [ 2975.016873][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 2975.435878][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2976.395906][T20519] Bluetooth: hci7: command 0x1003 tx timeout [ 2976.402264][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 2976.402312][T21332] Bluetooth: hci7: sending frame failed (-49) [ 2976.408639][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2976.420331][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2976.420348][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2976.426340][T14039] Bluetooth: hci0: sending frame failed (-49) [ 2976.438496][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2977.035889][T19652] Bluetooth: hci8: command 0x1003 tx timeout [ 2977.041972][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 2977.042047][T14039] Bluetooth: hci8: sending frame failed (-49) [ 2977.048310][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2977.060152][T14039] Bluetooth: hci3: sending frame failed (-49) [ 2977.060163][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2978.475947][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2978.475951][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2978.475973][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 2978.481980][T14039] Bluetooth: hci2: sending frame failed (-49) [ 2978.488012][T21332] Bluetooth: hci7: sending frame failed (-49) [ 2978.494222][T14039] Bluetooth: hci0: sending frame failed (-49) [ 2978.512259][T20519] Bluetooth: hci5: command 0x1001 tx timeout [ 2978.518381][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2979.115946][T20519] Bluetooth: hci3: command 0x1001 tx timeout [ 2979.115951][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 2979.127993][T14039] Bluetooth: hci3: sending frame failed (-49) [ 2979.134062][T20519] Bluetooth: hci8: command 0x1001 tx timeout [ 2979.140122][T14039] Bluetooth: hci8: sending frame failed (-49) [ 2979.146284][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2979.152840][T17034] Bluetooth: hci4: Frame reassembly failed (-84) 02:39:48 executing program 1: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x2, 0x12d, 0x71b, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 2979.447846][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2979.454323][T21769] Bluetooth: hci6: Frame reassembly failed (-84) [ 2979.460802][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2980.555895][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 2980.555900][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 2980.555927][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 2980.573874][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 2981.195917][T20531] Bluetooth: hci8: command 0x1009 tx timeout [ 2981.201947][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 2981.207948][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 2981.515901][T20531] Bluetooth: hci9: command 0x1003 tx timeout [ 2981.521896][T20531] Bluetooth: hci6: command 0x1003 tx timeout [ 2981.521940][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2981.528372][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 2983.595981][T19652] Bluetooth: hci9: command 0x1001 tx timeout [ 2983.595986][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 2983.608026][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2983.614103][T18602] Bluetooth: hci6: Frame reassembly failed (-84) 02:39:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0xfdfdffff) 02:39:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x37) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:39:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x414600, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x80}) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) [ 2984.577619][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 2984.584086][T17107] Bluetooth: hci2: sending frame failed (-49) [ 2984.599742][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2984.601668][T21783] Bluetooth: hci7: Frame reassembly failed (-84) [ 2984.612996][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:39:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, r1, "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", "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"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xf801, 0x7fff, 0xffff, 0x1, 0x2}}) ioctl$TCFLSH(r0, 0x5437, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) read(r2, &(0x7f00000001c0)=""/142, 0x8e) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6(0xa, 0x3, 0x0) 02:39:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x5, 0x70, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x8, 0x4, 0xdb06, 0x3, 0x6, "30580eb11d7ceb0a"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x80f) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3f) (async, rerun: 64) ioctl$KIOCSOUND(r3, 0x4b2f, 0xffffffffffffff12) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 2985.207795][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2985.266099][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2985.272643][T21790] Bluetooth: hci4: Frame reassembly failed (-84) [ 2985.675869][T19652] Bluetooth: hci9: command 0x1009 tx timeout [ 2985.681921][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 2986.635876][T19652] Bluetooth: hci7: command 0x1003 tx timeout [ 2986.635880][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 2986.635930][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2986.641935][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 2986.647923][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 2986.654020][T21332] Bluetooth: hci5: sending frame failed (-49) [ 2986.660442][T21330] Bluetooth: hci0: sending frame failed (-49) [ 2986.678177][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 2987.275889][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 2987.275893][T20519] Bluetooth: hci4: command 0x1003 tx timeout [ 2987.286231][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2987.288162][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2987.294287][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2987.355953][T20519] Bluetooth: hci8: command 0x1003 tx timeout [ 2987.362084][T21330] Bluetooth: hci8: sending frame failed (-49) [ 2988.715943][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 2988.715947][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 2988.716003][T21330] Bluetooth: hci5: sending frame failed (-49) [ 2988.721956][T20519] Bluetooth: hci7: command 0x1001 tx timeout [ 2988.727954][T21332] Bluetooth: hci0: sending frame failed (-49) [ 2988.734084][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 2988.740249][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 2988.758421][T21332] Bluetooth: hci2: sending frame failed (-49) [ 2989.355936][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 2989.355940][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 2989.356049][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2989.362176][T21332] Bluetooth: hci3: sending frame failed (-49) [ 2989.368462][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 2989.435952][T19652] Bluetooth: hci8: command 0x1001 tx timeout [ 2989.441991][T21332] Bluetooth: hci8: sending frame failed (-49) 02:39:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x5, 0x70, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x8, 0x4, 0xdb06, 0x3, 0x6, "30580eb11d7ceb0a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x80f) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3f) ioctl$KIOCSOUND(r3, 0x4b2f, 0xffffffffffffff12) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 2989.765076][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 2989.771481][T21799] Bluetooth: hci6: Frame reassembly failed (-84) [ 2989.784610][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 2990.795904][T20519] Bluetooth: hci2: command 0x1009 tx timeout [ 2990.795909][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 2990.795932][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 2990.801915][T20519] Bluetooth: hci7: command 0x1009 tx timeout [ 2991.435886][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 2991.435900][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 2991.515911][T19652] Bluetooth: hci8: command 0x1009 tx timeout [ 2991.835929][T19652] Bluetooth: hci9: command 0x1003 tx timeout [ 2991.841941][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 2991.841986][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2991.848254][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 2993.915952][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 2993.915957][T20530] Bluetooth: hci9: command 0x1001 tx timeout [ 2993.916014][T21332] Bluetooth: hci9: sending frame failed (-49) [ 2993.922753][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) 02:40:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0xfffffdfd) 02:40:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) (rerun: 32) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x37) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:40:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x414600, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x80}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x414600, 0x0) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x80}) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) [ 2994.821204][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 2994.825338][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 2994.834778][T21807] Bluetooth: hci2: Frame reassembly failed (-84) [ 2994.857443][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 2994.860336][T21811] Bluetooth: hci7: Frame reassembly failed (-84) [ 2994.870291][T18602] Bluetooth: hci7: Frame reassembly failed (-84) 02:40:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, r1, "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", "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"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xf801, 0x7fff, 0xffff, 0x1, 0x2}}) ioctl$TCFLSH(r0, 0x5437, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) read(r2, &(0x7f00000001c0)=""/142, 0x8e) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6(0xa, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, r1, "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", "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"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xf801, 0x7fff, 0xffff, 0x1, 0x2}}) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) (async) read(r2, &(0x7f00000001c0)=""/142, 0x8e) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet6(0xa, 0x3, 0x0) (async) 02:40:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x5, 0x70, 0x1}) (rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x8, 0x4, 0xdb06, 0x3, 0x6, "30580eb11d7ceb0a"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (rerun: 64) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x80f) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3f) ioctl$KIOCSOUND(r3, 0x4b2f, 0xffffffffffffff12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 2995.448321][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 2995.496448][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2995.995887][T20530] Bluetooth: hci9: command 0x1009 tx timeout [ 2995.995891][T19679] Bluetooth: hci6: command 0x1009 tx timeout [ 2996.875917][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 2996.875922][T20530] Bluetooth: hci7: command 0x1003 tx timeout [ 2996.875943][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 2996.882008][T21332] Bluetooth: hci7: sending frame failed (-49) [ 2996.888351][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 2996.893992][T21332] Bluetooth: hci0: sending frame failed (-49) [ 2996.900145][T21330] Bluetooth: hci2: sending frame failed (-49) [ 2996.918222][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2997.515915][T20530] Bluetooth: hci8: command 0x1003 tx timeout [ 2997.521940][T21330] Bluetooth: hci8: sending frame failed (-49) [ 2997.528138][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 2997.534135][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 2997.540142][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2997.546282][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 2997.552775][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2998.955944][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 2998.955948][T20519] Bluetooth: hci2: command 0x1001 tx timeout [ 2998.956004][T21330] Bluetooth: hci2: sending frame failed (-49) [ 2998.961967][T21332] Bluetooth: hci0: sending frame failed (-49) [ 2998.968422][T20519] Bluetooth: hci5: command 0x1001 tx timeout [ 2998.974026][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 2998.980219][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 2998.986559][T21330] Bluetooth: hci7: sending frame failed (-49) [ 2999.595985][T20519] Bluetooth: hci3: command 0x1001 tx timeout [ 2999.602029][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 2999.602082][T21330] Bluetooth: hci3: sending frame failed (-49) [ 2999.608477][T20519] Bluetooth: hci8: command 0x1001 tx timeout [ 2999.614269][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 2999.620503][T21330] Bluetooth: hci8: sending frame failed (-49) 02:40:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f00000000c0)=0x4) [ 3000.006667][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3001.035902][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 3001.035906][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 3001.035932][T20530] Bluetooth: hci2: command 0x1009 tx timeout [ 3001.041949][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 3001.675914][T20530] Bluetooth: hci8: command 0x1009 tx timeout [ 3001.675927][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 3001.687913][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3002.075881][T20530] Bluetooth: hci6: command 0x1003 tx timeout [ 3002.081929][T14039] Bluetooth: hci6: sending frame failed (-49) [ 3004.155932][T20519] Bluetooth: hci6: command 0x1001 tx timeout [ 3004.162101][T14039] Bluetooth: hci6: sending frame failed (-49) 02:40:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0xfdfdffff00000000) 02:40:13 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/120, 0x78}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000240)={0x1, 0x7fffffff, 0x8, 0x7ff, 0x19, "207f704d4a8208c00d97790a21d7e2cc1701c9"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r0}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x1f, 0x2, {0x5, @usage=0x4, r3, 0xfffffffffffffffc, 0x5, 0x5, 0x4, 0x1, 0x16, @usage=0x5, 0xfffffffe, 0x6, [0x8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x2]}, {0x4, @usage=0xfffffffffffffffe, 0x0, 0x2000002, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0x6, @usage, 0x7, 0x64b, [0x8001, 0x3, 0x9, 0x3, 0x3000000000000, 0x20]}, {0xffffffffffffffff, @usage=0x9, 0x0, 0x9, 0x0, 0x3, 0xf8000, 0x600000, 0x26a, @usage=0x5, 0x8000, 0x10001, [0x159af59c, 0xe7e92a9, 0x1f, 0x7fffffff, 0x1, 0x5]}, {0x2, 0xffffffffffffffff, 0x6}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) write$bt_hci(r2, &(0x7f0000000b80)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x9}}}, 0xd) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000b40)) 02:40:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r0, &(0x7f0000000000)=0xffffffffebb4748e, 0xfff) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) 02:40:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) sendfile(r1, r0, &(0x7f0000000000)=0xffffffffebb4748e, 0xfff) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) sendfile(r1, r0, &(0x7f0000000000)=0xffffffffebb4748e, 0xfff) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) (async) 02:40:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) sendfile(r1, r0, &(0x7f0000000000)=0xffffffffebb4748e, 0xfff) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) 02:40:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) fcntl$setflags(r1, 0x2, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0xfffffffffffffffd) [ 3005.054468][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3005.068535][T21850] Bluetooth: hci2: Frame reassembly failed (-84) [ 3005.079045][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3005.085413][T21850] Bluetooth: hci2: Frame reassembly failed (-84) [ 3005.118433][T17034] Bluetooth: hci5: Frame reassembly failed (-84) 02:40:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000480)={0x0, r1, "1797f0735563898e383d780e81612efb37ca162eaceb03b65ab6e960a334df8988021113dd020019660f4991992679541a553dd125dd9ca0a89a01f964a4df3e6c535dee08857aaaac0a8d8e4bc867ffe29fd236f71cddbe1596701539ad58d802f865261dc5d98c01811e8cde44090897cdb094edd23941b6746eb84e9e0c3bb737b80e87fef66c191c4950e6d198baa3a68296c66cb0cfe5a6a19868b82cf61bbd43e9a4a0aa23423701c830f487a3b6899898f5243b5aab35bbed0b549d186e3383b7e2c4732a3b192065fcc840668471b80936b18e3f4ca3d8d5ee3e55dd6986aca1ba5ce14e6ae153f8794d886ac91de48a98aa19b1c51417cd7541b091", "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"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xf801, 0x7fff, 0xffff, 0x1, 0x2}}) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) (async) read(r2, &(0x7f00000001c0)=""/142, 0x8e) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet6(0xa, 0x3, 0x0) 02:40:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB='transRfdno=\x00'/21, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',mmap,hash,subj_type=/dev/ptmx\x00,uid>', @ANYRESDEC, @ANYBLOB=',\x00']) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 3005.753875][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3006.235904][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 3007.115929][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 3007.121918][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 3007.121955][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 3007.128639][T11507] Bluetooth: hci0: sending frame failed (-49) [ 3007.195891][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3007.202134][T11507] Bluetooth: hci5: sending frame failed (-49) [ 3007.755925][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3007.761980][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3007.762040][T11507] Bluetooth: hci4: sending frame failed (-49) [ 3007.768400][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3009.195960][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3009.195973][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 3009.202087][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 3009.208064][T11507] Bluetooth: hci0: sending frame failed (-49) [ 3009.275939][T20519] Bluetooth: hci5: command 0x1001 tx timeout [ 3009.281967][T11507] Bluetooth: hci5: sending frame failed (-49) [ 3009.835964][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3009.835969][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 3009.836025][T11507] Bluetooth: hci4: sending frame failed (-49) [ 3009.842018][ T9876] Bluetooth: hci3: sending frame failed (-49) 02:40:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3010.167022][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3011.275915][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3011.275919][T20519] Bluetooth: hci0: command 0x1009 tx timeout [ 3011.355904][T20530] Bluetooth: hci5: command 0x1009 tx timeout [ 3011.915892][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 3011.915896][T20530] Bluetooth: hci4: command 0x1009 tx timeout [ 3012.235925][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3012.242093][ T9876] Bluetooth: hci6: sending frame failed (-49) [ 3014.315926][T20530] Bluetooth: hci6: command 0x1001 tx timeout [ 3014.321997][ T9876] Bluetooth: hci6: sending frame failed (-49) 02:40:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async, rerun: 64) fcntl$setflags(r1, 0x2, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0xfffffffffffffffd) 02:40:24 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async, rerun: 32) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) (rerun: 32) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/120, 0x78}], 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 32) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000240)={0x1, 0x7fffffff, 0x8, 0x7ff, 0x19, "207f704d4a8208c00d97790a21d7e2cc1701c9"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r0}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x1f, 0x2, {0x5, @usage=0x4, r3, 0xfffffffffffffffc, 0x5, 0x5, 0x4, 0x1, 0x16, @usage=0x5, 0xfffffffe, 0x6, [0x8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x2]}, {0x4, @usage=0xfffffffffffffffe, 0x0, 0x2000002, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0x6, @usage, 0x7, 0x64b, [0x8001, 0x3, 0x9, 0x3, 0x3000000000000, 0x20]}, {0xffffffffffffffff, @usage=0x9, 0x0, 0x9, 0x0, 0x3, 0xf8000, 0x600000, 0x26a, @usage=0x5, 0x8000, 0x10001, [0x159af59c, 0xe7e92a9, 0x1f, 0x7fffffff, 0x1, 0x5]}, {0x2, 0xffffffffffffffff, 0x6}}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) (async) write$bt_hci(r2, &(0x7f0000000b80)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x9}}}, 0xd) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000b40)) 02:40:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0xffffffff00000000) 02:40:24 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/120, 0x78}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000240)={0x1, 0x7fffffff, 0x8, 0x7ff, 0x19, "207f704d4a8208c00d97790a21d7e2cc1701c9"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r0}, 0x10) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x1f, 0x2, {0x5, @usage=0x4, r3, 0xfffffffffffffffc, 0x5, 0x5, 0x4, 0x1, 0x16, @usage=0x5, 0xfffffffe, 0x6, [0x8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x2]}, {0x4, @usage=0xfffffffffffffffe, 0x0, 0x2000002, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0x6, @usage, 0x7, 0x64b, [0x8001, 0x3, 0x9, 0x3, 0x3000000000000, 0x20]}, {0xffffffffffffffff, @usage=0x9, 0x0, 0x9, 0x0, 0x3, 0xf8000, 0x600000, 0x26a, @usage=0x5, 0x8000, 0x10001, [0x159af59c, 0xe7e92a9, 0x1f, 0x7fffffff, 0x1, 0x5]}, {0x2, 0xffffffffffffffff, 0x6}}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) write$bt_hci(r2, &(0x7f0000000b80)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x9}}}, 0xd) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000b40)) [ 3015.310414][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3015.321452][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3015.334580][T18602] Bluetooth: hci5: Frame reassembly failed (-84) 02:40:24 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TCFLSH(r1, 0x5437, 0x0) 02:40:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB='transRfdno=\x00'/21, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',mmap,hash,subj_type=/dev/ptmx\x00,uid>', @ANYRESDEC, @ANYBLOB=',\x00']) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB='transRfdno=\x00'/21, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',mmap,hash,subj_type=/dev/ptmx\x00,uid>', @ANYRESDEC, @ANYBLOB=',\x00']) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) [ 3015.931153][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3015.931800][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3016.395890][T20530] Bluetooth: hci6: command 0x1009 tx timeout [ 3017.355891][T20530] Bluetooth: hci5: command 0x1003 tx timeout [ 3017.362252][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 3017.368777][T20530] Bluetooth: hci2: command 0x1003 tx timeout [ 3017.374913][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 3017.381569][T20530] Bluetooth: hci0: command 0x1003 tx timeout [ 3017.387634][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3017.995877][T20530] Bluetooth: hci4: command 0x1003 tx timeout [ 3018.001952][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 3018.008190][T20530] Bluetooth: hci3: command 0x1003 tx timeout [ 3018.014313][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3019.435945][T20530] Bluetooth: hci0: command 0x1001 tx timeout [ 3019.441971][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3019.448234][T20530] Bluetooth: hci2: command 0x1001 tx timeout [ 3019.454252][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 3019.460370][T20530] Bluetooth: hci5: command 0x1001 tx timeout [ 3019.466389][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 3020.075957][T20530] Bluetooth: hci3: command 0x1001 tx timeout [ 3020.081982][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3020.088306][T20530] Bluetooth: hci4: command 0x1001 tx timeout [ 3020.094300][ T9876] Bluetooth: hci4: sending frame failed (-49) 02:40:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3020.407418][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3021.515876][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3021.521875][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3021.527900][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 3022.155902][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3022.161928][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 3022.475907][T20519] Bluetooth: hci6: command 0x1003 tx timeout [ 3022.482046][ T9876] Bluetooth: hci6: sending frame failed (-49) [ 3024.555982][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3024.561994][ T9876] Bluetooth: hci6: sending frame failed (-49) 02:40:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x800, 0x1, 0x59, 0x13, "6cb80bbbfbb364f68d42147ac873f565c9d5b5"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:40:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) fcntl$setflags(r1, 0x2, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455cb, 0xfffffffffffffffd) (rerun: 64) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffc) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffc) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) [ 3025.535376][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3025.553415][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) 02:40:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6fc0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x401, 0x1000, 0x7f, 0x3ff, 0xc, "f62d9eaa0ec3113a719c4e51dbc2d90396576a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x2a) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:34 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TCFLSH(r1, 0x5437, 0x0) socket$pptp(0x18, 0x1, 0x2) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xffffffffffffffff, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r1, 0x5437, 0x0) (async) 02:40:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000001c0)=ANY=[@ANYBLOB='transRfdno=\x00'/21, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',mmap,hash,subj_type=/dev/ptmx\x00,uid>', @ANYRESDEC, @ANYBLOB=',\x00']) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (rerun: 32) [ 3026.171082][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3026.635950][T20519] Bluetooth: hci6: command 0x1009 tx timeout [ 3027.595948][T20519] Bluetooth: hci2: command 0x1003 tx timeout [ 3027.601952][T20519] Bluetooth: hci0: command 0x1003 tx timeout [ 3027.602055][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3027.608366][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3028.235906][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 3028.241998][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 3028.242073][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 3028.248340][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3029.675938][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 3029.675943][T20519] Bluetooth: hci0: command 0x1001 tx timeout [ 3029.687932][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3029.694011][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3030.315941][T20519] Bluetooth: hci4: command 0x1001 tx timeout [ 3030.315945][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 3030.316000][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3030.321969][ T9876] Bluetooth: hci4: sending frame failed (-49) 02:40:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3030.650514][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3031.755930][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 3031.762064][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 3032.395908][T20519] Bluetooth: hci4: command 0x1009 tx timeout [ 3032.395921][T12161] Bluetooth: hci3: command 0x1009 tx timeout [ 3032.715903][T20519] Bluetooth: hci5: command 0x1003 tx timeout [ 3032.721937][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 3034.795933][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 3034.801958][ T9876] Bluetooth: hci5: sending frame failed (-49) 02:40:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x800, 0x1, 0x59, 0x13, "6cb80bbbfbb364f68d42147ac873f565c9d5b5"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:40:44 executing program 4: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xcb) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:40:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6fc0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x401, 0x1000, 0x7f, 0x3ff, 0xc, "f62d9eaa0ec3113a719c4e51dbc2d90396576a"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x2a) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:44 executing program 4: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xcb) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:40:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6fc0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x401, 0x1000, 0x7f, 0x3ff, 0xc, "f62d9eaa0ec3113a719c4e51dbc2d90396576a"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x2a) (async, rerun: 32) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (rerun: 32) 02:40:44 executing program 4: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xcb) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:40:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60c000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:40:44 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/88, 0x58, 0x2, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/204, 0xcc, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x120a, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x1000, 0x0, &(0x7f0000000340)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001380)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000013c0)) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3035.828041][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3035.835554][T22059] Bluetooth: hci2: Frame reassembly failed (-84) [ 3035.854856][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) 02:40:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:40:45 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0xffffffffffffffff, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r1, 0x5437, 0x0) 02:40:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 3036.875912][T12161] Bluetooth: hci5: command 0x1009 tx timeout [ 3037.835887][T22049] Bluetooth: hci0: command 0x1003 tx timeout [ 3037.835900][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 3037.842057][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3037.848048][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3037.915868][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3037.921996][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3038.475917][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 3038.481943][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3039.915953][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 3039.915957][T22049] Bluetooth: hci0: command 0x1001 tx timeout [ 3039.927937][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3039.934026][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3039.995927][T12161] Bluetooth: hci6: command 0x1001 tx timeout [ 3040.001965][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3040.555942][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 3040.561975][T17107] Bluetooth: hci3: sending frame failed (-49) 02:40:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3041.995941][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3042.002056][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3042.076043][T19679] Bluetooth: hci6: command 0x1009 tx timeout [ 3042.635972][T19679] Bluetooth: hci3: command 0x1009 tx timeout 02:40:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x800, 0x1, 0x59, 0x13, "6cb80bbbfbb364f68d42147ac873f565c9d5b5"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x800, 0x1, 0x59, 0x13, "6cb80bbbfbb364f68d42147ac873f565c9d5b5"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:40:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:40:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:40:54 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/88, 0x58, 0x2, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/204, 0xcc, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x120a, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x1000, 0x0, &(0x7f0000000340)="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"}) (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001380)) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000013c0)) (async, rerun: 64) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (rerun: 64) 02:40:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60c000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r0, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60c000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) 02:40:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:40:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x6, 0x1, 0x8000, 0x400, 0x7ff}) [ 3046.024737][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3046.057363][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3046.058561][T17034] Bluetooth: hci4: Frame reassembly failed (-84) 02:40:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:40:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3046.064010][T22089] Bluetooth: hci2: Frame reassembly failed (-84) 02:40:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = signalfd(r1, &(0x7f0000002280)={[0x4]}, 0x8) mount$9p_fd(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={{0x0, 0x0, 0x80}}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x140) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) move_mount(r4, &(0x7f0000002300)='./file0\x00', r3, &(0x7f0000002340)='./file0\x00', 0x40) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/107, 0x6b, 0x8aaf, 0xffffffff}) ioctl$KDADDIO(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x5437, 0x0) 02:40:55 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/88, 0x58, 0x2, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/204, 0xcc, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x120a, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x1000, 0x0, &(0x7f0000000340)="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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001380)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000013c0)) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001340)={0x4c, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/88, 0x58, 0x2, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/204, 0xcc, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x120a, 0x1}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x1000, 0x0, &(0x7f0000000340)="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"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001380)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000013c0)) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:40:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3046.650741][T21343] Bluetooth: hci3: Frame reassembly failed (-84) [ 3046.704187][T21343] Bluetooth: hci5: Frame reassembly failed (-84) [ 3048.075887][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 3048.075901][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3048.081949][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3048.087883][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3048.100007][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3048.106026][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3048.715908][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3048.715930][T22050] Bluetooth: hci3: command 0x1003 tx timeout [ 3048.722113][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3048.729023][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3050.155955][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 3050.155980][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 3050.168166][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3050.174257][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3050.180348][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 3050.186465][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3050.795958][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3050.795971][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 3050.802742][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3050.808475][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3052.235941][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3052.241961][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3052.248181][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 3052.875969][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3052.875983][T22049] Bluetooth: hci3: command 0x1009 tx timeout 02:41:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDADDIO(r1, 0x400455c8, 0x200000004deb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:41:04 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) 02:41:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60c000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:41:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async, rerun: 64) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x6, 0x1, 0x8000, 0x400, 0x7ff}) (rerun: 64) 02:41:05 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) 02:41:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDADDIO(r1, 0x400455c8, 0x200000004deb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:41:05 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) 02:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3056.262881][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3056.269328][T17034] Bluetooth: hci2: Frame reassembly failed (-84) 02:41:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r2 = dup(r1) (async) r3 = signalfd(r1, &(0x7f0000002280)={[0x4]}, 0x8) mount$9p_fd(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={{0x0, 0x0, 0x80}}) (async) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x140) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) move_mount(r4, &(0x7f0000002300)='./file0\x00', r3, &(0x7f0000002340)='./file0\x00', 0x40) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/107, 0x6b, 0x8aaf, 0xffffffff}) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r5, 0x5437, 0x0) 02:41:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDADDIO(r1, 0x400455c8, 0x200000004deb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) fcntl$dupfd(r0, 0x406, r0) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x200000004deb) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3056.899522][T21343] Bluetooth: hci3: Frame reassembly failed (-84) [ 3058.315874][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 3058.321888][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 3058.321969][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3058.327972][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3058.955920][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3058.961960][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3060.395947][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3060.395951][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3060.408020][ T9876] Bluetooth: hci2: sending frame failed (-49) [ 3060.414401][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3061.035946][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3061.042000][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3062.475958][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3062.481961][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3063.115926][T22050] Bluetooth: hci3: command 0x1009 tx timeout 02:41:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xb2) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}], 0x0, "2766fc6639cbb2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x20, 0x686b, 0x9, 0x8, 0x9, 0xc35, 0x2, 0x80, 0x9e0b, 0x5, 0x80000000, 0x8, 0x1, 0x100000000}, 0x8, [0x0]}) 02:41:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) getgroups(0x1, &(0x7f00000001c0)=[0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10]) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{}, {0x2, 0x5, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x8, r11}], {}, {0x20, 0x5}}, 0x8c, 0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:41:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x6, 0x1, 0x8000, 0x400, 0x7ff}) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3066.497319][T21343] Bluetooth: hci2: Frame reassembly failed (-84) [ 3066.508173][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3066.509405][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3066.515770][T21343] Bluetooth: hci4: Frame reassembly failed (-84) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3066.542090][T22191] udevd[22191]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 02:41:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = signalfd(r1, &(0x7f0000002280)={[0x4]}, 0x8) mount$9p_fd(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) (async, rerun: 32) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={{0x0, 0x0, 0x80}}) (rerun: 32) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x140) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x4) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) move_mount(r4, &(0x7f0000002300)='./file0\x00', r3, &(0x7f0000002340)='./file0\x00', 0x40) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/107, 0x6b, 0x8aaf, 0xffffffff}) (async) ioctl$KDADDIO(r5, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r5, 0x5437, 0x0) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3068.555894][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3068.555923][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3068.561926][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3068.567935][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3068.574481][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3068.580753][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3068.592862][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3068.598880][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3069.195917][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3069.202070][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3070.635957][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3070.635961][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3070.636016][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3070.641988][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3070.648140][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 3070.666188][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3070.666248][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3070.672186][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3071.275974][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3071.282106][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3072.715966][T22050] Bluetooth: hci5: command 0x1009 tx timeout [ 3072.715970][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 3072.715999][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3072.721991][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3073.355988][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:41:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xb2) 02:41:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) (async) getgroups(0x1, &(0x7f00000001c0)=[0x0]) (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 32) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10]) (async) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{}, {0x2, 0x5, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x8, r11}], {}, {0x20, 0x5}}, 0x8c, 0x3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:41:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}], 0x0, "2766fc6639cbb2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x20, 0x686b, 0x9, 0x8, 0x9, 0xc35, 0x2, 0x80, 0x9e0b, 0x5, 0x80000000, 0x8, 0x1, 0x100000000}, 0x8, [0x0]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}], 0x0, "2766fc6639cbb2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x20, 0x686b, 0x9, 0x8, 0x9, 0xc35, 0x2, 0x80, 0x9e0b, 0x5, 0x80000000, 0x8, 0x1, 0x100000000}, 0x8, [0x0]}) (async) 02:41:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3) 02:41:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3076.751333][T16177] Bluetooth: hci0: sending frame failed (-49) [ 3076.757887][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3076.765276][T21343] Bluetooth: hci4: Frame reassembly failed (-84) [ 3076.797639][T22210] udevd[22210]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 02:41:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) 02:41:26 executing program 0: socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x829c0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x6b, 0x61, 0x2, 0x20, 0x6, "934b94c8af92e1eb"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x70) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x7, 0x40, 0x1000, 0x5, 0x4, "044b2b3d6341c30a34d2e7af2adb4b1b624655"}) [ 3077.369928][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3077.378781][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3077.432143][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3077.441164][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3077.447664][T22245] Bluetooth: hci8: Frame reassembly failed (-84) [ 3077.454556][T22245] Bluetooth: hci8: Frame reassembly failed (-84) [ 3077.461554][T22245] Bluetooth: hci7: Frame reassembly failed (-84) [ 3077.468395][T22245] Bluetooth: hci7: Frame reassembly failed (-84) [ 3078.795915][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3078.795919][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3078.795935][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 3078.801973][T14039] Bluetooth: hci5: sending frame failed (-49) [ 3078.808414][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3078.813964][T21330] Bluetooth: hci0: sending frame failed (-49) [ 3078.820184][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3078.838259][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3079.435891][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3079.435904][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3079.441974][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3079.447901][T21332] Bluetooth: hci7: sending frame failed (-49) [ 3079.454360][T21330] Bluetooth: hci6: sending frame failed (-49) [ 3079.459981][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3079.515899][T22050] Bluetooth: hci8: command 0x1003 tx timeout [ 3079.522046][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3080.875964][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3080.875975][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3080.876032][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3080.881991][T21330] Bluetooth: hci0: sending frame failed (-49) [ 3080.888131][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3080.894309][T22050] Bluetooth: hci5: command 0x1001 tx timeout [ 3080.900406][T21330] Bluetooth: hci4: sending frame failed (-49) [ 3080.906287][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3081.515941][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3081.515945][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3081.515978][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3081.521973][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3081.527950][T21330] Bluetooth: hci7: sending frame failed (-49) [ 3081.534246][T21332] Bluetooth: hci6: sending frame failed (-49) [ 3081.596007][T19679] Bluetooth: hci8: command 0x1001 tx timeout [ 3081.602188][T21343] Bluetooth: hci8: Frame reassembly failed (-84) [ 3082.955952][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3082.955956][T22050] Bluetooth: hci5: command 0x1009 tx timeout [ 3082.955985][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3082.961952][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3083.595946][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3083.595951][T22050] Bluetooth: hci6: command 0x1009 tx timeout [ 3083.595982][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3083.675971][T22050] Bluetooth: hci8: command 0x1009 tx timeout 02:41:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) getgroups(0x1, &(0x7f00000001c0)=[0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10]) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{}, {0x2, 0x5, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x8, r11}], {}, {0x20, 0x5}}, 0x8c, 0x3) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7]) (async) getgroups(0x1, &(0x7f00000001c0)=[0x0]) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r10]) (async) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{}, {0x2, 0x5, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x3, r2}, {0x8, 0x1, r3}, {0x8, 0x6, r5}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x6, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r10}, {0x8, 0x8, r11}], {}, {0x20, 0x5}}, 0x8c, 0x3) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:41:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3) (async) 02:41:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}], 0x0, "2766fc6639cbb2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x20, 0x686b, 0x9, 0x8, 0x9, 0xc35, 0x2, 0x80, 0x9e0b, 0x5, 0x80000000, 0x8, 0x1, 0x100000000}, 0x8, [0x0]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002540)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r3}], 0x0, "2766fc6639cbb2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x20, 0x686b, 0x9, 0x8, 0x9, 0xc35, 0x2, 0x80, 0x9e0b, 0x5, 0x80000000, 0x8, 0x1, 0x100000000}, 0x8, [0x0]}) (async) 02:41:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xb2) [ 3086.985294][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3086.985514][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3087.010520][T17034] Bluetooth: hci5: Frame reassembly failed (-84) 02:41:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3087.608983][T17034] Bluetooth: hci3: Frame reassembly failed (-84) 02:41:36 executing program 0: socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x829c0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x6b, 0x61, 0x2, 0x20, 0x6, "934b94c8af92e1eb"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x70) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x7, 0x40, 0x1000, 0x5, 0x4, "044b2b3d6341c30a34d2e7af2adb4b1b624655"}) socket(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x829c0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x6b, 0x61, 0x2, 0x20, 0x6, "934b94c8af92e1eb"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x70) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x7, 0x40, 0x1000, 0x5, 0x4, "044b2b3d6341c30a34d2e7af2adb4b1b624655"}) (async) [ 3087.686588][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3087.739704][T22287] Bluetooth: hci8: Frame reassembly failed (-84) [ 3087.741261][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 3087.746133][T22287] Bluetooth: hci8: Frame reassembly failed (-84) [ 3087.752545][T21343] Bluetooth: hci7: Frame reassembly failed (-84) [ 3087.760000][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3087.767381][T22287] Bluetooth: hci7: Frame reassembly failed (-84) [ 3087.778035][T22287] Bluetooth: hci7: Frame reassembly failed (-84) [ 3089.035911][T12161] Bluetooth: hci2: command 0x1003 tx timeout [ 3089.035956][T22050] Bluetooth: hci5: command 0x1003 tx timeout [ 3089.041964][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3089.047983][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3089.053975][T21330] Bluetooth: hci5: sending frame failed (-49) [ 3089.060090][T14039] Bluetooth: hci4: sending frame failed (-49) [ 3089.072141][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3089.078299][T14039] Bluetooth: hci0: sending frame failed (-49) [ 3089.675891][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 3089.682003][T14039] Bluetooth: hci3: sending frame failed (-49) [ 3089.755899][T12161] Bluetooth: hci6: command 0x1003 tx timeout [ 3089.755912][T22050] Bluetooth: hci8: command 0x1003 tx timeout [ 3089.762026][T14039] Bluetooth: hci6: sending frame failed (-49) [ 3089.768326][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3089.768560][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3091.115945][T22050] Bluetooth: hci4: command 0x1001 tx timeout [ 3091.115949][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 3091.116002][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3091.121988][T14039] Bluetooth: hci4: sending frame failed (-49) [ 3091.127976][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 3091.146083][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 3091.146134][T14039] Bluetooth: hci5: sending frame failed (-49) [ 3091.152072][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3091.755946][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 3091.761966][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3091.835946][T12161] Bluetooth: hci6: command 0x1001 tx timeout [ 3091.835950][T22050] Bluetooth: hci7: command 0x1001 tx timeout [ 3091.835970][T22050] Bluetooth: hci8: command 0x1001 tx timeout [ 3091.842002][T21332] Bluetooth: hci6: sending frame failed (-49) [ 3091.847984][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3093.195947][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3093.195951][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 3093.195978][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 3093.202031][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3093.835936][T12161] Bluetooth: hci3: command 0x1009 tx timeout [ 3093.915955][T12161] Bluetooth: hci6: command 0x1009 tx timeout [ 3093.915959][T20531] Bluetooth: hci8: command 0x1009 tx timeout [ 3093.927923][T12161] Bluetooth: hci7: command 0x1009 tx timeout 02:41:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r1, 0x400455c8, 0x800) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:41:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_KEYS={0x130, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0774f4c56"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "ad"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7420c67dd6"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59abe36ed"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9ee781daf3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "174a8d5245"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3e6d087bff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "949e50e42d"}]}]}]}, 0x158}}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x0) ioctl$TCFLSH(r4, 0x400455cb, 0x0) 02:41:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:41:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000340)=""/253, 0xfd}], 0x3) (async) [ 3097.231636][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3097.232149][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3097.247364][T22308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3097.249257][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3097.267540][T22308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22308 comm=syz-executor.4 [ 3097.270543][T22307] Bluetooth: hci4: Frame reassembly failed (-84) 02:41:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000300)=0x3) [ 3097.849283][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:41:46 executing program 0: socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x829c0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x14) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x6b, 0x61, 0x2, 0x20, 0x6, "934b94c8af92e1eb"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x70) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x1) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000002c0)={0x7, 0x40, 0x1000, 0x5, 0x4, "044b2b3d6341c30a34d2e7af2adb4b1b624655"}) [ 3097.972660][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3097.979199][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3097.981655][T22319] Bluetooth: hci8: Frame reassembly failed (-84) [ 3097.992272][T21343] Bluetooth: hci7: Frame reassembly failed (-84) [ 3097.992287][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3097.998798][T21343] Bluetooth: hci7: Frame reassembly failed (-84) [ 3098.005660][T22318] Bluetooth: hci8: Frame reassembly failed (-84) [ 3098.015113][T22319] Bluetooth: hci7: Frame reassembly failed (-84) [ 3098.024584][T22318] Bluetooth: hci7: Frame reassembly failed (-84) [ 3099.275922][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3099.281967][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3099.282046][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3099.288433][T14039] Bluetooth: hci2: sending frame failed (-49) [ 3099.300170][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3099.306216][T14039] Bluetooth: hci0: sending frame failed (-49) [ 3099.355930][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3099.362265][T14039] Bluetooth: hci5: sending frame failed (-49) [ 3099.915941][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3099.922022][T14039] Bluetooth: hci3: sending frame failed (-49) [ 3099.995927][T19652] Bluetooth: hci8: command 0x1003 tx timeout [ 3099.995967][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3100.002058][T19652] Bluetooth: hci7: command 0x1003 tx timeout [ 3100.008313][T14039] Bluetooth: hci6: sending frame failed (-49) [ 3100.020125][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3101.355960][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3101.355971][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3101.367961][T14039] Bluetooth: hci4: sending frame failed (-49) [ 3101.374194][T14039] Bluetooth: hci0: sending frame failed (-49) [ 3101.380332][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3101.386368][T14039] Bluetooth: hci2: sending frame failed (-49) [ 3101.436017][T22050] Bluetooth: hci5: command 0x1001 tx timeout [ 3101.442078][T14039] Bluetooth: hci5: sending frame failed (-49) [ 3101.995954][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3102.001997][T14039] Bluetooth: hci3: sending frame failed (-49) [ 3102.075958][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3102.075976][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 3102.082011][T14039] Bluetooth: hci6: sending frame failed (-49) [ 3102.094008][T22050] Bluetooth: hci8: command 0x1001 tx timeout [ 3102.100126][T21343] Bluetooth: hci8: Frame reassembly failed (-84) [ 3103.435945][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3103.441948][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3103.448451][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3103.515979][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3104.075979][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3104.155956][T22050] Bluetooth: hci8: command 0x1009 tx timeout [ 3104.155961][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 3104.167932][T22050] Bluetooth: hci6: command 0x1009 tx timeout 02:41:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$KDADDIO(r1, 0x400455c8, 0x800) (async, rerun: 32) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (rerun: 32) 02:41:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_KEYS={0x130, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0774f4c56"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "ad"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7420c67dd6"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59abe36ed"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9ee781daf3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "174a8d5245"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3e6d087bff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "949e50e42d"}]}]}]}, 0x158}}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x0) ioctl$TCFLSH(r4, 0x400455cb, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_KEYS={0x130, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0774f4c56"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "ad"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7420c67dd6"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59abe36ed"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9ee781daf3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "174a8d5245"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3e6d087bff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "949e50e42d"}]}]}]}, 0x158}}, 0x80) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r4, 0x400455cb, 0x0) (async) 02:41:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:41:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) [ 3107.462898][T22326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3107.475168][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3107.481572][T21343] Bluetooth: hci2: Frame reassembly failed (-84) [ 3107.490556][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3107.493303][T22326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22326 comm=syz-executor.4 [ 3107.511606][T17034] Bluetooth: hci5: Frame reassembly failed (-84) 02:41:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) [ 3108.091066][T17034] Bluetooth: hci3: Frame reassembly failed (-84) 02:41:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/22, 0x16}], 0xa, 0x1, 0x7) [ 3109.515883][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3109.521910][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3109.521963][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3109.528352][ T89] Bluetooth: hci4: sending frame failed (-49) [ 3109.540498][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3109.546525][ T89] Bluetooth: hci2: sending frame failed (-49) [ 3109.552600][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 3109.558661][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3110.155909][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3110.162114][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3110.315877][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3110.321998][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3111.595959][T22050] Bluetooth: hci5: command 0x1001 tx timeout [ 3111.595963][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 3111.596017][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3111.601984][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3111.608105][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3111.626182][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3111.626258][ T89] Bluetooth: hci2: sending frame failed (-49) [ 3111.632207][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3112.235962][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3112.242087][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3112.395928][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 3112.401948][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3113.675959][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3113.675964][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3113.675985][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3113.693901][T22050] Bluetooth: hci5: command 0x1009 tx timeout [ 3114.315956][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 3114.475941][T19652] Bluetooth: hci6: command 0x1009 tx timeout 02:42:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r1, 0x400455c8, 0x800) ioctl$TCFLSH(r0, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) 02:42:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x111100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:42:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 02:42:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_KEYS={0x130, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0774f4c56"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "ad"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7420c67dd6"}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59abe36ed"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9ee781daf3"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "174a8d5245"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3e6d087bff"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "949e50e42d"}]}]}]}, 0x158}}, 0x80) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r4, 0x400455cb, 0x0) 02:42:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x529000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfb, 0xff, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) sendfile(r2, r4, &(0x7f0000000140)=0x45, 0x4800000000) r5 = inotify_init1(0x80000) fcntl$getown(r5, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3117.709484][T21343] Bluetooth: hci2: Frame reassembly failed (-84) [ 3117.721069][T21343] Bluetooth: hci4: Frame reassembly failed (-84) [ 3117.724866][T22369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3117.727659][T22371] Bluetooth: hci4: Frame reassembly failed (-84) [ 3117.741482][T22370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22370 comm=syz-executor.4 [ 3117.774422][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3117.780859][T22384] Bluetooth: hci5: Frame reassembly failed (-84) 02:42:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) 02:42:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/22, 0x16}], 0xa, 0x1, 0x7) [ 3118.336056][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3118.337124][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3119.755917][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3119.755922][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3119.755970][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3119.762888][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3119.768068][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3119.786353][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3119.835919][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3119.842224][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3120.395891][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 3120.401974][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3120.408106][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3120.414469][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3121.835972][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3121.835977][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3121.847977][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3121.854516][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3121.860605][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3121.866787][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3121.915927][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 3121.922120][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3122.475936][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3122.482068][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3122.488374][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 3122.494376][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3123.915937][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3123.921943][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 3123.928194][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 3123.995968][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 3124.555939][T19652] Bluetooth: hci6: command 0x1009 tx timeout [ 3124.561944][T19652] Bluetooth: hci3: command 0x1009 tx timeout 02:42:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x4) 02:42:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x529000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfb, 0xff, 0x2}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) sendfile(r2, r4, &(0x7f0000000140)=0x45, 0x4800000000) r5 = inotify_init1(0x80000) fcntl$getown(r5, 0x9) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:42:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x29a000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1ffc, 0x7, 0x9, 0x100, 0xa, "6b2dc30bf03530e711110247bc3478e9ae94bd"}) ioctl$TCFLSH(r1, 0x800455c9, 0x0) 02:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$9p(r1, &(0x7f0000000100)="215608f2a5ca82a614f8c0ef8759b09ec31ad2a89484ce54fd48251f8fab8afc5f61b9413ab18f52933435c245630b14a47ff31d56ffaa6ab12b60856ad93eff123c2695325cf189525395cdd72deacff62e58973a19e5b43759002afe4dd26c5029465ff21e36f661feaa4f1f19e6", 0x6f) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$9p(r1, &(0x7f0000000100)="215608f2a5ca82a614f8c0ef8759b09ec31ad2a89484ce54fd48251f8fab8afc5f61b9413ab18f52933435c245630b14a47ff31d56ffaa6ab12b60856ad93eff123c2695325cf189525395cdd72deacff62e58973a19e5b43759002afe4dd26c5029465ff21e36f661feaa4f1f19e6", 0x6f) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$9p(r1, &(0x7f0000000100)="215608f2a5ca82a614f8c0ef8759b09ec31ad2a89484ce54fd48251f8fab8afc5f61b9413ab18f52933435c245630b14a47ff31d56ffaa6ab12b60856ad93eff123c2695325cf189525395cdd72deacff62e58973a19e5b43759002afe4dd26c5029465ff21e36f661feaa4f1f19e6", 0x6f) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:42:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3127.946302][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3127.955262][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3127.958813][T22406] Bluetooth: hci4: Frame reassembly failed (-84) [ 3127.968881][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3127.970467][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3127.977623][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3127.988337][T22394] Bluetooth: hci2: Frame reassembly failed (-84) [ 3128.007910][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3128.015089][T22417] Bluetooth: hci7: Frame reassembly failed (-84) 02:42:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(0xffffffffffffffff, 0x5437, &(0x7f0000000300)=0x3) 02:42:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/22, 0x16}], 0xa, 0x1, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) preadv(r1, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/22, 0x16}], 0xa, 0x1, 0x7) (async) [ 3128.574742][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3129.995891][T12161] Bluetooth: hci5: command 0x1003 tx timeout [ 3129.995895][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3129.995909][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3130.001899][T12161] Bluetooth: hci4: command 0x1003 tx timeout [ 3130.002006][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3130.008512][T14039] Bluetooth: hci4: sending frame failed (-49) [ 3130.013983][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3130.075868][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3130.081961][ T89] Bluetooth: hci7: sending frame failed (-49) [ 3130.635884][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3130.635898][T12161] Bluetooth: hci3: command 0x1003 tx timeout [ 3130.642032][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3130.648820][T14039] Bluetooth: hci3: sending frame failed (-49) [ 3132.075967][T22050] Bluetooth: hci4: command 0x1001 tx timeout [ 3132.075971][T12161] Bluetooth: hci0: command 0x1001 tx timeout [ 3132.076038][T14039] Bluetooth: hci0: sending frame failed (-49) [ 3132.082014][ T89] Bluetooth: hci4: sending frame failed (-49) [ 3132.088194][T12161] Bluetooth: hci5: command 0x1001 tx timeout [ 3132.106128][T12161] Bluetooth: hci2: command 0x1001 tx timeout [ 3132.106199][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3132.155938][T12161] Bluetooth: hci7: command 0x1001 tx timeout [ 3132.161994][ T89] Bluetooth: hci7: sending frame failed (-49) [ 3132.715959][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3132.715963][T12161] Bluetooth: hci3: command 0x1001 tx timeout [ 3132.727949][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3132.734019][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3134.155959][T22050] Bluetooth: hci5: command 0x1009 tx timeout [ 3134.155964][T12161] Bluetooth: hci2: command 0x1009 tx timeout [ 3134.155994][T12161] Bluetooth: hci0: command 0x1009 tx timeout [ 3134.161993][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3134.235949][T22050] Bluetooth: hci7: command 0x1009 tx timeout [ 3134.795972][T22050] Bluetooth: hci6: command 0x1009 tx timeout [ 3134.801969][T22050] Bluetooth: hci3: command 0x1009 tx timeout 02:42:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x529000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfb, 0xff, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) sendfile(r2, r4, &(0x7f0000000140)=0x45, 0x4800000000) r5 = inotify_init1(0x80000) fcntl$getown(r5, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x529000, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfb, 0xff, 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r2, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x2) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) (async) sendfile(r2, r4, &(0x7f0000000140)=0x45, 0x4800000000) (async) inotify_init1(0x80000) (async) fcntl$getown(r5, 0x9) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xa) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:42:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRKP(r0, 0x5425, 0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x100) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) 02:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRKP(r0, 0x5425, 0x9) ioctl$KDADDIO(r0, 0x400455c8, 0x100) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$VT_DISALLOCATE(r0, 0x5608) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSBRKP(r0, 0x5425, 0x9) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x100) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) ioctl$VT_DISALLOCATE(r0, 0x5608) (async) 02:42:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x29a000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1ffc, 0x7, 0x9, 0x100, 0xa, "6b2dc30bf03530e711110247bc3478e9ae94bd"}) ioctl$TCFLSH(r1, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x29a000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1ffc, 0x7, 0x9, 0x100, 0xa, "6b2dc30bf03530e711110247bc3478e9ae94bd"}) (async) ioctl$TCFLSH(r1, 0x800455c9, 0x0) (async) 02:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TCSBRKP(r0, 0x5425, 0x9) (rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x100) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (rerun: 32) ioctl$VT_DISALLOCATE(r0, 0x5608) [ 3138.180196][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3138.187269][T22433] Bluetooth: hci0: Frame reassembly failed (-84) [ 3138.194837][T22438] Bluetooth: hci2: Frame reassembly failed (-84) [ 3138.203109][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) 02:42:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = signalfd4(r0, &(0x7f0000000100)={[0x4]}, 0x8, 0x800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) syz_open_pts(r1, 0x40402) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 3138.226053][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3138.233983][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3138.240594][T22474] Bluetooth: hci5: Frame reassembly failed (-84) [ 3138.247165][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3138.254170][T22474] Bluetooth: hci5: Frame reassembly failed (-84) [ 3138.259324][T22484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3138.267398][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:42:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, 0x0) 02:42:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbf0a2baa1574cc3cdb0e9cd659bb9ef7c40704d1edf8baa54f223c89e7", @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wNdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) openat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) [ 3138.818629][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:42:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbf0a2baa1574cc3cdb0e9cd659bb9ef7c40704d1edf8baa54f223c89e7", @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wNdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) openat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x82) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r4) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbf0a2baa1574cc3cdb0e9cd659bb9ef7c40704d1edf8baa54f223c89e7", @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r6, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r7) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wNdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) (async) openat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) 02:42:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000000c0)) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbf0a2baa1574cc3cdb0e9cd659bb9ef7c40704d1edf8baa54f223c89e7", @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wNdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) (async) openat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) [ 3140.235886][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3140.235930][T22050] Bluetooth: hci5: command 0x1003 tx timeout [ 3140.242064][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3140.248076][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3140.254497][T14039] Bluetooth: hci0: sending frame failed (-49) [ 3140.260150][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3140.272165][T14039] Bluetooth: hci4: sending frame failed (-49) [ 3140.315880][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3140.315893][T22431] Bluetooth: hci8: command 0x1003 tx timeout [ 3140.322144][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3140.328469][T14039] Bluetooth: hci8: sending frame failed (-49) 02:42:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x5437, 0x2) [ 3140.615743][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3140.875897][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3140.881925][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3142.315922][T22050] Bluetooth: hci5: command 0x1001 tx timeout [ 3142.315926][T22431] Bluetooth: hci4: command 0x1001 tx timeout [ 3142.315940][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3142.322057][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3142.328539][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3142.334016][T21330] Bluetooth: hci0: sending frame failed (-49) [ 3142.352314][T21330] Bluetooth: hci2: sending frame failed (-49) [ 3142.395929][T22050] Bluetooth: hci7: command 0x1001 tx timeout [ 3142.395934][T22431] Bluetooth: hci8: command 0x1001 tx timeout [ 3142.395999][T21330] Bluetooth: hci8: sending frame failed (-49) [ 3142.402109][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3142.635906][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3142.642037][T21330] Bluetooth: hci6: sending frame failed (-49) [ 3142.955953][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3142.962084][T21330] Bluetooth: hci3: sending frame failed (-49) [ 3144.395967][T22431] Bluetooth: hci5: command 0x1009 tx timeout [ 3144.395971][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3144.395994][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3144.401980][T22431] Bluetooth: hci4: command 0x1009 tx timeout [ 3144.475965][T22431] Bluetooth: hci8: command 0x1009 tx timeout [ 3144.476019][T22050] Bluetooth: hci7: command 0x1009 tx timeout [ 3144.715950][T22431] Bluetooth: hci6: command 0x1001 tx timeout [ 3144.722139][T21330] Bluetooth: hci6: sending frame failed (-49) [ 3145.035952][T22431] Bluetooth: hci3: command 0x1009 tx timeout [ 3146.795957][T22431] Bluetooth: hci6: command 0x1009 tx timeout 02:42:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x6cb) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x80000001, 0x5, 0x7f, 0x100, 0x58, "a7220be51f336d897e6a69bbbfef901fdec4a1", 0x5d2, 0x401}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x6) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="b047656f34ad5c89fe0c90f0e2cf04b6880fe82fbbecad6820d626912abdf647d636ccfa1610a0b00d2b7a28666b4390b0166fef6aebaaa298ec01b7629d8ecb4d72f42eddbeee90722a8113163d25c2dec9b67ddd3b2fca141c6b45193e0adef830d0074619c31df101da") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 02:42:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10042, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000100)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:42:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = signalfd4(r0, &(0x7f0000000100)={[0x4]}, 0x8, 0x800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async, rerun: 64) syz_open_pts(r1, 0x40402) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:42:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x29a000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1ffc, 0x7, 0x9, 0x100, 0xa, "6b2dc30bf03530e711110247bc3478e9ae94bd"}) ioctl$TCFLSH(r1, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x29a000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x1ffc, 0x7, 0x9, 0x100, 0xa, "6b2dc30bf03530e711110247bc3478e9ae94bd"}) (async) ioctl$TCFLSH(r1, 0x800455c9, 0x0) (async) [ 3148.419857][T22513] Bluetooth: hci0: Frame reassembly failed (-84) [ 3148.428035][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3148.428649][T22514] Bluetooth: hci2: Frame reassembly failed (-84) [ 3148.440867][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3148.444632][T22514] Bluetooth: hci4: Frame reassembly failed (-84) [ 3148.453696][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3148.468083][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3148.480151][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3148.485130][T22531] Bluetooth: hci9: Frame reassembly failed (-84) [ 3148.492925][T21332] Bluetooth: hci8: sending frame failed (-49) [ 3148.499132][ T1516] Bluetooth: hci9: Frame reassembly failed (-84) 02:42:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/22, 0x16}], 0xa, 0x1, 0x7) [ 3149.047851][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3150.475882][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3150.481905][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 3150.488195][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3150.494180][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 3150.494224][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3150.500469][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3150.555886][T22049] Bluetooth: hci8: command 0x1003 tx timeout [ 3150.555936][T19679] Bluetooth: hci9: command 0x1003 tx timeout [ 3150.561985][T17107] Bluetooth: hci8: sending frame failed (-49) [ 3150.568113][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 3150.573951][T21332] Bluetooth: hci9: sending frame failed (-49) [ 3150.580312][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3150.592405][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:42:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x5437, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) pipe(&(0x7f0000000000)) (async) ioctl$TCFLSH(r1, 0x5437, 0x2) (async) [ 3150.968105][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3151.115897][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3151.122000][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3152.555910][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3152.555965][T22049] Bluetooth: hci2: command 0x1001 tx timeout [ 3152.562715][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3152.568235][T22049] Bluetooth: hci4: command 0x1001 tx timeout [ 3152.573961][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3152.580156][T22049] Bluetooth: hci5: command 0x1001 tx timeout [ 3152.635932][T22049] Bluetooth: hci9: command 0x1001 tx timeout [ 3152.635963][T22431] Bluetooth: hci7: command 0x1001 tx timeout [ 3152.642005][T17107] Bluetooth: hci9: sending frame failed (-49) [ 3152.647953][T22431] Bluetooth: hci8: command 0x1001 tx timeout [ 3152.659990][T17107] Bluetooth: hci8: sending frame failed (-49) [ 3152.659994][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3153.035888][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3153.041933][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3153.195894][T22049] Bluetooth: hci3: command 0x1001 tx timeout [ 3153.201969][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3154.635955][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3154.635969][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3154.641955][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3154.654137][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3154.715948][T22050] Bluetooth: hci8: command 0x1009 tx timeout [ 3154.715952][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3154.728192][T22050] Bluetooth: hci9: command 0x1009 tx timeout [ 3155.115941][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3155.122015][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3155.275948][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3157.195962][T19679] Bluetooth: hci6: command 0x1009 tx timeout 02:42:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) read(r0, &(0x7f0000000100)=""/114, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0xdf08, 0x9, 0x0, 0xff13, 0xffe1, 0x4000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r1, 0x4b34, 0x20) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x98, 0x8, 0x7f, 0x5, 0x3, "f25043d93b8674525cb93b9393d302fbc8ce7e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) 02:42:47 executing program 5: socket$tipc(0x1e, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 3158.658195][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3158.659542][T22555] Bluetooth: hci2: Frame reassembly failed (-84) [ 3158.670996][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3158.672973][T22555] Bluetooth: hci0: Frame reassembly failed (-84) [ 3158.678009][T17034] Bluetooth: hci2: Frame reassembly failed (-84) 02:42:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x6cb) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x80000001, 0x5, 0x7f, 0x100, 0x58, "a7220be51f336d897e6a69bbbfef901fdec4a1", 0x5d2, 0x401}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x6) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="b047656f34ad5c89fe0c90f0e2cf04b6880fe82fbbecad6820d626912abdf647d636ccfa1610a0b00d2b7a28666b4390b0166fef6aebaaa298ec01b7629d8ecb4d72f42eddbeee90722a8113163d25c2dec9b67ddd3b2fca141c6b45193e0adef830d0074619c31df101da") (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TCXONC(r3, 0x540a, 0x0) (async) ioctl$VT_WAITACTIVE(r1, 0x5607) 02:42:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = signalfd4(r0, &(0x7f0000000100)={[0x4]}, 0x8, 0x800) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) syz_open_pts(r1, 0x40402) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) signalfd4(r0, &(0x7f0000000100)={[0x4]}, 0x8, 0x800) (async) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) syz_open_pts(r1, 0x40402) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) [ 3158.714891][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3158.768947][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3158.771034][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3158.775763][T22564] Bluetooth: hci7: Frame reassembly failed (-84) [ 3158.788388][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 3158.794884][T22559] Bluetooth: hci8: Frame reassembly failed (-84) 02:42:48 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/120, 0x78}], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000240)={0x1, 0x7fffffff, 0x8, 0x7ff, 0x19, "207f704d4a8208c00d97790a21d7e2cc1701c9"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x1, 0x4, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r0}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x1f, 0x2, {0x5, @usage=0x4, r3, 0xfffffffffffffffc, 0x5, 0x5, 0x4, 0x1, 0x16, @usage=0x5, 0xfffffffe, 0x6, [0x8, 0x8000000000000000, 0x6, 0x2, 0x3, 0x2]}, {0x4, @usage=0xfffffffffffffffe, 0x0, 0x2000002, 0x7, 0xffffffffffffffff, 0x0, 0x6, 0x6, @usage, 0x7, 0x64b, [0x8001, 0x3, 0x9, 0x3, 0x3000000000000, 0x20]}, {0xffffffffffffffff, @usage=0x9, 0x0, 0x9, 0x0, 0x3, 0xf8000, 0x600000, 0x26a, @usage=0x5, 0x8000, 0x10001, [0x159af59c, 0xe7e92a9, 0x1f, 0x7fffffff, 0x1, 0x5]}, {0x2, 0xffffffffffffffff, 0x6}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) write$bt_hci(r2, &(0x7f0000000b80)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x9}}}, 0xd) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x80]}, 0x8) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000b40)) [ 3159.285487][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3159.291916][T22577] Bluetooth: hci3: Frame reassembly failed (-84) [ 3159.301533][T22577] Bluetooth: hci3: Frame reassembly failed (-84) [ 3160.715918][T22431] Bluetooth: hci4: command 0x1003 tx timeout [ 3160.721916][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3160.721960][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3160.728301][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3160.740222][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3160.740950][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3160.795892][T22049] Bluetooth: hci7: command 0x1003 tx timeout [ 3160.795897][T22431] Bluetooth: hci8: command 0x1003 tx timeout [ 3160.795915][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3160.802024][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3160.808211][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3160.875909][T20531] Bluetooth: hci9: command 0x1003 tx timeout 02:42:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(r1, 0x5437, 0x2) [ 3161.207499][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3161.355936][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3161.362050][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3162.795892][T22431] Bluetooth: hci2: command 0x1001 tx timeout [ 3162.795945][T22049] Bluetooth: hci0: command 0x1001 tx timeout [ 3162.802644][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3162.808226][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3162.814241][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3162.820423][T22049] Bluetooth: hci4: command 0x1001 tx timeout [ 3162.832551][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3162.875922][T22049] Bluetooth: hci7: command 0x1001 tx timeout [ 3162.875926][T22431] Bluetooth: hci5: command 0x1001 tx timeout [ 3162.875977][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3162.881933][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3162.900060][T22049] Bluetooth: hci8: command 0x1001 tx timeout [ 3162.955910][T19679] Bluetooth: hci9: command 0x1001 tx timeout [ 3163.275894][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3163.282035][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3163.435927][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3163.442019][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3164.875993][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3164.876058][T22049] Bluetooth: hci4: command 0x1009 tx timeout [ 3164.888012][T22049] Bluetooth: hci0: command 0x1009 tx timeout [ 3164.955911][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3164.955998][T22050] Bluetooth: hci8: command 0x1009 tx timeout [ 3164.967917][T22050] Bluetooth: hci7: command 0x1009 tx timeout [ 3165.035973][T22050] Bluetooth: hci9: command 0x1009 tx timeout [ 3165.355935][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3165.361986][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3165.515905][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3167.435941][T19679] Bluetooth: hci6: command 0x1009 tx timeout 02:42:57 executing program 5: socket$tipc(0x1e, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) socket$tipc(0x1e, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x400) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x3) (async) 02:42:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:42:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) read(r0, &(0x7f0000000100)=""/114, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0xdf08, 0x9, 0x0, 0xff13, 0xffe1, 0x4000}) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (rerun: 32) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$KDADDIO(r1, 0x4b34, 0x20) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x7) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x98, 0x8, 0x7f, 0x5, 0x3, "f25043d93b8674525cb93b9393d302fbc8ce7e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) 02:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x6cb) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x80000001, 0x5, 0x7f, 0x100, 0x58, "a7220be51f336d897e6a69bbbfef901fdec4a1", 0x5d2, 0x401}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x6) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="b047656f34ad5c89fe0c90f0e2cf04b6880fe82fbbecad6820d626912abdf647d636ccfa1610a0b00d2b7a28666b4390b0166fef6aebaaa298ec01b7629d8ecb4d72f42eddbeee90722a8113163d25c2dec9b67ddd3b2fca141c6b45193e0adef830d0074619c31df101da") (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$TCXONC(r3, 0x540a, 0x0) (rerun: 64) ioctl$VT_WAITACTIVE(r1, 0x5607) [ 3168.938832][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3168.945360][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3168.971466][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3168.974285][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3168.978756][T22601] Bluetooth: hci5: Frame reassembly failed (-84) [ 3168.987836][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3168.993197][T22602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3168.998620][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.011394][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.017954][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.024272][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.030613][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.037651][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.044058][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.050411][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.056740][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.063044][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.069368][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.075680][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.082009][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.088342][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.094666][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.100994][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.107323][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.113631][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.120114][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.126480][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.132802][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.139150][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.145470][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.151798][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.158128][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.164431][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.170773][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.177098][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.183402][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.189729][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.196183][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.202490][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.208828][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.215138][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.221469][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.227802][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.234125][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.240450][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.248284][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.254587][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.260921][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.267247][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.273560][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.279892][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.286230][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.292539][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.298890][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.305202][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.311537][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.317871][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.324175][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.330515][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.337901][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.346085][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.352501][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.358853][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.366877][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.373211][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.379545][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.385897][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.392200][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.398536][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.404859][T22600] Bluetooth: hci7: Frame reassembly failed (-84) [ 3169.411195][T22600] Bluetooth: hci7: Frame reassembly failed (-84) 02:42:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) fcntl$setflags(r1, 0x2, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0xfffffffffffffffd) [ 3169.527369][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3170.955911][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3170.961904][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 3170.961946][T21330] Bluetooth: hci2: sending frame failed (-49) [ 3170.968297][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3171.035908][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 3171.042030][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3171.048172][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3171.054334][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 3171.060444][ T89] Bluetooth: hci4: sending frame failed (-49) [ 3171.066654][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:43:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)6v\x8d4\xe4\x80\xa3C\x96\x9a\xb8\x9cY\xaeJ7', 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a400000000000000000034d90a2742a64e000000000000dbf0ea4f1fe8fcdf28cc7ebdfd74dafc2038"], 0x3c) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ebc700002dbd703f51dbdf251c000000", @ANYRES32=0x0, @ANYBLOB="000000057cdf475aeb8ccebe0de48a10060006004e1f000014010000000000000000000000020000260000000800ba96980000000a000100fa412fb813230008000d005e000000080008001941fd66ffc7dd52e5b100f2609dbb6ee893befa10207f7c892a1c82c7c3b870f612e143f2d094e040402f15d0e857386d02cc5824068c9f8b1de61c685858838c22373598e861328b322f6695274640fc9599d9b1a1c490ec1e4328fee4e2db36d483e7e45723f46e564b3da78b4a3a9dd43d3600881462271ed62e508fa41f024c2c2e87a5dbb4ee262448e1cac4b72c36c060931e7d77c496abf74b0709684d2d48a74c5e78", @ANYRES32=0x0, @ANYBLOB="08000900070000000600050002000000"], 0x6c}}, 0x24000880) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xe, 0x0, 0x22}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x8a) [ 3171.453447][ T22] audit: type=1400 audit(1657852980.169:320): avc: denied { execute } for pid=22609 comm="syz-executor.0" dev="tmpfs" ino=86531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3171.457416][T22610] Bluetooth: hci6: Frame reassembly failed (-84) [ 3171.477311][ T22] audit: type=1400 audit(1657852980.169:321): avc: denied { execute_no_trans } for pid=22609 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=86531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3171.536774][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 3171.543207][T22611] Bluetooth: hci8: Frame reassembly failed (-84) [ 3171.550067][T22611] Bluetooth: hci8: Frame reassembly failed (-84) [ 3171.595872][T22050] Bluetooth: hci3: command 0x1003 tx timeout [ 3171.601937][T21330] Bluetooth: hci3: sending frame failed (-49) [ 3173.035911][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 3173.035916][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3173.035980][T21330] Bluetooth: hci2: sending frame failed (-49) [ 3173.041944][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3173.115892][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3173.121914][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3173.128107][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3173.134094][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3173.140269][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3173.146305][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 3173.515930][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3173.522063][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3173.595960][T20531] Bluetooth: hci8: command 0x1003 tx timeout [ 3173.601999][T17107] Bluetooth: hci8: sending frame failed (-49) [ 3173.675904][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 3173.681955][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3175.115945][T22049] Bluetooth: hci2: command 0x1009 tx timeout [ 3175.115949][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3175.195945][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3175.201944][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3175.207944][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3175.595975][T22049] Bluetooth: hci6: command 0x1001 tx timeout [ 3175.602010][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3175.675993][T22049] Bluetooth: hci8: command 0x1001 tx timeout [ 3175.682030][T17107] Bluetooth: hci8: sending frame failed (-49) [ 3175.755975][T22049] Bluetooth: hci3: command 0x1009 tx timeout [ 3177.675946][T22049] Bluetooth: hci6: command 0x1009 tx timeout [ 3177.756224][T22049] Bluetooth: hci8: command 0x1009 tx timeout 02:43:07 executing program 5: socket$tipc(0x1e, 0x2, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x400) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 02:43:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/206) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="7dd4b92db7a9dc93abcf2c0ecaf09fc82e82cbac924cfe0d7451b00d11516a4101dc441cb037385f1622bcbbe91848f44eeb4473a8b47523fc0efbd448a0d82c238f6dafb4daa8a71e24e953d2a1398d10723d40a381adf92ccbd7e1757041fb16089bb4df9a9dfed8668f7a7845f72c835bf3ef4d2fc474d76ae0a256b05f87e912ad4ee450901ecddfb01e12fad914a2caa961ce4da80735b8f28c8fc42931ffdd9e187741a255bcc3c83e0987d5731cb1b0b66b707d32c6779bac8e9f4cd8bdd08944c8238494ee3ce0") 02:43:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) 02:43:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) read(r0, &(0x7f0000000100)=""/114, 0x72) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0xdf08, 0x9, 0x0, 0xff13, 0xffe1, 0x4000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r1, 0x4b34, 0x20) (async) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x7) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x98, 0x8, 0x7f, 0x5, 0x3, "f25043d93b8674525cb93b9393d302fbc8ce7e"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) [ 3179.143225][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3179.150361][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3179.153130][T22625] Bluetooth: hci4: Frame reassembly failed (-84) [ 3179.164831][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3179.177157][T17034] Bluetooth: hci5: Frame reassembly failed (-84) [ 3179.181576][T22633] Bluetooth: hci7: Frame reassembly failed (-84) [ 3179.183681][T22632] Bluetooth: hci5: Frame reassembly failed (-84) [ 3179.190193][T17034] Bluetooth: hci7: Frame reassembly failed (-84) 02:43:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x541e, 0x0) [ 3179.768767][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3181.195899][T22049] Bluetooth: hci7: command 0x1003 tx timeout [ 3181.195903][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3181.195921][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3181.201915][T22049] Bluetooth: hci4: command 0x1003 tx timeout [ 3181.208378][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3181.213916][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3181.220296][T21330] Bluetooth: hci2: sending frame failed (-49) [ 3181.225888][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3181.232223][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3181.238066][T17107] Bluetooth: hci4: sending frame failed (-49) 02:43:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)6v\x8d4\xe4\x80\xa3C\x96\x9a\xb8\x9cY\xaeJ7', 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a400000000000000000034d90a2742a64e000000000000dbf0ea4f1fe8fcdf28cc7ebdfd74dafc2038"], 0x3c) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ebc700002dbd703f51dbdf251c000000", @ANYRES32=0x0, @ANYBLOB="000000057cdf475aeb8ccebe0de48a10060006004e1f000014010000000000000000000000020000260000000800ba96980000000a000100fa412fb813230008000d005e000000080008001941fd66ffc7dd52e5b100f2609dbb6ee893befa10207f7c892a1c82c7c3b870f612e143f2d094e040402f15d0e857386d02cc5824068c9f8b1de61c685858838c22373598e861328b322f6695274640fc9599d9b1a1c490ec1e4328fee4e2db36d483e7e45723f46e564b3da78b4a3a9dd43d3600881462271ed62e508fa41f024c2c2e87a5dbb4ee262448e1cac4b72c36c060931e7d77c496abf74b0709684d2d48a74c5e78", @ANYRES32=0x0, @ANYBLOB="08000900070000000600050002000000"], 0x6c}}, 0x24000880) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xe, 0x0, 0x22}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x8a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)6v\x8d4\xe4\x80\xa3C\x96\x9a\xb8\x9cY\xaeJ7', 0x0) (async) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a400000000000000000034d90a2742a64e000000000000dbf0ea4f1fe8fcdf28cc7ebdfd74dafc2038"], 0x3c) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ebc700002dbd703f51dbdf251c000000", @ANYRES32=0x0, @ANYBLOB="000000057cdf475aeb8ccebe0de48a10060006004e1f000014010000000000000000000000020000260000000800ba96980000000a000100fa412fb813230008000d005e000000080008001941fd66ffc7dd52e5b100f2609dbb6ee893befa10207f7c892a1c82c7c3b870f612e143f2d094e040402f15d0e857386d02cc5824068c9f8b1de61c685858838c22373598e861328b322f6695274640fc9599d9b1a1c490ec1e4328fee4e2db36d483e7e45723f46e564b3da78b4a3a9dd43d3600881462271ed62e508fa41f024c2c2e87a5dbb4ee262448e1cac4b72c36c060931e7d77c496abf74b0709684d2d48a74c5e78", @ANYRES32=0x0, @ANYBLOB="08000900070000000600050002000000"], 0x6c}}, 0x24000880) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xe, 0x0, 0x22}, 0x10) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x8a) (async) [ 3181.689118][T22639] Bluetooth: hci6: Frame reassembly failed (-84) [ 3181.695781][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3181.748382][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3181.754781][T22640] Bluetooth: hci8: Frame reassembly failed (-84) [ 3181.761264][T22640] Bluetooth: hci8: Frame reassembly failed (-84) [ 3181.835925][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3181.841947][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3183.275902][T22049] Bluetooth: hci4: command 0x1001 tx timeout [ 3183.275916][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3183.281966][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3183.287917][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3183.294198][T22049] Bluetooth: hci0: command 0x1001 tx timeout [ 3183.300244][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3183.306017][T22049] Bluetooth: hci5: command 0x1001 tx timeout [ 3183.312178][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3183.318001][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3183.325493][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3183.755977][T22049] Bluetooth: hci8: command 0x1003 tx timeout [ 3183.762046][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3183.768101][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3183.774244][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3183.915939][T22049] Bluetooth: hci3: command 0x1001 tx timeout [ 3183.921985][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3185.355953][T22049] Bluetooth: hci5: command 0x1009 tx timeout [ 3185.355957][T22431] Bluetooth: hci7: command 0x1009 tx timeout [ 3185.355978][T22431] Bluetooth: hci0: command 0x1009 tx timeout [ 3185.361966][T22049] Bluetooth: hci4: command 0x1009 tx timeout [ 3185.368324][T22431] Bluetooth: hci2: command 0x1009 tx timeout [ 3185.835948][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3185.841965][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3185.848056][T22050] Bluetooth: hci8: command 0x1001 tx timeout [ 3185.854089][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3185.995931][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3187.915990][T22049] Bluetooth: hci8: command 0x1009 tx timeout [ 3187.921990][T22049] Bluetooth: hci6: command 0x1009 tx timeout 02:43:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:43:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/206) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="7dd4b92db7a9dc93abcf2c0ecaf09fc82e82cbac924cfe0d7451b00d11516a4101dc441cb037385f1622bcbbe91848f44eeb4473a8b47523fc0efbd448a0d82c238f6dafb4daa8a71e24e953d2a1398d10723d40a381adf92ccbd7e1757041fb16089bb4df9a9dfed8668f7a7845f72c835bf3ef4d2fc474d76ae0a256b05f87e912ad4ee450901ecddfb01e12fad914a2caa961ce4da80735b8f28c8fc42931ffdd9e187741a255bcc3c83e0987d5731cb1b0b66b707d32c6779bac8e9f4cd8bdd08944c8238494ee3ce0") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/206) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="7dd4b92db7a9dc93abcf2c0ecaf09fc82e82cbac924cfe0d7451b00d11516a4101dc441cb037385f1622bcbbe91848f44eeb4473a8b47523fc0efbd448a0d82c238f6dafb4daa8a71e24e953d2a1398d10723d40a381adf92ccbd7e1757041fb16089bb4df9a9dfed8668f7a7845f72c835bf3ef4d2fc474d76ae0a256b05f87e912ad4ee450901ecddfb01e12fad914a2caa961ce4da80735b8f28c8fc42931ffdd9e187741a255bcc3c83e0987d5731cb1b0b66b707d32c6779bac8e9f4cd8bdd08944c8238494ee3ce0") (async) 02:43:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x440000) ioctl$TCFLSH(r1, 0x800455c9, 0x0) 02:43:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3189.379566][T22655] Bluetooth: hci0: Frame reassembly failed (-84) [ 3189.386566][T17034] Bluetooth: hci0: Frame reassembly failed (-84) 02:43:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5417, &(0x7f00000000c0)=0x4) [ 3190.005771][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3191.435902][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3191.435907][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 3191.435924][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 3191.441935][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3191.448059][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3191.454473][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3191.459973][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3191.465984][T21332] Bluetooth: hci0: sending frame failed (-49) 02:43:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r2 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)6v\x8d4\xe4\x80\xa3C\x96\x9a\xb8\x9cY\xaeJ7', 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a400000000000000000034d90a2742a64e000000000000dbf0ea4f1fe8fcdf28cc7ebdfd74dafc2038"], 0x3c) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ebc700002dbd703f51dbdf251c000000", @ANYRES32=0x0, @ANYBLOB="000000057cdf475aeb8ccebe0de48a10060006004e1f000014010000000000000000000000020000260000000800ba96980000000a000100fa412fb813230008000d005e000000080008001941fd66ffc7dd52e5b100f2609dbb6ee893befa10207f7c892a1c82c7c3b870f612e143f2d094e040402f15d0e857386d02cc5824068c9f8b1de61c685858838c22373598e861328b322f6695274640fc9599d9b1a1c490ec1e4328fee4e2db36d483e7e45723f46e564b3da78b4a3a9dd43d3600881462271ed62e508fa41f024c2c2e87a5dbb4ee262448e1cac4b72c36c060931e7d77c496abf74b0709684d2d48a74c5e78", @ANYRES32=0x0, @ANYBLOB="08000900070000000600050002000000"], 0x6c}}, 0x24000880) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xe, 0x0, 0x22}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x8a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)6v\x8d4\xe4\x80\xa3C\x96\x9a\xb8\x9cY\xaeJ7', 0x0) (async) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46020000000400004000c4a400000000000000000034d90a2742a64e000000000000dbf0ea4f1fe8fcdf28cc7ebdfd74dafc2038"], 0x3c) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000000ebc700002dbd703f51dbdf251c000000", @ANYRES32=0x0, @ANYBLOB="000000057cdf475aeb8ccebe0de48a10060006004e1f000014010000000000000000000000020000260000000800ba96980000000a000100fa412fb813230008000d005e000000080008001941fd66ffc7dd52e5b100f2609dbb6ee893befa10207f7c892a1c82c7c3b870f612e143f2d094e040402f15d0e857386d02cc5824068c9f8b1de61c685858838c22373598e861328b322f6695274640fc9599d9b1a1c490ec1e4328fee4e2db36d483e7e45723f46e564b3da78b4a3a9dd43d3600881462271ed62e508fa41f024c2c2e87a5dbb4ee262448e1cac4b72c36c060931e7d77c496abf74b0709684d2d48a74c5e78", @ANYRES32=0x0, @ANYBLOB="08000900070000000600050002000000"], 0x6c}}, 0x24000880) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0xe, 0x0, 0x22}, 0x10) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x8a) (async) [ 3191.986624][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3191.992994][T22678] Bluetooth: hci6: Frame reassembly failed (-84) [ 3192.051337][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3192.057733][T22679] Bluetooth: hci7: Frame reassembly failed (-84) [ 3192.064285][T22679] Bluetooth: hci7: Frame reassembly failed (-84) [ 3192.075908][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3192.081983][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3193.515907][T22049] Bluetooth: hci2: command 0x1001 tx timeout [ 3193.515911][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3193.526261][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3193.528062][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3193.540243][T22049] Bluetooth: hci4: command 0x1001 tx timeout [ 3193.546250][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3193.552316][T22049] Bluetooth: hci5: command 0x1001 tx timeout [ 3193.558322][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3193.995920][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3194.002033][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3194.075939][T20531] Bluetooth: hci7: command 0x1003 tx timeout [ 3194.082016][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3194.155967][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 3194.162100][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3195.595968][T22431] Bluetooth: hci0: command 0x1009 tx timeout [ 3195.595972][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3195.596001][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3195.614057][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3196.075952][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3196.082168][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3196.155982][T22050] Bluetooth: hci7: command 0x1001 tx timeout [ 3196.162246][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3196.236036][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3198.155950][T22431] Bluetooth: hci6: command 0x1009 tx timeout [ 3198.235972][T22431] Bluetooth: hci7: command 0x1009 tx timeout 02:43:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:43:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r1, &(0x7f0000000000)='net/packet\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) 02:43:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000001c0)=""/206) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="7dd4b92db7a9dc93abcf2c0ecaf09fc82e82cbac924cfe0d7451b00d11516a4101dc441cb037385f1622bcbbe91848f44eeb4473a8b47523fc0efbd448a0d82c238f6dafb4daa8a71e24e953d2a1398d10723d40a381adf92ccbd7e1757041fb16089bb4df9a9dfed8668f7a7845f72c835bf3ef4d2fc474d76ae0a256b05f87e912ad4ee450901ecddfb01e12fad914a2caa961ce4da80735b8f28c8fc42931ffdd9e187741a255bcc3c83e0987d5731cb1b0b66b707d32c6779bac8e9f4cd8bdd08944c8238494ee3ce0") 02:43:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x440000) ioctl$TCFLSH(r1, 0x800455c9, 0x0) [ 3199.617807][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3199.629417][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3199.641494][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3199.646862][T22709] Bluetooth: hci8: Frame reassembly failed (-84) [ 3199.654315][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) 02:43:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, 0x0) (fail_nth: 1) [ 3200.248175][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3201.675906][T19679] Bluetooth: hci8: command 0x1003 tx timeout [ 3201.681949][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3201.688250][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3201.694311][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 3201.700473][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3201.706663][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3201.712643][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3201.718876][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 3201.724992][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3201.731170][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) 02:43:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x48000000) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:43:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x48000000) ioctl$TCFLSH(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x48000000) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) 02:43:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10f) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$KDADDIO(r0, 0x4b34, 0x48000000) (async, rerun: 64) ioctl$TCFLSH(r0, 0x5437, 0x0) (rerun: 64) 02:43:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4d100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:43:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4d100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:43:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4d100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x4000) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4d100, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r0, 0x4000) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) 02:43:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = dup(r0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) [ 3202.300941][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3202.315902][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3202.321954][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3203.755918][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 3203.761910][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3203.761952][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3203.768260][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3203.780050][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3203.786060][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3203.792124][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3203.798139][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3203.804198][T19679] Bluetooth: hci8: command 0x1001 tx timeout [ 3203.810723][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3204.315886][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3204.321962][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3204.395882][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3204.401967][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3205.835967][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3205.835971][T19679] Bluetooth: hci8: command 0x1009 tx timeout [ 3205.835999][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3205.853958][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3205.860166][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3206.395955][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 3206.402034][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3206.475967][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 3208.475999][T22050] Bluetooth: hci6: command 0x1009 tx timeout 02:43:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:43:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r1, &(0x7f0000000000)='net/packet\x00') (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) 02:43:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x440000) ioctl$TCFLSH(r1, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x440000) (async) ioctl$TCFLSH(r1, 0x800455c9, 0x0) (async) 02:43:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0x5f79, @status={[0x5515, 0x2, 0xffffffffffffffff, 0x8001, 0x8b, 0xcd56]}, [0x7, 0x4, 0xfff, 0x80000001, 0x80, 0x8d0d, 0x400, 0x1, 0x7, 0x7fffffff, 0x4, 0x78a, 0x3, 0xfffffffffffffffc, 0x29d, 0x3, 0x2, 0x9, 0x9, 0x8, 0x1, 0x1, 0x2, 0xf7, 0x0, 0x7, 0x58a1, 0x10001, 0x1, 0x10001, 0x10001, 0x0, 0xef, 0x2, 0x100000001, 0xd5b0, 0x6, 0x2, 0x1, 0xffffffff, 0x1c2, 0x1000, 0x8, 0x9, 0x0, 0x7, 0x2, 0xfff, 0x7, 0x2, 0x5, 0x7, 0x20, 0x8000, 0x8, 0x67, 0x101, 0x9, 0x94c2, 0x0, 0x10000, 0x7, 0x100, 0x4]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3209.854573][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3209.904272][ T22] audit: type=1400 audit(1657853018.619:322): avc: denied { ioctl } for pid=22754 comm="syz-executor.4" path="socket:[87480]" dev="sockfs" ino=87480 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 3209.906581][T22760] Bluetooth: hci4: Frame reassembly failed (-84) [ 3209.936746][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3209.938179][T21343] Bluetooth: hci5: Frame reassembly failed (-84) [ 3209.943215][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3210.475931][T22715] FAULT_INJECTION: forcing a failure. [ 3210.475931][T22715] name failslab, interval 1, probability 0, space 0, times 0 [ 3210.488694][T22715] CPU: 0 PID: 22715 Comm: syz-executor.1 Not tainted 5.4.190-syzkaller-00008-g330fa791a029 #0 [ 3210.498952][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 3210.508993][T22715] Call Trace: [ 3210.512270][T22715] dump_stack+0x18e/0x1d5 [ 3210.516595][T22715] should_fail+0x604/0x770 [ 3210.520986][T22715] ? __alloc_skb+0x78/0x4d0 [ 3210.525542][T22715] should_failslab+0x5/0x20 [ 3210.530017][T22715] kmem_cache_alloc+0x24/0x210 [ 3210.534760][T22715] __alloc_skb+0x78/0x4d0 [ 3210.539068][T22715] ? mutex_unlock+0x19/0x40 [ 3210.543637][T22715] hci_sock_dev_event+0xe1/0x500 [ 3210.548550][T22715] hci_unregister_dev+0x246/0x2c0 [ 3210.553546][T22715] hci_uart_tty_close+0x1a2/0x220 [ 3210.558536][T22715] ? hci_uart_tty_open+0x2d0/0x2d0 [ 3210.563616][T22715] tty_ldisc_hangup+0x4bf/0x6b0 [ 3210.569376][T22715] __tty_hangup+0x5d8/0x870 [ 3210.573878][T22715] tty_ioctl+0x630/0xcb0 [ 3210.578094][T22715] ? tty_do_resize+0x170/0x170 [ 3210.582831][T22715] do_vfs_ioctl+0x6d1/0x15b0 [ 3210.587396][T22715] __x64_sys_ioctl+0xd4/0x110 [ 3210.592045][T22715] do_syscall_64+0xcb/0x1c0 [ 3210.596523][T22715] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3210.602380][T22715] RIP: 0033:0x7f3ad415c109 [ 3210.606762][T22715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 02:43:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5437, 0x0) 02:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0x5f79, @status={[0x5515, 0x2, 0xffffffffffffffff, 0x8001, 0x8b, 0xcd56]}, [0x7, 0x4, 0xfff, 0x80000001, 0x80, 0x8d0d, 0x400, 0x1, 0x7, 0x7fffffff, 0x4, 0x78a, 0x3, 0xfffffffffffffffc, 0x29d, 0x3, 0x2, 0x9, 0x9, 0x8, 0x1, 0x1, 0x2, 0xf7, 0x0, 0x7, 0x58a1, 0x10001, 0x1, 0x10001, 0x10001, 0x0, 0xef, 0x2, 0x100000001, 0xd5b0, 0x6, 0x2, 0x1, 0xffffffff, 0x1c2, 0x1000, 0x8, 0x9, 0x0, 0x7, 0x2, 0xfff, 0x7, 0x2, 0x5, 0x7, 0x20, 0x8000, 0x8, 0x67, 0x101, 0x9, 0x94c2, 0x0, 0x10000, 0x7, 0x100, 0x4]}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3210.626343][T22715] RSP: 002b:00007f3ad32d2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3210.634936][T22715] RAX: ffffffffffffffda RBX: 00007f3ad426ef60 RCX: 00007f3ad415c109 [ 3210.642901][T22715] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 3210.650863][T22715] RBP: 00007f3ad32d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 3210.658808][T22715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3210.666758][T22715] R13: 00007ffc2e2c5d7f R14: 00007f3ad32d2300 R15: 0000000000022000 02:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000000c0)={0x1, 0x5f79, @status={[0x5515, 0x2, 0xffffffffffffffff, 0x8001, 0x8b, 0xcd56]}, [0x7, 0x4, 0xfff, 0x80000001, 0x80, 0x8d0d, 0x400, 0x1, 0x7, 0x7fffffff, 0x4, 0x78a, 0x3, 0xfffffffffffffffc, 0x29d, 0x3, 0x2, 0x9, 0x9, 0x8, 0x1, 0x1, 0x2, 0xf7, 0x0, 0x7, 0x58a1, 0x10001, 0x1, 0x10001, 0x10001, 0x0, 0xef, 0x2, 0x100000001, 0xd5b0, 0x6, 0x2, 0x1, 0xffffffff, 0x1c2, 0x1000, 0x8, 0x9, 0x0, 0x7, 0x2, 0xfff, 0x7, 0x2, 0x5, 0x7, 0x20, 0x8000, 0x8, 0x67, 0x101, 0x9, 0x94c2, 0x0, 0x10000, 0x7, 0x100, 0x4]}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:43:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0x4, 0x7, 0x7, 0x1b, "449559715da7e1747a9bdc680d1a6f05add7a2"}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2010) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3210.692099][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3210.722201][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3211.915883][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 3211.921966][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3211.995944][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3212.001957][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3212.001997][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3212.008203][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3212.014145][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3212.020347][T20858] Bluetooth: hci2: sending frame failed (-49) 02:43:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (rerun: 32) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = dup(r0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) [ 3212.408621][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3212.715883][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 3212.721978][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3212.795955][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3212.802064][T20858] Bluetooth: hci7: sending frame failed (-49) [ 3213.995877][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 3214.001945][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3214.075910][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 3214.075914][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3214.075961][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3214.081964][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3214.099988][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 3214.106033][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3214.475885][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 3214.481961][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3214.795897][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3214.802001][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3214.875911][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 3214.881976][ T89] Bluetooth: hci7: sending frame failed (-49) [ 3216.075915][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 3216.155933][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3216.155937][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 3216.167933][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3216.555937][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3216.562072][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3216.876002][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 3216.956005][T20531] Bluetooth: hci7: command 0x1009 tx timeout [ 3218.635955][T19652] Bluetooth: hci6: command 0x1009 tx timeout 02:43:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) syz_open_pts(r0, 0x2103) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x16%\x00', 0x0, 0xffffffffffffffff) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) 02:43:48 executing program 5: getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:43:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r1, &(0x7f0000000000)='net/packet\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async, rerun: 32) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) (rerun: 32) [ 3220.099093][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3220.102525][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3220.125795][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3220.127594][T21343] Bluetooth: hci5: Frame reassembly failed (-84) 02:43:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x2, 0x0) 02:43:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0x4, 0x7, 0x7, 0x1b, "449559715da7e1747a9bdc680d1a6f05add7a2"}) (async) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2010) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3222.155948][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3222.161967][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3222.162002][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3222.168381][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3222.180037][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 3222.180059][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3222.186224][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3222.198594][T21343] Bluetooth: hci5: Frame reassembly failed (-84) 02:43:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) r1 = dup(r0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) [ 3222.795921][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3222.802124][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3223.435877][T22049] Bluetooth: hci7: command 0x1003 tx timeout [ 3223.441982][ T89] Bluetooth: hci7: sending frame failed (-49) [ 3224.235920][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3224.235933][T22049] Bluetooth: hci2: command 0x1001 tx timeout [ 3224.241962][ T89] Bluetooth: hci0: sending frame failed (-49) [ 3224.248029][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3224.254338][T22431] Bluetooth: hci5: command 0x1001 tx timeout [ 3224.260127][T22049] Bluetooth: hci4: command 0x1001 tx timeout [ 3224.266434][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3224.272224][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3224.715910][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3224.722016][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3224.875900][T22431] Bluetooth: hci3: command 0x1001 tx timeout [ 3224.882015][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3225.515913][T22431] Bluetooth: hci7: command 0x1001 tx timeout [ 3225.522075][T20858] Bluetooth: hci7: sending frame failed (-49) [ 3226.315976][T22431] Bluetooth: hci5: command 0x1009 tx timeout [ 3226.315980][T22049] Bluetooth: hci4: command 0x1009 tx timeout [ 3226.316050][T22049] Bluetooth: hci2: command 0x1009 tx timeout [ 3226.322002][T22431] Bluetooth: hci0: command 0x1009 tx timeout [ 3226.795985][T22049] Bluetooth: hci6: command 0x1001 tx timeout [ 3226.802041][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3226.956026][T22049] Bluetooth: hci3: command 0x1009 tx timeout [ 3227.596014][T22049] Bluetooth: hci7: command 0x1009 tx timeout [ 3228.875944][T22049] Bluetooth: hci6: command 0x1009 tx timeout 02:43:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) syz_open_pts(r0, 0x2103) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x16%\x00', 0x0, 0xffffffffffffffff) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) (async) syz_open_pts(r0, 0x2103) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x16%\x00', 0x0, 0xffffffffffffffff) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) (async) 02:43:59 executing program 5: getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:43:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x3) [ 3230.341711][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3230.350284][T21343] Bluetooth: hci2: Frame reassembly failed (-84) [ 3230.402278][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3230.416113][T22828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22828 comm=syz-executor.2 [ 3230.431456][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) 02:43:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x4b47, 0x0) [ 3230.965832][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0x4, 0x7, 0x7, 0x1b, "449559715da7e1747a9bdc680d1a6f05add7a2"}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x2010) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3232.395903][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3232.402004][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3232.402065][T11231] Bluetooth: hci2: sending frame failed (-49) [ 3232.408477][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3232.475893][T22049] Bluetooth: hci4: command 0x1003 tx timeout [ 3232.482019][T20858] Bluetooth: hci4: sending frame failed (-49) 02:44:01 executing program 0: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3232.890833][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3232.897486][T22835] Bluetooth: hci6: Frame reassembly failed (-84) [ 3233.035938][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3233.041966][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3233.675894][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3233.681953][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3234.475899][T22049] Bluetooth: hci2: command 0x1001 tx timeout [ 3234.475912][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 3234.481976][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3234.488366][T11231] Bluetooth: hci0: sending frame failed (-49) [ 3234.555910][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3234.561919][T11231] Bluetooth: hci4: sending frame failed (-49) [ 3234.955935][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3234.961957][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3235.115939][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3235.122068][T11231] Bluetooth: hci3: sending frame failed (-49) [ 3235.755937][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3235.761963][T11231] Bluetooth: hci5: sending frame failed (-49) [ 3236.555967][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3236.555971][T22049] Bluetooth: hci2: command 0x1009 tx timeout [ 3236.635991][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3237.035964][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 3237.042165][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3237.195975][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 3237.835975][T19679] Bluetooth: hci5: command 0x1009 tx timeout [ 3239.115953][T22050] Bluetooth: hci6: command 0x1009 tx timeout 02:44:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x444000, 0x0) syz_open_pts(r0, 0x2103) (async) ioctl$VT_RELDISP(r1, 0x5605) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='\x16%\x00', 0x0, 0xffffffffffffffff) (async) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000140)) 02:44:09 executing program 5: getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x3) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x3) (async) [ 3240.608489][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3240.623174][T22847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22847 comm=syz-executor.2 02:44:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x4b49, 0x0) [ 3241.206162][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3241.846894][T21343] Bluetooth: hci5: Frame reassembly failed (-84) [ 3242.635886][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3242.641914][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3242.642125][T11231] Bluetooth: hci2: sending frame failed (-49) [ 3242.648428][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3242.715910][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 3242.722006][T20858] Bluetooth: hci4: sending frame failed (-49) 02:44:11 executing program 0: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) [ 3243.127451][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3243.133846][T22867] Bluetooth: hci6: Frame reassembly failed (-84) [ 3243.275883][T20531] Bluetooth: hci3: command 0x1003 tx timeout [ 3243.281995][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3243.915927][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 3243.922053][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3244.715928][T19652] Bluetooth: hci0: command 0x1001 tx timeout [ 3244.715933][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 3244.726269][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3244.728789][T11231] Bluetooth: hci0: sending frame failed (-49) [ 3244.795917][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3244.802057][T11231] Bluetooth: hci4: sending frame failed (-49) [ 3245.195932][T19652] Bluetooth: hci6: command 0x1003 tx timeout [ 3245.201964][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3245.355928][T19652] Bluetooth: hci3: command 0x1001 tx timeout [ 3245.361961][T11231] Bluetooth: hci3: sending frame failed (-49) [ 3245.995906][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 3246.001924][T11231] Bluetooth: hci5: sending frame failed (-49) [ 3246.795962][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3246.795966][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 3246.875960][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3247.275940][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 3247.281957][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3247.435936][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 3248.075944][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 3249.356023][T19652] Bluetooth: hci6: command 0x1009 tx timeout 02:44:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r0, 0x400455c8, 0x64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)=0x3) 02:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) [ 3250.816338][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.824669][T22884] Bluetooth: hci0: Frame reassembly failed (-84) [ 3250.838348][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3250.840221][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 02:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8ac, 0x10000, 0x4, 0x4ff685dd, 0xd, "a9b64312183d456ff3f24039d87287c8ac60e8"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TCFLSH(r0, 0x800455c9, 0x0) [ 3250.860645][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.863304][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3250.875099][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.894439][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.909782][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.922860][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.936113][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.949099][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 [ 3250.962001][T22880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=22880 comm=syz-executor.2 02:44:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5409, 0x0) [ 3251.445129][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) syz_open_pts(0xffffffffffffffff, 0x400000) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3252.875924][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3252.881934][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 3252.881975][T11231] Bluetooth: hci2: sending frame failed (-49) [ 3252.888386][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3252.955951][T19679] Bluetooth: hci4: command 0x1003 tx timeout [ 3252.961968][T20858] Bluetooth: hci4: sending frame failed (-49) 02:44:22 executing program 0: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000000c0)) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3253.364646][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3253.371080][T22903] Bluetooth: hci6: Frame reassembly failed (-84) [ 3253.515880][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3253.522026][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3254.155885][T22050] Bluetooth: hci5: command 0x1003 tx timeout [ 3254.161995][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3254.955919][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3254.955924][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 3254.955977][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3254.961931][T11231] Bluetooth: hci2: sending frame failed (-49) [ 3255.035882][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3255.041968][T11231] Bluetooth: hci4: sending frame failed (-49) [ 3255.435914][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3255.441979][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3255.595910][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3255.601970][T11231] Bluetooth: hci3: sending frame failed (-49) [ 3256.235913][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3256.242011][T11231] Bluetooth: hci5: sending frame failed (-49) [ 3257.035951][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3257.035955][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3257.115977][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3257.516034][T22049] Bluetooth: hci6: command 0x1001 tx timeout [ 3257.522152][T11231] Bluetooth: hci6: sending frame failed (-49) [ 3257.675938][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3258.315961][T22050] Bluetooth: hci5: command 0x1009 tx timeout [ 3259.595991][T20531] Bluetooth: hci6: command 0x1009 tx timeout 02:44:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8ac, 0x10000, 0x4, 0x4ff685dd, 0xd, "a9b64312183d456ff3f24039d87287c8ac60e8"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x64) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:44:29 executing program 2: r0 = syz_io_uring_setup(0x7c58, &(0x7f00000000c0)={0x0, 0xe679, 0x0, 0x0, 0x14d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e4e28456eef65ba8d92b331a084ce3b615a1f112cce600c06d7bab3e22fc87906dc5ed", 0x23}, {&(0x7f0000000200)="ee515f8e6ef9c8847a4a6b1172c7e8f36eb1a4b1c2f6b9cc", 0x18}, {&(0x7f0000000240)="c3b747ebcdc821f18dcde4d6b9fbbe5893f534f4029800fb9428eea34e7f9d6f77a6c4366e4fb4f5022345b8fd93fe677536288a0142e51e12fdf42cd93804d6b6ea21c6f623f36a7f187aea2e9f4c9fdd3660539d09d30b6a52b43048d6864aaea07ceea78106ba330771e64cff64fcf922e722bb019f188630fc0165bd5e45bf71c08d48496f7e6138e8d8c4410b97e39b304799b1a4e86435fd8aa33f21244eb298c874a9f811", 0xa8}], 0x3, 0x9, 0xfffffff8, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x50) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3) [ 3261.054644][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3261.061522][T22909] Bluetooth: hci0: Frame reassembly failed (-84) [ 3261.076339][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:44:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x540b, 0x0) [ 3261.688369][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3262.325986][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3263.115922][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3263.115937][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 3263.121992][T11231] Bluetooth: hci2: sending frame failed (-49) [ 3263.128240][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 3263.133976][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3263.140212][T11231] Bluetooth: hci0: sending frame failed (-49) 02:44:32 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:44:32 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:44:32 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) 02:44:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x200000000000) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3263.634656][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3263.755897][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3263.762193][T11231] Bluetooth: hci3: sending frame failed (-49) [ 3264.395926][T19652] Bluetooth: hci5: command 0x1003 tx timeout [ 3264.401999][T11231] Bluetooth: hci5: sending frame failed (-49) [ 3265.195916][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3265.195966][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3265.202006][T11231] Bluetooth: hci4: sending frame failed (-49) [ 3265.208207][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3265.213997][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3265.220143][ T89] Bluetooth: hci2: sending frame failed (-49) [ 3265.675887][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3265.681930][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3265.835921][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 3265.841977][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3266.475900][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 3266.481963][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3267.275959][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3267.275964][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3267.287961][T19652] Bluetooth: hci0: command 0x1009 tx timeout [ 3267.755946][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3267.761965][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3267.916028][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 3268.555944][T20531] Bluetooth: hci5: command 0x1009 tx timeout [ 3269.835951][T20531] Bluetooth: hci6: command 0x1009 tx timeout 02:44:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x8ac, 0x10000, 0x4, 0x4ff685dd, 0xd, "a9b64312183d456ff3f24039d87287c8ac60e8"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:40 executing program 2: r0 = syz_io_uring_setup(0x7c58, &(0x7f00000000c0)={0x0, 0xe679, 0x0, 0x0, 0x14d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e4e28456eef65ba8d92b331a084ce3b615a1f112cce600c06d7bab3e22fc87906dc5ed", 0x23}, {&(0x7f0000000200)="ee515f8e6ef9c8847a4a6b1172c7e8f36eb1a4b1c2f6b9cc", 0x18}, {&(0x7f0000000240)="c3b747ebcdc821f18dcde4d6b9fbbe5893f534f4029800fb9428eea34e7f9d6f77a6c4366e4fb4f5022345b8fd93fe677536288a0142e51e12fdf42cd93804d6b6ea21c6f623f36a7f187aea2e9f4c9fdd3660539d09d30b6a52b43048d6864aaea07ceea78106ba330771e64cff64fcf922e722bb019f188630fc0165bd5e45bf71c08d48496f7e6138e8d8c4410b97e39b304799b1a4e86435fd8aa33f21244eb298c874a9f811", 0xa8}], 0x3, 0x9, 0xfffffff8, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x50) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3) syz_io_uring_setup(0x7c58, &(0x7f00000000c0)={0x0, 0xe679, 0x0, 0x0, 0x14d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e4e28456eef65ba8d92b331a084ce3b615a1f112cce600c06d7bab3e22fc87906dc5ed", 0x23}, {&(0x7f0000000200)="ee515f8e6ef9c8847a4a6b1172c7e8f36eb1a4b1c2f6b9cc", 0x18}, {&(0x7f0000000240)="c3b747ebcdc821f18dcde4d6b9fbbe5893f534f4029800fb9428eea34e7f9d6f77a6c4366e4fb4f5022345b8fd93fe677536288a0142e51e12fdf42cd93804d6b6ea21c6f623f36a7f187aea2e9f4c9fdd3660539d09d30b6a52b43048d6864aaea07ceea78106ba330771e64cff64fcf922e722bb019f188630fc0165bd5e45bf71c08d48496f7e6138e8d8c4410b97e39b304799b1a4e86435fd8aa33f21244eb298c874a9f811", 0xa8}], 0x3, 0x9, 0xfffffff8, 0x0) (async) creat(&(0x7f0000000380)='./file0\x00', 0x50) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3) (async) 02:44:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r0, 0x400455c8, 0x64) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (rerun: 64) [ 3271.297832][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3271.304720][T22944] Bluetooth: hci0: Frame reassembly failed (-84) [ 3271.313231][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3271.315108][T21343] Bluetooth: hci4: Frame reassembly failed (-84) 02:44:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x540c, 0x0) [ 3271.927082][T21343] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$KDMKTONE(r1, 0x4b30, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe23, 0xfff}) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) [ 3273.355917][T22049] Bluetooth: hci2: command 0x1003 tx timeout [ 3273.355922][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3273.366321][ T89] Bluetooth: hci4: sending frame failed (-49) [ 3273.368047][T22049] Bluetooth: hci0: command 0x1003 tx timeout [ 3273.373997][ T89] Bluetooth: hci2: sending frame failed (-49) [ 3273.380278][T11231] Bluetooth: hci0: sending frame failed (-49) 02:44:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x200000000000) (async) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3273.995892][T22049] Bluetooth: hci3: command 0x1003 tx timeout [ 3274.002023][T11231] Bluetooth: hci3: sending frame failed (-49) [ 3274.635889][T22049] Bluetooth: hci5: command 0x1003 tx timeout [ 3274.641932][T11231] Bluetooth: hci5: sending frame failed (-49) [ 3275.435920][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3275.435924][T22049] Bluetooth: hci0: command 0x1001 tx timeout [ 3275.435973][T11231] Bluetooth: hci0: sending frame failed (-49) [ 3275.441961][ T89] Bluetooth: hci2: sending frame failed (-49) [ 3275.460013][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3275.466067][ T89] Bluetooth: hci4: sending frame failed (-49) [ 3275.915891][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3275.922004][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3276.075889][T22049] Bluetooth: hci3: command 0x1001 tx timeout [ 3276.081981][ T89] Bluetooth: hci3: sending frame failed (-49) [ 3276.715888][T22049] Bluetooth: hci5: command 0x1001 tx timeout [ 3276.721973][ T89] Bluetooth: hci5: sending frame failed (-49) [ 3277.515953][T22049] Bluetooth: hci0: command 0x1009 tx timeout [ 3277.515957][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3277.515984][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 3277.995961][T19652] Bluetooth: hci6: command 0x1001 tx timeout [ 3278.002000][ T89] Bluetooth: hci6: sending frame failed (-49) [ 3278.155958][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 3278.795972][T19652] Bluetooth: hci5: command 0x1009 tx timeout [ 3280.075968][T19652] Bluetooth: hci6: command 0x1009 tx timeout 02:44:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x10001, 0x100000001, 0x6, 0xb994, 0xfffffffffffffffb, 0x3f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:50 executing program 2: r0 = syz_io_uring_setup(0x7c58, &(0x7f00000000c0)={0x0, 0xe679, 0x0, 0x0, 0x14d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e4e28456eef65ba8d92b331a084ce3b615a1f112cce600c06d7bab3e22fc87906dc5ed", 0x23}, {&(0x7f0000000200)="ee515f8e6ef9c8847a4a6b1172c7e8f36eb1a4b1c2f6b9cc", 0x18}, {&(0x7f0000000240)="c3b747ebcdc821f18dcde4d6b9fbbe5893f534f4029800fb9428eea34e7f9d6f77a6c4366e4fb4f5022345b8fd93fe677536288a0142e51e12fdf42cd93804d6b6ea21c6f623f36a7f187aea2e9f4c9fdd3660539d09d30b6a52b43048d6864aaea07ceea78106ba330771e64cff64fcf922e722bb019f188630fc0165bd5e45bf71c08d48496f7e6138e8d8c4410b97e39b304799b1a4e86435fd8aa33f21244eb298c874a9f811", 0xa8}], 0x3, 0x9, 0xfffffff8, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x50) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3) syz_io_uring_setup(0x7c58, &(0x7f00000000c0)={0x0, 0xe679, 0x0, 0x0, 0x14d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="e4e28456eef65ba8d92b331a084ce3b615a1f112cce600c06d7bab3e22fc87906dc5ed", 0x23}, {&(0x7f0000000200)="ee515f8e6ef9c8847a4a6b1172c7e8f36eb1a4b1c2f6b9cc", 0x18}, {&(0x7f0000000240)="c3b747ebcdc821f18dcde4d6b9fbbe5893f534f4029800fb9428eea34e7f9d6f77a6c4366e4fb4f5022345b8fd93fe677536288a0142e51e12fdf42cd93804d6b6ea21c6f623f36a7f187aea2e9f4c9fdd3660539d09d30b6a52b43048d6864aaea07ceea78106ba330771e64cff64fcf922e722bb019f188630fc0165bd5e45bf71c08d48496f7e6138e8d8c4410b97e39b304799b1a4e86435fd8aa33f21244eb298c874a9f811", 0xa8}], 0x3, 0x9, 0xfffffff8, 0x0) (async) creat(&(0x7f0000000380)='./file0\x00', 0x50) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x3) (async) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (rerun: 32) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7a5c, 0x0, 0xfffffffb, 0x26, 0x8, "c08d9b93e698d7b45d849d1439333b02ee96d8"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) [ 3281.540338][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3281.548627][T22968] Bluetooth: hci0: Frame reassembly failed (-84) [ 3281.558151][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3281.570299][T22968] Bluetooth: hci4: Frame reassembly failed (-84) [ 3281.580130][T18602] Bluetooth: hci4: Frame reassembly failed (-84) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7a5c, 0x0, 0xfffffffb, 0x26, 0x8, "c08d9b93e698d7b45d849d1439333b02ee96d8"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7a5c, 0x0, 0xfffffffb, 0x26, 0x8, "c08d9b93e698d7b45d849d1439333b02ee96d8"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x13) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7a5c, 0x0, 0xfffffffb, 0x26, 0x8, "c08d9b93e698d7b45d849d1439333b02ee96d8"}) (async) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) (async) 02:44:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x800455c9, 0x0) [ 3281.591128][T21343] Bluetooth: hci7: Frame reassembly failed (-84) 02:44:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x540d, 0x0) [ 3282.165790][T18602] Bluetooth: hci3: Frame reassembly failed (-84) 02:44:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$KDMKTONE(r1, 0x4b30, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe23, 0xfff}) (async) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) [ 3283.595932][T22050] Bluetooth: hci7: command 0x1003 tx timeout [ 3283.602053][ T8283] Bluetooth: hci7: sending frame failed (-49) [ 3283.608289][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3283.614298][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3283.620435][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3283.626604][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3283.632653][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3283.636105][T21343] Bluetooth: hci0: Frame reassembly failed (-84) 02:44:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x200000000000) (async) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3284.235887][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3284.241976][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3285.675973][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 3285.682144][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 3285.688312][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3285.694395][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 3285.700538][T20531] Bluetooth: hci7: command 0x1001 tx timeout [ 3285.706639][ T8283] Bluetooth: hci7: sending frame failed (-49) [ 3285.712771][T21343] Bluetooth: hci4: Frame reassembly failed (-84) [ 3285.712776][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3286.155961][T22050] Bluetooth: hci5: command 0x1003 tx timeout [ 3286.162095][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3286.315933][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3286.322053][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3287.755955][T22050] Bluetooth: hci7: command 0x1009 tx timeout [ 3287.761960][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3287.768098][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3287.774076][T22050] Bluetooth: hci0: command 0x1009 tx timeout [ 3288.235946][T22050] Bluetooth: hci5: command 0x1001 tx timeout [ 3288.241965][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3288.395946][T22050] Bluetooth: hci3: command 0x1009 tx timeout [ 3290.315964][T22050] Bluetooth: hci5: command 0x1009 tx timeout 02:45:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x800455c9, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) (async) ioctl$KDADDIO(r1, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) 02:45:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$KDMKTONE(r1, 0x4b30, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe23, 0xfff}) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) pipe2(&(0x7f0000000100), 0x80800) (async) ioctl$KDMKTONE(r1, 0x4b30, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0xe23, 0xfff}) (async) dup3(r1, r1, 0x80000) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) (async) 02:45:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x10001, 0x100000001, 0x6, 0xb994, 0xfffffffffffffffb, 0x3f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x10001, 0x100000001, 0x6, 0xb994, 0xfffffffffffffffb, 0x3f}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:45:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ftruncate(r0, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:45:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) ioctl$KDADDIO(r1, 0x400455c8, 0xffffffffffffffff) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:45:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0xfffffffffffffffe) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TCFLSH(r3, 0x800455c9, 0x80) [ 3291.908322][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3291.914807][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3291.919209][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3291.930607][T23018] Bluetooth: hci4: Frame reassembly failed (-84) [ 3291.938278][T23018] Bluetooth: hci6: Frame reassembly failed (-84) [ 3291.946669][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3291.958106][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 3291.964469][T23051] Bluetooth: hci8: Frame reassembly failed (-84) [ 3291.971020][T18602] Bluetooth: hci8: Frame reassembly failed (-84) 02:45:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 3292.405976][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3293.915909][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3293.915979][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3293.921972][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3293.928490][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3293.995926][T19679] Bluetooth: hci8: command 0x1003 tx timeout [ 3293.995975][T22050] Bluetooth: hci6: command 0x1003 tx timeout [ 3294.001941][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 3294.007965][T21332] Bluetooth: hci8: sending frame failed (-49) [ 3294.020026][T21332] Bluetooth: hci6: sending frame failed (-49) [ 3294.026129][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3294.032178][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) 02:45:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x10002) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x1) [ 3294.326695][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3294.475911][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3294.482018][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3295.995914][T19652] Bluetooth: hci2: command 0x1001 tx timeout [ 3295.996011][T22050] Bluetooth: hci0: command 0x1001 tx timeout [ 3296.002693][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3296.008275][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3296.075900][T19652] Bluetooth: hci7: command 0x1001 tx timeout [ 3296.075946][T22050] Bluetooth: hci4: command 0x1001 tx timeout [ 3296.087865][T22050] Bluetooth: hci6: command 0x1001 tx timeout [ 3296.087943][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3296.093833][T22050] Bluetooth: hci8: command 0x1001 tx timeout [ 3296.093886][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3296.100177][T21332] Bluetooth: hci8: sending frame failed (-49) [ 3296.395937][T22050] Bluetooth: hci5: command 0x1003 tx timeout [ 3296.402065][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3296.555892][T22050] Bluetooth: hci3: command 0x1001 tx timeout [ 3296.561988][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3298.076017][T19652] Bluetooth: hci2: command 0x1009 tx timeout [ 3298.076021][T22049] Bluetooth: hci0: command 0x1009 tx timeout [ 3298.155972][T22049] Bluetooth: hci6: command 0x1009 tx timeout [ 3298.155993][T19652] Bluetooth: hci8: command 0x1009 tx timeout [ 3298.167975][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3298.173952][T19652] Bluetooth: hci7: command 0x1009 tx timeout [ 3298.475979][T19652] Bluetooth: hci5: command 0x1001 tx timeout [ 3298.482023][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3298.635934][T19652] Bluetooth: hci3: command 0x1009 tx timeout [ 3300.555977][T20531] Bluetooth: hci5: command 0x1009 tx timeout 02:45:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ftruncate(r0, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ftruncate(r0, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) 02:45:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:45:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0xfffffffffffffffe) (async, rerun: 64) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) (rerun: 64) ioctl$TCFLSH(r3, 0x800455c9, 0x80) [ 3302.024965][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3302.033782][ T1516] Bluetooth: hci2: Frame reassembly failed (-84) [ 3302.038454][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3302.041346][T23065] Bluetooth: hci2: Frame reassembly failed (-84) [ 3302.053398][T23064] Bluetooth: hci4: Frame reassembly failed (-84) 02:45:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000100)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000180)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x10001, 0x100000001, 0x6, 0xb994, 0xfffffffffffffffb, 0x3f}) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (rerun: 32) [ 3302.113813][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) 02:45:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5413, 0x0) [ 3302.646358][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) [ 3304.075934][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3304.075938][T22049] Bluetooth: hci4: command 0x1003 tx timeout [ 3304.082881][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3304.088856][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3304.100535][T22431] Bluetooth: hci0: command 0x1003 tx timeout [ 3304.106579][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 3304.155912][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3304.161928][ T8283] Bluetooth: hci6: sending frame failed (-49) 02:45:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_open_pts(r0, 0x10002) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x1) [ 3304.568702][ T1516] Bluetooth: hci5: Frame reassembly failed (-84) [ 3304.715962][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3304.722373][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3306.155926][T20531] Bluetooth: hci4: command 0x1001 tx timeout [ 3306.155930][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3306.155980][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 3306.161958][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3306.167948][T22431] Bluetooth: hci2: command 0x1001 tx timeout [ 3306.186127][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3306.235962][T22431] Bluetooth: hci6: command 0x1001 tx timeout [ 3306.242045][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3306.635915][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3306.641982][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3306.795931][T22431] Bluetooth: hci3: command 0x1001 tx timeout [ 3306.801958][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3308.235969][T22431] Bluetooth: hci0: command 0x1009 tx timeout [ 3308.235973][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3308.236015][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3308.315953][T20531] Bluetooth: hci6: command 0x1009 tx timeout [ 3308.715940][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 3308.721993][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3308.875976][T22049] Bluetooth: hci3: command 0x1009 tx timeout [ 3310.795959][T22431] Bluetooth: hci5: command 0x1009 tx timeout 02:45:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ftruncate(r0, 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ftruncate(r0, 0x4) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) 02:45:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x59aec4b7e806add1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x84800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x81, 0xff, 0xfff, 0x18, "44c773cf66d7e47e6d1cf6fb97bc36c2397084"}) 02:45:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:45:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0xfffffffffffffffe) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$TCFLSH(r3, 0x800455c9, 0x80) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x59aec4b7e806add1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x84800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x81, 0xff, 0xfff, 0x18, "44c773cf66d7e47e6d1cf6fb97bc36c2397084"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x59aec4b7e806add1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x84800) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x81, 0xff, 0xfff, 0x18, "44c773cf66d7e47e6d1cf6fb97bc36c2397084"}) (async) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x59aec4b7e806add1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x84800) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x5, 0x81, 0xff, 0xfff, 0x18, "44c773cf66d7e47e6d1cf6fb97bc36c2397084"}) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101802, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101802, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3312.263939][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3312.287052][T21343] Bluetooth: hci4: Frame reassembly failed (-84) [ 3312.293467][T23095] Bluetooth: hci4: Frame reassembly failed (-84) [ 3312.300308][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101802, 0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async) open(&(0x7f0000000040)='./file0\x00', 0x101802, 0x8) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:45:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3312.367840][T21343] Bluetooth: hci6: Frame reassembly failed (-84) 02:45:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5414, 0x0) [ 3312.885414][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) [ 3314.315897][T20531] Bluetooth: hci4: command 0x1003 tx timeout [ 3314.321986][T20531] Bluetooth: hci2: command 0x1003 tx timeout [ 3314.322070][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3314.328459][T20531] Bluetooth: hci0: command 0x1003 tx timeout [ 3314.334085][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3314.340328][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3314.395928][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3314.402206][T21332] Bluetooth: hci6: sending frame failed (-49) 02:45:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) syz_open_pts(r0, 0x10002) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x1) [ 3314.807522][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3314.955893][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3314.962018][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3316.395919][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 3316.395924][T22431] Bluetooth: hci2: command 0x1001 tx timeout [ 3316.395976][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3316.402003][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 3316.408068][T22431] Bluetooth: hci4: command 0x1001 tx timeout [ 3316.426188][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 3316.475923][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3316.481963][ T8283] Bluetooth: hci6: sending frame failed (-49) [ 3316.875943][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 3316.882071][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3317.035924][T22431] Bluetooth: hci3: command 0x1001 tx timeout [ 3317.042021][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3318.475967][T22431] Bluetooth: hci2: command 0x1009 tx timeout [ 3318.475971][T20531] Bluetooth: hci4: command 0x1009 tx timeout [ 3318.475998][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 3318.555990][T20531] Bluetooth: hci6: command 0x1009 tx timeout [ 3318.955944][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 3318.962001][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3319.115952][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 3321.035989][T22431] Bluetooth: hci5: command 0x1009 tx timeout 02:45:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:45:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:45:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:45:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$VT_RELDISP(r1, 0x5605) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) dup3(r2, r3, 0x80000) ioctl$TCFLSH(r0, 0x800455c9, 0x2) 02:45:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async, rerun: 32) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 3322.511660][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3322.521899][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3322.522401][T23145] Bluetooth: hci0: Frame reassembly failed (-84) [ 3322.539730][T23147] Bluetooth: hci6: Frame reassembly failed (-84) [ 3322.546201][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3322.573383][T18602] Bluetooth: hci7: Frame reassembly failed (-84) 02:45:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5415, 0x0) [ 3323.129374][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3324.555901][T22049] Bluetooth: hci2: command 0x1003 tx timeout [ 3324.555905][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3324.555920][T22431] Bluetooth: hci4: command 0x1003 tx timeout [ 3324.562006][T22049] Bluetooth: hci0: command 0x1003 tx timeout [ 3324.568070][T21332] Bluetooth: hci2: sending frame failed (-49) [ 3324.574661][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3324.579967][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3324.598237][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3324.635891][T22431] Bluetooth: hci7: command 0x1003 tx timeout [ 3324.642009][T21332] Bluetooth: hci7: sending frame failed (-49) 02:45:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) dup3(r0, r0, 0x80000) [ 3325.047872][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3325.195933][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3325.202126][T21332] Bluetooth: hci3: sending frame failed (-49) [ 3326.635925][T22431] Bluetooth: hci4: command 0x1001 tx timeout [ 3326.635930][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 3326.646281][T21332] Bluetooth: hci0: sending frame failed (-49) [ 3326.647938][T22431] Bluetooth: hci2: command 0x1001 tx timeout [ 3326.653944][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3326.660199][T22431] Bluetooth: hci6: command 0x1001 tx timeout [ 3326.666000][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3326.673174][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3326.684311][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3326.715913][T22431] Bluetooth: hci7: command 0x1001 tx timeout [ 3326.721935][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3327.115907][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3327.121950][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3327.275940][T22431] Bluetooth: hci3: command 0x1001 tx timeout [ 3327.281983][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3328.715979][T20531] Bluetooth: hci2: command 0x1009 tx timeout [ 3328.715983][T22431] Bluetooth: hci6: command 0x1009 tx timeout [ 3328.716005][T22431] Bluetooth: hci4: command 0x1009 tx timeout [ 3328.722981][T20531] Bluetooth: hci0: command 0x1009 tx timeout [ 3328.795963][T20531] Bluetooth: hci7: command 0x1009 tx timeout [ 3329.195958][T20531] Bluetooth: hci5: command 0x1001 tx timeout [ 3329.202045][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3329.355985][T20531] Bluetooth: hci3: command 0x1009 tx timeout [ 3331.275965][T22431] Bluetooth: hci5: command 0x1009 tx timeout 02:45:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (rerun: 64) 02:45:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x50, 0x3, 0x153, 0xffff7bf7, 0x62, "36c6c5bec75f1f4c1adfd1bbe3b95b7ddd4155", 0x80000000, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x54, 0x7, 0x7, 0x0, 0x13, "53fff03123415ff5f8d1d23b96372b7089fb84"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x80, 0x6, 0x3, "fc74ca58bbe3370222dca9933f627cdd", "ca77ac274850867826b9456432f7e17be9502dd4ee65eee5594f1fdf16b55115d873454a3b56cc666e5c8d9b5e61132468cfb6f4cba4f30daefd9a427671eb469b528636bf0a3f8a12ade5209f857f83eda2e88304448a36343f9cb0b6fb297890653be8a77fca7deb741b"}, 0x80, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:45:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:45:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$VT_RELDISP(r1, 0x5605) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) dup3(r2, r3, 0x80000) ioctl$TCFLSH(r0, 0x800455c9, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) dup3(r2, r3, 0x80000) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x2) (async) [ 3332.741742][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3332.784439][T23185] Bluetooth: hci7: Frame reassembly failed (-84) [ 3332.786673][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3332.793626][T21343] Bluetooth: hci7: Frame reassembly failed (-84) 02:45:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5416, 0x0) [ 3333.366665][T21343] Bluetooth: hci3: Frame reassembly failed (-84) [ 3334.795935][T22050] Bluetooth: hci4: command 0x1003 tx timeout [ 3334.795939][T22431] Bluetooth: hci7: command 0x1003 tx timeout [ 3334.801985][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3334.808061][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3334.814397][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3334.820164][T22050] Bluetooth: hci2: command 0x1003 tx timeout [ 3334.827228][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3334.832170][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3334.832246][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3334.838588][T17107] Bluetooth: hci0: sending frame failed (-49) 02:45:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) dup3(r0, r0, 0x80000) 02:45:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) dup3(r0, r0, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async) dup3(r0, r0, 0x80000) (async) [ 3335.435899][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3335.441986][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3336.875937][T22050] Bluetooth: hci2: command 0x1001 tx timeout [ 3336.875941][T22431] Bluetooth: hci0: command 0x1001 tx timeout [ 3336.876240][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3336.882122][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3336.888260][T22431] Bluetooth: hci6: command 0x1001 tx timeout [ 3336.894523][T22050] Bluetooth: hci4: command 0x1001 tx timeout [ 3336.900503][T22431] Bluetooth: hci7: command 0x1001 tx timeout [ 3336.906371][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3336.912570][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3336.918465][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3337.355901][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3337.361969][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3337.515895][T22431] Bluetooth: hci3: command 0x1001 tx timeout [ 3337.523497][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3338.955975][T22431] Bluetooth: hci7: command 0x1009 tx timeout [ 3338.955979][T22050] Bluetooth: hci4: command 0x1009 tx timeout [ 3338.956002][T22050] Bluetooth: hci6: command 0x1009 tx timeout [ 3338.962080][T22431] Bluetooth: hci0: command 0x1009 tx timeout [ 3338.968473][T22050] Bluetooth: hci2: command 0x1009 tx timeout [ 3339.435953][T22431] Bluetooth: hci5: command 0x1001 tx timeout [ 3339.441997][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3339.595965][T22431] Bluetooth: hci3: command 0x1009 tx timeout [ 3341.515962][T22431] Bluetooth: hci5: command 0x1009 tx timeout 02:45:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 02:45:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x50, 0x3, 0x153, 0xffff7bf7, 0x62, "36c6c5bec75f1f4c1adfd1bbe3b95b7ddd4155", 0x80000000, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x54, 0x7, 0x7, 0x0, 0x13, "53fff03123415ff5f8d1d23b96372b7089fb84"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x80, 0x6, 0x3, "fc74ca58bbe3370222dca9933f627cdd", "ca77ac274850867826b9456432f7e17be9502dd4ee65eee5594f1fdf16b55115d873454a3b56cc666e5c8d9b5e61132468cfb6f4cba4f30daefd9a427671eb469b528636bf0a3f8a12ade5209f857f83eda2e88304448a36343f9cb0b6fb297890653be8a77fca7deb741b"}, 0x80, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:45:51 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:45:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) 02:45:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x10}, 0xc) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) dup3(r2, r3, 0x80000) ioctl$TCFLSH(r0, 0x800455c9, 0x2) 02:45:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) 02:45:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc0000000000e99b8000f0fffeffe809005300fff5dd80000010000140070c10000000020000000000", 0x58}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) socket$inet6(0xa, 0x6, 0x80000001) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x4) [ 3342.986612][T21343] Bluetooth: hci0: Frame reassembly failed (-84) [ 3343.009926][T21343] Bluetooth: hci4: Frame reassembly failed (-84) [ 3343.014140][T23236] Bluetooth: hci6: Frame reassembly failed (-84) [ 3343.023887][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3343.061795][T23245] Bluetooth: hci7: Frame reassembly failed (-84) [ 3343.068518][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:45:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5417, 0x0) [ 3343.606008][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3345.035948][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3345.035973][T22049] Bluetooth: hci6: command 0x1003 tx timeout [ 3345.042102][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3345.048104][T22049] Bluetooth: hci0: command 0x1003 tx timeout [ 3345.054492][T19652] Bluetooth: hci2: command 0x1003 tx timeout [ 3345.060312][T17107] Bluetooth: hci0: sending frame failed (-49) [ 3345.066062][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3345.078477][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3345.115917][T19652] Bluetooth: hci7: command 0x1003 tx timeout [ 3345.121966][T17107] Bluetooth: hci7: sending frame failed (-49) 02:45:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3345.526574][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3345.675934][T19652] Bluetooth: hci3: command 0x1003 tx timeout [ 3345.682065][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3347.115933][T19652] Bluetooth: hci4: command 0x1001 tx timeout [ 3347.115969][T20531] Bluetooth: hci2: command 0x1001 tx timeout [ 3347.122002][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3347.128051][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3347.140261][T20531] Bluetooth: hci0: command 0x1001 tx timeout [ 3347.146294][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3347.152461][T20531] Bluetooth: hci6: command 0x1001 tx timeout [ 3347.158578][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3347.195928][T20531] Bluetooth: hci7: command 0x1001 tx timeout [ 3347.201970][T20858] Bluetooth: hci7: sending frame failed (-49) [ 3347.595934][T20531] Bluetooth: hci5: command 0x1003 tx timeout [ 3347.601977][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3347.755947][T20531] Bluetooth: hci3: command 0x1001 tx timeout [ 3347.761973][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3349.195958][T22049] Bluetooth: hci6: command 0x1009 tx timeout [ 3349.195962][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3349.207948][T22049] Bluetooth: hci0: command 0x1009 tx timeout [ 3349.213918][T22049] Bluetooth: hci2: command 0x1009 tx timeout [ 3349.275971][T22049] Bluetooth: hci7: command 0x1009 tx timeout [ 3349.675954][T22049] Bluetooth: hci5: command 0x1001 tx timeout [ 3349.682030][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3349.835955][T22049] Bluetooth: hci3: command 0x1009 tx timeout [ 3351.755947][T19652] Bluetooth: hci5: command 0x1009 tx timeout 02:46:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x50, 0x3, 0x153, 0xffff7bf7, 0x62, "36c6c5bec75f1f4c1adfd1bbe3b95b7ddd4155", 0x80000000, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x54, 0x7, 0x7, 0x0, 0x13, "53fff03123415ff5f8d1d23b96372b7089fb84"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x80, 0x6, 0x3, "fc74ca58bbe3370222dca9933f627cdd", "ca77ac274850867826b9456432f7e17be9502dd4ee65eee5594f1fdf16b55115d873454a3b56cc666e5c8d9b5e61132468cfb6f4cba4f30daefd9a427671eb469b528636bf0a3f8a12ade5209f857f83eda2e88304448a36343f9cb0b6fb297890653be8a77fca7deb741b"}, 0x80, 0x2) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0x50, 0x3, 0x153, 0xffff7bf7, 0x62, "36c6c5bec75f1f4c1adfd1bbe3b95b7ddd4155", 0x80000000, 0x8}) (async) pipe(&(0x7f0000000000)) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x54, 0x7, 0x7, 0x0, 0x13, "53fff03123415ff5f8d1d23b96372b7089fb84"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) syz_io_uring_complete(0x0) (async) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x80, 0x6, 0x3, "fc74ca58bbe3370222dca9933f627cdd", "ca77ac274850867826b9456432f7e17be9502dd4ee65eee5594f1fdf16b55115d873454a3b56cc666e5c8d9b5e61132468cfb6f4cba4f30daefd9a427671eb469b528636bf0a3f8a12ade5209f857f83eda2e88304448a36343f9cb0b6fb297890653be8a77fca7deb741b"}, 0x80, 0x2) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) 02:46:01 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:46:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2}, 0x1c) (async) listen(r0, 0x1000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc0000000000e99b8000f0fffeffe809005300fff5dd80000010000140070c10000000020000000000", 0x58}], 0x1) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) socket$inet6(0xa, 0x6, 0x80000001) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x4) 02:46:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0xd3, 0x3, 0x1, 0x13, "863dc0bb067fd35d200f1bb50736d63b84036c"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:46:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0xd3, 0x3, 0x1, 0x13, "863dc0bb067fd35d200f1bb50736d63b84036c"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:46:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3, 0xd3, 0x3, 0x1, 0x13, "863dc0bb067fd35d200f1bb50736d63b84036c"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) 02:46:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x81, 0x6, 0x800, 0xe, "79573c64357e2596893d58fc07a474d5995eba"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x35) [ 3353.232051][T18602] Bluetooth: hci4: Frame reassembly failed (-84) [ 3353.273442][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3353.279863][T23280] Bluetooth: hci6: Frame reassembly failed (-84) 02:46:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5418, 0x0) [ 3353.846081][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3355.275940][T22431] Bluetooth: hci6: command 0x1003 tx timeout [ 3355.275954][T22050] Bluetooth: hci0: command 0x1003 tx timeout [ 3355.281991][ T9876] Bluetooth: hci6: sending frame failed (-49) [ 3355.288517][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3355.294064][T22431] Bluetooth: hci4: command 0x1003 tx timeout [ 3355.306132][T22431] Bluetooth: hci2: command 0x1003 tx timeout [ 3355.306178][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3355.312174][ T9876] Bluetooth: hci2: sending frame failed (-49) 02:46:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$TIOCCBRK(r0, 0x5428) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) 02:46:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3355.776867][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3355.915895][T22431] Bluetooth: hci3: command 0x1003 tx timeout [ 3355.921977][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3357.355933][T22431] Bluetooth: hci2: command 0x1001 tx timeout [ 3357.355938][T23251] Bluetooth: hci4: command 0x1001 tx timeout [ 3357.355954][T23251] Bluetooth: hci0: command 0x1001 tx timeout [ 3357.361963][T22431] Bluetooth: hci6: command 0x1001 tx timeout [ 3357.368014][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3357.374006][T17107] Bluetooth: hci6: sending frame failed (-49) [ 3357.380019][ T9876] Bluetooth: hci4: sending frame failed (-49) [ 3357.398336][ T9876] Bluetooth: hci0: sending frame failed (-49) [ 3357.835928][T22431] Bluetooth: hci5: command 0x1003 tx timeout [ 3357.842083][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 3357.995954][T23251] Bluetooth: hci3: command 0x1001 tx timeout [ 3358.001976][ T9876] Bluetooth: hci3: sending frame failed (-49) [ 3359.435980][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3359.435985][T23251] Bluetooth: hci0: command 0x1009 tx timeout [ 3359.436013][T23251] Bluetooth: hci4: command 0x1009 tx timeout [ 3359.441983][T19679] Bluetooth: hci6: command 0x1009 tx timeout [ 3359.915951][T23251] Bluetooth: hci5: command 0x1001 tx timeout [ 3359.922106][ T9876] Bluetooth: hci5: sending frame failed (-49) [ 3360.075955][T23251] Bluetooth: hci3: command 0x1009 tx timeout [ 3361.995956][T23251] Bluetooth: hci5: command 0x1009 tx timeout 02:46:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x800000) read(r1, &(0x7f0000000140)=""/162, 0xa2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8, 0xff, 0xee, 0x7fffffff, 0x9, "6cbcc2631afc2f9dd43b286bf4f222ab159bd2"}) 02:46:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x81, 0x6, 0x800, 0xe, "79573c64357e2596893d58fc07a474d5995eba"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x800455c9, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x35) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x81, 0x6, 0x800, 0xe, "79573c64357e2596893d58fc07a474d5995eba"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x35) (async) 02:46:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2}, 0x1c) listen(r0, 0x1000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc0000000000e99b8000f0fffeffe809005300fff5dd80000010000140070c10000000020000000000", 0x58}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) socket$inet6(0xa, 0x6, 0x80000001) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x2}, 0x1c) (async) listen(r0, 0x1000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000001c0)=0x40, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc0000000000e99b8000f0fffeffe809005300fff5dd80000010000140070c10000000020000000000", 0x58}], 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r3, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) (async) socket$inet6(0xa, 0x6, 0x80000001) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:46:12 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) (async) 02:46:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x13) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x800000) read(r1, &(0x7f0000000140)=""/162, 0xa2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8, 0xff, 0xee, 0x7fffffff, 0x9, "6cbcc2631afc2f9dd43b286bf4f222ab159bd2"}) 02:46:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x13) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x800000) read(r1, &(0x7f0000000140)=""/162, 0xa2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x8, 0xff, 0xee, 0x7fffffff, 0x9, "6cbcc2631afc2f9dd43b286bf4f222ab159bd2"}) [ 3363.467052][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3363.478524][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3363.486427][T23300] Bluetooth: hci2: Frame reassembly failed (-84) [ 3363.506518][T21343] Bluetooth: hci4: Frame reassembly failed (-84) 02:46:12 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 02:46:12 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x0) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) 02:46:12 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x0) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) [ 3363.512993][T23298] Bluetooth: hci4: Frame reassembly failed (-84) 02:46:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:46:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541b, 0x0) [ 3364.086839][T21343] Bluetooth: hci3: Frame reassembly failed (-84) [ 3364.093785][T21343] Bluetooth: hci6: Frame reassembly failed (-84) [ 3364.098034][T23341] Bluetooth: hci7: Frame reassembly failed (-84) [ 3364.106584][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3365.515923][T19679] Bluetooth: hci0: command 0x1003 tx timeout [ 3365.515939][T23251] Bluetooth: hci4: command 0x1003 tx timeout [ 3365.522025][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3365.528425][T23251] Bluetooth: hci2: command 0x1003 tx timeout [ 3365.533979][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3365.540279][T20858] Bluetooth: hci2: sending frame failed (-49) 02:46:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000340)={0x2000, 0x0, 0x7, 0x9}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7409000000000000000000000021000000000000000000003fa67eef51470cdf6f784ed4dae049ff462000"], &(0x7f00000003c0)=0x24) ioctl$TCFLSH(r0, 0x5437, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000200)="4ac92708e79d950cef28edfbbcd200ceadfb6a16dac4e960b9593ad6b6b9963886962bc25fc04c322955dfc3fac53025b1d0011d61aeaf20150066df0474d679b0687964ff0d348adaabf28e491578d1d1bd4797072d65148592071cb4c2440ccdf9bb101b1c31a4a6a6fa2e7b39f337163c267cd82cb57599d8f6063ca9422e3102aa5895232837a24cfadb2800a7ef1329eb5484c8ec26254f1212bfa030c67dd72e25a0bd76baa47de657022a4ea3c073d4cf0b883d272215d7f5a2d0d33c1843120ea050184086fd11a3122fb1fbcb2b8084"}, 0x20) [ 3366.012247][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3366.155901][T23251] Bluetooth: hci6: command 0x1003 tx timeout [ 3366.155918][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 3366.162071][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3366.167920][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3366.174266][T23251] Bluetooth: hci3: command 0x1003 tx timeout [ 3366.186081][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3367.595930][T23251] Bluetooth: hci2: command 0x1001 tx timeout [ 3367.595934][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3367.595986][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3367.601982][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3367.620210][T23251] Bluetooth: hci0: command 0x1001 tx timeout [ 3367.626372][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3368.075917][T23251] Bluetooth: hci5: command 0x1003 tx timeout [ 3368.081935][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3368.235930][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3368.235934][T23251] Bluetooth: hci6: command 0x1001 tx timeout [ 3368.235987][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3368.241969][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3368.260048][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3368.266070][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3369.675962][T19652] Bluetooth: hci4: command 0x1009 tx timeout [ 3369.675966][T23251] Bluetooth: hci0: command 0x1009 tx timeout [ 3369.675988][T23251] Bluetooth: hci2: command 0x1009 tx timeout [ 3370.155924][T23251] Bluetooth: hci5: command 0x1001 tx timeout [ 3370.161973][T17107] Bluetooth: hci5: sending frame failed (-49) [ 3370.315961][T23251] Bluetooth: hci6: command 0x1009 tx timeout [ 3370.315966][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3370.315996][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 3372.235953][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:46:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x81, 0x6, 0x800, 0xe, "79573c64357e2596893d58fc07a474d5995eba"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x35) 02:46:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='devfreq_frequency\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x809, 0xec, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x29) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:46:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3373.701034][T16177] Bluetooth: hci0: sending frame failed (-49) [ 3373.702351][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3373.710598][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:46:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541d, 0x0) 02:46:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3374.336147][T18602] Bluetooth: hci3: Frame reassembly failed (-84) [ 3374.341812][T23361] Bluetooth: hci7: Frame reassembly failed (-84) [ 3374.343141][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3374.355230][ T1516] Bluetooth: hci6: Frame reassembly failed (-84) [ 3375.755929][T23251] Bluetooth: hci2: command 0x1003 tx timeout [ 3375.755934][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3375.766281][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3375.768003][T23251] Bluetooth: hci0: command 0x1003 tx timeout [ 3375.774064][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3375.780143][T17107] Bluetooth: hci0: sending frame failed (-49) 02:46:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCCBRK(r0, 0x5428) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (rerun: 32) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000340)={0x2000, 0x0, 0x7, 0x9}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async, rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7409000000000000000000000021000000000000000000003fa67eef51470cdf6f784ed4dae049ff462000"], &(0x7f00000003c0)=0x24) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000200)="4ac92708e79d950cef28edfbbcd200ceadfb6a16dac4e960b9593ad6b6b9963886962bc25fc04c322955dfc3fac53025b1d0011d61aeaf20150066df0474d679b0687964ff0d348adaabf28e491578d1d1bd4797072d65148592071cb4c2440ccdf9bb101b1c31a4a6a6fa2e7b39f337163c267cd82cb57599d8f6063ca9422e3102aa5895232837a24cfadb2800a7ef1329eb5484c8ec26254f1212bfa030c67dd72e25a0bd76baa47de657022a4ea3c073d4cf0b883d272215d7f5a2d0d33c1843120ea050184086fd11a3122fb1fbcb2b8084"}, 0x20) [ 3376.247718][T18602] Bluetooth: hci5: Frame reassembly failed (-84) [ 3376.395897][T19679] Bluetooth: hci7: command 0x1003 tx timeout [ 3376.401966][T19679] Bluetooth: hci6: command 0x1003 tx timeout [ 3376.402016][T17107] Bluetooth: hci7: sending frame failed (-49) [ 3376.408047][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3376.420125][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3376.426156][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3377.835943][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3377.835947][T22049] Bluetooth: hci0: command 0x1001 tx timeout [ 3377.836016][T20858] Bluetooth: hci0: sending frame failed (-49) [ 3377.842178][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3377.848212][T17107] Bluetooth: hci2: sending frame failed (-49) [ 3377.854316][T21332] Bluetooth: hci4: sending frame failed (-49) [ 3378.315898][T23251] Bluetooth: hci5: command 0x1003 tx timeout [ 3378.322104][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3378.475905][T23251] Bluetooth: hci7: command 0x1001 tx timeout [ 3378.475919][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3378.482010][T21332] Bluetooth: hci7: sending frame failed (-49) [ 3378.488105][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 3378.493967][T17107] Bluetooth: hci3: sending frame failed (-49) [ 3378.500097][T21332] Bluetooth: hci6: sending frame failed (-49) [ 3379.915980][T23251] Bluetooth: hci2: command 0x1009 tx timeout [ 3379.915984][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3379.927953][T23251] Bluetooth: hci0: command 0x1009 tx timeout [ 3380.395988][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3380.402114][T21332] Bluetooth: hci5: sending frame failed (-49) [ 3380.555987][T19679] Bluetooth: hci6: command 0x1009 tx timeout [ 3380.555992][T23251] Bluetooth: hci3: command 0x1009 tx timeout [ 3380.568340][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3382.475945][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:46:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x400) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) 02:46:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='devfreq_frequency\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x809, 0xec, 0x8}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x29) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xb) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:46:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x1, 0x10, "425a8476216a8917fe03bd36b22d749a946167"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$KDADDIO(r0, 0x400455c8, 0xa86) ioctl$TCFLSH(0xffffffffffffffff, 0x800455c9, 0xfffffffffffffffe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) 02:46:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x400) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_pts(r0, 0x400) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) [ 3383.950285][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3383.957469][T23385] Bluetooth: hci2: Frame reassembly failed (-84) [ 3383.966743][ T1516] Bluetooth: hci8: Frame reassembly failed (-84) [ 3383.973328][T23385] Bluetooth: hci8: Frame reassembly failed (-84) [ 3383.982052][T23385] Bluetooth: hci9: Frame reassembly failed (-84) [ 3383.988808][T23385] Bluetooth: hci9: Frame reassembly failed (-84) 02:46:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:46:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541e, 0x0) [ 3384.570842][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) [ 3384.579572][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3384.580717][T23397] Bluetooth: hci7: Frame reassembly failed (-84) [ 3384.592662][T17034] Bluetooth: hci7: Frame reassembly failed (-84) [ 3384.596294][T18602] Bluetooth: hci6: Frame reassembly failed (-84) [ 3385.995927][T19679] Bluetooth: hci2: command 0x1003 tx timeout [ 3385.995932][T23251] Bluetooth: hci9: command 0x1003 tx timeout [ 3385.995948][T23251] Bluetooth: hci8: command 0x1003 tx timeout [ 3386.002053][T20858] Bluetooth: hci2: sending frame failed (-49) [ 3386.008454][T23251] Bluetooth: hci4: command 0x1003 tx timeout [ 3386.014284][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 3386.020394][T23251] Bluetooth: hci0: command 0x1003 tx timeout [ 3386.026209][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3386.032577][T21330] Bluetooth: hci0: sending frame failed (-49) 02:46:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000340)={0x2000, 0x0, 0x7, 0x9}) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7409000000000000000000000021000000000000000000003fa67eef51470cdf6f784ed4dae049ff462000"], &(0x7f00000003c0)=0x24) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x2, 0x765, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r3, &(0x7f00000004c0), &(0x7f0000000500)=""/157}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000040)="06", &(0x7f00000000c0)=""/93}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000800)="06", &(0x7f0000000180)=""/97}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r3, &(0x7f0000000200)="4ac92708e79d950cef28edfbbcd200ceadfb6a16dac4e960b9593ad6b6b9963886962bc25fc04c322955dfc3fac53025b1d0011d61aeaf20150066df0474d679b0687964ff0d348adaabf28e491578d1d1bd4797072d65148592071cb4c2440ccdf9bb101b1c31a4a6a6fa2e7b39f337163c267cd82cb57599d8f6063ca9422e3102aa5895232837a24cfadb2800a7ef1329eb5484c8ec26254f1212bfa030c67dd72e25a0bd76baa47de657022a4ea3c073d4cf0b883d272215d7f5a2d0d33c1843120ea050184086fd11a3122fb1fbcb2b8084"}, 0x20) 02:46:35 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3386.499977][T21330] Bluetooth: hci5: sending frame failed (-49) [ 3386.635903][T19679] Bluetooth: hci3: command 0x1003 tx timeout [ 3386.635908][T23444] Bluetooth: hci7: command 0x1003 tx timeout [ 3386.635957][T21330] Bluetooth: hci7: sending frame failed (-49) [ 3386.642028][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3386.648208][T23444] Bluetooth: hci6: command 0x1003 tx timeout [ 3386.666136][T20858] Bluetooth: hci6: sending frame failed (-49) [ 3388.075907][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3388.075921][T23444] Bluetooth: hci0: command 0x1001 tx timeout [ 3388.081949][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3388.087891][T21330] Bluetooth: hci0: sending frame failed (-49) [ 3388.094336][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3388.105972][T19679] Bluetooth: hci8: command 0x1001 tx timeout [ 3388.106048][T21330] Bluetooth: hci2: sending frame failed (-49) [ 3388.111964][T19679] Bluetooth: hci9: command 0x1001 tx timeout [ 3388.124010][T18602] Bluetooth: hci8: Frame reassembly failed (-84) [ 3388.555895][T23444] Bluetooth: hci5: command 0x1003 tx timeout [ 3388.561930][T21330] Bluetooth: hci5: sending frame failed (-49) [ 3388.715907][T23444] Bluetooth: hci7: command 0x1001 tx timeout [ 3388.715911][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 3388.715930][T19679] Bluetooth: hci3: command 0x1001 tx timeout [ 3388.721941][T21330] Bluetooth: hci6: sending frame failed (-49) [ 3388.728179][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3388.733875][T21330] Bluetooth: hci7: sending frame failed (-49) [ 3390.156027][T23444] Bluetooth: hci9: command 0x1009 tx timeout [ 3390.156031][T19679] Bluetooth: hci8: command 0x1009 tx timeout [ 3390.156066][T19679] Bluetooth: hci4: command 0x1009 tx timeout [ 3390.162185][T23444] Bluetooth: hci2: command 0x1009 tx timeout [ 3390.180092][T23444] Bluetooth: hci0: command 0x1009 tx timeout [ 3390.635951][T23444] Bluetooth: hci5: command 0x1001 tx timeout [ 3390.642009][T21330] Bluetooth: hci5: sending frame failed (-49) [ 3390.795966][T19679] Bluetooth: hci3: command 0x1009 tx timeout [ 3390.795971][T23444] Bluetooth: hci7: command 0x1009 tx timeout [ 3390.795991][T23444] Bluetooth: hci6: command 0x1009 tx timeout [ 3392.715951][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:46:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='devfreq_frequency\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x809, 0xec, 0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008000, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x29) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xb) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) 02:46:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xea802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x630100, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0xd, 0xe, 0x1d6, &(0x7f0000000340)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3394.178878][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3394.179573][T23453] Bluetooth: hci2: Frame reassembly failed (-84) [ 3394.191671][T18602] Bluetooth: hci2: Frame reassembly failed (-84) [ 3394.198239][T18602] Bluetooth: hci2: Frame reassembly failed (-84) 02:46:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x1, 0x10, "425a8476216a8917fe03bd36b22d749a946167"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xa86) ioctl$TCFLSH(0xffffffffffffffff, 0x800455c9, 0xfffffffffffffffe) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(r3, 0x540a, 0x2) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) [ 3394.366629][T23459] Bluetooth: hci8: Frame reassembly failed (-84) [ 3394.373085][T18602] Bluetooth: hci8: Frame reassembly failed (-84) 02:46:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x541e, 0x0) 02:46:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3394.813559][ T1516] Bluetooth: hci3: Frame reassembly failed (-84) [ 3394.822210][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3396.235907][T22431] Bluetooth: hci4: command 0x1003 tx timeout [ 3396.235951][T23446] Bluetooth: hci2: command 0x1003 tx timeout [ 3396.242686][T11507] Bluetooth: hci4: sending frame failed (-49) [ 3396.248034][T23446] Bluetooth: hci0: command 0x1003 tx timeout [ 3396.254670][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3396.260344][T11507] Bluetooth: hci0: sending frame failed (-49) [ 3396.395891][T22431] Bluetooth: hci8: command 0x1003 tx timeout [ 3396.401979][T11507] Bluetooth: hci8: sending frame failed (-49) 02:46:45 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3396.875910][T23446] Bluetooth: hci6: command 0x1003 tx timeout [ 3396.881977][T11507] Bluetooth: hci6: sending frame failed (-49) [ 3396.888254][T23446] Bluetooth: hci3: command 0x1003 tx timeout [ 3396.894293][T11507] Bluetooth: hci3: sending frame failed (-49) [ 3398.315938][T19679] Bluetooth: hci4: command 0x1001 tx timeout [ 3398.315967][T23446] Bluetooth: hci0: command 0x1001 tx timeout [ 3398.321996][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3398.328006][T11507] Bluetooth: hci4: sending frame failed (-49) [ 3398.334567][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3398.340065][T11507] Bluetooth: hci0: sending frame failed (-49) [ 3398.475954][T23446] Bluetooth: hci8: command 0x1001 tx timeout [ 3398.482070][T11507] Bluetooth: hci8: sending frame failed (-49) [ 3398.795941][T23446] Bluetooth: hci5: command 0x1003 tx timeout [ 3398.802109][T11507] Bluetooth: hci5: sending frame failed (-49) [ 3398.955913][T23446] Bluetooth: hci3: command 0x1001 tx timeout [ 3398.961993][T11507] Bluetooth: hci3: sending frame failed (-49) [ 3398.968158][T23446] Bluetooth: hci6: command 0x1001 tx timeout [ 3398.974197][T11507] Bluetooth: hci6: sending frame failed (-49) [ 3400.395968][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3400.395981][T23445] Bluetooth: hci0: command 0x1009 tx timeout [ 3400.407957][T23445] Bluetooth: hci4: command 0x1009 tx timeout [ 3400.555967][T23445] Bluetooth: hci8: command 0x1009 tx timeout [ 3400.875975][T23445] Bluetooth: hci5: command 0x1001 tx timeout [ 3400.882030][T11507] Bluetooth: hci5: sending frame failed (-49) [ 3401.035981][T23445] Bluetooth: hci6: command 0x1009 tx timeout [ 3401.041976][T23445] Bluetooth: hci3: command 0x1009 tx timeout [ 3402.955962][T19679] Bluetooth: hci5: command 0x1009 tx timeout 02:46:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x3) 02:46:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x1, 0x1, 0x5, 0x1, 0x10, "425a8476216a8917fe03bd36b22d749a946167"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$KDADDIO(r0, 0x400455c8, 0xa86) ioctl$TCFLSH(0xffffffffffffffff, 0x800455c9, 0xfffffffffffffffe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x800000000000004) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) (async, rerun: 64) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x800000000000004) (async) ioctl$TCXONC(r3, 0x540a, 0x2) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) 02:46:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xea802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x630100, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0xd, 0xe, 0x1d6, &(0x7f0000000340)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xea802, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x630100, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0xd, 0xe, 0x1d6, &(0x7f0000000340)="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"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x6) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) [ 3404.416493][T18602] Bluetooth: hci0: Frame reassembly failed (-84) [ 3404.417866][T23477] Bluetooth: hci2: Frame reassembly failed (-84) [ 3404.430453][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3404.440269][T23478] Bluetooth: hci4: Frame reassembly failed (-84) [ 3404.448462][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3404.451298][T23482] Bluetooth: hci8: Frame reassembly failed (-84) [ 3404.457513][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.462753][T21343] Bluetooth: hci9: Frame reassembly failed (-84) [ 3404.469802][T18602] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.475480][T21343] Bluetooth: hci10: Frame reassembly failed (-84) [ 3404.480559][T17034] Bluetooth: hci8: Frame reassembly failed (-84) [ 3404.489471][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.499353][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.505682][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.512088][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.518433][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.524751][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.531093][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.537429][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.544452][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.550794][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.557227][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.563566][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.569954][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.576307][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.582614][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.589146][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.595453][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.601800][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.608133][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.614447][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.620816][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.627252][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.633650][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.640000][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.646364][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.652675][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.659012][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.665334][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.671668][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.678004][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.684310][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.690664][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.697016][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.703415][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.709763][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.716118][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.722438][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.728786][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.735102][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.741441][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.747868][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.754202][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.760534][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.766884][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.773195][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.779531][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.785955][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.792260][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.798780][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.805114][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.811446][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.817787][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.824096][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.830428][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.836774][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.843184][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.849557][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.855915][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.862224][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.868569][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.874888][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.881229][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.887602][T23484] Bluetooth: hci7: Frame reassembly failed (-84) [ 3404.893912][T23484] Bluetooth: hci7: Frame reassembly failed (-84) 02:46:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5421, 0x0) 02:46:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_pts(r0, 0x200) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x400455cb, 0x0) (async) [ 3405.058133][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3406.475943][T19652] Bluetooth: hci10: command 0x1003 tx timeout [ 3406.475947][T23446] Bluetooth: hci2: command 0x1003 tx timeout [ 3406.488007][T19652] Bluetooth: hci9: command 0x1003 tx timeout [ 3406.493983][T19652] Bluetooth: hci8: command 0x1003 tx timeout [ 3406.494049][ T1516] Bluetooth: hci9: Frame reassembly failed (-84) [ 3406.500242][T19652] Bluetooth: hci7: command 0x1003 tx timeout [ 3406.506373][T20858] Bluetooth: hci8: sending frame failed (-49) [ 3406.512455][T19652] Bluetooth: hci4: command 0x1003 tx timeout [ 3406.518626][ T1516] Bluetooth: hci9: Frame reassembly failed (-84) [ 3406.524429][T19652] Bluetooth: hci0: command 0x1003 tx timeout [ 3406.530816][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3406.536753][T21331] Bluetooth: hci0: sending frame failed (-49) [ 3406.549396][T18602] Bluetooth: hci7: Frame reassembly failed (-84) 02:46:55 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TCFLSH(r0, 0x5437, 0x0) [ 3407.115897][T23445] Bluetooth: hci6: command 0x1003 tx timeout [ 3407.121896][T23445] Bluetooth: hci3: command 0x1003 tx timeout [ 3407.121941][T21331] Bluetooth: hci6: sending frame failed (-49) [ 3407.128335][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3408.555918][T19679] Bluetooth: hci0: command 0x1001 tx timeout [ 3408.555922][T23445] Bluetooth: hci4: command 0x1001 tx timeout [ 3408.555976][T20858] Bluetooth: hci4: sending frame failed (-49) [ 3408.561945][T21331] Bluetooth: hci0: sending frame failed (-49) [ 3408.568081][T23445] Bluetooth: hci8: command 0x1001 tx timeout [ 3408.574198][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3408.580128][T23445] Bluetooth: hci9: command 0x1001 tx timeout [ 3408.586159][T21331] Bluetooth: hci8: sending frame failed (-49) [ 3408.592125][T23445] Bluetooth: hci10: command 0x1001 tx timeout [ 3408.598154][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) [ 3408.604146][T23445] Bluetooth: hci2: command 0x1001 tx timeout [ 3408.622530][T17034] Bluetooth: hci9: Frame reassembly failed (-84) [ 3409.035892][T19679] Bluetooth: hci5: command 0x1003 tx timeout [ 3409.041916][T21331] Bluetooth: hci5: sending frame failed (-49) [ 3409.195909][T19679] Bluetooth: hci6: command 0x1001 tx timeout [ 3409.195921][T23445] Bluetooth: hci3: command 0x1001 tx timeout [ 3409.201957][T21331] Bluetooth: hci6: sending frame failed (-49) [ 3409.207892][T20858] Bluetooth: hci3: sending frame failed (-49) [ 3410.635973][T19679] Bluetooth: hci2: command 0x1009 tx timeout [ 3410.635977][T23445] Bluetooth: hci9: command 0x1009 tx timeout [ 3410.636007][T23445] Bluetooth: hci4: command 0x1009 tx timeout [ 3410.641997][T19679] Bluetooth: hci10: command 0x1009 tx timeout [ 3410.660120][T19679] Bluetooth: hci7: command 0x1009 tx timeout [ 3410.666173][T19679] Bluetooth: hci8: command 0x1009 tx timeout [ 3410.672156][T19679] Bluetooth: hci0: command 0x1009 tx timeout [ 3411.115974][T19679] Bluetooth: hci5: command 0x1001 tx timeout [ 3411.122338][T20858] Bluetooth: hci5: sending frame failed (-49) [ 3411.275978][T23445] Bluetooth: hci3: command 0x1009 tx timeout [ 3411.275983][T19679] Bluetooth: hci6: command 0x1009 tx timeout [ 3413.195958][T23445] Bluetooth: hci5: command 0x1009 tx timeout 02:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xea802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x630100, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0xd, 0xe, 0x1d6, &(0x7f0000000340)="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"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x6) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xea802, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x630100, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0xd, 0xe, 0x1d6, &(0x7f0000000340)="460afa30f5810cc9c64d22531c7f1235ea19f5ee6e91ef7b825ff4b649855b703fb2ccf50d7b24e2e8c2a3d78188718109f909fe2b1adb7c467e929de44c483809f714f7d36de365cdf48571a3e1cb8e528a14337eb2cf50697200f43dd9dad362a25ad68fdc3f02e078ae1ce28d3d86cee86dd0b388801c01301191fd55fc09b1256eeda868150770c01a11fd0d5857d754bc362d0a8da370329ff74ac7a2eefe0de8070d31499ce4e99e51c13a2a3a38ec5c021209e88211f09f2ce15b05861a2b0c910817e66d69068eecd3a86e86d3ec7c8b52f525394e17d39ee1cdf7d07b2771fade8e994199ea9b77f3517a11607c273f4f9a6aca510197bfa90e83be2a9d88f2f41592646517c83a32afece2c885d77ae83b58231bd513809751dfbe1af8e16f417095c00cc9e81bc73a8cb270e85ac9974087e60bb5d20590c0f73f984cbf192a7f47cef26e4f22fb3ab395dee348642f06451e0fb28c962523483fa1fb1f992c39b16156522a3403b96eb87b774b28add1fbf2d7fc4cb71da27bb38e49a8f09cba90dc112774591964e79eaab4438841d2d550396d34b421dadf570523d253f057ce132630afd2171d6dc324d9d9e507f9f24c46dbe224b0c3f453c1b64e9d66ca8396a885287357ad66f3d5c0a7e3e9ec2240e6ea0634d8d4dd8a74eb17cc5f5915473f129d2f072baa576825022856ccea1add92d507c19d11ba3c73d02ae759b0463eec752cf3eae7b4fe3f14ad1f2628ada2013b3cd7fe639e9630bf533eecd04c52c197c1a8953b5b08bcd551da75ed397da56a27b545d79385665a843ce16df50e849e79809ece5e998ffc8a1d29553997e26a84096caffa9fd8133ee53bd00b6b3205a9163759325897e98e2a1cb533c04b0974b95e29ad6a486c59a4d1b3e3b47bd4ce408e2384ad9747d40a7736d65ba4c559a5629df096beac17f52537a345beded895ec6831e21a565105bfa738852725edacf2f1d0657eaf69c146fbd3c4f4f8c4b2ee49c23c2f870125e7e785c7b91725c954b7181944ae4f4cfef4920000fc0341312cb4de312244d6edfc867adf0ae7f6a91aa865512d0f599f68cf047be39741ebd849a69975e334cfdbc237dd195788f97102df0bd01dc5059392b330ee0fe54584368b13bc114864251f632660798fa066b68279b7b3df74b78624191d5e782f56380faca5aa1fa7acbff7a6444887035cf8fc2181f1a0af8dba50601d9c33f54f777f7653fc793e5febe17fb29dfaf5f5732a3a062affc0ddc1fca966d1ae46109a95c412049a2bb8be998680648e38cebcd16cb1725351462945aac6c19359f77bd4de23db1e3b444755d25404fbdd2b0a2c01b3838bb720fe8bb05c28a71aaa6d47b1a65c3abd39d3cf11ac15662da1d70be52024bcb6c3f8ac3c13308ab0f261cc5dccf021224f2e0035b51ddd208932"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x6) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) 02:47:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) (rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x3) (rerun: 32) 02:47:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x800455c9, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0xe1) syz_open_pts(r1, 0x18601) [ 3414.722842][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3414.729319][T23516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3414.737631][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3414.748469][T17034] Bluetooth: hci4: Frame reassembly failed (-84) [ 3414.804902][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:47:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:47:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5423, 0x0) 02:47:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x7fffffff, 0xfffffc01, 0xcf, 0x3, "c2a2ac6bf58b4d82206e0f42e5471c8f3f4b20", 0x4, 0x100}) ioctl$TCFLSH(r0, 0x400455cb, 0x0) [ 3415.305366][T17034] Bluetooth: hci6: Frame reassembly failed (-84) [ 3416.795899][T23446] Bluetooth: hci4: command 0x1003 tx timeout [ 3416.801935][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 3416.808296][T23446] Bluetooth: hci2: command 0x1003 tx timeout [ 3416.814344][T23446] Bluetooth: hci0: command 0x1003 tx timeout [ 3416.820554][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 3416.875891][T23446] Bluetooth: hci7: command 0x1003 tx timeout [ 3416.881943][ T8283] Bluetooth: hci7: sending frame failed (-49) 02:47:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TCFLSH(r0, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x40) [ 3417.355943][T23446] Bluetooth: hci6: command 0x1003 tx timeout [ 3417.361975][ T8283] Bluetooth: hci6: sending frame failed (-49) [ 3417.368196][T23446] Bluetooth: hci3: command 0x1003 tx timeout [ 3417.374272][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3418.875912][T23444] Bluetooth: hci0: command 0x1001 tx timeout [ 3418.881951][ T8283] Bluetooth: hci0: sending frame failed (-49) [ 3418.888190][T23444] Bluetooth: hci2: command 0x1001 tx timeout [ 3418.894194][T23444] Bluetooth: hci4: command 0x1001 tx timeout [ 3418.900314][ T8283] Bluetooth: hci4: sending frame failed (-49) [ 3418.955945][T23444] Bluetooth: hci7: command 0x1001 tx timeout [ 3418.962014][ T8283] Bluetooth: hci7: sending frame failed (-49) [ 3419.275929][T23444] Bluetooth: hci5: command 0x1003 tx timeout [ 3419.281946][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3419.435957][T23444] Bluetooth: hci3: command 0x1001 tx timeout [ 3419.441973][ T8283] Bluetooth: hci3: sending frame failed (-49) [ 3419.448361][T23444] Bluetooth: hci6: command 0x1001 tx timeout [ 3419.454377][ T8283] Bluetooth: hci6: sending frame failed (-49) [ 3420.955954][T23444] Bluetooth: hci4: command 0x1009 tx timeout [ 3420.962198][T23444] Bluetooth: hci2: command 0x1009 tx timeout [ 3420.968468][T23444] Bluetooth: hci0: command 0x1009 tx timeout [ 3421.035979][T23444] Bluetooth: hci7: command 0x1009 tx timeout [ 3421.355975][T23444] Bluetooth: hci5: command 0x1001 tx timeout [ 3421.362004][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3421.515923][T23444] Bluetooth: hci6: command 0x1009 tx timeout [ 3421.521922][T23444] Bluetooth: hci3: command 0x1009 tx timeout [ 3423.435943][T23444] Bluetooth: hci5: command 0x1009 tx timeout 02:47:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x800455c9, 0x0) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0xe1) syz_open_pts(r1, 0x18601) 02:47:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x800000000000004) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x3) 02:47:13 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x73713bad7c403f70, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) [ 3424.887952][ T1516] Bluetooth: hci0: Frame reassembly failed (-84) [ 3424.903240][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3424.906032][ T1516] Bluetooth: hci4: Frame reassembly failed (-84) [ 3424.916470][T23551] Bluetooth: hci4: Frame reassembly failed (-84) [ 3424.924660][ T1516] Bluetooth: hci7: Frame reassembly failed (-84) 02:47:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x4, 0x7fffffff, 0xfffffc01, 0xcf, 0x3, "c2a2ac6bf58b4d82206e0f42e5471c8f3f4b20", 0x4, 0x100}) ioctl$TCFLSH(r0, 0x400455cb, 0x0) 02:47:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5424, 0x0) [ 3425.538071][T17034] Bluetooth: hci3: Frame reassembly failed (-84) [ 3426.955899][T23444] Bluetooth: hci7: command 0x1003 tx timeout [ 3426.961904][T23444] Bluetooth: hci4: command 0x1003 tx timeout [ 3426.962306][ T8283] Bluetooth: hci7: sending frame failed (-49) [ 3426.968337][T23444] Bluetooth: hci2: command 0x1003 tx timeout [ 3426.980032][T23444] Bluetooth: hci0: command 0x1003 tx timeout [ 3426.980060][ T8283] Bluetooth: hci2: sending frame failed (-49) [ 3426.986260][T11507] Bluetooth: hci0: sending frame failed (-49) 02:47:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async, rerun: 32) ioctl$TCFLSH(r0, 0x5437, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x40) [ 3427.595944][T23444] Bluetooth: hci6: command 0x1003 tx timeout [ 3427.601961][T11507] Bluetooth: hci6: sending frame failed (-49) [ 3427.608067][T23444] Bluetooth: hci3: command 0x1003 tx timeout [ 3427.614061][T11507] Bluetooth: hci3: sending frame failed (-49) [ 3429.035934][T23444] Bluetooth: hci0: command 0x1001 tx timeout [ 3429.035938][T19679] Bluetooth: hci2: command 0x1001 tx timeout [ 3429.035969][T19679] Bluetooth: hci7: command 0x1001 tx timeout [ 3429.041969][T11507] Bluetooth: hci2: sending frame failed (-49) [ 3429.048342][ T8283] Bluetooth: hci7: sending frame failed (-49) [ 3429.053942][T11507] Bluetooth: hci0: sending frame failed (-49) [ 3429.072069][T23444] Bluetooth: hci4: command 0x1001 tx timeout [ 3429.515974][T23446] Bluetooth: hci5: command 0x1003 tx timeout [ 3429.521995][T11507] Bluetooth: hci5: sending frame failed (-49) [ 3429.675932][T23446] Bluetooth: hci3: command 0x1001 tx timeout [ 3429.681938][T23446] Bluetooth: hci6: command 0x1001 tx timeout [ 3429.681981][T11507] Bluetooth: hci3: sending frame failed (-49) [ 3429.688252][ T8283] Bluetooth: hci6: sending frame failed (-49) [ 3431.115964][T22431] Bluetooth: hci7: command 0x1009 tx timeout [ 3431.115968][T23446] Bluetooth: hci4: command 0x1009 tx timeout [ 3431.115996][T23446] Bluetooth: hci0: command 0x1009 tx timeout [ 3431.133924][T23446] Bluetooth: hci2: command 0x1009 tx timeout [ 3431.595984][T23446] Bluetooth: hci5: command 0x1001 tx timeout [ 3431.602030][ T8283] Bluetooth: hci5: sending frame failed (-49) [ 3431.755950][T23446] Bluetooth: hci6: command 0x1009 tx timeout [ 3431.755955][T22431] Bluetooth: hci3: command 0x1009 tx timeout [ 3433.675975][T22431] Bluetooth: hci5: command 0x1009 tx timeout 02:47:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TCFLSH(r0, 0x800455c9, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0xe1) syz_open_pts(r1, 0x18601) 02:47:23 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x73713bad7c403f70, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x73713bad7c403f70, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) (async) [ 3435.134253][T17034] Bluetooth: hci0: Frame reassembly failed (-84) [ 3435.142060][T23570] kasan: CONFIG_KASAN_INLINE enabled [ 3435.145421][T17034] Bluetooth: hci2: Frame reassembly failed (-84) [ 3435.147863][T23570] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 3435.162120][T23570] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 3435.169039][T23570] CPU: 0 PID: 23570 Comm: syz-executor.5 Not tainted 5.4.190-syzkaller-00008-g330fa791a029 #0 [ 3435.179238][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 3435.189272][T23570] RIP: 0010:hci_uart_tty_ioctl+0x34c/0xa10 [ 3435.195050][T23570] Code: fe 4c 89 f3 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 7e 85 84 fe 48 8b 1b 48 89 d8 48 c1 e8 03 <8a> 04 28 84 c0 0f 85 31 06 00 00 8b 2b e9 e4 04 00 00 44 89 e0 48 [ 3435.214626][T23570] RSP: 0018:ffff8881daaefd70 EFLAGS: 00010246 [ 3435.220664][T23570] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881e6820fc0 [ 3435.228636][T23570] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 3435.236586][T23570] RBP: dffffc0000000000 R08: ffffffff830833e2 R09: ffffed103d4eee84 [ 3435.244526][T23570] R10: ffffed103d4eee84 R11: 1ffff1103d4eee83 R12: 0000000000000000 [ 3435.252474][T23570] R13: ffff8881eddac800 R14: ffff8881ea777400 R15: 00000000800455c9 [ 3435.260415][T23570] FS: 00007f4a3def7700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 3435.269310][T23570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3435.275875][T23570] CR2: 00007f4a3ee94028 CR3: 00000001ec793000 CR4: 00000000003406f0 [ 3435.283830][T23570] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3435.291788][T23570] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3435.299738][T23570] Call Trace: [ 3435.303011][T23570] ? hci_uart_tty_write+0x10/0x10 [ 3435.308010][T23570] tty_ioctl+0x949/0xcb0 [ 3435.312231][T23570] ? tty_do_resize+0x170/0x170 [ 3435.316966][T23570] do_vfs_ioctl+0x6d1/0x15b0 [ 3435.321528][T23570] __x64_sys_ioctl+0xd4/0x110 [ 3435.326181][T23570] do_syscall_64+0xcb/0x1c0 [ 3435.330662][T23570] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3435.336525][T23570] RIP: 0033:0x7f4a3ed81109 [ 3435.340917][T23570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3435.360496][T23570] RSP: 002b:00007f4a3def7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3435.368876][T23570] RAX: ffffffffffffffda RBX: 00007f4a3ee93f60 RCX: 00007f4a3ed81109 [ 3435.376821][T23570] RDX: 0000000000000000 RSI: 00000000800455c9 RDI: 0000000000000003 02:47:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x800000000000004) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x3) [ 3435.384769][T23570] RBP: 00007f4a3eddb0ed R08: 0000000000000000 R09: 0000000000000000 [ 3435.392710][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3435.400651][T23570] R13: 00007ffefe4018cf R14: 00007f4a3def7300 R15: 0000000000022000 [ 3435.408594][T23570] Modules linked in: [ 3435.413402][T23570] ---[ end trace 17756f829062bd0d ]--- [ 3435.418924][T23570] RIP: 0010:hci_uart_tty_ioctl+0x34c/0xa10 [ 3435.425076][T17107] Bluetooth: hci4: sending frame failed (-49) [ 3435.425292][T23570] Code: fe 4c 89 f3 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 7e 85 84 fe 48 8b 1b 48 89 d8 48 c1 e8 03 <8a> 04 28 84 c0 0f 85 31 06 00 00 8b 2b e9 e4 04 00 00 44 89 e0 48 [ 3435.450829][T23570] RSP: 0018:ffff8881daaefd70 EFLAGS: 00010246 [ 3435.457033][T23570] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881e6820fc0 [ 3435.464997][T23570] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 3435.472989][T23570] RBP: dffffc0000000000 R08: ffffffff830833e2 R09: ffffed103d4eee84 [ 3435.481252][T23570] R10: ffffed103d4eee84 R11: 1ffff1103d4eee83 R12: 0000000000000000 [ 3435.489237][T23570] R13: ffff8881eddac800 R14: ffff8881ea777400 R15: 00000000800455c9 [ 3435.497206][T23570] FS: 00007f4a3def7700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 3435.506156][T23570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3435.512742][T23570] CR2: 00007fb8f000f998 CR3: 00000001ec793000 CR4: 00000000003406e0 [ 3435.520830][T23570] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3435.529002][T23570] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3435.536983][T23570] Kernel panic - not syncing: Fatal exception [ 3435.543198][T23570] Kernel Offset: disabled [ 3435.547596][T23570] Rebooting in 86400 seconds..