fffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x800, 0x4) 04:30:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 958.488365][T11045] Bluetooth: hci6: sending frame failed (-49) 04:30:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x81, 0x9, 0x0, 0x3, 0x0, 0x4, 0x2000, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x4, 0x8}, 0x10083, 0x401, 0x20, 0x6, 0xffffffffffffffe1, 0x7, 0x7ff, 0x0, 0x6}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@srh={0x4, 0x14, 0x4, 0xa, 0x0, 0x8, 0x7, [@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @mcast1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}]}, 0xa8) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000000000) 04:30:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 960.560914][T16347] Bluetooth: hci6: command 0x1003 tx timeout [ 960.568591][T11045] Bluetooth: hci6: sending frame failed (-49) [ 961.761014][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 961.767883][T11045] Bluetooth: hci7: sending frame failed (-49) [ 962.651054][T16347] Bluetooth: hci6: command 0x1001 tx timeout [ 962.658202][T11045] Bluetooth: hci6: sending frame failed (-49) [ 963.840956][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 963.847392][T11045] Bluetooth: hci7: sending frame failed (-49) [ 964.721183][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 965.921023][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:30:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1000000000000000) 04:30:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8, 0x1, 0x5, 0x4bb7, {{0x1a, 0x4, 0x0, 0x32, 0x68, 0x68, 0x0, 0x3c, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x9, [{@rand_addr=0x64010101}, {@loopback, 0x2}]}, @lsrr={0x83, 0x23, 0x9a, [@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1f, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xb}]}]}}}}}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7, 0x0, 0x1f, 0x20, 0x0, 0x590f33dc, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x1}, 0x250, 0xb55, 0x5, 0x4, 0x72, 0x6, 0x3, 0x0, 0x2, 0x0, 0x300000000000}, r3, 0xa, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x5c, 0x66, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10}, {0x4, 0x3}, {0x9, 0xe}}, [{0x8}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xee}, {0x8}, {0x8}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000600", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendto$inet6(r4, &(0x7f00000002c0), 0x0, 0x20000044, &(0x7f0000000300)={0xa, 0x2, 0x9839, @empty, 0x672c}, 0x1c) 04:30:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000005020000040100040112040102000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000015020401000415020001000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 968.790777][T11045] Bluetooth: hci6: sending frame failed (-49) 04:30:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x60, 0x9, 0x3f, 0x0, 0x0, 0x40, 0x11db3c0463cb69ce, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x1880, 0x6, 0x3f, 0x2, 0x142897c9, 0x80000001, 0xfff, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb00000000000000) 04:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xb00000000000000) 04:30:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1d31000000000000) 04:30:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 969.924202][T15956] Bluetooth: hci7: sending frame failed (-49) [ 970.801154][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 970.808032][T15956] Bluetooth: hci6: sending frame failed (-49) [ 971.371614][T11571] Bluetooth: hci8: command 0x1003 tx timeout [ 971.379080][T15956] Bluetooth: hci8: sending frame failed (-49) [ 972.000986][ T7855] Bluetooth: hci7: command 0x1003 tx timeout [ 972.007849][T15956] Bluetooth: hci7: sending frame failed (-49) [ 972.880977][T16268] Bluetooth: hci6: command 0x1001 tx timeout [ 972.887423][T15956] Bluetooth: hci6: sending frame failed (-49) [ 973.441500][T16268] Bluetooth: hci8: command 0x1001 tx timeout [ 973.449558][T15956] Bluetooth: hci8: sending frame failed (-49) [ 974.081292][T16268] Bluetooth: hci7: command 0x1001 tx timeout [ 974.088137][T15956] Bluetooth: hci7: sending frame failed (-49) [ 974.961113][T16268] Bluetooth: hci6: command 0x1009 tx timeout [ 975.531427][T16268] Bluetooth: hci8: command 0x1009 tx timeout [ 976.161163][T16268] Bluetooth: hci7: command 0x1009 tx timeout 04:31:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1f00000000000000) 04:31:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xa824}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x5b78, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000200a5e0fdf1e39c00000000000001000014000000f70500000000007ae54c07d55b7bf0f2d7bc6df58e19ea8ff32a952b23fdb0747d882c02b332f39d0626e82839bcc286eba4a8841f0698"], 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 978.865752][T15956] Bluetooth: hci6: sending frame failed (-49) 04:31:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001006da9a1bd480685d9df220c6fbc597bdbc5357fb5b22824146bd12e656bb76d9c4e06a444a2465413b10f3c2a5b592c59d3a2caf8aa098b875c93cdb05af37c60203df4c435569fdf18ef20b3f7895540e2fee71a01b7fefc483d04595b945bb796d17bdc640ee31712420031169e7d759220842c174675b3a911fde2f16a07233495c238d0857b3e2e330bed7e6de2e02e650b21cebfdac6abdeb4d80707f0d8886860838cc6feae04d182"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 979.464400][T15956] Bluetooth: hci9: sending frame failed (-49) [ 979.483167][T16744] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1f00000000000000) 04:31:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 980.881567][T16347] Bluetooth: hci6: command 0x1003 tx timeout [ 980.889070][T15956] Bluetooth: hci6: sending frame failed (-49) [ 981.521045][ T7] Bluetooth: hci9: command 0x1003 tx timeout [ 981.527846][T15956] Bluetooth: hci9: sending frame failed (-49) [ 982.161085][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 982.167980][T15956] Bluetooth: hci7: sending frame failed (-49) [ 982.961146][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 982.967816][T15956] Bluetooth: hci6: sending frame failed (-49) [ 983.601278][ T7855] Bluetooth: hci9: command 0x1001 tx timeout [ 983.609671][T15956] Bluetooth: hci9: sending frame failed (-49) [ 984.241027][ T7855] Bluetooth: hci7: command 0x1001 tx timeout [ 984.247634][T15956] Bluetooth: hci7: sending frame failed (-49) [ 985.050939][ T7855] Bluetooth: hci6: command 0x1009 tx timeout [ 985.691081][T16347] Bluetooth: hci9: command 0x1009 tx timeout [ 986.325760][ T7] Bluetooth: hci7: command 0x1009 tx timeout 04:31:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2000000000000000) 04:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x2784, @rand_addr=' \x01\x00', 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001004fde27c843d7e5697f5afb17ca7d674700a19e084a78520a11f9e2fb189d6ea3110c3da3cb980cd5fbda760a97065c68c2738a089e783736e4300405571c0eca9b0f65f19da968d45008419f12b91f07e576d9a9f6fb1853df7f3447f8f48e055c3a1e2ab4e40f87e15955fa33714f36d3fdf9c686dc99b952e522b6177c5c612a68c1ce49684fcae277648e3e9e2a5dfc4a9a6e4c852a08"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="000200a5e0fdf1e39c00000000000001000014000000f70500000000007ae54c07d55b7bf0f2d7bc6df58e19ea8ff32a952b23fdb0747d882c02b332f39d0626e82839bcc286eba4a8841f0698"], 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x607}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000014000900fe800000000000000000000000000000050002000a00000006000a004e220000"], 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00021000008f0e000002000004cf00040100040102000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) [ 989.232599][T15956] Bluetooth: hci6: sending frame failed (-49) 04:31:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000000c0)={0x37bf26ba68cc7171, 0x80, 0x0, 0x7, 0x80, 0x7a, 0x0, 0x4b, 0x4040, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x200, 0xdcd, 0x1, 0x2, 0x20, 0xffffffff, 0x200, 0x0, 0x1, 0x0, 0x80}, r0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @ra={0x5, 0x2, 0x1658}, @ra={0x5, 0x2, 0x6}]}, 0x28) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2000000000000000) 04:31:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 991.281028][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 991.288474][T11045] Bluetooth: hci6: sending frame failed (-49) [ 992.251609][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.257923][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.480975][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 992.488111][T11045] Bluetooth: hci7: sending frame failed (-49) [ 993.361184][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 993.367950][T11045] Bluetooth: hci6: sending frame failed (-49) [ 994.561202][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 994.567966][T11045] Bluetooth: hci7: sending frame failed (-49) [ 995.445727][ T7855] Bluetooth: hci6: command 0x1009 tx timeout [ 996.650986][ T7855] Bluetooth: hci7: command 0x1009 tx timeout 04:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3e00000000000000) 04:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:24 executing program 0: getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 999.400764][T16844] QAT: failed to copy from user cfg_data. 04:31:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001006da9a1bd480685d9df220c6fbc597bdbc5357fb5b22824146bd12e656bb76d9c4e06a444a2465413b10f3c2a5b592c59d3a2caf8aa098b875c93cdb05af37c60203df4c435569fdf18ef20b3f7895540e2fee71a01b7fefc483d04595b945bb796d17bdc640ee31712420031169e7d759220842c174675b3a911fde2f16a07233495c238d0857b3e2e330bed7e6de2e02e650b21cebfdac6abdeb4d80707f0d8886860838cc6feae04d182"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 999.806068][ T307] Bluetooth: hci8: Frame reassembly failed (-84) 04:31:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="96ac1bfb2370dd5ac663b93dee698c94c4fbb6f50e62b344e8194030d882b5190049ee753cf625a2728d4bfb7fb03570", 0x30, 0xc001, &(0x7f0000000040)={0xa, 0x4e21, 0xffff, @private2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20044001, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1000.006699][T16844] QAT: failed to copy from user cfg_data. 04:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3e00000000000000) 04:31:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1001.520968][T16268] Bluetooth: hci6: command 0x1003 tx timeout [ 1001.527920][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1001.841184][ T7] Bluetooth: hci8: command 0x1003 tx timeout [ 1001.848000][T15956] Bluetooth: hci8: sending frame failed (-49) [ 1002.640937][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 1002.649060][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1003.610986][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 1003.618064][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1003.930975][ T7] Bluetooth: hci8: command 0x1001 tx timeout [ 1003.937563][T15956] Bluetooth: hci8: sending frame failed (-49) [ 1004.721135][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1004.727571][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1005.680928][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1006.000941][T16347] Bluetooth: hci8: command 0x1009 tx timeout [ 1006.801054][ T5] Bluetooth: hci7: command 0x1009 tx timeout 04:31:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3f00000000000000) 04:31:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="ef010000000000000502f9ff030100040100040102000900"], 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x7, 0x5, 0x1f, 0x0, 0x2, 0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa87e, 0x1, @perf_config_ext={0x1, 0x80}, 0x2, 0x100000000, 0x5, 0x0, 0x0, 0xf38d, 0x0, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xd, r0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x80000001}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1009.685486][T15956] Bluetooth: hci6: sending frame failed (-49) 04:31:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x80000001}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) 04:31:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x100) 04:31:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) 04:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3f00000000000000) 04:31:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) [ 1011.770996][ T7855] Bluetooth: hci6: command 0x1003 tx timeout [ 1011.777780][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1012.961199][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1012.967975][T11045] Bluetooth: hci7: sending frame failed (-49) [ 1013.840945][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1013.847484][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1015.040940][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 1015.048257][T11045] Bluetooth: hci7: sending frame failed (-49) [ 1015.921188][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 1017.121064][ T7] Bluetooth: hci7: command 0x1009 tx timeout 04:31:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4800000000000000) 04:31:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00f7040102000100"/24], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "be6f80c052df8bf1", "e2b8856397c2c45a20f46d5696f7102d3ce63965354a58eab50c299bb1595b46", "b4ea1801", "26cfeba42defaecf"}, 0x38) sendto$inet6(r1, &(0x7f0000000000)="15ad4b50d1182a806bdbb9cfee9db0ca479fe766e9c8f66da4bd9dc34cc5acd4c4e94fed38b480a532b1d402df76bc9109bad9c8beedcb10264cf203cc34020879290895569c3a645f2374c4f729cbaeedc976ded8960ba48448d3197e7ddb03d6ed79951075a2389f6cdc16405803cc6a3a4b964701885c", 0x78, 0x4, &(0x7f00000000c0)={0xa, 0x4e21, 0x84, @remote, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000005020000040100040200000084f20102"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x3e00000000000000) 04:31:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1019.906609][T11045] Bluetooth: hci6: sending frame failed (-49) 04:31:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00060000006efd07bfa4"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendto$inet6(r1, &(0x7f00000000c0)="8e6c9c6f0d93dbb1feb6e7dfcb182396d95ece4f59aee777cb5304629c2853e360d8fecdd5af79a40a7db368b0ea8de585b06cc0b59c60af6580be3ee611656af1d3e8e2a386aecd5e4b96bc97eb96aad643193e3cc15d3cdd0e0244d6d20a0972b3ea001ce97f63c964229c4c6e03c8bd6a91a7ee731ae07f29a2c684a0feb9bf2400d2d1358a3d8a791b5adb1811dad1868324ae5078ea7b", 0x99, 0x20000000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1019.964460][T15956] Bluetooth: hci8: sending frame failed (-49) 04:31:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x7f00}, 0x1c) 04:31:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) close(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendto$inet6(r2, &(0x7f0000000040)="24f980be429a29281e2ff7e750b85c75fe5a03", 0x13, 0x10, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @mcast2, 0x3ff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:31:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x7f00}, 0x1c) [ 1021.921354][ T7843] Bluetooth: hci6: command 0x1003 tx timeout [ 1021.928265][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1022.001490][ T7843] Bluetooth: hci8: command 0x1003 tx timeout [ 1022.007775][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1024.001112][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1024.008315][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1024.090963][ T7] Bluetooth: hci8: command 0x1001 tx timeout [ 1024.098413][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1026.090326][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 1026.171241][ T7843] Bluetooth: hci8: command 0x1009 tx timeout 04:31:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="7ea4cffa937ba5d89f4306274c63b19d2a5e335dd8bf43cde889b990839f369e19ea47e6fbcc6570b8c85407ef797bafe1e79c3f6f38ec3e0aed3377ac57f51cdff074599b190e6cd4bcc46088aff68dd4bb79b4785cc05d94856d8302622067802a36816b028a32bc3117da91e831d802903563cb59af4b3d8b587a2c02db57952caae0551c1ae5af63cc68e17e4d4684199c0e1bb43e9a5624a9ee888052f6720dabbe95d87f0af511a4ebcc", 0xad, 0x8760}, {&(0x7f0000000180)="2d195a1632c374413d529ff41fee87da3ab4c16a2043ebf6712104bdc3d2788212c1ccea988b6d1f43da39f8029372315e843ec23e4e8f0ea1296c689434680818b33edbd1e2fc695b6bbd4aaa5b9b0f79c80f4627681a9ff718131c7fbe84527997194555ddfdf9851cba3843669d86dd2d4c2d95712f1aab88f517a1561ce21c1b4d5b84b0e64590492feecaa5f0c1dc9cea2e3a0cf8a5c0a68e482317eced2b8004eb55225499e0fa37466ffc293f511dff1990", 0xb5, 0x3}, {&(0x7f0000000240)="96186870ecbd4a8eef7d040a7bc5b6fab9e104a7fb0390fc682f4cda1b7a493bc1bf3da5b672e5557645194cfea1b22c0ec0662df73c815f2753043b3d8eb60868caa2cd854affa32762780f102bfdd0c8b5d4dd655924b9d03a7a7923dbcfd6a68542ef90d717d870a326668935c466f14c30ba30e8", 0x76, 0x3}, {&(0x7f00000002c0)="35d705a211ad0dcab24adec5fb4cbb9c229942d166317d5dd7c9f2867710e916b2e142fd338d0e", 0x27, 0x1}], 0x0, &(0x7f0000000380)={[{'\x00'}, {'\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0xff}}, {@subj_type={'subj_type', 0x3d, '\'\\'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) r3 = eventfd(0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) setxattr$trusted_overlay_opaque(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f00000003c0)="bf8e4090c65889ad6ae06fd3f7c2a39033918b3bc0f8a75442e42527ebddb9774a90a122c4c9ef8c3031a8504e06c07ef713571005b2c911c90bad83b8c7a969d1f9b9d642fb89213841c439076a2ce6f217052633a51f0f952f7a3c535d4c2b", 0x60, 0x100000001, 0x0, 0x1, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000480)="220af3fc5efe9d24918c583a7b9f45", 0xf, 0x7f, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7352, r2, &(0x7f0000000500)="f88ca18c2d03ba6c2da680ab2a8c0ef728915bb346c2e99b5c6b835ca9de1f726b2a75affa8abc18052fce315f25703cc13f73f8fd69aa8ba755a4a68dcce2a92d4034966408dd5543c97bb9c3", 0x4d, 0x34, 0x0, 0x3, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0xe92, r4, &(0x7f00000005c0)="54294011ff296fcdb0d15faf877f369c1cee652b482be113134ecab95c05d1be386d04f075325fc43e9f21cd0e8708d199c259146e961365138e8bc40fb2af5bdfff93ee03dae1d0a17b96cc2388818f925cbca52722a6c75420b4", 0x5b}]) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4c00000000000000) 04:31:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x7f00}, 0x1c) 04:31:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002ffffffff000005020000040100040100040102000100"], 0x18) r1 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x0, 0x2, 0x40, 0x5, 0x5]}, &(0x7f0000000180)=0x54) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) socket$inet6(0xa, 0x5, 0x5) 04:31:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x7f00}, 0x1c) 04:31:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4800000000000000) [ 1030.155727][T17031] loop0: detected capacity change from 0 to 135 [ 1030.157784][T11045] Bluetooth: hci6: sending frame failed (-49) 04:31:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1030.227366][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:31:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1030.315805][T17045] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1030.343597][ T307] Bluetooth: hci8: Frame reassembly failed (-84) 04:31:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1030.406997][T17031] vxfs: WRONG superblock magic 00000000 at 1 [ 1030.472116][T17031] vxfs: WRONG superblock magic 00000000 at 8 04:31:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x7f00}, 0x1c) [ 1030.515127][T17031] vxfs: can't find superblock. 04:31:55 executing program 3: getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:31:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1030.989300][T17067] QAT: failed to copy from user cfg_data. [ 1032.250972][T16268] Bluetooth: hci7: command 0x1003 tx timeout [ 1032.257901][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1032.267026][T16268] Bluetooth: hci6: command 0x1003 tx timeout [ 1032.273515][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1032.401243][T16268] Bluetooth: hci8: command 0x1003 tx timeout [ 1032.402891][T15956] Bluetooth: hci8: sending frame failed (-49) [ 1034.320909][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1034.327998][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1034.336817][ T7855] Bluetooth: hci7: command 0x1001 tx timeout [ 1034.343452][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1034.491901][ T7843] Bluetooth: hci8: command 0x1001 tx timeout [ 1034.498937][T15956] Bluetooth: hci8: sending frame failed (-49) [ 1036.400864][ T7855] Bluetooth: hci7: command 0x1009 tx timeout [ 1036.407242][ T7855] Bluetooth: hci6: command 0x1009 tx timeout [ 1036.561040][ T7] Bluetooth: hci8: command 0x1009 tx timeout 04:32:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000180)=0x10001) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000140)) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000001f46780819fb2a660b015f04b05454ae76ae047703df1500e57b3ecf1eff9cb08d569b46b9ae2a6cfba80d2b92348e0ec9f34c22a1a81ea00286cf98817c2a185db2975e0eb9d24dc545a0e009ed2", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000840)=ANY=[@ANYBLOB="776f1d4319d740c30000000000000000000000f9a315ff7f000000000000001f0dbf7349890911e0a42bfbf317ba66a9f17f4981b685c0bf4a78e24d1db71403ade0d73082140000000000"]) sendfile(r2, r4, &(0x7f0000000040)=0x5, 0x7ff) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000680)=""/186, 0xba}], 0x8) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:05 executing program 3: getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:05 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @jumbo]}, 0x20) r2 = clone3(&(0x7f00000005c0)={0x20000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x7}, &(0x7f00000003c0)=""/173, 0xad, &(0x7f0000000480)=""/243, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2d, 0xd0, 0x36, 0x0, 0xf1b, 0x40, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x5}, 0xcb88, 0x120000000, 0x5, 0x7, 0x4, 0x3, 0x9, 0x0, 0x8}, r2, 0x2, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x400c0d0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) clock_gettime(0x0, &(0x7f0000006840)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006640)=[{{&(0x7f0000000680)=@phonet, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/15, 0xf}], 0x1, &(0x7f0000000780)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/197, 0xc5}, {&(0x7f0000001900)=""/208, 0xd0}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/36, 0x24}], 0x5, &(0x7f0000001b40)=""/122, 0x7a}, 0xffffffff}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c40)=""/254, 0xfe}, {&(0x7f0000001d40)=""/172, 0xac}, {&(0x7f0000001e00)=""/230, 0xe6}, {&(0x7f0000001f00)=""/169, 0xa9}, {&(0x7f0000001fc0)=""/54, 0x36}], 0x5}}, {{&(0x7f0000002080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002100)=""/39, 0x27}, {&(0x7f0000002140)=""/32, 0x20}, {&(0x7f0000002180)=""/221, 0xdd}, {&(0x7f0000002280)=""/97, 0x61}, {&(0x7f0000002300)=""/14, 0xe}, {&(0x7f0000002340)=""/91, 0x5b}, {&(0x7f00000023c0)=""/252, 0xfc}, {&(0x7f00000024c0)=""/97, 0x61}], 0x8, &(0x7f00000025c0)=""/61, 0x3d}, 0x3}, {{&(0x7f0000002600)=@ieee802154, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002680)=""/127, 0x7f}, {&(0x7f0000002700)=""/204, 0xcc}, {&(0x7f0000002800)=""/145, 0x91}, {&(0x7f00000028c0)=""/108, 0x6c}, {&(0x7f0000002940)=""/135, 0x87}, {&(0x7f0000002a00)=""/18, 0x12}, {&(0x7f0000002a40)=""/4, 0x4}], 0x7}, 0x1}, {{&(0x7f0000002b00)=@x25, 0x80, &(0x7f0000004c80)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/69, 0x45}, {&(0x7f0000003c00)=""/16, 0x10}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/5, 0x5}], 0x5}, 0x40}, {{&(0x7f0000004d00)=@can={0x1d, 0x0}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004d80)=""/137, 0x89}, {&(0x7f0000004e40)=""/228, 0xe4}, {&(0x7f0000004f40)=""/184, 0xb8}, {&(0x7f0000005000)=""/185, 0xb9}, {&(0x7f00000050c0)=""/135, 0x87}, {&(0x7f0000005180)=""/62, 0x3e}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006240)=""/44, 0x2c}, 0xffff}, {{&(0x7f0000006280)=@in6, 0x80, &(0x7f0000006500)=[{&(0x7f0000006300)=""/88, 0x58}, {&(0x7f0000006380)=""/24, 0x18}, {&(0x7f00000063c0)=""/248, 0xf8}, {&(0x7f00000064c0)=""/8, 0x8}], 0x4, &(0x7f0000006540)=""/245, 0xf5}}], 0x8, 0x2261, &(0x7f0000006880)={r3, r4+60000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006900)={&(0x7f00000068c0)=@getqdisc={0x34, 0x26, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xf}, {0xfff2, 0xfff2}, {0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x4008004) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x80c0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1a12ec772662729, 0x80, 0x7, 0x3, 0x1, 0x0, 0x0, 0x7f, 0x40902, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x48001, 0x2, 0x9, 0x6, 0x5, 0xffff, 0xff9, 0x0, 0x9, 0x0, 0x7ff}, 0x0, 0x4, r6, 0x3) 04:32:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6800000000000000) 04:32:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4c00000000000000) 04:32:06 executing program 3: getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1041.021976][ T6545] Bluetooth: hci6: sending frame failed (-49) 04:32:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="7ea4cffa937ba5d89f4306274c63b19d2a5e335dd8bf43cde889b990839f369e19ea47e6fbcc6570b8c85407ef797bafe1e79c3f6f38ec3e0aed3377ac57f51cdff074599b190e6cd4bcc46088aff68dd4bb79b4785cc05d94856d8302622067802a36816b028a32bc3117da91e831d802903563cb59af4b3d8b587a2c02db57952caae0551c1ae5af63cc68e17e4d4684199c0e1bb43e9a5624a9ee888052f6720dabbe95d87f0af511a4ebcc", 0xad, 0x8760}, {&(0x7f0000000180)="2d195a1632c374413d529ff41fee87da3ab4c16a2043ebf6712104bdc3d2788212c1ccea988b6d1f43da39f8029372315e843ec23e4e8f0ea1296c689434680818b33edbd1e2fc695b6bbd4aaa5b9b0f79c80f4627681a9ff718131c7fbe84527997194555ddfdf9851cba3843669d86dd2d4c2d95712f1aab88f517a1561ce21c1b4d5b84b0e64590492feecaa5f0c1dc9cea2e3a0cf8a5c0a68e482317eced2b8004eb55225499e0fa37466ffc293f511dff1990", 0xb5, 0x3}, {&(0x7f0000000240)="96186870ecbd4a8eef7d040a7bc5b6fab9e104a7fb0390fc682f4cda1b7a493bc1bf3da5b672e5557645194cfea1b22c0ec0662df73c815f2753043b3d8eb60868caa2cd854affa32762780f102bfdd0c8b5d4dd655924b9d03a7a7923dbcfd6a68542ef90d717d870a326668935c466f14c30ba30e8", 0x76, 0x3}, {&(0x7f00000002c0)="35d705a211ad0dcab24adec5fb4cbb9c229942d166317d5dd7c9f2867710e916b2e142fd338d0e", 0x27, 0x1}], 0x0, &(0x7f0000000380)={[{'\x00'}, {'\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0xff}}, {@subj_type={'subj_type', 0x3d, '\'\\'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) r3 = eventfd(0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) setxattr$trusted_overlay_opaque(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x1) io_submit(0x0, 0x4, &(0x7f0000000680)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f00000003c0)="bf8e4090c65889ad6ae06fd3f7c2a39033918b3bc0f8a75442e42527ebddb9774a90a122c4c9ef8c3031a8504e06c07ef713571005b2c911c90bad83b8c7a969d1f9b9d642fb89213841c439076a2ce6f217052633a51f0f952f7a3c535d4c2b", 0x60, 0x100000001, 0x0, 0x1, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000480)="220af3fc5efe9d24918c583a7b9f45", 0xf, 0x7f, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x7352, r2, &(0x7f0000000500)="f88ca18c2d03ba6c2da680ab2a8c0ef728915bb346c2e99b5c6b835ca9de1f726b2a75affa8abc18052fce315f25703cc13f73f8fd69aa8ba755a4a68dcce2a92d4034966408dd5543c97bb9c3", 0x4d, 0x34, 0x0, 0x3, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0xe92, r4, &(0x7f00000005c0)="54294011ff296fcdb0d15faf877f369c1cee652b482be113134ecab95c05d1be386d04f075325fc43e9f21cd0e8708d199c259146e961365138e8bc40fb2af5bdfff93ee03dae1d0a17b96cc2388818f925cbca52722a6c75420b4", 0x5b}]) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6800000000000000) [ 1041.262380][T17116] loop3: detected capacity change from 0 to 135 [ 1041.301482][T11045] Bluetooth: hci7: sending frame failed (-49) 04:32:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1041.336283][T17123] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1041.391202][ T10] Bluetooth: hci8: Frame reassembly failed (-84) [ 1041.444930][T11098] Bluetooth: hci9: sending frame failed (-49) [ 1041.504594][T17135] QAT: failed to copy from user cfg_data. 04:32:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4800000000000000) 04:32:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401a1000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1041.948589][T11098] Bluetooth: hci10: sending frame failed (-49) [ 1043.040986][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1043.048300][T17152] Bluetooth: hci6: sending frame failed (-49) [ 1043.360940][ T5] Bluetooth: hci8: command 0x1003 tx timeout [ 1043.367097][ T5] Bluetooth: hci7: command 0x1003 tx timeout [ 1043.367719][T17152] Bluetooth: hci8: sending frame failed (-49) [ 1043.377473][T11098] Bluetooth: hci7: sending frame failed (-49) [ 1043.531196][ T5] Bluetooth: hci9: command 0x1003 tx timeout [ 1043.537970][T11098] Bluetooth: hci9: sending frame failed (-49) [ 1044.001047][T17084] Bluetooth: hci10: command 0x1003 tx timeout [ 1044.007498][T11098] Bluetooth: hci10: sending frame failed (-49) [ 1045.130976][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1045.137723][T11098] Bluetooth: hci6: sending frame failed (-49) [ 1045.440900][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1045.448855][T11098] Bluetooth: hci7: sending frame failed (-49) [ 1045.455335][ T7854] Bluetooth: hci8: command 0x1001 tx timeout [ 1045.461465][T11098] Bluetooth: hci8: sending frame failed (-49) [ 1045.600881][ T7860] Bluetooth: hci9: command 0x1001 tx timeout [ 1045.607426][T11098] Bluetooth: hci9: sending frame failed (-49) [ 1046.080921][ T7860] Bluetooth: hci10: command 0x1001 tx timeout [ 1046.087117][T11098] Bluetooth: hci10: sending frame failed (-49) [ 1047.200959][ T5] Bluetooth: hci6: command 0x1009 tx timeout [ 1047.521006][ T7854] Bluetooth: hci8: command 0x1009 tx timeout [ 1047.527276][ T7854] Bluetooth: hci7: command 0x1009 tx timeout [ 1047.680925][ T7854] Bluetooth: hci9: command 0x1009 tx timeout [ 1048.161074][ T25] Bluetooth: hci10: command 0x1009 tx timeout 04:32:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x7, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140), 0xb21c1138b8a55d5c}, 0x14004, 0x2, 0x3, 0x1, 0x5, 0x5, 0x1, 0x0, 0x400, 0x0, 0x154fd0c3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts={0x0, 0x3, '\x00', [@ra, @enc_lim, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0x6, [0x3]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x28) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6c00000000000000) 04:32:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000040)=0x81, 0x4) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@fragment={0x2b, 0x0, 0x9, 0x0, 0x0, 0x3, 0x65}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6c00000000000000) 04:32:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x108) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) listen(r1, 0x401) syz_io_uring_complete(0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f00}, 0x1c) 04:32:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1051.990618][T17187] QAT: failed to copy from user cfg_data. 04:32:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000002000000000000000100040100040102000100"], 0x18) sendmsg$inet(r1, &(0x7f00000017c0)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000100)="6545a8c81686e7dccdce6f67711e649ff2f9b02077216019cfddbaa081dcf3d55822e69eb552ffc163485ad29aa88a132ad39ca47207d755eb894b5b2a1e3f065853f54b6ec206bcc48537e94dc9bb939c6693d518df5bc3111558c98e05", 0x5e}, {&(0x7f0000000280)="3ec6b2d23088f14d3b7445887d72682706be1a679f012595b12a08f2c95a009b35a75c9e16de7a520817d5a432e06383e8fd485969ee1d2ec608fbb4e096853377fb7d34b309f60251ffa34d0953a3b2e22277ef01d2c68afaab9615a0d78637a4c14f7d3f75d38225616cb9d06a9f5dcd3db81ed9e4a600689ddbf018b41379abcb", 0x82}, {&(0x7f0000000340)="1f77edb23c5f77d2a8b9dee685a224429f46f1def1807c755857676f56df55dae16187a3619aca758232b122649dd4ec922df49409fae5097f085adddc8f00bc460ebce55e17d2ab966c2e2374e68bdaba4b3a89988f43cd7c837b9be901d0abc36e1d1041f95744ebbf53d6e824df08991cdeafb7546cb4815d", 0x7a}, {&(0x7f00000003c0)="65f1d991548c9af287f88b0529d2dff43c4c54f82be24594b01fec6305f64a2aff4e58bfc8c3f2c0482937244c895f486b239ec31c5f97ee709fd8edac921ca8099c993cb4743d15c4f2fa07e5291e970fef312df32bb3db7e7bcb0ee81a7287c76801141c8f71a4f771ca01f001391faec5057b0418267a92dada091e77f971bf2f08b2ae27c8a0d0e7e7e78e7e73aa2e82487db808932957146611a50a5efe75868b87baf70b6bf984b45915ba71fbf996e4bc35c4e8949287a07c738a76a0f33ec6601bd08b83693ee67359340f382b864e525d607af2751a1a929cd70de29e722ee2ffdf34cacd", 0xe9}, {&(0x7f00000004c0)="eeefaf1cc4ddb3e1a56e79ab76bb13a25004fc9effaac6e567ea4e172973d0547357c057618652f26031463a7463ec605e4bb87daa8f4b165c733d182f58a9008dd893ee9d0726aeab510e4dea66693e7da07fabb72d2a5a88a196803b395a6b8a1325f1c0e8f85d4dcacd06a4c935328924efd1693f78237b2ea0f963fbee3436eed98cee666a27aaceb97996c0ccca9c25a895bdc5a480cd0d30fb1fc5bb3e8d077542ca291d26e1742fc354b17d6c1b067af1dfe18c3e7f09083777616709c4872dd5ee775952", 0xc8}, {&(0x7f00000005c0)="a280995c3a91ba7cc178390cb83f5a26554e62f140da40c82fbecc236d60846d667381f3faec04ff0865a6a5c53f0f9dda6948c3d470825caf06e11175d3ddd1b44643a5cb305d468f729fbe156849d01475eb3d455473699a73eb3df3d9fbf349fc33f2d9ae50334f581ecd60af45905d0c1ffa598f81c09e0884499650e50bcc5cfcd52d7b29c295bf49cb94cbbb9307a52e5228925488a38ac0c746393759ebecf0", 0xa3}, {&(0x7f0000000680)="c2fd8ae2997a4ce9e7bd54ff2fcf5e0468182c1dbe38a306c0c350194f5ff32a8019d8db472633ea9c8e01a3cee51854fb6e14b95b88c0df64fba09bf8b267d1a9b07edf6465d29a1e8af3b64fb86396399d89e1110e7f6933e486b3436f4f24370ff53ef08c75e183599a134a9a4c3bcbd92a867eb510d065d5b930", 0x7c}, {&(0x7f0000000700)="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", 0x1000}], 0x8, &(0x7f0000001780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x30}, 0x20000040) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000180)="f9d5a9559c9f0356f7b909718b6bdfff7c82346e0c8a86737b06c95af829cad668297414d6c5d9d6a974ea20d6528e75c406e2124eb781f5e29db8e1e6aed63bbfa2c5ab2c29eaa350f23892294bcbd12d92360e2e6202997b9bf8f3f1363d17fb41c79633d85fd0bac9df674b93cfed1e80ed7a4a22231deb57922a8076f8fa78e924aab106efda99cca2099d819dafefb76be76d8338ffcaa2b42bafa37c71810b1647683ad693961fe200dd1a5d08d2f3350f9d9cb7c5db15859ff40ec607f058c57d8ea0f27389a296ef", 0xcc, 0x20000800, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x107f00}, 0x1c) 04:32:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x27, 0x3, 0x1ff) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8000, 0x210, 0x8, 0x800}, &(0x7f0000000040)=0x10) [ 1052.326050][T17205] QAT: failed to copy from user cfg_data. 04:32:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001006da9a1bd480685d9df220c6fbc597bdbc5357fb5b22824146bd12e656bb76d9c4e06a444a2465413b10f3c2a5b592c59d3a2caf8aa098b875c93cdb05af37c60203df4c435569fdf18ef20b3f7895540e2fee71a01b7fefc483d04595b945bb796d17bdc640ee31712420031169e7d759220842c174675b3a911fde2f16a07233495c238d0857b3e2e330bed7e6de2e02e650b21cebfdac6abdeb4d80707f0d8886860838cc6feae04d182"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast2}}}}, &(0x7f00000004c0)=0x200004b0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x6, 0x910, 0xe2dc, 0x4, 0x4, 0x1, 0x4, {0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0xaed, 0x9, 0x1f, 0x90d}}, &(0x7f0000000040)=0xb0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x4b, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1052.561692][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1052.574461][T17217] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:32:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1053.691970][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.698727][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.921052][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 1053.922811][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1053.934707][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1053.941405][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1054.640958][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1054.648419][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1056.010994][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1056.017650][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1056.025649][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1056.032424][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1056.721350][T11571] Bluetooth: hci8: command 0x1001 tx timeout [ 1056.728301][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1058.097269][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1058.111178][T11571] Bluetooth: hci7: command 0x1009 tx timeout [ 1058.800870][T16347] Bluetooth: hci8: command 0x1009 tx timeout 04:32:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7400000000000000) 04:32:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00e0ffffff00000005020000040100040100040102000100"], 0x18) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x28000000, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1b}, 0x1c) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 04:32:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7400000000000000) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1062.176957][T15956] Bluetooth: hci6: sending frame failed (-49) 04:32:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020000000000000502000004010004010004018802000100af05fa0fa403dabebf1ea6daeb549a1d83d7b703aa633283d5e5bd85aaee3782216326628b472d4033d575a1f23cb2707de5dd8992b7385afbfac6a4f558c4dc619396f28d4cd5a761c0abc5abcd0bc3fa"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000000d}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x3e6a8ccaa85226c7}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1062.333357][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 1062.546509][T17281] QAT: failed to copy from user cfg_data. 04:32:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 1062.660472][T17288] QAT: failed to copy from user cfg_data. 04:32:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:32:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1062.826972][T17298] QAT: failed to copy from user cfg_data. 04:32:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 1063.016053][T17308] QAT: failed to copy from user cfg_data. [ 1064.251070][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 1064.258727][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1064.401110][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 1064.408010][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1066.320947][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 1066.328754][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1066.480990][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 1066.488405][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1068.400970][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1068.571075][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:32:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x6}]}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7a00000000000000) 04:32:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200edc5b27c513a8aff966c7696", 0x12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000001500)=@pppoe, 0x80, &(0x7f0000001680)=[{&(0x7f0000002b40)=""/90, 0x5a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001640)=""/3, 0x3}], 0x3}, 0xfff}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{&(0x7f0000001780)=@can, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001880)=""/77, 0x4d}, 0x1f}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000002a80)=""/155, 0x9b}], 0x4, &(0x7f0000004c80)=""/141, 0x8d}, 0x7f}, {{&(0x7f0000004d40)=@un=@abs, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/36, 0x24}, {&(0x7f0000004e00)}], 0x2, &(0x7f0000004e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e80), 0x80, &(0x7f0000001800)=[{&(0x7f0000005f00)=""/231, 0xe7}, {&(0x7f0000006000)=""/80, 0x50}, {&(0x7f0000006080)=""/135, 0x87}, {&(0x7f0000006140)=""/230, 0xe6}, {&(0x7f0000006240)=""/233, 0xe9}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f00000063c0)=""/28, 0x1c}, {&(0x7f0000006400)=""/212, 0xd4}], 0x8, &(0x7f0000006580)=""/25, 0x19}, 0x9}, {{&(0x7f00000065c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000007b00), 0x0, &(0x7f0000007b80)=""/92, 0x5c}, 0x14}], 0x7, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000002bc0)="5eb9682411cf8f0d3c192a54afeea441829ec7f32edea3b69b755f10dd05bf3e4f8cd83d731a8531d51cf093b19f657f417780d8e4d2b9ad8a05925f54d9eba9525b9b03", 0x44, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x7a00000000000000) [ 1073.048919][T11045] Bluetooth: hci6: sending frame failed (-49) 04:32:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1073.097830][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1073.112482][T17351] QAT: failed to copy from user cfg_data. [ 1073.128925][T17352] QAT: failed to copy from user cfg_data. 04:32:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200edc5b27c513a8aff966c7696", 0x12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000001500)=@pppoe, 0x80, &(0x7f0000001680)=[{&(0x7f0000002b40)=""/90, 0x5a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001640)=""/3, 0x3}], 0x3}, 0xfff}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{&(0x7f0000001780)=@can, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001880)=""/77, 0x4d}, 0x1f}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000002a80)=""/155, 0x9b}], 0x4, &(0x7f0000004c80)=""/141, 0x8d}, 0x7f}, {{&(0x7f0000004d40)=@un=@abs, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/36, 0x24}, {&(0x7f0000004e00)}], 0x2, &(0x7f0000004e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e80), 0x80, &(0x7f0000001800)=[{&(0x7f0000005f00)=""/231, 0xe7}, {&(0x7f0000006000)=""/80, 0x50}, {&(0x7f0000006080)=""/135, 0x87}, {&(0x7f0000006140)=""/230, 0xe6}, {&(0x7f0000006240)=""/233, 0xe9}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f00000063c0)=""/28, 0x1c}, {&(0x7f0000006400)=""/212, 0xd4}], 0x8, &(0x7f0000006580)=""/25, 0x19}, 0x9}, {{&(0x7f00000065c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000007b00), 0x0, &(0x7f0000007b80)=""/92, 0x5c}, 0x14}], 0x7, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000002bc0)="5eb9682411cf8f0d3c192a54afeea441829ec7f32edea3b69b755f10dd05bf3e4f8cd83d731a8531d51cf093b19f657f417780d8e4d2b9ad8a05925f54d9eba9525b9b03", 0x44, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1073.388575][T17370] QAT: failed to copy from user cfg_data. 04:32:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002250000000000e301000604010004010004010200fd0e"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="9db05eb0178791fc6b51bb922be4995a72cf781fa19388211353f0cc308057a88bb676", 0x23, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f04}, 0x1c) 04:32:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1073.686226][T17386] QAT: failed to copy from user cfg_data. 04:32:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00020000ff0502000004010004010004b600000000"], 0x18) clock_gettime(0x0, &(0x7f0000003800)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/40, 0x28}, {&(0x7f0000001380)=""/106, 0x6a}, {&(0x7f0000001400)=""/35, 0x23}, {&(0x7f0000001440)=""/134, 0x86}, {&(0x7f0000001500)=""/241, 0xf1}, {&(0x7f0000003900)=""/224, 0xfffffe97}], 0xa, &(0x7f0000001a80)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001840)}, {&(0x7f0000001880)=""/186, 0xba}, {&(0x7f0000001940)=""/195, 0xd1}, {&(0x7f0000003a00)=""/102400}], 0x4, &(0x7f0000002b00)=""/90, 0x5a}, 0x7}, {{&(0x7f0000002b80)=@caif=@rfm, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002c00)=""/140, 0x96}, {&(0x7f0000002cc0)=""/117, 0x75}, {&(0x7f0000002d40)=""/72, 0x48}, {&(0x7f0000002dc0)=""/97, 0x61}, {&(0x7f0000003880)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/230, 0xe6}], 0x6, &(0x7f0000003040)=""/226, 0xe2}, 0x80}, {{&(0x7f0000003140)=@alg, 0x80, &(0x7f00000032c0), 0x1}, 0x3}, {{&(0x7f0000003300)=@xdp, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003380)=""/68, 0x44}, {&(0x7f0000003400)=""/10, 0xa}, {&(0x7f0000003440)=""/230, 0xe6}, {&(0x7f0000001600)=""/125, 0x7d}], 0x4, &(0x7f0000003600)=""/159, 0x9f}, 0x7fff}], 0x5, 0x40022102, &(0x7f0000003840)={r1, r2+60000000}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1075.121079][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 1075.127902][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1075.135917][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 1075.142481][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1077.201271][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 1077.207353][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 1077.208062][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1077.215422][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1079.283465][ T5] Bluetooth: hci7: command 0x1009 tx timeout [ 1079.284173][ T7854] Bluetooth: hci6: command 0x1009 tx timeout 04:32:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x918d4df700000000) 04:32:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0002000000008000000000000401000401cefa7246455da66ad04b00040102b3e80f70950d96"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000004107565400000401000401000401020001005dc314bb3765bdba7370924de3dda080154a7328ea0c52bb1f51057aad0f4fc74e8c01d08afbbc5206b36aecae94e380e61af2fe078c53a359a14cf37eae8854fc68f515639d00e7aa44eb8d75766ed86c558283713b32515862c6193c249092dea60e9c9e650337c7c2f5528e39feb0a3f6d48b81ad9dc3edbd3758bee050e477c245361c7f307f"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:32:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x918d4df700000000) 04:32:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1083.277348][T17431] QAT: failed to copy from user cfg_data. [ 1083.315608][T11045] Bluetooth: hci6: sending frame failed (-49) 04:32:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1083.335315][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:32:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1083.400609][T17443] QAT: failed to copy from user cfg_data. 04:32:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1083.549196][T17447] QAT: failed to copy from user cfg_data. 04:32:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1083.667555][T17455] QAT: failed to copy from user cfg_data. [ 1083.692387][T17454] QAT: failed to copy from user cfg_data. [ 1083.778643][T17460] QAT: failed to copy from user cfg_data. [ 1085.363658][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 1085.371803][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1085.378317][ T7] Bluetooth: hci6: command 0x1003 tx timeout [ 1085.384624][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1087.440967][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1087.448393][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1087.455517][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1087.461711][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1089.521119][ T5] Bluetooth: hci7: command 0x1009 tx timeout [ 1089.527913][ T5] Bluetooth: hci6: command 0x1009 tx timeout 04:32:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x97ffffff00000000) 04:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) fsmount(r3, 0x1, 0x2) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="670200000000000005020000040107040100040102004100"], 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="d5675376806fbb766ffb58479d697f094a85c9c1d612b43d668a8b0118518c3244faff9133ce55dc2f71a474d7fa7244af4e4837bb363d4b2664082bfd31d59924d6e2cc1254c0ef085763d7e19132e8677edbd4736832c37aec58ddecfbe1c9fe67c6954bbbc484952a74", 0x6b, 0x44085, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00'}, 0x1c) 04:32:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x492e557c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00020000000000040100040100040102"], 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "5655c1848ab4a46f", "052fbc19d7455cbbfe664a653eb8b217", "21bf591a", "33bf94d20e7af781"}, 0x28) 04:32:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x97ffffff00000000) 04:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1093.631878][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1093.635070][T17493] QAT: failed to copy from user cfg_data. 04:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1093.767094][T17506] QAT: failed to copy from user cfg_data. 04:32:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1093.926937][T17512] QAT: failed to copy from user cfg_data. [ 1093.962658][T17514] QAT: failed to copy from user cfg_data. [ 1093.991083][T17512] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1094.055664][T17512] CPU: 0 PID: 17512 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1094.064729][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.074788][T17512] Call Trace: [ 1094.078095][T17512] [ 1094.081027][T17512] dump_stack_lvl+0xcd/0x134 [ 1094.085949][T17512] warn_alloc.cold+0x87/0x17a [ 1094.090655][T17512] ? zone_watermark_ok_safe+0x290/0x290 [ 1094.096226][T17512] ? __kmalloc_node+0x62/0x390 [ 1094.101045][T17512] ? __vmalloc_node_range+0x574/0xab0 [ 1094.106437][T17512] __vmalloc_node_range+0x883/0xab0 [ 1094.111666][T17512] ? vfree_atomic+0xe0/0xe0 [ 1094.116657][T17512] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1094.122490][T17512] ? __ldsem_down_read_nested+0x850/0x850 [ 1094.128251][T17512] ? __wake_up_common+0x650/0x650 [ 1094.130666][T17519] QAT: failed to copy from user cfg_data. [ 1094.133291][T17512] ? n_tty_open+0x16/0x170 [ 1094.133358][T17512] vzalloc+0x67/0x80 [ 1094.133384][T17512] ? n_tty_open+0x16/0x170 [ 1094.133406][T17512] n_tty_open+0x16/0x170 04:32:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="b731076f0000000005000000020001000000000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) socket(0x200000000000011, 0x0, 0x0) clone(0x10080, &(0x7f00000000c0)="05c504fd6dd074e7eeb8078e47dcbbf4394587d1844de10664960156a62c532463d5792cca5f1de8019205df42683b733e4bc7db8b0ffba0593db5d9cd7e527746ddb94eeaf3cf4d44164728ee98a0e245b10665", &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="196083eb907037da8129ebbca23fac65f7fa0929589f73f0d2c18f843862aa9c47117cb40fa2a7c877199aed4bd2648e74ae932f23731955e11aea358cdaa548398ae785e85f3cc4a3502c608d425d1e9941430fcc80f70db1780fcae4dc3fd2c2d28740ae0032d5b50c0c398a6d48fb53fe586aaf0828614ff0e81cd1e1fb21772bd0ff189a1b4deac74be914e1e43462b1") sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1094.156250][T17512] ? n_tty_set_termios+0x1010/0x1010 [ 1094.161565][T17512] tty_ldisc_open+0x9b/0x110 [ 1094.166178][T17512] tty_ldisc_setup+0x43/0x100 [ 1094.170879][T17512] tty_init_dev.part.0+0x1f4/0x610 [ 1094.176007][T17512] tty_open+0xb16/0x1000 [ 1094.180366][T17512] ? tty_init_dev+0x80/0x80 [ 1094.184971][T17512] ? rwlock_bug.part.0+0x90/0x90 [ 1094.190056][T17512] ? tty_init_dev+0x80/0x80 [ 1094.194842][T17512] chrdev_open+0x266/0x770 [ 1094.199280][T17512] ? cdev_device_add+0x210/0x210 [ 1094.204267][T17512] ? fsnotify_perm.part.0+0x22d/0x620 [ 1094.209699][T17512] do_dentry_open+0x4c8/0x1250 [ 1094.214527][T17512] ? cdev_device_add+0x210/0x210 [ 1094.219496][T17512] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1094.225761][T17512] ? may_open+0x1f6/0x420 [ 1094.230105][T17512] path_openat+0x1cad/0x2750 [ 1094.234722][T17512] ? path_lookupat+0x860/0x860 [ 1094.239502][T17512] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1094.245521][T17512] do_filp_open+0x1aa/0x400 [ 1094.250081][T17512] ? may_open_dev+0xf0/0xf0 [ 1094.254617][T17512] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1094.260883][T17512] ? _find_next_bit+0x1e3/0x260 [ 1094.265755][T17512] ? _raw_spin_unlock+0x24/0x40 [ 1094.270624][T17512] ? alloc_fd+0x2f0/0x670 [ 1094.274985][T17512] do_sys_openat2+0x16d/0x4d0 [ 1094.279720][T17512] ? build_open_flags+0x6f0/0x6f0 [ 1094.284772][T17512] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1094.290964][T17512] __x64_sys_openat+0x13f/0x1f0 [ 1094.295843][T17512] ? __ia32_sys_open+0x1c0/0x1c0 [ 1094.300812][T17512] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1094.306751][T17512] do_syscall_64+0x35/0xb0 [ 1094.311189][T17512] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1094.317104][T17512] RIP: 0033:0x7f7f33f79af9 [ 1094.321623][T17512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.341639][T17512] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1094.350073][T17512] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1094.358070][T17512] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1094.366177][T17512] RBP: 00007f7f33fd3ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1094.374342][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.382331][T17512] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1094.390332][T17512] 04:32:59 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1094.914309][T17512] Mem-Info: [ 1094.917651][T17512] active_anon:541 inactive_anon:160799 isolated_anon:0 [ 1094.917651][T17512] active_file:5515 inactive_file:65907 isolated_file:0 [ 1094.917651][T17512] unevictable:768 dirty:59 writeback:0 [ 1094.917651][T17512] slab_reclaimable:21323 slab_unreclaimable:96594 [ 1094.917651][T17512] mapped:23121 shmem:9454 pagetables:1545 bounce:0 [ 1094.917651][T17512] kernel_misc_reclaimable:0 [ 1094.917651][T17512] free:1260524 free_pcp:9980 free_cma:0 [ 1094.966192][T17512] Node 0 active_anon:2164kB inactive_anon:642280kB active_file:21944kB inactive_file:263628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92484kB dirty:232kB writeback:0kB shmem:35364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB kernel_stack:10492kB pagetables:6176kB all_unreclaimable? no [ 1095.000857][T17512] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1095.037714][T17512] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1095.077979][T17512] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1095.084063][T17512] Node 0 DMA32 free:1082348kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2164kB inactive_anon:636136kB active_file:21944kB inactive_file:263628kB unevictable:1536kB writepending:232kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:41824kB local_pcp:20156kB free_cma:0kB [ 1095.125110][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 1095.130025][T17512] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1095.158487][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 1095.163581][T17512] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1095.194184][T17512] lowmem_reserve[]: 0 0 0 0 0 [ 1095.198920][T17512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1095.212562][T17512] Node 0 DMA32: 3511*4kB (UM) 1492*8kB (UM) 548*16kB (UME) 202*32kB (UME) 57*64kB (UME) 21*128kB (ME) 5*256kB (M) 5*512kB (UM) 1*1024kB (E) 4*2048kB (M) 250*4096kB (UM) = 1084604kB [ 1095.232515][T17512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1095.246068][T17512] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1095.266807][T17512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1095.277466][T17512] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1095.288527][T17512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1095.298485][T17512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1095.308668][T17512] 25070 total pagecache pages [ 1095.315065][T17512] 0 pages in swap cache [ 1095.319657][T17512] Swap cache stats: add 0, delete 0, find 0/0 [ 1095.326618][T17512] Free swap = 0kB [ 1095.331628][T17512] Total swap = 0kB [ 1095.335457][T17512] 2097051 pages RAM [ 1095.339298][T17512] 0 pages HighMem/MovableOnly [ 1095.344725][T17512] 384515 pages reserved [ 1095.349396][T17512] 0 pages cma reserved [ 1095.356452][T17512] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1095.365897][T17519] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1095.600929][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1095.608380][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1095.681106][ T7] Bluetooth: hci7: command 0x1003 tx timeout [ 1095.687980][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1097.680868][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 1097.687401][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1097.760877][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 1097.769250][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1099.763585][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1099.840918][ T7854] Bluetooth: hci7: command 0x1009 tx timeout 04:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc0eb010000000000) 04:33:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="b731076f0000000005000000020001000000000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) socket(0x200000000000011, 0x0, 0x0) clone(0x10080, &(0x7f00000000c0)="05c504fd6dd074e7eeb8078e47dcbbf4394587d1844de10664960156a62c532463d5792cca5f1de8019205df42683b733e4bc7db8b0ffba0593db5d9cd7e527746ddb94eeaf3cf4d44164728ee98a0e245b10665", &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="196083eb907037da8129ebbca23fac65f7fa0929589f73f0d2c18f843862aa9c47117cb40fa2a7c877199aed4bd2648e74ae932f23731955e11aea358cdaa548398ae785e85f3cc4a3502c608d425d1e9941430fcc80f70db1780fcae4dc3fd2c2d28740ae0032d5b50c0c398a6d48fb53fe586aaf0828614ff0e81cd1e1fb21772bd0ff189a1b4deac74be914e1e43462b1") sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101480, 0x61, 0x12}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xff, 0x0, 0xa9, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x80000000, 0x7fffffff, 0x6, 0xffff, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, r0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x97, 0x9, 0x8, 0x0, 0x7f, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1317, 0x6}, 0x802, 0x4003, 0xffff0000, 0x2, 0x2006, 0x8200, 0xdf, 0x0, 0x0, 0x0, 0x7}, r0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002002e0000000005020000040100040100040102000000"], 0x18) r3 = socket(0x5, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) listen(r0, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="00040100040100040102000100"/24], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x8, 0x10, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x8, [0x7, 0x6, 0x4, 0xc7b5, 0x1]}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x1, [0x7fff, 0x8]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x800, [0x54a, 0x2, 0x7]}}, @pad1]}, 0x90) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x50}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="3696192121271dda84db1ff503cdedd72d0df5af70db0cfbb20131e8f644646155ddf8a8ed8e4a8924d9179cc024fdaa7853b6f9fc2962f35f24db8584785cb7697bcfa65d5776e2fac6db4c032bf7e30d794a8789fd0072b3e4518b891c4d90284a361f8a15d91f15e78a83d78fdf3f274a7d0b940ee600b8a77fc7034f9a0734a5c03d69d3bdf5e2beccd918fb93fc756c804f558919f8c14d0a62774b8443b74ebc069654a06a804289c1ffbc26b708fd96b0305f27704c133e17e24f8a427de83c0bf6b999d2095a23c4a3c9e6e776a866da610c590435524ee819fa0656c21d7f1f3b8592a1e0fe73f6a51132cd3156fbd71a749dd7253f4fd0885e8c823b8694c825e9e268180165884fefea39bfcdccb9d18109f1f6b44e20ae99b3d9ca89522f5048a7c89da00afa4df1606a749c0f1f2724a2e2d4440ddb0e5614fe54a4fbc173d748cdc5a84cbd10b482213f57b4af84d1aa68e32a305832d6aefabd7f2b0e541d014fa3543cadeadf8cf2455658bd964936e7bbfb152bc1fc359bf9cb98fbfe156699d314987ed1815948d297c5081b6813a9769e3ff49a8f93912db41f9c0a643dc1238f98c9210f7a68fe78fab9f6d6eb3cdeee159afbffc9b6eb94cd8117bf347f28f44353c771f79c34636ba96191d01ee5906f865ad4faf9e5e5a1026a32229e4c23ea87fba334c1cae4d0d819422d2a6b1ccc463ddf9851b610b0340b054a67e8c5563ea8e3796bd4b32549333ebde8cc821966bfd7b133e9c8b7dc8dc6ee832122078a350e1dd26981918dcd6b627dd73bbb849475cc0fbb4617b2f961098287b4c8fa95e6f7a75683028037a9d8f9920990563668bdb9b85878d6d6a2ab2e44021f332620aedc07b32f9ce96119b451d53d33f24f40e2d03dfe454ce0d35ac0d398d550bfa6aeefafc595246108c5bdae9a1cf72e38c3c4a13e235f914b0e6f52eb431f9173a00b773ca89a0bd6f1a5741b21e56e9fa3b3349885cecff501246871ec29da3ef101689f6290febfec27a8bb46a362782b42f4a1d57d1e86b3ddb1698882edd16f666634f68c842be4ec578662d37fe7eb0f86eb672cb9adad6cf4ddcb036397a04f4cc1e0943375967a26dd398d3225f65411bf1c03cc10c743f046bd30a6bf27db4fa218e9e6ca23d5700a20853c65dff0e9a1cc12600c437c4b316096c742fe66b71e322696392ec1d68551582268332eeb4b28691912f1faf792df4621a17d8785114957df93a2e39222cdccdafa78665ae27fe49029b6555bcf8a2452b9b57edf5c266aefc3a89fcdaea62b64bdfb53ea71396d6c2ece6e0a6baad0794f781a7850c2f409fa2e38a0ab1d1ace8c3020378591c69c5a7a45e22206007261e4fa0bf22ecf05b6b1fc399432e95f7638bd9a649d78f6979200bf268dc8fcaa4bc308fcbc3e91c8fd511da60418157efe2485023f5ac9454e748420a7714ee7e5640a3fe13d18f68b9b828ed9cbcd1a82351cced99fc8b29e8bbe7aa4ab85cf5a5abfbb20add4ebf557b376a0912ba0a40d7c520d4b0c851647c0f806c4b9fd2fc4c0c1ba0f3f8b785f48916f402e18f90f16eb293770fe21f418142d34d18e3de654357f662701de73145e51b7f7548b453e629f104663b5c4ea1d58dceaad63faf7e7b0ea470e00f210e064fff16274fc9691568874714b5c68c7448c230c147e566ba8e24666c1d8fe61a2128e3208d0924f2765a0383f3057d3d13ec8ab94e44fd36ff2df50ab4f8315145541543122f9513f0fa25f7785940ee4f2900d65e7822f89fe81bb55419adc1dbb00bf6eec012b5c4d899f374f3c60c6968bb68975612e9d4b31baebc38fa6051610f19b1afc8f0eb032191af40d6fb8b309be1bebd47f5ed75fb4da4647041d0624b0124efb95393f3487c8a7c13bf98e629b060a4173de9176f0726ecd23cb85aca40cb6af27ee73bcedf76c3d1494d2d7cf6745d0f7805cac077948d151a25f5ac8e34fa570384c76ee45cebad18ff8761f2fdbe7574b85da6a3826cf0ba29442c99d4c9bc4fa10f78a8a4b2370772b42efc92b1ac8b7edc1a33321e2b92066f5563a00ca7fd4c1f43761b86adea7c3b40bb98de2dca707f9421bd25325a0ac394011eec6ceb8001b96a6071f0d39670ff7d3117f1fbc2ed34aff45333a3a49af8b614f59bb9df52d4f2a5fad45ac970a79dae73dc41f6648b7d8d7fa5a7a9422bcd6c0fbf2f439a5ab00cde596a77778f5eca60d2a5e1367e416538940581729417bb55072f7546ff2b59a6dd4cd19b16f741a4bb8d3ca0731d9e54dc6540e0c60bf8b0d81cea7d7c564f78e75941a6d920817f59164066a48897afb16df62ed5a048414a996480f4b9237c276fc272eb423a20ac61d0d376c45f8455b63ba981a2cab2df5a2580bf1b1f91ed5d05b92718e5e0e55d33a9b6fead2dd93b1a5443bffdf1744ff28ece3974b360feef2f5323c8f3549e6fbc3d3ab7517bc959e174050f8f081eced6aae0706efac018a599c3b08d677b9ff0e1c88b7e8830d2ac983f369a3d5a831a01ea7670d78c75d55c40ab7ba019ee35cee2728c04f583aca134a6d376529bf9e87e830abcc99423fb7a025946ae4d48a51fb83e2faebe9ccaa17e5f84c3a0173de69aa626e32e8258e29fee5d9717810c4334f768b8fcdd9205b7546a8055c6a3e811546145ce0c596d620b9aaccff62c288f49e938ba50c08ac04a604429720843c96e9b4c9e8200846d9037281f6fdea92da3cdf7c20d840031e3843055294001407343fe9c5559e256e1f0c8719487d5f7f1cea5b7c009e283e86fcc98f2793dc27e672658875ab81cfd798a0ac30652b699dd86f48bad881e2ff6e955ce908a26646a6b40bbe461b384f3c07c758a3d4d61192414454f7e9d7cdd088b1899868ac275faf4f1a93af0e325bc369d4d43f8a212ddfbcb390c4d4368fc3931bbda7920667120d4684a12c49de6c2201ba593c554c79d28351a667f44c6bff6a30591a911b61fae0a0bb9604b57b0d4c72239de59cb7e17487de82ba83cf9ec73a24e19523229a47b3089839650e4e1342167c70c0a87e9c9b57d112aee472ab63906e8a450b039af8afb92f0517a97c36d8c6d641ccf32a9cbe964cfac6f0e8b284ffae09f92e8f4c5b4fd60b0e0c836de561cd884df626152933f0edb45edead75edf4b004c80e09b51ecfeb0334d7b00dd83dc5d453e37a3095796de0b0f7c39deddf9a009efddd7b8ca81d7bccc92f01e7c2a9614c25ebf2492df29413b9099cf3abe2eed3b5e355f82ca00a2421736b453fd905f38b1973c7523183af4c6b2076990f1fd4eef01ffa1e1c8b8766c732bf4e9b062a4d967c91ae36ccd7d109c049e857d7d26fbf5a7cdfae4c791cf3e7419e9e462b7ed40a5f6cace61b2bf4d93015acf90da67e3e998458662b8def62e530ed5eecae91213ffd6325add5fc72c2490903e8363dc1eb3cf6826ec4a6e67268762fd8adb1dda80669078a88e5e13a340829f282539aa46fbd72d6b51c02fa8a3ed7d34eebc2a1f7dc67784b04832c762968128cfc36e3debced162167a21381805611d1bb0e5c22118223b81446f78d07aef55c29543307fb63de9a8a9dd9cc5cbad8df01fcb3cfae6f10ccdd373526ab6fb7ea4b5a1155b40bdd911889b8dd065eef71de21dbf4f63032b7fe9b52b8a5617a9f0ce94a5ff3deb31478d4bd4e0958daac70d31e68b3797490082d796602a6c57069cecccdb6fe247aa6dfd2db299b2bca5896274d675fd61284a00fa04ded61be2ee23cba2f16baf06b7efa5ef468ad9d6a53752848eb81e93581694d43faa4704fbe6b1e6a8627672f38c80fc2db8739dca5b538a7f6ed9f1dc1788eca7110786948e25d817654fcac83c6d7ecea9e7961d654273f5c3a10dafd971eadd91e875684fc07062a7bba6281f3ed1fa805aee3ce4891c22f9879b1d62d598d84f00981753d623abbfe5a91da1d3859fbd8911ac0a02dceec4c901f894be3c68a4a253a50d3beddbaf37eb23f04be74a196cd147e4afe0913ea8b06067d69e2cf6df827fcf1c6f82a08e2c5d6d8178df845f5cfa263b740a3d676b165b4574fa755b827fc7b3ce38043a491f0ef23c74fccb062b2fbbe61c9b72e17998ab4cafc510f1f50c3c8578b804a7ecadfe8a640787a31f6346e3dde632610e1180a7ec9579dbd647192b3cf51491cf4d005546d483aede06ca2ea42573027782020e6954b4794598464842112e0865f5f16d4f5f0e483c8b48f439da248d6dc9873d1f9901cb8fa5bac8e6aea2973bf2e857c9a87afa896825f2cb300772d24cafcf107df436fcf0a3f1330f33f60243fa3886532a2e6297ba76ac443e43bcc0f25624b7d2c2bbf305da0a4a268931a1489bb99d936e7dc48b0265606f801dfb52e26872e9203f75c07eb2035522d1987fdbff3a12807841e03491be31c29bc64e0c682546e4902aa5e1b1e3e60138b321012288656b4dbcc2aabf44d21dbc6179b937f39180b7408b0ca3e5acfb7d0779113b96e2f30fb45b9f989437fe5d082854a21df85647b55284cf1f3dbfbcd3021625975c770dbcd250c285f5a76955ad3ab19ddb108b9ad23a00ebcfe0ff9544abb125fa3ddbba6ebc35b3397809600ac0435b41ec7bf82e4a5fe8d0dc7d13b8ddc7f97fa702d23a3980f541fabdc0c7180200ad66d13b4ece6531a2faff5348cd87941bbe82507b23601cf1001d9b20a1599de9beac887fd1ebec1ef6702a3fc0f00c5df0380e76fbadab57c652b38c263da2030bae3e34edaa2116879f5ccd4d72c3611614b881f36849ae7295b721582b0fd229e45e658be487574f746f5bddb9e136f2ee930784b67af5dea5f6ff89b5d4dc0a78899aae49e720060e0848c3d294c4d96557212c3b5ca61d634395a6080b1962c21c13de4016c0855bee8107d8f16af28c83396cb2368a540af257fc8b8119dc4ec18b1a550cdf14a66b9222278ca406404780fed573cd4979aae1e460d217ef4a183fe7644a5b261607fa6ed7db0e614fc2ec0c308249deedfdbb957341c545fe1c0d672ea5870147be160dfc85bf8b6dab59e2e3e8342a7d0151a2123c0d6156c898cd349e2567060ef8700057e62649f57cb9bc00798cc007575f59f1d7dd95e2d75daa404283b93b0b45cea8ac8c63c430f02db193e8d43f2bddcb66fa6e16c8b9c4f2ac4fa0b68fffb7ab452e34c1aec501d022db140076b570959cb3f2f5f47d01dedcf4377ffe92a927493359def38c000ea9673df160fab136bbc4f45f35d5e32f907f77a5d32f94e01a9b81a4a250b59c71e95c5ba9eae92d2fe60b1d2274eb50a837c3173bf38a74e0fc6789016c3a5f271a9b861014ca25b90d5b46cb4424d4727f4a40f2bc1d7b53d51793a5b7d88bac38a82e4e5c9c7cd0215616a247bb2b6e41f6b1f013e13ccfc8d302d06cdffd244cf056e4e8d7abd7a63b164fe55adeb3c933cfc1ad12c81c79e91bb584de707e063ed700df4bdb4234522e783fdc929cdcf69088e52f48d9a8eabfc01c5852ec4b005480531d567c0f8dc7b2829631c0ac934c1d0ca361e7257cce81ec29d1f3bc5d3be72149559503dacd4180b0edef294b3e4037b58ce38cec016ce02abd269346eafc14c04b2a44e19803e136211530f68abeae7d74a7d1d9bcd1294e3cce03153ed72b5a94b2447fd01a3e353cf3c16dbba777a4da6422d4ae24b72b664676ddca06b5a96f50fb64e123bfb6217f2d18a3ded3f76eea9272a277e78f817a9fd29de6a8b42894b69733b783f7ef4c319486bf46359de7c2bdd95", 0x1000}], 0x1}, 0x10) 04:33:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xddeb010000000000) [ 1104.297491][T15956] Bluetooth: hci6: sending frame failed (-49) 04:33:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x6, 0x1fffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000204010200010000000000000000000000000016fa716d"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="b731076f0000000005000000020001000000000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) socket(0x200000000000011, 0x0, 0x0) clone(0x10080, &(0x7f00000000c0)="05c504fd6dd074e7eeb8078e47dcbbf4394587d1844de10664960156a62c532463d5792cca5f1de8019205df42683b733e4bc7db8b0ffba0593db5d9cd7e527746ddb94eeaf3cf4d44164728ee98a0e245b10665", &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="196083eb907037da8129ebbca23fac65f7fa0929589f73f0d2c18f843862aa9c47117cb40fa2a7c877199aed4bd2648e74ae932f23731955e11aea358cdaa548398ae785e85f3cc4a3502c608d425d1e9941430fcc80f70db1780fcae4dc3fd2c2d28740ae0032d5b50c0c398a6d48fb53fe586aaf0828614ff0e81cd1e1fb21772bd0ff189a1b4deac74be914e1e43462b1") sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc1eb010000000000) 04:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1104.449823][T17565] QAT: failed to copy from user cfg_data. 04:33:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="b731076f0000000005000000020001000000000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) socket(0x200000000000011, 0x0, 0x0) clone(0x10080, &(0x7f00000000c0)="05c504fd6dd074e7eeb8078e47dcbbf4394587d1844de10664960156a62c532463d5792cca5f1de8019205df42683b733e4bc7db8b0ffba0593db5d9cd7e527746ddb94eeaf3cf4d44164728ee98a0e245b10665", &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180)="196083eb907037da8129ebbca23fac65f7fa0929589f73f0d2c18f843862aa9c47117cb40fa2a7c877199aed4bd2648e74ae932f23731955e11aea358cdaa548398ae785e85f3cc4a3502c608d425d1e9941430fcc80f70db1780fcae4dc3fd2c2d28740ae0032d5b50c0c398a6d48fb53fe586aaf0828614ff0e81cd1e1fb21772bd0ff189a1b4deac74be914e1e43462b1") sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1104.615570][T17578] QAT: failed to copy from user cfg_data. [ 1104.628287][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:33:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1104.830294][T17592] QAT: failed to copy from user cfg_data. 04:33:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1104.999694][T17601] QAT: failed to copy from user cfg_data. [ 1105.055702][T17600] QAT: failed to copy from user cfg_data. [ 1105.293982][T17605] QAT: failed to copy from user cfg_data. [ 1106.331153][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1106.337790][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1106.641084][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1106.647236][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1108.401026][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1108.407954][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1108.720867][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1108.728541][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1110.481144][ T5] Bluetooth: hci6: command 0x1009 tx timeout [ 1110.800955][ T7] Bluetooth: hci7: command 0x1009 tx timeout 04:33:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xdeeb010000000000) 04:33:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x1f, 0x81, 0x0, 0x0, 0xd4e7, 0x400, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfb, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x2210, 0x730, 0xfff, 0x5, 0x76, 0x3, 0x3ff, 0x0, 0x21554a65, 0x0, 0x4}, r0, 0x3, r3, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1114.606786][T17626] warn_alloc: 1 callbacks suppressed [ 1114.606804][T17626] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1114.659996][T17626] CPU: 0 PID: 17626 Comm: syz-executor.3 Not tainted 5.16.0-rc4-syzkaller #0 [ 1114.670178][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.680408][T17626] Call Trace: [ 1114.683883][T17626] [ 1114.686824][T17626] dump_stack_lvl+0xcd/0x134 [ 1114.691476][T17626] warn_alloc.cold+0x87/0x17a [ 1114.696317][T17626] ? zone_watermark_ok_safe+0x290/0x290 [ 1114.701859][T17626] ? __kmalloc_node+0x62/0x390 [ 1114.706649][T17626] ? __vmalloc_node_range+0x574/0xab0 [ 1114.712107][T17626] __vmalloc_node_range+0x883/0xab0 [ 1114.717313][T17626] ? vfree_atomic+0xe0/0xe0 [ 1114.721816][T17626] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1114.727637][T17626] ? __ldsem_down_read_nested+0x850/0x850 [ 1114.733448][T17626] ? __wake_up_common+0x650/0x650 [ 1114.738473][T17626] ? n_tty_open+0x16/0x170 [ 1114.742981][T17626] vzalloc+0x67/0x80 [ 1114.746966][T17626] ? n_tty_open+0x16/0x170 [ 1114.751380][T17626] n_tty_open+0x16/0x170 [ 1114.755621][T17626] ? n_tty_set_termios+0x1010/0x1010 [ 1114.760899][T17626] tty_ldisc_open+0x9b/0x110 [ 1114.765492][T17626] tty_ldisc_setup+0x43/0x100 [ 1114.770167][T17626] tty_init_dev.part.0+0x1f4/0x610 [ 1114.775277][T17626] tty_open+0xb16/0x1000 [ 1114.779517][T17626] ? tty_init_dev+0x80/0x80 [ 1114.784018][T17626] ? rwlock_bug.part.0+0x90/0x90 [ 1114.788963][T17626] ? tty_init_dev+0x80/0x80 [ 1114.793462][T17626] chrdev_open+0x266/0x770 [ 1114.797910][T17626] ? cdev_device_add+0x210/0x210 [ 1114.802947][T17626] ? fsnotify_perm.part.0+0x22d/0x620 [ 1114.808322][T17626] do_dentry_open+0x4c8/0x1250 [ 1114.813085][T17626] ? cdev_device_add+0x210/0x210 [ 1114.818020][T17626] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1114.824259][T17626] ? may_open+0x1f6/0x420 [ 1114.828587][T17626] path_openat+0x1cad/0x2750 [ 1114.833180][T17626] ? path_lookupat+0x860/0x860 [ 1114.837938][T17626] ? mark_lock+0xef/0x17b0 [ 1114.842367][T17626] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1114.848440][T17626] do_filp_open+0x1aa/0x400 [ 1114.853291][T17626] ? may_open_dev+0xf0/0xf0 [ 1114.857816][T17626] ? rwlock_bug.part.0+0x90/0x90 [ 1114.862750][T17626] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1114.869424][T17626] ? _find_next_bit+0x1e3/0x260 [ 1114.874359][T17626] ? _raw_spin_unlock+0x24/0x40 [ 1114.879204][T17626] ? alloc_fd+0x2f0/0x670 [ 1114.883563][T17626] do_sys_openat2+0x16d/0x4d0 [ 1114.888258][T17626] ? build_open_flags+0x6f0/0x6f0 [ 1114.893283][T17626] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1114.899612][T17626] __x64_sys_openat+0x13f/0x1f0 [ 1114.904462][T17626] ? __ia32_sys_open+0x1c0/0x1c0 [ 1114.909574][T17626] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1114.915469][T17626] do_syscall_64+0x35/0xb0 [ 1114.919883][T17626] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1114.925769][T17626] RIP: 0033:0x7f46b220eaf9 [ 1114.930183][T17626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1114.949805][T17626] RSP: 002b:00007f46b1184188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1114.958235][T17626] RAX: ffffffffffffffda RBX: 00007f46b2321f60 RCX: 00007f46b220eaf9 [ 1114.966198][T17626] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1114.974336][T17626] RBP: 00007f46b2268ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1114.982301][T17626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.990453][T17626] R13: 00007fff03f2444f R14: 00007f46b1184300 R15: 0000000000022000 [ 1114.998515][T17626] [ 1115.071856][T17626] Mem-Info: [ 1115.080595][T17626] active_anon:540 inactive_anon:167056 isolated_anon:0 [ 1115.080595][T17626] active_file:5521 inactive_file:65917 isolated_file:0 [ 1115.080595][T17626] unevictable:768 dirty:48 writeback:0 [ 1115.080595][T17626] slab_reclaimable:21332 slab_unreclaimable:97452 [ 1115.080595][T17626] mapped:23132 shmem:9455 pagetables:1614 bounce:0 [ 1115.080595][T17626] kernel_misc_reclaimable:0 [ 1115.080595][T17626] free:1256085 free_pcp:7073 free_cma:0 [ 1115.129353][T17626] Node 0 active_anon:2160kB inactive_anon:673460kB active_file:21968kB inactive_file:263668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92528kB dirty:188kB writeback:0kB shmem:35368kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 407552kB writeback_tmp:0kB kernel_stack:10576kB pagetables:6452kB all_unreclaimable? no [ 1115.162381][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.162439][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.223336][T17626] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1115.254249][T17626] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.284738][T17626] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1115.290700][T17626] Node 0 DMA32 free:1054216kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2160kB inactive_anon:673372kB active_file:21968kB inactive_file:263688kB unevictable:1536kB writepending:220kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:26640kB local_pcp:16788kB free_cma:0kB [ 1115.325377][T17626] lowmem_reserve[]: 0 0 0 0 0 [ 1115.330333][T17626] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.361068][T17626] lowmem_reserve[]: 0 0 0 0 0 [ 1115.366326][T17626] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1115.407140][T17626] lowmem_reserve[]: 0 0 0 0 0 [ 1115.417452][T17626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1115.434964][T17626] Node 0 DMA32: 3746*4kB (UM) 1546*8kB (UM) 577*16kB (UME) 263*32kB (UME) 65*64kB (UME) 22*128kB (ME) 5*256kB (M) 5*512kB (UM) 1*1024kB (E) 1*2048kB (M) 243*4096kB (UM) = 1054216kB [ 1115.454863][T17626] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1115.468559][T17626] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1115.489244][T17626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.500483][T17626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1115.510697][T17626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1115.524051][T17626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1115.535175][T17626] 25083 total pagecache pages [ 1115.541984][T17626] 0 pages in swap cache [ 1115.546292][T17626] Swap cache stats: add 0, delete 0, find 0/0 [ 1115.553749][T17626] Free swap = 0kB [ 1115.557617][T17626] Total swap = 0kB [ 1115.562512][T17626] 2097051 pages RAM [ 1115.566480][T17626] 0 pages HighMem/MovableOnly [ 1115.572354][T17626] 384515 pages reserved 04:33:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020000000000000502000004010004010004b21e0102000100"], 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)={0x2, 'veth0_to_team\x00', {0x8}, 0x2}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) r1 = socket(0x200000000000011, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc2eb010000000000) 04:33:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:33:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1115.576659][T17626] 0 pages cma reserved [ 1115.582099][T17626] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1115.591071][T17629] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1115.608836][T17631] ptm ptm2: ldisc open failed (-12), clearing slot 2 04:33:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xdfeb010000000000) 04:33:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:33:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1115.786669][T17646] QAT: failed to copy from user cfg_data. 04:33:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1115.915508][T17658] QAT: failed to copy from user cfg_data. 04:33:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1116.098733][T17669] QAT: failed to copy from user cfg_data. [ 1116.112568][T17670] QAT: failed to copy from user cfg_data. 04:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1116.240320][T17675] QAT: failed to copy from user cfg_data. 04:33:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x2c, 0x0, 0x72, 0x0, 0x0, 0x0, 0x66}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1116.283470][T17676] QAT: failed to copy from user cfg_data. 04:33:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "330bf93d33dde9a5", "46fc832d61a206613ebe97fec85dd3d3", "97f20e1a", "81b6acec56c873cd"}, 0x28) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1117.761266][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1117.768152][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1117.840939][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1117.851973][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1119.841148][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 1119.847947][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1119.920945][ T7] Bluetooth: hci7: command 0x1001 tx timeout [ 1119.927253][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1121.920928][ T7] Bluetooth: hci6: command 0x1009 tx timeout [ 1122.010933][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:33:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc3eb010000000000) 04:33:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:33:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe0eb010000000000) 04:33:31 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=@dstopts={0x0, 0x1e, '\x00', [@ra, @generic={0x0, 0xe4, "eac4e15bd1b7ea286ee5e049c701a0e488bb59e289dd54bee5994ce60eae7fdb87875fcd131c11643027996d3e61fa3033b626a02f240b274049030df9e211d9ff4b201429b936e77dd7dfcd7dc2ba27422892b09f2428c38729446f48b85d7b58a517918874e0e0449ab1ddf4aa60e35921fde5dbf1a2545efcb855e5263c35ded0e2d5267950d24962277e9b4ee22e135191f9d8ab770fec7179d2e035ca00b66a9e57e347d278c10406bda75bfcddeee92f6b71b978111d2b43a45b7887048a757bb32a01e609ac40822f88bebaa5f4dd28a07154184d5ea817af8b72075e5f574a4e"}, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x3}]}, 0x100) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f00}, 0x1c) 04:33:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:31 executing program 0: ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000000)={{}, 0x40}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000005020000040100001100040102000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x0, 0x0, 0x2e, 0x0, "5befc672d42e70b37ae19ec7c44a8132338b737d8406ba441a1a654067ac29458c5ac0069983e9dda86d0076d2d569f7d013d074b3fb3bc8a6f6cfb4f5c757319bee7eef6563f746c22c3cf66d40f1eb"}, 0xd8) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x90e, @private0, 0x80}}, 0x0, 0x0, 0x44, 0x0, "8523e2827360fecc33d207cb2f813620494b7ff90c8609269414ce14b6ed0453dd7349ad5983efc1945cdb397d2c6143c26b1d8afacab13a0f4f92aa095ce1904a596c6a1d8effdd4289bdda6d1eb1a5"}, 0xd8) [ 1126.194702][T17716] QAT: failed to copy from user cfg_data. [ 1126.230073][T17711] QAT: failed to copy from user cfg_data. 04:33:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1126.241208][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1126.259084][T17716] warn_alloc: 2 callbacks suppressed [ 1126.259102][T17716] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1126.296580][T17716] CPU: 1 PID: 17716 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1126.305354][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1126.315402][T17716] Call Trace: [ 1126.318664][T17716] [ 1126.321582][T17716] dump_stack_lvl+0xcd/0x134 [ 1126.326168][T17716] warn_alloc.cold+0x87/0x17a [ 1126.330836][T17716] ? zone_watermark_ok_safe+0x290/0x290 [ 1126.336387][T17716] ? __kmalloc_node+0x62/0x390 [ 1126.341268][T17716] ? __vmalloc_node_range+0x574/0xab0 [ 1126.346647][T17716] __vmalloc_node_range+0x883/0xab0 [ 1126.351848][T17716] ? vfree_atomic+0xe0/0xe0 [ 1126.356340][T17716] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1126.362142][T17716] ? __ldsem_down_read_nested+0x850/0x850 [ 1126.367861][T17716] ? __wake_up_common+0x650/0x650 [ 1126.372875][T17716] ? n_tty_open+0x16/0x170 [ 1126.377283][T17716] vzalloc+0x67/0x80 [ 1126.381283][T17716] ? n_tty_open+0x16/0x170 [ 1126.385697][T17716] n_tty_open+0x16/0x170 [ 1126.389940][T17716] ? n_tty_set_termios+0x1010/0x1010 [ 1126.395241][T17716] tty_ldisc_open+0x9b/0x110 [ 1126.399845][T17716] tty_ldisc_setup+0x43/0x100 [ 1126.404540][T17716] tty_init_dev.part.0+0x1f4/0x610 [ 1126.409681][T17716] tty_open+0xb16/0x1000 [ 1126.413926][T17716] ? tty_init_dev+0x80/0x80 [ 1126.418425][T17716] ? rwlock_bug.part.0+0x90/0x90 [ 1126.423366][T17716] ? tty_init_dev+0x80/0x80 [ 1126.427860][T17716] chrdev_open+0x266/0x770 [ 1126.432273][T17716] ? cdev_device_add+0x210/0x210 [ 1126.437208][T17716] ? fsnotify_perm.part.0+0x22d/0x620 [ 1126.443098][T17716] do_dentry_open+0x4c8/0x1250 [ 1126.447854][T17716] ? cdev_device_add+0x210/0x210 [ 1126.452779][T17716] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1126.459012][T17716] ? may_open+0x1f6/0x420 [ 1126.463344][T17716] path_openat+0x1cad/0x2750 [ 1126.467927][T17716] ? lock_chain_get_class+0x90/0xc0 [ 1126.473130][T17716] ? path_lookupat+0x860/0x860 [ 1126.477880][T17716] ? lockdep_hardirqs_on+0x79/0x100 [ 1126.483083][T17716] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1126.489243][T17716] do_filp_open+0x1aa/0x400 [ 1126.493755][T17716] ? may_open_dev+0xf0/0xf0 [ 1126.498279][T17716] ? alloc_fd+0x33d/0x670 [ 1126.502624][T17716] ? _raw_spin_unlock+0x24/0x40 [ 1126.507468][T17716] ? alloc_fd+0x2f0/0x670 [ 1126.511799][T17716] do_sys_openat2+0x16d/0x4d0 [ 1126.516483][T17716] ? build_open_flags+0x6f0/0x6f0 [ 1126.521508][T17716] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1126.527661][T17716] __x64_sys_openat+0x13f/0x1f0 [ 1126.532511][T17716] ? __ia32_sys_open+0x1c0/0x1c0 [ 1126.537449][T17716] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1126.543340][T17716] do_syscall_64+0x35/0xb0 [ 1126.547750][T17716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1126.553637][T17716] RIP: 0033:0x7f7f33f79af9 [ 1126.558062][T17716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.577750][T17716] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1126.586155][T17716] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1126.594114][T17716] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1126.602074][T17716] RBP: 00007f7f33fd3ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1126.610047][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.618018][T17716] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1126.625994][T17716] [ 1126.645987][T17716] Mem-Info: [ 1126.661694][T17716] active_anon:540 inactive_anon:173332 isolated_anon:0 [ 1126.661694][T17716] active_file:5527 inactive_file:65927 isolated_file:0 [ 1126.661694][T17716] unevictable:768 dirty:66 writeback:0 [ 1126.661694][T17716] slab_reclaimable:21332 slab_unreclaimable:96633 [ 1126.661694][T17716] mapped:23119 shmem:9453 pagetables:1789 bounce:0 [ 1126.661694][T17716] kernel_misc_reclaimable:0 04:33:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="040100020000000000010000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00000003c0)="43577aee4e8b45acda3f", 0xa, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="d8fb7665840bd7e7469929b9987a21e1d692e59ca697b6f1c68031a1b654c0f0fb1ee89a2d6e3c0000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xe, 0x6, 0x9, 0x8, 0x0, 0x4, 0x18000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3d, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1609d, 0x3, 0x2, 0x6, 0xfff, 0xff, 0x434e, 0x0, 0xc, 0x0, 0x3}, r3, 0xb, r0, 0x2) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/21, 0x15}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="1c00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000240000000000000001000000a601000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150}, 0x20e1) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1126.661694][T17716] free:1247293 free_pcp:10082 free_cma:0 [ 1126.692932][T17733] QAT: failed to copy from user cfg_data. [ 1126.835013][T17716] Node 0 active_anon:2160kB inactive_anon:715212kB active_file:21992kB inactive_file:263708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92576kB dirty:260kB writeback:0kB shmem:35360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 448512kB writeback_tmp:0kB kernel_stack:11044kB pagetables:7252kB all_unreclaimable? no [ 1126.870244][T17716] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1126.900373][T17716] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.929910][T17716] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1126.944243][T17716] Node 0 DMA32 free:1006508kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2160kB inactive_anon:715412kB active_file:21992kB inactive_file:263708kB unevictable:1536kB writepending:260kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:34400kB local_pcp:18148kB free_cma:0kB [ 1127.042915][T17716] lowmem_reserve[]: 0 0 0 0 0 [ 1127.061145][T17716] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1127.133867][T17716] lowmem_reserve[]: 0 0 0 0 0 [ 1127.149321][T17716] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1127.199885][T17716] lowmem_reserve[]: 0 0 0 0 0 [ 1127.224434][T17716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1127.267316][T17716] Node 0 DMA32: 3320*4kB (UME) 1558*8kB (UM) 588*16kB (UME) 151*32kB (UME) 66*64kB (UME) 22*128kB (ME) 5*256kB (M) 5*512kB (UM) 1*1024kB (E) 0*2048kB 233*4096kB (UM) = 1006256kB [ 1127.330566][T17716] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 04:33:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a43010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) accept$packet(r1, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000017c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000001880)={&(0x7f0000001740), 0xc, &(0x7f0000001840)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800e7ff310000022bbd7000fedbdf25000000000c00020001000000010000002c0001000c0003000800030007000000100007000b000100706f6c69636500000c001f0008000300ba0e00000c0002000000000000000000200001001000200009000100766c616e000000000c0001000800030008000000"], 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1127.378379][T17716] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1127.467192][T17716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1127.504733][T17716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1127.538386][T17716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1127.569662][T17716] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1127.606503][T17716] 25098 total pagecache pages 04:33:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002000000050200b77c0000040100040102000100aa291918dfe73acebb730374ace58097079170dca4300423a166fc0e8a627c58d70b33ac18bd9c478b46706bae410d44aeb8eb65ba30e0bc3b9bc1680df0fe6eea4a33f50ed2e888cc3dba2891cdcddbb55d99299191e65c98ba18e17b14049286fb"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@generic={0x23, "32acc696d2b5aa33a35b4702d3b09ad87b8c5dc89fd358a786c7ffeee9a46dc605e92d1d47ab181b852aa5aa88d83d912fff772841b2fe9a6fe968165d53e893edfdfe9eaab5d77119f2e9387c915a75bcf7498b9182bb564fff89baa73c4acdcc78f8d3420b2d18a387dc49adc30c79fee1f1917dbb0d1fd1c17c475971"}, {&(0x7f0000000000)=""/92, 0x5c}, &(0x7f00000000c0), 0x2}, 0xa0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1127.674423][T17716] 0 pages in swap cache [ 1127.693258][T17716] Swap cache stats: add 0, delete 0, find 0/0 [ 1127.733479][T17716] Free swap = 0kB [ 1127.747239][T17716] Total swap = 0kB [ 1127.755734][T17716] 2097051 pages RAM [ 1127.760184][T17716] 0 pages HighMem/MovableOnly [ 1127.777415][T17716] 384515 pages reserved [ 1127.786643][T17716] 0 pages cma reserved [ 1127.799212][T17716] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1127.810085][T17734] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1128.240846][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1128.247931][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1128.320800][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1128.326962][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1130.330856][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1130.337465][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1130.400807][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1130.407645][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1132.410976][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1132.480906][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:33:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc4eb010000000000) 04:33:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) 04:33:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe1eb010000000000) 04:33:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="00020004000001000000000000000004010004013d0600004d1a8e61d95b4f9080"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xc1, 0x8, 0x8, 0x1f, 0x0, 0x1ff, 0x4, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x800}, 0x41108, 0x80, 0x9, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) [ 1136.418443][T17774] QAT: failed to copy from user cfg_data. [ 1136.435159][T11045] Bluetooth: hci6: sending frame failed (-49) 04:33:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1136.516106][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:33:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) 04:33:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0xfa, 0xc2, 0xff, 0x0, 0x1, 0x800, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000a, 0x3f, 0x2, 0x6, 0x40200, 0x101, 0x2, 0x0, 0xef3, 0x0, 0x1}, 0x0, 0x5, r1, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="00020000ecff00000502000005000004010900432c169452ce2856a80102000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x40) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1136.753838][T17796] QAT: failed to copy from user cfg_data. [ 1136.913638][T17804] QAT: failed to copy from user cfg_data. [ 1138.485276][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1138.491981][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1138.571340][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1138.579039][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1140.571240][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1140.577906][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1140.641128][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1140.647299][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1142.640906][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1142.731332][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:33:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc5eb010000000000) 04:33:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1146.616953][T17828] QAT: failed to copy from user cfg_data. [ 1146.649704][T17829] QAT: failed to copy from user cfg_data. [ 1146.654650][ T6536] Bluetooth: hci6: sending frame failed (-49) 04:33:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe2eb010000000000) 04:33:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, 0xffffffffffffffcc) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="f9010000050200dc36111af92cfdd02d98b6beb72b8ff9000401006bbafcd1010200010058af77"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:33:52 executing program 5: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0x1, 0x81, 0x2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:33:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @local}, 0x1c) [ 1147.280570][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1147.290268][T17853] QAT: failed to copy from user cfg_data. 04:33:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1147.323100][T17855] QAT: failed to copy from user cfg_data. 04:33:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:33:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1147.509327][T17870] QAT: failed to copy from user cfg_data. [ 1147.555737][T17874] QAT: failed to copy from user cfg_data. [ 1147.597172][T17875] QAT: failed to copy from user cfg_data. [ 1148.731158][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1148.737837][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1149.360923][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1149.367734][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1150.800955][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1150.807672][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1151.440886][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1151.447369][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1152.890972][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1153.531223][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:34:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc6eb010000000000) 04:34:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1156.847223][T17892] QAT: failed to copy from user cfg_data. [ 1156.882950][ T6536] Bluetooth: hci6: sending frame failed (-49) 04:34:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe3eb010000000000) 04:34:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:34:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1157.477643][T17913] QAT: failed to copy from user cfg_data. [ 1157.500534][T17914] QAT: failed to copy from user cfg_data. [ 1157.537706][T17916] QAT: failed to copy from user cfg_data. [ 1157.586849][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:34:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1157.781923][T17924] QAT: failed to copy from user cfg_data. [ 1157.958891][T17930] QAT: failed to copy from user cfg_data. [ 1157.979205][T17932] warn_alloc: 1 callbacks suppressed [ 1157.979219][T17932] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1158.016845][T17932] CPU: 1 PID: 17932 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1158.025645][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.035704][T17932] Call Trace: [ 1158.038989][T17932] [ 1158.041926][T17932] dump_stack_lvl+0xcd/0x134 [ 1158.046533][T17932] warn_alloc.cold+0x87/0x17a [ 1158.051222][T17932] ? zone_watermark_ok_safe+0x290/0x290 [ 1158.056778][T17932] ? __kmalloc_node+0x62/0x390 [ 1158.061567][T17932] ? __vmalloc_node_range+0x574/0xab0 [ 1158.066951][T17932] __vmalloc_node_range+0x883/0xab0 [ 1158.072164][T17932] ? vfree_atomic+0xe0/0xe0 [ 1158.076674][T17932] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1158.082498][T17932] ? __ldsem_down_read_nested+0x850/0x850 [ 1158.088248][T17932] ? __wake_up_common+0x650/0x650 [ 1158.093285][T17932] ? n_tty_open+0x16/0x170 [ 1158.097718][T17932] vzalloc+0x67/0x80 [ 1158.101630][T17932] ? n_tty_open+0x16/0x170 [ 1158.106140][T17932] n_tty_open+0x16/0x170 [ 1158.110389][T17932] ? n_tty_set_termios+0x1010/0x1010 [ 1158.115685][T17932] tty_ldisc_open+0x9b/0x110 [ 1158.120286][T17932] tty_ldisc_setup+0x43/0x100 [ 1158.124975][T17932] tty_init_dev.part.0+0x1f4/0x610 [ 1158.130273][T17932] tty_open+0xb16/0x1000 [ 1158.134641][T17932] ? tty_init_dev+0x80/0x80 [ 1158.139151][T17932] ? rwlock_bug.part.0+0x90/0x90 [ 1158.144303][T17932] ? tty_init_dev+0x80/0x80 [ 1158.148831][T17932] chrdev_open+0x266/0x770 [ 1158.153259][T17932] ? cdev_device_add+0x210/0x210 [ 1158.158293][T17932] ? fsnotify_perm.part.0+0x22d/0x620 [ 1158.163684][T17932] do_dentry_open+0x4c8/0x1250 [ 1158.168460][T17932] ? cdev_device_add+0x210/0x210 [ 1158.173404][T17932] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1158.179651][T17932] ? may_open+0x1f6/0x420 [ 1158.183990][T17932] path_openat+0x1cad/0x2750 [ 1158.188603][T17932] ? path_lookupat+0x860/0x860 [ 1158.193375][T17932] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1158.199376][T17932] do_filp_open+0x1aa/0x400 [ 1158.204061][T17932] ? may_open_dev+0xf0/0xf0 [ 1158.208577][T17932] ? rwlock_bug.part.0+0x90/0x90 [ 1158.213520][T17932] ? do_sys_openat2+0x107/0x4d0 [ 1158.218382][T17932] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1158.224636][T17932] ? _find_next_bit+0x1e3/0x260 [ 1158.229529][T17932] ? _raw_spin_unlock+0x24/0x40 [ 1158.234665][T17932] ? alloc_fd+0x2f0/0x670 [ 1158.239008][T17932] do_sys_openat2+0x16d/0x4d0 [ 1158.243705][T17932] ? build_open_flags+0x6f0/0x6f0 [ 1158.248741][T17932] ? __context_tracking_exit+0xb8/0xe0 [ 1158.254206][T17932] ? lock_downgrade+0x6e0/0x6e0 [ 1158.259098][T17932] __x64_sys_openat+0x13f/0x1f0 [ 1158.263986][T17932] ? __ia32_sys_open+0x1c0/0x1c0 [ 1158.268943][T17932] ? syscall_enter_from_user_mode+0x21/0x70 [ 1158.274850][T17932] do_syscall_64+0x35/0xb0 [ 1158.279365][T17932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1158.285262][T17932] RIP: 0033:0x7f7f33f79af9 [ 1158.289677][T17932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1158.309292][T17932] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1158.317713][T17932] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1158.325773][T17932] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1158.333745][T17932] RBP: 00007f7f33fd3ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1158.341894][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.349984][T17932] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1158.358069][T17932] [ 1158.394829][T17932] Mem-Info: [ 1158.398245][T17932] active_anon:540 inactive_anon:183488 isolated_anon:0 [ 1158.398245][T17932] active_file:5534 inactive_file:65939 isolated_file:0 [ 1158.398245][T17932] unevictable:768 dirty:55 writeback:0 [ 1158.398245][T17932] slab_reclaimable:21354 slab_unreclaimable:96275 [ 1158.398245][T17932] mapped:23167 shmem:9454 pagetables:1994 bounce:0 [ 1158.398245][T17932] kernel_misc_reclaimable:0 [ 1158.398245][T17932] free:1237511 free_pcp:9677 free_cma:0 [ 1158.446141][T17932] Node 0 active_anon:2160kB inactive_anon:733036kB active_file:22020kB inactive_file:263756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92668kB dirty:216kB writeback:0kB shmem:35364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 464896kB writeback_tmp:0kB kernel_stack:11244kB pagetables:7972kB all_unreclaimable? no [ 1158.500590][T17932] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1158.531871][T17932] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.560443][T17932] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1158.568072][T17932] Node 0 DMA32 free:984016kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2160kB inactive_anon:732336kB active_file:22020kB inactive_file:263756kB unevictable:1536kB writepending:216kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:41080kB local_pcp:19368kB free_cma:0kB [ 1158.599688][T17932] lowmem_reserve[]: 0 0 0 0 0 [ 1158.604718][T17932] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.632149][T17932] lowmem_reserve[]: 0 0 0 0 0 [ 1158.637590][T17932] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1158.669630][T17932] lowmem_reserve[]: 0 0 0 0 0 [ 1158.674562][T17932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1158.691004][T17932] Node 0 DMA32: 2808*4kB (UME) 1578*8kB (UME) 610*16kB (UME) 174*32kB (UME) 45*64kB (UME) 23*128kB (UME) 6*256kB (UM) 5*512kB (UM) 1*1024kB (E) 2*2048kB (UM) 227*4096kB (M) = 984016kB [ 1158.709690][T17932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1158.721542][T17932] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1158.739470][T17932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1158.752166][T17932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1158.761727][T17932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1158.771601][T17932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1158.781623][T17932] 25112 total pagecache pages [ 1158.786354][T17932] 0 pages in swap cache [ 1158.790497][T17932] Swap cache stats: add 0, delete 0, find 0/0 [ 1158.797095][T17932] Free swap = 0kB [ 1158.801790][T17932] Total swap = 0kB [ 1158.805533][T17932] 2097051 pages RAM [ 1158.809324][T17932] 0 pages HighMem/MovableOnly [ 1158.814257][T17932] 384515 pages reserved [ 1158.818412][T17932] 0 pages cma reserved [ 1158.822596][T17932] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1158.830398][T17929] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1158.841259][T17930] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1158.970822][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1158.976924][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1159.600866][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1159.607713][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1161.050824][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1161.057521][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1161.680864][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1161.687390][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1163.130977][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1163.761154][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:34:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc7eb010000000000) 04:34:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002000000000000f50100000401000b0100040102000100"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:34:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1167.083023][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1167.111410][T17957] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 04:34:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe4eb010000000000) 04:34:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:34:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1167.653311][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1167.687535][T17976] QAT: failed to copy from user cfg_data. 04:34:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1167.808573][T17977] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 04:34:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00'}, 0x1c) [ 1167.914480][T17986] QAT: failed to copy from user cfg_data. 04:34:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1167.991257][T17991] QAT: failed to copy from user cfg_data. [ 1169.131089][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1169.137836][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1169.680862][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1169.687461][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1171.200859][ T7860] Bluetooth: hci6: command 0x1001 tx timeout [ 1171.208455][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1171.760854][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1171.767229][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1173.280852][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1173.840858][T16347] Bluetooth: hci7: command 0x1009 tx timeout [ 1176.561654][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.568561][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:34:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc8eb010000000000) 04:34:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1177.329175][T18015] QAT: failed to copy from user cfg_data. [ 1177.348123][T18011] QAT: failed to copy from user cfg_data. 04:34:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe4ffffff00000000) 04:34:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x0, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@mpls_getnetconf={0x1c, 0x52, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4ce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000010) 04:34:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1177.964184][T18028] QAT: failed to copy from user cfg_data. [ 1178.013456][T18031] QAT: failed to copy from user cfg_data. [ 1178.035579][T18029] QAT: failed to copy from user cfg_data. 04:34:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe5eb010000000000) 04:34:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1178.257119][T18044] QAT: failed to copy from user cfg_data. [ 1178.429593][T18049] QAT: failed to copy from user cfg_data. [ 1179.360831][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 1179.368034][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1180.400839][ T5] Bluetooth: hci7: command 0x1003 tx timeout [ 1180.408906][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1181.450863][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1181.458251][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1182.490819][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1182.497855][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1183.520945][ T7854] Bluetooth: hci6: command 0x1009 tx timeout [ 1184.570834][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:34:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xc9eb010000000000) 04:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x21, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1187.574264][T18072] QAT: failed to copy from user cfg_data. [ 1187.613437][ T6536] Bluetooth: hci6: sending frame failed (-49) 04:34:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1187.637493][T18075] QAT: failed to copy from user cfg_data. 04:34:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1187.850630][T18087] QAT: failed to copy from user cfg_data. [ 1187.874809][T18088] QAT: failed to copy from user cfg_data. 04:34:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1188.098846][T18097] QAT: failed to copy from user cfg_data. 04:34:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe6eb010000000000) 04:34:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1188.817605][T18114] QAT: failed to copy from user cfg_data. [ 1188.831387][T18113] QAT: failed to copy from user cfg_data. [ 1188.890874][T18115] QAT: failed to copy from user cfg_data. [ 1189.680797][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1189.687452][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1190.890782][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1190.897857][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1191.760942][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1191.767282][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1192.971046][ T7854] Bluetooth: hci7: command 0x1001 tx timeout [ 1192.978027][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1193.840819][ T7854] Bluetooth: hci6: command 0x1009 tx timeout [ 1195.040888][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:34:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcaeb010000000000) 04:34:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000440), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002000000000000600d0c06000000000100040102000100"], 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="1101fed8031e12a0cd58ff57eeabb6922068f2819af848a91839daee473b1cb95c69eb6a5dfe70d05df9ec3917c90e0ab518643fac79a84939844018b1fd213c20c8d6768c7631e13305453a22b3e06ac5bd93b4a90a6a40545edf892ab5c45de744a45785d711615582c3b5271eb8db86224699626ae0c1559e2e203db95803eb5cc0f528c23b0f922744d49925466181c889ed079ba399b1e5588b4ddbb557d2e4c1153fc479f8485bc17df823b6bf07eb81ba73b057edf5847cfdcbe57895632cd6d425baedda68cec9d6de39ae8bdbde7bb01c1caa3105210ebf01b22c411a77535b236aeabd3f277e255d57", 0xee}, {&(0x7f0000000040)="550ad070485ac5e9ab6e6c96f269c6e8a8eeb28b998a31d72a6db71b6d9656b811e4801cd2", 0x25}, {&(0x7f00000001c0)="aa4b0904b8b14ab6733a9af77ede32037db1ef06f7703a", 0x17}, {&(0x7f0000000200)="ddabce2aefbdab3d15b8389e9b424479b1c8cfe0ecf89d0a7bc314ad9fe2ce42b5bad64eb1a90f3c56551cdfde3bf255268758bcf939fcfdb1b7c0e350a25caf6f55f0efecb82446ccece749c2d1b1f607577f2fa15a1fc7b542008ceabd89bbe9a10bc94553", 0x66}, {&(0x7f0000000280)="c0909efbaabc2e4be6de4740ea9638ba3185ff33a620f0896882116c8c6a0343fd19b7f6575ef01457460526aa51724ebd7173a5b1d49ce93ef6ee287f36ca9ced81789bee55234b0626efeb378268e5f4394b4214bc3f4e4fd0b75fa69683ca0b249980dd261ad53319514383af55d5a90ae28714", 0x75}, {&(0x7f0000000300)="dc8f6aaa977f97457c9c043fbd8d44e932aba4e629f322ec727f080fa757b321", 0x20}, {&(0x7f0000000340)="c9b70d5047b5056f6ff716a34d5e156845dda406d4c74cebd30e", 0x1a}], 0x7}}], 0x1, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:34:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1197.826239][T18136] QAT: failed to copy from user cfg_data. 04:34:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1197.866572][T18142] QAT: failed to copy from user cfg_data. [ 1197.884072][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1197.903164][T18141] QAT: failed to copy from user cfg_data. 04:34:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1198.037968][T18149] QAT: failed to copy from user cfg_data. [ 1198.094477][T18155] QAT: failed to copy from user cfg_data. [ 1198.114675][T18154] QAT: failed to copy from user cfg_data. 04:34:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe7eb010000000000) 04:34:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1199.084776][T18181] QAT: failed to copy from user cfg_data. [ 1199.107453][T18179] QAT: failed to copy from user cfg_data. [ 1199.131142][T18180] QAT: failed to copy from user cfg_data. [ 1199.920904][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1199.927683][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1201.041386][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1201.048252][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1202.001484][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1202.008251][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1203.121117][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1203.128233][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1204.081137][ T5] Bluetooth: hci6: command 0x1009 tx timeout [ 1205.203691][ T7860] Bluetooth: hci7: command 0x1009 tx timeout 04:34:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcbeb010000000000) 04:34:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5e}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wg0\x00', {0x2, 0x0, @initdev}}) 04:34:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1208.077538][T18200] QAT: failed to copy from user cfg_data. 04:34:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcaeb010000000000) 04:34:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1208.137188][T18204] QAT: failed to copy from user cfg_data. [ 1208.144328][T18201] QAT: failed to copy from user cfg_data. 04:34:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1208.244967][ T8] Bluetooth: hci8: Frame reassembly failed (-84) [ 1208.346900][T18220] QAT: failed to copy from user cfg_data. [ 1208.377980][T18224] QAT: failed to copy from user cfg_data. 04:34:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe8eb010000000000) 04:34:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:34:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:34:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xe6, @mcast2, 0x400}, 0x1c) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1209.261638][T18240] QAT: failed to copy from user cfg_data. [ 1209.355596][T18243] QAT: failed to copy from user cfg_data. [ 1210.160838][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 1210.167710][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1210.331351][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1210.338812][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1211.361055][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1211.368200][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1212.240907][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1212.249111][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1212.401091][T17084] Bluetooth: hci8: command 0x1001 tx timeout [ 1212.408964][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1213.440867][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1213.447862][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1214.331022][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1214.491165][T17084] Bluetooth: hci8: command 0x1009 tx timeout [ 1215.521051][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:35:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcceb010000000000) 04:35:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffefffffe, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="0002f6c7163541830100000000000000000000000000000000617a8c8eb4af94ff31e7be5b6bd076bf59843239ccf3602f8db692c32a092eeaaa37094a3e3cc0dd373d175f3a012434556abeab1196a5b73b004c7339d48ba75deae2d5dfc64901a6430d7eef75ff3ed23832febae0d71a2ee7fc5e014621ba000000000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x200000000000011, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="1d26d5d27e13c8c8ffbb68137cedc1e4a16b5ee18e868b0746c700ad21ba229f45b4ea425fdac96ad3786056757e2b27e01d383e6005dcddaa0738b2249e9fc12386fbb2d68caed759f13533ad9eb22194c501e71495b9da52f04c109dc63013d47cfd6bc57a841433c49d8f20c78f28bacf8461c2184a8f8ec656b16ce3b355647381c86c6efd020552e504f03d5e0e", 0x90, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @remote, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001000000000000002d97e81a0000", @ANYRES32=r6, @ANYBLOB="e8"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bddf9dffdbdf250800e56808003a00080000000500350001000000e508ab300174e9b9059dfc918800000008002c000300000005002a000100000008000600c7abd3c876416a50fda95d90", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) [ 1218.220576][T18264] QAT: failed to copy from user cfg_data. 04:35:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1218.269593][T18265] QAT: failed to copy from user cfg_data. [ 1218.393576][T18276] QAT: failed to copy from user cfg_data. 04:35:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcaeb010000000000) 04:35:03 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1218.851828][T18289] QAT: failed to copy from user cfg_data. [ 1218.893743][T18290] QAT: failed to copy from user cfg_data. [ 1218.900412][ T6536] Bluetooth: hci8: sending frame failed (-49) 04:35:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe9eb010000000000) 04:35:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:04 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="4303ec0973bd27457ba48a94a516ec59dccec9b1bf13e7b7e057ca2716a487800c23988ad0ef8d68b96a1dfcbb28356bd76374f6be94c1cd2f61e2fa300b4dd7fc880bd0d4a18ff959c6a1f39f91c8e453e4d4d40b34ab621340b78bbc6a158aaaa738eed38ca6a126c19bebab2d505c26a081a53d86660a7f04e508ccd19cef50c714ef9e0b6aa4e85bf6135fc5c72534cb4ae5d3810326db35103f731fa3242a2e22204c6cdf85af2f22a4b1286339b88588fde829573a9658cf741907406f47943983fee661fe0e5e9aeaaa9baa1575c290d83c", 0xd5, 0x4004c, &(0x7f0000000040)={0xa, 0x4e24, 0x9618, @local, 0xffff}, 0x1c) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, 0x7, 0x3, 0xb7, 0x0, 0x7f, 0x8, 0x4, 0x0, 0x8}, 0xe) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000005020000040100050100040102000100"], 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb0400, 0x110) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1219.537187][T18308] QAT: failed to copy from user cfg_data. [ 1219.568720][T18311] QAT: failed to copy from user cfg_data. [ 1219.572199][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1220.400889][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1220.407292][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1220.961020][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1220.967161][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1221.610966][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1221.618043][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1222.480915][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1222.487903][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1223.041003][T17084] Bluetooth: hci8: command 0x1001 tx timeout [ 1223.048197][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1223.690789][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1223.697608][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1224.570959][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1225.122217][T11571] Bluetooth: hci8: command 0x1009 tx timeout [ 1225.760972][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:35:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcdeb010000000000) 04:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:13 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="9263f2", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1228.513798][T18337] QAT: failed to copy from user cfg_data. 04:35:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1228.570228][T18338] QAT: failed to copy from user cfg_data. [ 1228.587389][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1228.655834][T18345] QAT: failed to copy from user cfg_data. [ 1228.736991][T18347] QAT: failed to copy from user cfg_data. 04:35:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="9263f2", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1229.087427][T18361] QAT: failed to copy from user cfg_data. 04:35:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xeaeb010000000000) 04:35:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002000800000000d739d801"], 0x18) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x26, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket(0x15, 0xa, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001000000000000002d97e81a0000", @ANYRES32=r5, @ANYBLOB="75e8"], 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x1000, 0x200, 0x1, 0x800, 0x9, 0x900104, r5}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) connect$packet(r6, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) socket(0xf, 0x80000, 0xcf) 04:35:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1229.778850][T18375] QAT: failed to copy from user cfg_data. [ 1229.791847][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1229.822155][T18377] QAT: failed to copy from user cfg_data. [ 1230.640916][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 1230.647952][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1231.841062][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1231.847651][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1232.731806][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1232.739734][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1233.920864][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1233.927609][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1234.800958][ T5] Bluetooth: hci6: command 0x1009 tx timeout [ 1236.000801][ T5] Bluetooth: hci7: command 0x1009 tx timeout [ 1238.011749][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.018056][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:35:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xceeb010000000000) 04:35:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="9263f2", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:35:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002000800000000d739d801"], 0x18) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x26, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket(0x15, 0xa, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001000000000000002d97e81a0000", @ANYRES32=r5, @ANYBLOB="75e8"], 0x1c}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, 0x1000, 0x200, 0x1, 0x800, 0x9, 0x900104, r5}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr=' \x01\x00'}, 0x1c) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) connect$packet(r6, &(0x7f0000000140)={0x11, 0xc, r2, 0x1, 0x3, 0x6, @multicast}, 0x14) socket(0xf, 0x80000, 0xcf) 04:35:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="9263f2", 0x3}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:35:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1238.758098][T18402] QAT: failed to copy from user cfg_data. 04:35:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1238.801742][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1238.922837][T18414] QAT: failed to copy from user cfg_data. [ 1238.952023][T18415] QAT: failed to copy from user cfg_data. 04:35:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xebeb010000000000) [ 1240.013333][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1240.070658][T18436] QAT: failed to copy from user cfg_data. [ 1240.143698][T18438] QAT: failed to copy from user cfg_data. [ 1240.883825][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1240.890424][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1242.081066][ T7855] Bluetooth: hci7: command 0x1003 tx timeout [ 1242.088099][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1242.960846][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1242.967889][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1244.161152][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1244.168257][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1245.040890][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1246.240977][ T5] Bluetooth: hci7: command 0x1009 tx timeout 04:35:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xcfeb010000000000) 04:35:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1249.032853][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1249.046167][T18464] QAT: failed to copy from user cfg_data. 04:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1249.077288][T18462] QAT: failed to copy from user cfg_data. [ 1249.085913][T18463] QAT: failed to copy from user cfg_data. [ 1249.096687][T18469] QAT: failed to copy from user cfg_data. 04:35:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1249.284571][T18475] QAT: failed to copy from user cfg_data. [ 1249.337627][T18480] QAT: failed to copy from user cfg_data. [ 1249.354860][T18483] QAT: failed to copy from user cfg_data. [ 1249.427662][T18485] QAT: failed to copy from user cfg_data. [ 1249.444683][T18485] warn_alloc: 4 callbacks suppressed [ 1249.444701][T18485] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1249.499285][T18485] CPU: 1 PID: 18485 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1249.508533][T18485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.518595][T18485] Call Trace: [ 1249.522053][T18485] [ 1249.524994][T18485] dump_stack_lvl+0xcd/0x134 [ 1249.529601][T18485] warn_alloc.cold+0x87/0x17a [ 1249.534299][T18485] ? zone_watermark_ok_safe+0x290/0x290 [ 1249.539954][T18485] ? __kmalloc_node+0x62/0x390 [ 1249.544752][T18485] ? __vmalloc_node_range+0x574/0xab0 [ 1249.550153][T18485] __vmalloc_node_range+0x883/0xab0 [ 1249.555639][T18485] ? vfree_atomic+0xe0/0xe0 [ 1249.560155][T18485] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1249.565975][T18485] ? __ldsem_down_read_nested+0x850/0x850 [ 1249.571695][T18485] ? __wake_up_common+0x650/0x650 [ 1249.576720][T18485] ? n_tty_open+0x16/0x170 [ 1249.581139][T18485] vzalloc+0x67/0x80 [ 1249.585063][T18485] ? n_tty_open+0x16/0x170 [ 1249.589472][T18485] n_tty_open+0x16/0x170 [ 1249.593703][T18485] ? n_tty_set_termios+0x1010/0x1010 [ 1249.598989][T18485] tty_ldisc_open+0x9b/0x110 [ 1249.603750][T18485] tty_ldisc_setup+0x43/0x100 [ 1249.608423][T18485] tty_init_dev.part.0+0x1f4/0x610 [ 1249.613528][T18485] tty_open+0xb16/0x1000 [ 1249.617958][T18485] ? tty_init_dev+0x80/0x80 [ 1249.622452][T18485] ? rwlock_bug.part.0+0x90/0x90 [ 1249.627395][T18485] ? tty_init_dev+0x80/0x80 [ 1249.631892][T18485] chrdev_open+0x266/0x770 [ 1249.636306][T18485] ? cdev_device_add+0x210/0x210 [ 1249.641235][T18485] ? fsnotify_perm.part.0+0x22d/0x620 [ 1249.646613][T18485] do_dentry_open+0x4c8/0x1250 [ 1249.651373][T18485] ? cdev_device_add+0x210/0x210 [ 1249.656302][T18485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1249.662888][T18485] ? may_open+0x1f6/0x420 [ 1249.667213][T18485] path_openat+0x1cad/0x2750 [ 1249.671893][T18485] ? path_lookupat+0x860/0x860 [ 1249.676652][T18485] ? mark_lock+0xef/0x17b0 [ 1249.681076][T18485] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1249.687088][T18485] do_filp_open+0x1aa/0x400 [ 1249.691671][T18485] ? may_open_dev+0xf0/0xf0 [ 1249.696259][T18485] ? rwlock_bug.part.0+0x90/0x90 [ 1249.701214][T18485] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1249.707455][T18485] ? _find_next_bit+0x1e3/0x260 [ 1249.712317][T18485] ? _raw_spin_unlock+0x24/0x40 [ 1249.717164][T18485] ? alloc_fd+0x2f0/0x670 [ 1249.721497][T18485] do_sys_openat2+0x16d/0x4d0 [ 1249.726177][T18485] ? build_open_flags+0x6f0/0x6f0 [ 1249.731208][T18485] ? __context_tracking_exit+0xb8/0xe0 [ 1249.736668][T18485] ? lock_downgrade+0x6e0/0x6e0 [ 1249.741533][T18485] __x64_sys_openat+0x13f/0x1f0 [ 1249.746748][T18485] ? __ia32_sys_open+0x1c0/0x1c0 [ 1249.751699][T18485] ? syscall_enter_from_user_mode+0x21/0x70 [ 1249.757611][T18485] do_syscall_64+0x35/0xb0 [ 1249.762031][T18485] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1249.767961][T18485] RIP: 0033:0x7f7f33f79af9 [ 1249.772395][T18485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1249.792876][T18485] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1249.801295][T18485] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1249.809267][T18485] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1249.817240][T18485] RBP: 00007f7f33fd3ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1249.825234][T18485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.833206][T18485] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1249.841192][T18485] [ 1249.896003][T18485] Mem-Info: [ 1249.899502][T18485] active_anon:540 inactive_anon:197728 isolated_anon:0 [ 1249.899502][T18485] active_file:5553 inactive_file:65956 isolated_file:0 [ 1249.899502][T18485] unevictable:768 dirty:64 writeback:0 [ 1249.899502][T18485] slab_reclaimable:21368 slab_unreclaimable:96297 [ 1249.899502][T18485] mapped:23195 shmem:9454 pagetables:2283 bounce:0 [ 1249.899502][T18485] kernel_misc_reclaimable:0 [ 1249.899502][T18485] free:1225356 free_pcp:7113 free_cma:0 [ 1249.944088][T18485] Node 0 active_anon:2160kB inactive_anon:790296kB active_file:22096kB inactive_file:263824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92780kB dirty:252kB writeback:0kB shmem:35364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 520192kB writeback_tmp:0kB kernel_stack:11560kB pagetables:9328kB all_unreclaimable? no [ 1249.980349][T18485] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1250.018759][T18485] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.057227][T18485] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1250.068076][T18485] Node 0 DMA32 free:934948kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2160kB inactive_anon:789596kB active_file:22096kB inactive_file:263824kB unevictable:1536kB writepending:252kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:29172kB local_pcp:7360kB free_cma:0kB [ 1250.103993][T18485] lowmem_reserve[]: 0 0 0 0 0 [ 1250.108834][T18485] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.135908][T18485] lowmem_reserve[]: 0 0 0 0 0 [ 1250.140676][T18485] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.171715][T18485] lowmem_reserve[]: 0 0 0 0 0 [ 1250.176683][T18485] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1250.206214][T18485] Node 0 DMA32: 2591*4kB (UM) 1276*8kB (UME) 625*16kB (UME) 393*32kB (UME) 73*64kB (UME) 21*128kB (UME) 6*256kB (UM) 3*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 214*4096kB (M) = 937292kB [ 1250.225877][T18485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.240069][T18485] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1250.258902][T18485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.269291][T18485] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1250.278985][T18485] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.289034][T18485] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1250.301200][T18485] 25157 total pagecache pages 04:35:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xeceb010000000000) 04:35:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1250.305968][T18485] 0 pages in swap cache [ 1250.310207][T18485] Swap cache stats: add 0, delete 0, find 0/0 [ 1250.318187][T18485] Free swap = 0kB [ 1250.322987][T18485] Total swap = 0kB [ 1250.326826][T18485] 2097051 pages RAM [ 1250.330652][T18485] 0 pages HighMem/MovableOnly [ 1250.336037][T18485] 384515 pages reserved [ 1250.340333][T18485] 0 pages cma reserved [ 1250.344648][T18485] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1250.402266][T18500] QAT: failed to copy from user cfg_data. [ 1251.040825][ T5] Bluetooth: hci6: command 0x1003 tx timeout [ 1251.047578][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1252.480952][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 1252.488119][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1253.120887][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1253.127621][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1254.560884][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1254.568731][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1255.200920][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1256.640896][ T5] Bluetooth: hci7: command 0x1009 tx timeout 04:35:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:35:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd0eb010000000000) 04:35:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1259.237093][T18520] QAT: failed to copy from user cfg_data. 04:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1259.280145][T18525] QAT: failed to copy from user cfg_data. [ 1259.289786][T18519] QAT: failed to copy from user cfg_data. 04:35:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1259.337211][T18532] QAT: failed to copy from user cfg_data. 04:35:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1259.391922][T18536] QAT: failed to copy from user cfg_data. [ 1259.441770][T18538] QAT: failed to copy from user cfg_data. [ 1259.508590][T18544] QAT: failed to copy from user cfg_data. [ 1259.525438][T18546] QAT: failed to copy from user cfg_data. [ 1259.608282][T18545] QAT: failed to copy from user cfg_data. 04:35:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xedeb010000000000) 04:35:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) [ 1261.109984][T18563] QAT: failed to copy from user cfg_data. [ 1261.119704][T18564] QAT: failed to copy from user cfg_data. [ 1261.135700][T18567] QAT: failed to copy from user cfg_data. [ 1261.137093][T18563] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1261.165923][T18563] CPU: 0 PID: 18563 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1261.174694][T18563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.184925][T18563] Call Trace: [ 1261.188227][T18563] [ 1261.191159][T18563] dump_stack_lvl+0xcd/0x134 [ 1261.195762][T18563] warn_alloc.cold+0x87/0x17a [ 1261.200452][T18563] ? zone_watermark_ok_safe+0x290/0x290 [ 1261.206006][T18563] ? __kmalloc_node+0x62/0x390 [ 1261.210797][T18563] ? __vmalloc_node_range+0x574/0xab0 [ 1261.216371][T18563] __vmalloc_node_range+0x883/0xab0 [ 1261.221801][T18563] ? vfree_atomic+0xe0/0xe0 [ 1261.227125][T18563] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1261.233632][T18563] ? __ldsem_down_read_nested+0x850/0x850 [ 1261.239739][T18563] ? __wake_up_common+0x650/0x650 [ 1261.245217][T18563] ? n_tty_open+0x16/0x170 [ 1261.250589][T18563] vzalloc+0x67/0x80 [ 1261.254766][T18563] ? n_tty_open+0x16/0x170 [ 1261.259289][T18563] n_tty_open+0x16/0x170 [ 1261.263518][T18563] ? n_tty_set_termios+0x1010/0x1010 [ 1261.268817][T18563] tty_ldisc_open+0x9b/0x110 [ 1261.273412][T18563] tty_ldisc_setup+0x43/0x100 [ 1261.278095][T18563] tty_init_dev.part.0+0x1f4/0x610 [ 1261.283197][T18563] tty_open+0xb16/0x1000 [ 1261.287444][T18563] ? tty_init_dev+0x80/0x80 [ 1261.291970][T18563] ? rwlock_bug.part.0+0x90/0x90 [ 1261.296921][T18563] ? tty_init_dev+0x80/0x80 [ 1261.301428][T18563] chrdev_open+0x266/0x770 [ 1261.305833][T18563] ? cdev_device_add+0x210/0x210 [ 1261.310760][T18563] ? fsnotify_perm.part.0+0x22d/0x620 [ 1261.316145][T18563] do_dentry_open+0x4c8/0x1250 [ 1261.320900][T18563] ? cdev_device_add+0x210/0x210 [ 1261.325838][T18563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1261.332104][T18563] ? may_open+0x1f6/0x420 [ 1261.336437][T18563] path_openat+0x1cad/0x2750 [ 1261.341037][T18563] ? path_lookupat+0x860/0x860 [ 1261.345795][T18563] ? mark_lock+0xef/0x17b0 [ 1261.350203][T18563] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1261.356282][T18563] do_filp_open+0x1aa/0x400 [ 1261.360794][T18563] ? may_open_dev+0xf0/0xf0 [ 1261.365380][T18563] ? rwlock_bug.part.0+0x90/0x90 [ 1261.370316][T18563] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1261.376605][T18563] ? _find_next_bit+0x1e3/0x260 [ 1261.381472][T18563] ? _raw_spin_unlock+0x24/0x40 [ 1261.386311][T18563] ? alloc_fd+0x2f0/0x670 [ 1261.390898][T18563] do_sys_openat2+0x16d/0x4d0 [ 1261.395585][T18563] ? build_open_flags+0x6f0/0x6f0 [ 1261.400688][T18563] ? __context_tracking_exit+0xb8/0xe0 [ 1261.406170][T18563] ? lock_downgrade+0x6e0/0x6e0 [ 1261.411029][T18563] __x64_sys_openat+0x13f/0x1f0 [ 1261.416146][T18563] ? __ia32_sys_open+0x1c0/0x1c0 [ 1261.421183][T18563] ? syscall_enter_from_user_mode+0x21/0x70 [ 1261.427085][T18563] do_syscall_64+0x35/0xb0 [ 1261.431515][T18563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1261.437427][T18563] RIP: 0033:0x7f7f33f79af9 [ 1261.441836][T18563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.461438][T18563] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1261.469839][T18563] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1261.477820][T18563] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1261.485779][T18563] RBP: 00007f7f33fd3ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1261.493752][T18563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.501708][T18563] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1261.509693][T18563] [ 1261.516747][T18563] Mem-Info: [ 1261.519940][T18563] active_anon:540 inactive_anon:200848 isolated_anon:0 [ 1261.519940][T18563] active_file:5559 inactive_file:65966 isolated_file:0 [ 1261.519940][T18563] unevictable:768 dirty:81 writeback:0 [ 1261.519940][T18563] slab_reclaimable:21377 slab_unreclaimable:96178 [ 1261.519940][T18563] mapped:23180 shmem:9454 pagetables:2344 bounce:0 [ 1261.519940][T18563] kernel_misc_reclaimable:0 [ 1261.519940][T18563] free:1221883 free_pcp:7458 free_cma:0 [ 1261.522875][ T7855] Bluetooth: hci6: command 0x1003 tx timeout [ 1261.562694][T18563] Node 0 active_anon:2160kB inactive_anon:802476kB active_file:22120kB inactive_file:263864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92720kB dirty:320kB writeback:0kB shmem:35364kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 532480kB writeback_tmp:0kB kernel_stack:11728kB pagetables:9372kB all_unreclaimable? no [ 1261.624694][T18563] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1261.626645][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1261.659997][T18563] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.689706][T18563] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1261.696290][T18563] Node 0 DMA32 free:921504kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2160kB inactive_anon:802476kB active_file:22120kB inactive_file:263864kB unevictable:1536kB writepending:320kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:29952kB local_pcp:9148kB free_cma:0kB [ 1261.728170][T18563] lowmem_reserve[]: 0 0 0 0 0 [ 1261.733508][T18563] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.760579][T18563] lowmem_reserve[]: 0 0 0 0 0 [ 1261.766670][T18563] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.798369][T18563] lowmem_reserve[]: 0 0 0 0 0 [ 1261.803382][T18563] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1261.816492][T18563] Node 0 DMA32: 2468*4kB (UME) 1246*8kB (UME) 622*16kB (UM) 300*32kB (UM) 77*64kB (UME) 21*128kB (UME) 6*256kB (UM) 3*512kB (M) 3*1024kB (UME) 2*2048kB (UM) 211*4096kB (M) = 921504kB [ 1261.835873][T18563] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1261.848394][T18563] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1261.868089][T18563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.878230][T18563] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.888363][T18563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1261.898475][T18563] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1261.908760][T18563] 25164 total pagecache pages [ 1261.914562][T18563] 0 pages in swap cache [ 1261.918977][T18563] Swap cache stats: add 0, delete 0, find 0/0 [ 1261.929385][T18563] Free swap = 0kB [ 1261.933503][T18563] Total swap = 0kB [ 1261.937243][T18563] 2097051 pages RAM [ 1261.941856][T18563] 0 pages HighMem/MovableOnly [ 1261.946699][T18563] 384515 pages reserved [ 1261.951305][T18563] 0 pages cma reserved [ 1261.955610][T18563] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1261.963809][T18564] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1263.690877][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1263.697687][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1265.780754][T11571] Bluetooth: hci6: command 0x1009 tx timeout 04:35:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd1eb010000000000) 04:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:35:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) 04:35:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xeeeb010000000000) 04:35:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1269.425986][T18589] QAT: failed to copy from user cfg_data. [ 1269.442473][T11045] Bluetooth: hci6: sending frame failed (-49) 04:35:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1269.480432][T18595] QAT: failed to copy from user cfg_data. [ 1269.512646][T18596] QAT: failed to copy from user cfg_data. 04:35:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1269.538890][T18603] QAT: failed to copy from user cfg_data. [ 1269.571702][T18594] QAT: failed to copy from user cfg_data. 04:35:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) 04:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:35:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd2eb010000000000) 04:35:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) [ 1269.671974][T18611] QAT: failed to copy from user cfg_data. [ 1269.700660][T18610] QAT: failed to copy from user cfg_data. 04:35:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1269.783550][T18623] QAT: failed to copy from user cfg_data. 04:35:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000480)) [ 1269.833479][T18624] QAT: failed to copy from user cfg_data. [ 1269.854326][T18627] QAT: failed to copy from user cfg_data. 04:35:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) 04:35:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1269.936125][T18632] QAT: failed to copy from user cfg_data. [ 1269.956611][T18637] QAT: failed to copy from user cfg_data. [ 1270.004416][T18641] QAT: failed to copy from user cfg_data. [ 1270.075509][T18642] QAT: failed to copy from user cfg_data. [ 1271.520926][ T7855] Bluetooth: hci6: command 0x1003 tx timeout [ 1271.527991][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1271.840832][ T7855] Bluetooth: hci7: command 0x1003 tx timeout [ 1271.847830][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1273.600867][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1273.607602][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1273.920883][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1273.928662][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1275.680924][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1276.010993][T17084] Bluetooth: hci7: command 0x1009 tx timeout 04:36:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xefeb010000000000) 04:36:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1279.675107][T18658] QAT: failed to copy from user cfg_data. [ 1279.725838][T18662] QAT: failed to copy from user cfg_data. [ 1279.743698][T18665] QAT: failed to copy from user cfg_data. [ 1279.794620][T18669] QAT: failed to copy from user cfg_data. 04:36:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd3eb010000000000) 04:36:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) [ 1280.413775][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1280.428662][T18695] QAT: failed to copy from user cfg_data. [ 1281.840842][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1281.847646][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1282.491124][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1282.497964][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1283.920917][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1283.927202][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1284.563034][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1284.569818][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1286.010953][ T7854] Bluetooth: hci6: command 0x1009 tx timeout [ 1286.641891][ T7854] Bluetooth: hci7: command 0x1009 tx timeout 04:36:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf0eb010000000000) 04:36:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) 04:36:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1289.930125][T18720] QAT: failed to copy from user cfg_data. [ 1289.966071][T18719] QAT: failed to copy from user cfg_data. [ 1290.044969][ T6536] Bluetooth: hci6: sending frame failed (-49) 04:36:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd4eb010000000000) 04:36:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1290.585691][T18755] QAT: failed to copy from user cfg_data. [ 1290.617558][T18752] QAT: failed to copy from user cfg_data. [ 1290.627858][T18762] QAT: failed to copy from user cfg_data. [ 1292.080877][ T7860] Bluetooth: hci6: command 0x1003 tx timeout [ 1292.088527][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1292.640884][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1292.648555][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1294.161052][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1294.168588][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1294.720871][T16347] Bluetooth: hci7: command 0x1001 tx timeout [ 1294.728589][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1296.240980][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1296.800778][ T7860] Bluetooth: hci7: command 0x1009 tx timeout [ 1299.442293][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.449029][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:36:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf1eb010000000000) 04:36:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r1, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1300.176245][T18781] QAT: failed to copy from user cfg_data. [ 1300.201581][T18785] QAT: failed to copy from user cfg_data. [ 1300.239040][T18782] QAT: failed to copy from user cfg_data. 04:36:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd5eb010000000000) 04:36:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:25 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1300.781434][T18812] QAT: failed to copy from user cfg_data. [ 1300.802238][T18814] QAT: failed to copy from user cfg_data. [ 1300.847726][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1300.858157][T18821] QAT: failed to copy from user cfg_data. 04:36:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1300.918992][T18826] QAT: failed to copy from user cfg_data. [ 1300.948876][T18829] QAT: failed to copy from user cfg_data. [ 1300.987376][T18832] QAT: failed to copy from user cfg_data. [ 1302.331038][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1302.338034][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1302.880938][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1302.887922][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1304.400944][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1304.407753][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1304.970920][ T7854] Bluetooth: hci7: command 0x1001 tx timeout [ 1304.978666][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1306.481036][ T7854] Bluetooth: hci6: command 0x1009 tx timeout [ 1307.040949][ T7854] Bluetooth: hci7: command 0x1009 tx timeout 04:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf2eb010000000000) 04:36:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1310.443269][T18850] QAT: failed to copy from user cfg_data. [ 1310.448470][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1310.487943][T18851] QAT: failed to copy from user cfg_data. 04:36:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd6eb010000000000) 04:36:36 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:36 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:36 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1311.031441][T18870] QAT: failed to copy from user cfg_data. [ 1311.054650][T18871] QAT: failed to copy from user cfg_data. [ 1311.097547][T18873] QAT: failed to copy from user cfg_data. 04:36:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1311.152996][T18883] QAT: failed to copy from user cfg_data. [ 1311.230009][T18891] QAT: failed to copy from user cfg_data. [ 1312.481103][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1312.487831][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1313.201015][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1313.210447][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1314.570962][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1314.577408][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1315.280836][ T7854] Bluetooth: hci7: command 0x1001 tx timeout [ 1315.287697][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1316.640909][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1317.360999][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:36:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf3eb010000000000) 04:36:45 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1320.659166][T18909] QAT: failed to copy from user cfg_data. [ 1320.682343][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1320.729966][T18911] QAT: failed to copy from user cfg_data. 04:36:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd7eb010000000000) 04:36:46 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:46 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:36:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:46 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) [ 1321.295036][T18933] QAT: failed to copy from user cfg_data. 04:36:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1321.367822][T18935] QAT: failed to copy from user cfg_data. [ 1321.429944][T18948] QAT: failed to copy from user cfg_data. [ 1321.446254][T18950] QAT: failed to copy from user cfg_data. [ 1322.720993][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1322.728166][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1323.371037][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1323.378007][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1324.800890][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1324.807835][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1325.450986][T17084] Bluetooth: hci7: command 0x1001 tx timeout [ 1325.457803][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1326.890853][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1327.520878][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:36:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf4eb010000000000) 04:36:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:55 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) [ 1330.879539][T18970] QAT: failed to copy from user cfg_data. [ 1330.950442][T17130] Bluetooth: hci6: sending frame failed (-49) 04:36:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd8eb010000000000) 04:36:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:56 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:36:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:36:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:56 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1331.518176][T18990] QAT: failed to copy from user cfg_data. [ 1331.589058][T19000] QAT: failed to copy from user cfg_data. [ 1331.625241][T18991] QAT: failed to copy from user cfg_data. 04:36:56 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:36:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1331.653502][T19006] QAT: failed to copy from user cfg_data. [ 1331.738559][T19014] QAT: failed to copy from user cfg_data. [ 1331.770637][T19013] QAT: failed to copy from user cfg_data. [ 1332.960884][ T7860] Bluetooth: hci6: command 0x1003 tx timeout [ 1332.967845][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1333.680955][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 1333.688241][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1335.040869][T16347] Bluetooth: hci6: command 0x1001 tx timeout [ 1335.047798][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1335.760965][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1335.767613][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1337.121104][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1337.841090][ T5] Bluetooth: hci7: command 0x1009 tx timeout 04:37:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf5eb010000000000) 04:37:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:06 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) [ 1341.165789][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1341.174990][T19041] QAT: failed to copy from user cfg_data. 04:37:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd9eb010000000000) 04:37:06 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) 04:37:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:06 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:37:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:06 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:37:06 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) [ 1341.750127][T19053] QAT: failed to copy from user cfg_data. [ 1341.771345][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1341.790196][T19059] QAT: failed to copy from user cfg_data. 04:37:06 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1341.858815][T19063] QAT: failed to copy from user cfg_data. [ 1341.872350][T19067] QAT: failed to copy from user cfg_data. [ 1341.892498][T19070] QAT: failed to copy from user cfg_data. [ 1341.988088][T19076] QAT: failed to copy from user cfg_data. [ 1343.200881][T16347] Bluetooth: hci6: command 0x1003 tx timeout [ 1343.207859][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1343.851112][ T5] Bluetooth: hci7: command 0x1003 tx timeout [ 1343.858569][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1345.290980][T16347] Bluetooth: hci6: command 0x1001 tx timeout [ 1345.301478][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1345.921054][T16347] Bluetooth: hci7: command 0x1001 tx timeout [ 1345.927804][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1347.361447][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1348.002133][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:37:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:16 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) 04:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1351.416093][T19093] QAT: failed to copy from user cfg_data. [ 1351.441863][T19099] QAT: failed to copy from user cfg_data. 04:37:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xdaeb010000000000) 04:37:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf6eb010000000000) 04:37:17 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:37:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000040)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xd4eb010000000000) [ 1352.013783][T19114] QAT: failed to copy from user cfg_data. [ 1352.100199][T19115] QAT: failed to copy from user cfg_data. [ 1352.123682][T19119] QAT: failed to copy from user cfg_data. [ 1352.135102][T19129] QAT: failed to copy from user cfg_data. 04:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000040)) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:37:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1352.274052][T19138] QAT: failed to copy from user cfg_data. [ 1352.354524][T19140] QAT: failed to copy from user cfg_data. [ 1352.389027][T19142] QAT: failed to copy from user cfg_data. [ 1352.407645][T19145] QAT: failed to copy from user cfg_data. 04:37:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1352.610516][T19153] QAT: failed to copy from user cfg_data. [ 1354.081047][T17084] Bluetooth: hci6: command 0x1003 tx timeout [ 1354.081134][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 1354.088771][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1354.101305][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1354.241863][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1354.249084][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1356.160921][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1356.167476][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1356.168616][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1356.184971][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1356.321067][ T5] Bluetooth: hci8: command 0x1001 tx timeout [ 1356.328484][ T6536] Bluetooth: hci8: sending frame failed (-49) [ 1358.241002][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1358.247660][ T7860] Bluetooth: hci7: command 0x1009 tx timeout [ 1358.401176][ T7860] Bluetooth: hci8: command 0x1009 tx timeout [ 1360.882222][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.889204][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:37:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xdbeb010000000000) 04:37:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf7eb010000000000) 04:37:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x0, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1362.251746][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1362.305948][T19176] QAT: failed to copy from user cfg_data. [ 1362.341823][T19177] QAT: failed to copy from user cfg_data. [ 1362.370041][T19188] QAT: failed to copy from user cfg_data. 04:37:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1362.599995][T19197] QAT: failed to copy from user cfg_data. 04:37:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x0, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1362.936510][T19210] QAT: failed to copy from user cfg_data. [ 1362.963228][T19208] QAT: failed to copy from user cfg_data. 04:37:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1362.990895][T19209] QAT: failed to copy from user cfg_data. [ 1363.015210][T19215] QAT: failed to copy from user cfg_data. [ 1363.034581][T19218] QAT: failed to copy from user cfg_data. [ 1363.173639][T19223] QAT: failed to copy from user cfg_data. [ 1364.330996][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1364.338474][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1364.402655][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1364.409924][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1366.400958][ T7860] Bluetooth: hci6: command 0x1001 tx timeout [ 1366.407917][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1366.480936][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1366.488465][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1368.480858][ T5] Bluetooth: hci6: command 0x1009 tx timeout [ 1368.560902][ T5] Bluetooth: hci7: command 0x1009 tx timeout 04:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf8eb010000000000) 04:37:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x0, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xdceb010000000000) 04:37:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1372.556712][T19239] QAT: failed to copy from user cfg_data. [ 1372.596354][T19241] QAT: failed to copy from user cfg_data. 04:37:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1372.614746][T19243] QAT: failed to copy from user cfg_data. 04:37:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1372.853805][T19262] QAT: failed to copy from user cfg_data. 04:37:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1372.938246][T19266] QAT: failed to copy from user cfg_data. 04:37:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1373.084757][T19271] warn_alloc: 1 callbacks suppressed [ 1373.084777][T19271] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1373.162761][T19271] CPU: 0 PID: 19271 Comm: syz-executor.5 Not tainted 5.16.0-rc4-syzkaller #0 [ 1373.171817][T19271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.181883][T19271] Call Trace: [ 1373.185196][T19271] [ 1373.188334][T19271] dump_stack_lvl+0xcd/0x134 [ 1373.190101][T19279] QAT: failed to copy from user cfg_data. [ 1373.193028][T19271] warn_alloc.cold+0x87/0x17a [ 1373.193063][T19271] ? zone_watermark_ok_safe+0x290/0x290 [ 1373.193086][T19271] ? __kmalloc_node+0x62/0x390 [ 1373.214120][T19271] ? __vmalloc_node_range+0x574/0xab0 [ 1373.219541][T19271] __vmalloc_node_range+0x883/0xab0 [ 1373.224773][T19271] ? vfree_atomic+0xe0/0xe0 [ 1373.229471][T19271] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1373.234765][T19278] QAT: failed to copy from user cfg_data. [ 1373.235409][T19271] ? __ldsem_down_read_nested+0x850/0x850 [ 1373.235447][T19271] ? __wake_up_common+0x650/0x650 [ 1373.235472][T19271] ? n_tty_open+0x16/0x170 [ 1373.235499][T19271] vzalloc+0x67/0x80 [ 1373.235525][T19271] ? n_tty_open+0x16/0x170 [ 1373.235548][T19271] n_tty_open+0x16/0x170 [ 1373.235570][T19271] ? n_tty_set_termios+0x1010/0x1010 [ 1373.274400][T19271] tty_ldisc_open+0x9b/0x110 [ 1373.279014][T19271] tty_ldisc_setup+0x43/0x100 [ 1373.283737][T19271] tty_init_dev.part.0+0x1f4/0x610 [ 1373.288895][T19271] tty_open+0xb16/0x1000 [ 1373.293158][T19271] ? tty_init_dev+0x80/0x80 [ 1373.297755][T19271] ? rwlock_bug.part.0+0x90/0x90 [ 1373.302719][T19271] ? tty_init_dev+0x80/0x80 [ 1373.307519][T19271] chrdev_open+0x266/0x770 [ 1373.311953][T19271] ? cdev_device_add+0x210/0x210 [ 1373.317083][T19271] ? fsnotify_perm.part.0+0x22d/0x620 [ 1373.322486][T19271] do_dentry_open+0x4c8/0x1250 [ 1373.327270][T19271] ? cdev_device_add+0x210/0x210 [ 1373.334279][T19271] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1373.340714][T19271] ? may_open+0x1f6/0x420 [ 1373.345063][T19271] path_openat+0x1cad/0x2750 [ 1373.349677][T19271] ? path_lookupat+0x860/0x860 [ 1373.354631][T19271] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1373.360732][T19271] do_filp_open+0x1aa/0x400 [ 1373.365265][T19271] ? may_open_dev+0xf0/0xf0 [ 1373.369809][T19271] ? rwlock_bug.part.0+0x90/0x90 [ 1373.374802][T19271] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1373.381102][T19271] ? _find_next_bit+0x1e3/0x260 [ 1373.385980][T19271] ? _raw_spin_unlock+0x24/0x40 [ 1373.390850][T19271] ? alloc_fd+0x2f0/0x670 [ 1373.395203][T19271] do_sys_openat2+0x16d/0x4d0 [ 1373.399893][T19271] ? build_open_flags+0x6f0/0x6f0 [ 1373.404939][T19271] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1373.411120][T19271] __x64_sys_openat+0x13f/0x1f0 [ 1373.415997][T19271] ? __ia32_sys_open+0x1c0/0x1c0 [ 1373.420973][T19271] ? syscall_enter_from_user_mode+0x2b/0x70 [ 1373.426892][T19271] do_syscall_64+0x35/0xb0 [ 1373.431334][T19271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1373.437262][T19271] RIP: 0033:0x7fe2a57fcaf9 [ 1373.441691][T19271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1373.462037][T19271] RSP: 002b:00007fe2a4772188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1373.470482][T19271] RAX: ffffffffffffffda RBX: 00007fe2a590ff60 RCX: 00007fe2a57fcaf9 [ 1373.478473][T19271] RDX: 0000000000004000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 1373.486462][T19271] RBP: 00007fe2a5856ff7 R08: 0000000000000000 R09: 0000000000000000 [ 1373.494539][T19271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.502610][T19271] R13: 00007ffc6aafe01f R14: 00007fe2a4772300 R15: 0000000000022000 [ 1373.510790][T19271] 04:37:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) [ 1373.533110][T19271] Mem-Info: [ 1373.536335][T19271] active_anon:539 inactive_anon:221463 isolated_anon:0 [ 1373.536335][T19271] active_file:5592 inactive_file:65985 isolated_file:0 [ 1373.536335][T19271] unevictable:768 dirty:54 writeback:0 [ 1373.536335][T19271] slab_reclaimable:21407 slab_unreclaimable:96937 [ 1373.536335][T19271] mapped:23240 shmem:9453 pagetables:3054 bounce:0 [ 1373.536335][T19271] kernel_misc_reclaimable:0 [ 1373.536335][T19271] free:1199053 free_pcp:7408 free_cma:0 [ 1373.613853][T19271] Node 0 active_anon:2156kB inactive_anon:884936kB active_file:22252kB inactive_file:263940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92960kB dirty:212kB writeback:0kB shmem:35360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 608256kB writeback_tmp:0kB kernel_stack:12952kB pagetables:12212kB all_unreclaimable? no [ 1373.685371][T19271] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1373.711011][T19290] QAT: failed to copy from user cfg_data. 04:37:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1373.727407][T19271] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.773382][T19271] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1373.784041][T19271] Node 0 DMA32 free:825584kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2156kB inactive_anon:883108kB active_file:22252kB inactive_file:263940kB unevictable:1536kB writepending:212kB present:3129332kB managed:2716764kB mlocked:0kB bounce:0kB free_pcp:38448kB local_pcp:17096kB free_cma:0kB [ 1373.824540][T19271] lowmem_reserve[]: 0 0 0 0 0 [ 1373.830557][T19271] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.865110][T19295] QAT: failed to copy from user cfg_data. [ 1373.922097][T19294] QAT: failed to copy from user cfg_data. [ 1373.938908][T19271] lowmem_reserve[]: 0 0 0 0 0 [ 1373.944456][T19271] Node 1 Normal free:3950668kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.974640][T19271] lowmem_reserve[]: 0 0 0 0 0 [ 1373.989234][T19271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1374.008990][T19271] Node 0 DMA32: 1274*4kB (M) 889*8kB (ME) 556*16kB (UM) 236*32kB (UME) 50*64kB (UME) 21*128kB (UME) 6*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 190*4096kB (M) = 821488kB [ 1374.028447][T19271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1374.041144][T19271] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 27*16kB (UME) 177*32kB (UE) 76*64kB (UME) 30*128kB (UME) 6*256kB (U) 4*512kB (U) 1*1024kB (E) 1*2048kB (U) 959*4096kB (M) = 3950668kB [ 1374.059907][T19271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.071224][T19271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.080660][T19271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.105690][T19271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1374.116597][T19271] 25228 total pagecache pages [ 1374.122069][T19271] 0 pages in swap cache [ 1374.126501][T19271] Swap cache stats: add 0, delete 0, find 0/0 [ 1374.132871][T19271] Free swap = 0kB [ 1374.136589][T19271] Total swap = 0kB [ 1374.140299][T19271] 2097051 pages RAM [ 1374.144405][T19271] 0 pages HighMem/MovableOnly [ 1374.149315][T19271] 384515 pages reserved [ 1374.153544][T19271] 0 pages cma reserved [ 1374.157672][T19271] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1374.169531][T19279] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1374.641415][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1374.648452][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1374.723198][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1374.730234][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1376.720962][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1376.727804][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1376.800918][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1376.807278][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1378.800924][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1378.880898][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:37:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xf9eb010000000000) 04:37:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) 04:37:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xe4ffffff00000000) [ 1383.432146][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1383.450397][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1383.450541][T19328] QAT: failed to copy from user cfg_data. 04:37:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="040100020000000000010000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00000003c0)="43577aee4e8b45acda3f", 0xa, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="d8fb7665840bd7e7469929b9987a21e1d692e59ca697b6f1c68031a1b654c0f0fb1ee89a2d6e3c0000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xe, 0x6, 0x9, 0x8, 0x0, 0x4, 0x18000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3d, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1609d, 0x3, 0x2, 0x6, 0xfff, 0xff, 0x434e, 0x0, 0xc, 0x0, 0x3}, r3, 0xb, r0, 0x2) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/21, 0x15}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="1c00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000240000000000000001000000a601000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150}, 0x20e1) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="040100020000000000010000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00000003c0)="43577aee4e8b45acda3f", 0xa, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="d8fb7665840bd7e7469929b9987a21e1d692e59ca697b6f1c68031a1b654c0f0fb1ee89a2d6e3c0000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xe, 0x6, 0x9, 0x8, 0x0, 0x4, 0x18000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3d, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1609d, 0x3, 0x2, 0x6, 0xfff, 0xff, 0x434e, 0x0, 0xc, 0x0, 0x3}, r3, 0xb, r0, 0x2) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/21, 0x15}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="1c00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000240000000000000001000000a601000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150}, 0x20e1) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="040100020000000000010000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00000003c0)="43577aee4e8b45acda3f", 0xa, 0x0, &(0x7f0000618000)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="d8fb7665840bd7e7469929b9987a21e1d692e59ca697b6f1c68031a1b654c0f0fb1ee89a2d6e3c0000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xe, 0x6, 0x9, 0x8, 0x0, 0x4, 0x18000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d3d, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1609d, 0x3, 0x2, 0x6, 0xfff, 0xff, 0x434e, 0x0, 0xc, 0x0, 0x3}, r3, 0xb, r0, 0x2) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/21, 0x15}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="1c00"/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000240000000000000001000000a601000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150}, 0x20e1) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000340), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1383.781554][T19347] QAT: failed to copy from user cfg_data. 04:37:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1383.951769][T19353] QAT: failed to copy from user cfg_data. 04:37:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1384.101486][T19359] QAT: failed to copy from user cfg_data. [ 1385.451721][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1385.458727][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1385.521011][T17084] Bluetooth: hci7: command 0x1003 tx timeout [ 1385.527614][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1387.520892][T16347] Bluetooth: hci6: command 0x1001 tx timeout [ 1387.527844][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1387.601092][T16347] Bluetooth: hci7: command 0x1001 tx timeout [ 1387.607344][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1389.600876][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1389.691141][ T7854] Bluetooth: hci7: command 0x1009 tx timeout 04:37:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfdfdffff00000000) 04:37:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfdfdffff00000000) [ 1393.703215][T19379] QAT: failed to copy from user cfg_data. 04:37:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) 04:37:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1393.746856][T19380] QAT: failed to copy from user cfg_data. [ 1393.767289][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1393.779708][T19381] QAT: failed to copy from user cfg_data. [ 1393.818792][T17130] Bluetooth: hci7: sending frame failed (-49) 04:37:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1393.919362][T19399] QAT: failed to copy from user cfg_data. 04:37:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:37:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1394.136778][T19408] QAT: failed to copy from user cfg_data. 04:37:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1394.238895][T19414] QAT: failed to copy from user cfg_data. [ 1394.332405][T19418] QAT: failed to copy from user cfg_data. [ 1394.412709][T19422] QAT: failed to copy from user cfg_data. [ 1395.841807][ T7854] Bluetooth: hci7: command 0x1003 tx timeout [ 1395.847907][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1395.848680][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1395.857133][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1397.921815][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1397.923282][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1397.928850][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1397.935459][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1400.010942][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1400.017038][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:38:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfdffffff00000000) 04:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101480, 0x61, 0x12}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xff, 0x0, 0xa9, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x80000000, 0x7fffffff, 0x6, 0xffff, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, r0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x97, 0x9, 0x8, 0x0, 0x7f, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1317, 0x6}, 0x802, 0x4003, 0xffff0000, 0x2, 0x2006, 0x8200, 0xdf, 0x0, 0x0, 0x0, 0x7}, r0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002002e0000000005020000040100040100040102000000"], 0x18) r3 = socket(0x5, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfdffffff00000000) 04:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1404.582318][T19450] QAT: failed to copy from user cfg_data. [ 1404.599651][T11045] Bluetooth: hci6: sending frame failed (-49) 04:38:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1404.772109][T19466] QAT: failed to copy from user cfg_data. 04:38:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1404.933077][T19477] QAT: failed to copy from user cfg_data. [ 1405.061517][T19483] QAT: failed to copy from user cfg_data. [ 1406.641103][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1406.641949][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1406.648186][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1406.660474][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1408.721162][ T5] Bluetooth: hci6: command 0x1001 tx timeout [ 1408.727817][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1408.737185][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1408.743284][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1410.800970][ T5] Bluetooth: hci7: command 0x1009 tx timeout [ 1410.809032][ T5] Bluetooth: hci6: command 0x1009 tx timeout 04:38:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfeffffff00000000) 04:38:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101480, 0x61, 0x12}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xff, 0x0, 0xa9, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x80000000, 0x7fffffff, 0x6, 0xffff, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, r0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x97, 0x9, 0x8, 0x0, 0x7f, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1317, 0x6}, 0x802, 0x4003, 0xffff0000, 0x2, 0x2006, 0x8200, 0xdf, 0x0, 0x0, 0x0, 0x7}, r0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002002e0000000005020000040100040100040102000000"], 0x18) r3 = socket(0x5, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:38:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfeffffff00000000) [ 1414.818090][T19514] QAT: failed to copy from user cfg_data. [ 1414.841232][T19510] QAT: failed to copy from user cfg_data. [ 1414.847570][T19513] QAT: failed to copy from user cfg_data. 04:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1415.060947][T19530] QAT: failed to copy from user cfg_data. 04:38:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200edc5b27c513a8aff966c7696", 0x12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000001500)=@pppoe, 0x80, &(0x7f0000001680)=[{&(0x7f0000002b40)=""/90, 0x5a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001640)=""/3, 0x3}], 0x3}, 0xfff}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{&(0x7f0000001780)=@can, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001880)=""/77, 0x4d}, 0x1f}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000002a80)=""/155, 0x9b}], 0x4, &(0x7f0000004c80)=""/141, 0x8d}, 0x7f}, {{&(0x7f0000004d40)=@un=@abs, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/36, 0x24}, {&(0x7f0000004e00)}], 0x2, &(0x7f0000004e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e80), 0x80, &(0x7f0000001800)=[{&(0x7f0000005f00)=""/231, 0xe7}, {&(0x7f0000006000)=""/80, 0x50}, {&(0x7f0000006080)=""/135, 0x87}, {&(0x7f0000006140)=""/230, 0xe6}, {&(0x7f0000006240)=""/233, 0xe9}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f00000063c0)=""/28, 0x1c}, {&(0x7f0000006400)=""/212, 0xd4}], 0x8, &(0x7f0000006580)=""/25, 0x19}, 0x9}, {{&(0x7f00000065c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000007b00), 0x0, &(0x7f0000007b80)=""/92, 0x5c}, 0x14}], 0x7, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000002bc0)="5eb9682411cf8f0d3c192a54afeea441829ec7f32edea3b69b755f10dd05bf3e4f8cd83d731a8531d51cf093b19f657f417780d8e4d2b9ad8a05925f54d9eba9525b9b03", 0x44, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1415.149490][T19535] QAT: failed to copy from user cfg_data. [ 1415.185070][T19536] QAT: failed to copy from user cfg_data. [ 1415.253719][T19544] QAT: failed to copy from user cfg_data. [ 1415.333142][T19547] QAT: failed to copy from user cfg_data. [ 1416.960874][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1416.968545][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1416.975266][ T7860] Bluetooth: hci6: command 0x1003 tx timeout [ 1416.981637][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1419.041015][ T7860] Bluetooth: hci6: command 0x1001 tx timeout [ 1419.047799][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1419.055821][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1419.062361][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1421.121110][ T7860] Bluetooth: hci7: command 0x1009 tx timeout [ 1421.128816][ T7860] Bluetooth: hci6: command 0x1009 tx timeout [ 1422.331563][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.338257][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 04:38:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff1f0000000000) 04:38:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002f00)=ANY=[@ANYBLOB="00396adf2d1c0000010000000000ff820000000000000000000100f1f97436ca19aaca7dc0cf6590178975a300007d22956e38c053c0c5e5e8d15cfbd45a1a1f43000000190010fcffffff1a40d89c9948d7b83931a2f0deea471fc5523ababe1a972f54342dbdd39459294d1cc04425a847688df8afdf53e9e3e3ce1285e78289fc1d8f5cf5468c682b8bb96de3173676275f4908000c35576c8b2c6e2515a49106b9b6bbdd07ee4cbd543379e413f997b472738abcf41c000067e4caf1000000394e0d8a3544000000000000000000f1ff00200000001dbcf909e19ac3a1f3f99ac2aca58645bd606b3f3dccbbe434c469a8bdd763b4d2aa62daa0989693c6821e23f6fdb64fa98ad40569ea1113944885db8de8399cbe8bfc960d486bb07f1fd7d3b330f4d990d0767ea2b5e3be49fd4fe18a6c844dc8573a1fb38b2955883912f870ea0a39b3fb98f000f8ba2545e9fbbd7f710dbf3504262b9a4f7485f2a746840785c07ff61e7fc59959e738f7d5b0254622660b6819dea3cba9f2acd834918b8194b2d320f3bbb51ab1455ca908c8246c116561c48a77457296ff56b980e58176d01204cf06ee3a555a131683ad736ab4e7a3d4556390eaf667bd23a7c3ddc4788ee0228efa84177e2c424dc6a8fac2458775e11af10a7af4786cbae03fff5fde72348406e9383624970da4a26f00000000000000000000000000000000804718ef237188acffc06359670a26c192313100e19a6ffec3ee4ad62737ee05280676b35ac61712018cb63b03ed5157f2d1ace775e2c4290f14b8e373d80ae8f67a74f52b41949995b086fd26e009c5f0612e2e44b629a67f6cca833e25bcac6e124b344db05575a18fa5cc0bbb0299620e84ba276d301543c9e2bf338e5bf05d808333d7d0b8e6d966a4b7b2b41a48b653a5fc3e9884a01eeba35366623cd0754618b10776a31d9db64daafda91e7779732cb07001fda2e981ec0dc1b0020285711e835ee765c92e03f4b27a4f094240c363ea6298743f7cbfcae099b4b7b00b535b9a9db5adf85c1321c5690178ad14895e54293474f331a0722978a004316986d0bb549862e6f241c68c278c4ec61b28218c768d8171e6f697acf51a7b5f6913fc95375fbb555b2966cd39c9"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200edc5b27c513a8aff966c7696", 0x12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000001500)=@pppoe, 0x80, &(0x7f0000001680)=[{&(0x7f0000002b40)=""/90, 0x5a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001640)=""/3, 0x3}], 0x3}, 0xfff}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{&(0x7f0000001780)=@can, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001880)=""/77, 0x4d}, 0x1f}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000002a80)=""/155, 0x9b}], 0x4, &(0x7f0000004c80)=""/141, 0x8d}, 0x7f}, {{&(0x7f0000004d40)=@un=@abs, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/36, 0x24}, {&(0x7f0000004e00)}], 0x2, &(0x7f0000004e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e80), 0x80, &(0x7f0000001800)=[{&(0x7f0000005f00)=""/231, 0xe7}, {&(0x7f0000006000)=""/80, 0x50}, {&(0x7f0000006080)=""/135, 0x87}, {&(0x7f0000006140)=""/230, 0xe6}, {&(0x7f0000006240)=""/233, 0xe9}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f00000063c0)=""/28, 0x1c}, {&(0x7f0000006400)=""/212, 0xd4}], 0x8, &(0x7f0000006580)=""/25, 0x19}, 0x9}, {{&(0x7f00000065c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000007b00), 0x0, &(0x7f0000007b80)=""/92, 0x5c}, 0x14}], 0x7, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000002bc0)="5eb9682411cf8f0d3c192a54afeea441829ec7f32edea3b69b755f10dd05bf3e4f8cd83d731a8531d51cf093b19f657f417780d8e4d2b9ad8a05925f54d9eba9525b9b03", 0x44, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x101480, 0x61, 0x12}, 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xff, 0x0, 0xa9, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x80000000, 0x7fffffff, 0x6, 0xffff, 0x7, 0x5, 0x0, 0x0, 0x0, 0x7fff}, r0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x97, 0x9, 0x8, 0x0, 0x7f, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1317, 0x6}, 0x802, 0x4003, 0xffff0000, 0x2, 0x2006, 0x8200, 0xdf, 0x0, 0x0, 0x0, 0x7}, r0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="0002002e0000000005020000040100040100040102000000"], 0x18) r3 = socket(0x5, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:38:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffff1f0000000000) [ 1425.670610][T19574] QAT: failed to copy from user cfg_data. 04:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020000000000000502000004010004010004018802000100af05fa0fa403dabebf1ea6daeb549a1d83d7b703aa633283d5e5bd85aaee3782216326628b472d4033d575a1f23cb2707de5dd8992b7385afbfac6a4f558c4dc619396f28d4cd5a761c0abc5abcd0bc3fa"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000000d}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x3e6a8ccaa85226c7}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1425.716529][T19571] QAT: failed to copy from user cfg_data. 04:38:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000002f00)=ANY=[@ANYBLOB="00396adf2d1c0000010000000000ff820000000000000000000100f1f97436ca19aaca7dc0cf6590178975a300007d22956e38c053c0c5e5e8d15cfbd45a1a1f43000000190010fcffffff1a40d89c9948d7b83931a2f0deea471fc5523ababe1a972f54342dbdd39459294d1cc04425a847688df8afdf53e9e3e3ce1285e78289fc1d8f5cf5468c682b8bb96de3173676275f4908000c35576c8b2c6e2515a49106b9b6bbdd07ee4cbd543379e413f997b472738abcf41c000067e4caf1000000394e0d8a3544000000000000000000f1ff00200000001dbcf909e19ac3a1f3f99ac2aca58645bd606b3f3dccbbe434c469a8bdd763b4d2aa62daa0989693c6821e23f6fdb64fa98ad40569ea1113944885db8de8399cbe8bfc960d486bb07f1fd7d3b330f4d990d0767ea2b5e3be49fd4fe18a6c844dc8573a1fb38b2955883912f870ea0a39b3fb98f000f8ba2545e9fbbd7f710dbf3504262b9a4f7485f2a746840785c07ff61e7fc59959e738f7d5b0254622660b6819dea3cba9f2acd834918b8194b2d320f3bbb51ab1455ca908c8246c116561c48a77457296ff56b980e58176d01204cf06ee3a555a131683ad736ab4e7a3d4556390eaf667bd23a7c3ddc4788ee0228efa84177e2c424dc6a8fac2458775e11af10a7af4786cbae03fff5fde72348406e9383624970da4a26f00000000000000000000000000000000804718ef237188acffc06359670a26c192313100e19a6ffec3ee4ad62737ee05280676b35ac61712018cb63b03ed5157f2d1ace775e2c4290f14b8e373d80ae8f67a74f52b41949995b086fd26e009c5f0612e2e44b629a67f6cca833e25bcac6e124b344db05575a18fa5cc0bbb0299620e84ba276d301543c9e2bf338e5bf05d808333d7d0b8e6d966a4b7b2b41a48b653a5fc3e9884a01eeba35366623cd0754618b10776a31d9db64daafda91e7779732cb07001fda2e981ec0dc1b0020285711e835ee765c92e03f4b27a4f094240c363ea6298743f7cbfcae099b4b7b00b535b9a9db5adf85c1321c5690178ad14895e54293474f331a0722978a004316986d0bb549862e6f241c68c278c4ec61b28218c768d8171e6f697acf51a7b5f6913fc95375fbb555b2966cd39c9"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200edc5b27c513a8aff966c7696", 0x12, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/187, 0xbb}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f0000001440)=""/168, 0xa8}], 0x5}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007c00)=[{{&(0x7f0000001500)=@pppoe, 0x80, &(0x7f0000001680)=[{&(0x7f0000002b40)=""/90, 0x5a}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001640)=""/3, 0x3}], 0x3}, 0xfff}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x7fff}, {{&(0x7f0000001780)=@can, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001880)=""/77, 0x4d}, 0x1f}, {{&(0x7f0000001900)=@phonet, 0x80, &(0x7f0000004c40)=[{&(0x7f0000001980)=""/133, 0x85}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/227, 0xe3}, {&(0x7f0000002a80)=""/155, 0x9b}], 0x4, &(0x7f0000004c80)=""/141, 0x8d}, 0x7f}, {{&(0x7f0000004d40)=@un=@abs, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004dc0)=""/36, 0x24}, {&(0x7f0000004e00)}], 0x2, &(0x7f0000004e80)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005e80), 0x80, &(0x7f0000001800)=[{&(0x7f0000005f00)=""/231, 0xe7}, {&(0x7f0000006000)=""/80, 0x50}, {&(0x7f0000006080)=""/135, 0x87}, {&(0x7f0000006140)=""/230, 0xe6}, {&(0x7f0000006240)=""/233, 0xe9}, {&(0x7f00000015c0)=""/105, 0x69}, {&(0x7f00000063c0)=""/28, 0x1c}, {&(0x7f0000006400)=""/212, 0xd4}], 0x8, &(0x7f0000006580)=""/25, 0x19}, 0x9}, {{&(0x7f00000065c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000007b00), 0x0, &(0x7f0000007b80)=""/92, 0x5c}, 0x14}], 0x7, 0x0, &(0x7f0000000000)={0x77359400}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000002bc0)="5eb9682411cf8f0d3c192a54afeea441829ec7f32edea3b69b755f10dd05bf3e4f8cd83d731a8531d51cf093b19f657f417780d8e4d2b9ad8a05925f54d9eba9525b9b03", 0x44, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1425.928889][T19594] QAT: failed to copy from user cfg_data. 04:38:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="00020000000000000502000004010004010004018802000100af05fa0fa403dabebf1ea6daeb549a1d83d7b703aa633283d5e5bd85aaee3782216326628b472d4033d575a1f23cb2707de5dd8992b7385afbfac6a4f558c4dc619396f28d4cd5a761c0abc5abcd0bc3fa"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2000000d}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x3e6a8ccaa85226c7}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1426.128091][T19601] QAT: failed to copy from user cfg_data. [ 1426.251396][T19610] QAT: failed to copy from user cfg_data. [ 1427.761034][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1427.762719][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1427.768239][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1427.780917][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1429.841157][T16347] Bluetooth: hci7: command 0x1001 tx timeout [ 1429.848141][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1429.856980][T16347] Bluetooth: hci6: command 0x1001 tx timeout [ 1429.863529][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1431.920953][T16347] Bluetooth: hci6: command 0x1009 tx timeout [ 1431.927222][T16347] Bluetooth: hci7: command 0x1009 tx timeout 04:38:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffff7f00000000) 04:38:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) bind(r3, &(0x7f0000000100)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000480)) preadv(r2, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 04:38:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6c00000000000000) 04:38:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffff7f00000000) [ 1435.917703][T15956] Bluetooth: hci7: sending frame failed (-49) 04:38:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001006da9a1bd480685d9df220c6fbc597bdbc5357fb5b22824146bd12e656bb76d9c4e06a444a2465413b10f3c2a5b592c59d3a2caf8aa098b875c93cdb05af37c60203df4c435569fdf18ef20b3f7895540e2fee71a01b7fefc483d04595b945bb796d17bdc640ee31712420031169e7d759220842c174675b3a911fde2f16a07233495c238d0857b3e2e330bed7e6de2e02e650b21cebfdac6abdeb4d80707f0d8886860838cc6feae04d182"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002000000000000050200000401000401000401020001006da9a1bd480685d9df220c6fbc597bdbc5357fb5b22824146bd12e656bb76d9c4e06a444a2465413b10f3c2a5b592c59d3a2caf8aa098b875c93cdb05af37c60203df4c435569fdf18ef20b3f7895540e2fee71a01b7fefc483d04595b945bb796d17bdc640ee31712420031169e7d759220842c174675b3a911fde2f16a07233495c238d0857b3e2e330bed7e6de2e02e650b21cebfdac6abdeb4d80707f0d8886860838cc6feae04d182"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1435.983292][T19660] QAT: failed to copy from user cfg_data. [ 1436.021658][T19652] QAT: failed to copy from user cfg_data. 04:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1436.185991][T19666] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1436.232620][T19669] QAT: failed to copy from user cfg_data. [ 1436.233096][T19668] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1436.240300][ T10] Bluetooth: hci9: Frame reassembly failed (-84) [ 1436.266685][T15597] Bluetooth: hci10: Frame reassembly failed (-84) 04:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1436.566256][T19683] QAT: failed to copy from user cfg_data. 04:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1436.839239][T19691] QAT: failed to copy from user cfg_data. 04:38:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1437.009402][T19697] QAT: failed to copy from user cfg_data. [ 1437.920929][ T7854] Bluetooth: hci6: command 0x1003 tx timeout [ 1437.928217][T19673] Bluetooth: hci6: sending frame failed (-49) [ 1438.011116][T16347] Bluetooth: hci8: command 0x1003 tx timeout [ 1438.020599][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 1438.021418][T19673] Bluetooth: hci8: sending frame failed (-49) [ 1438.032187][T19677] Bluetooth: hci7: sending frame failed (-49) [ 1438.251087][T16347] Bluetooth: hci9: command 0x1003 tx timeout [ 1438.257308][T19699] Bluetooth: hci9: sending frame failed (-49) [ 1438.320928][ T7854] Bluetooth: hci10: command 0x1003 tx timeout [ 1438.327853][T19699] Bluetooth: hci10: sending frame failed (-49) [ 1440.010939][ T7854] Bluetooth: hci6: command 0x1001 tx timeout [ 1440.017497][T19699] Bluetooth: hci6: sending frame failed (-49) [ 1440.081092][ T7854] Bluetooth: hci8: command 0x1001 tx timeout [ 1440.088553][T19699] Bluetooth: hci8: sending frame failed (-49) [ 1440.094969][ T5] Bluetooth: hci7: command 0x1001 tx timeout [ 1440.101473][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1440.330967][ T7854] Bluetooth: hci9: command 0x1001 tx timeout [ 1440.338051][T19699] Bluetooth: hci9: sending frame failed (-49) [ 1440.411005][ T7854] Bluetooth: hci10: command 0x1001 tx timeout [ 1440.417853][T19699] Bluetooth: hci10: sending frame failed (-49) [ 1442.091360][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1442.161007][T16347] Bluetooth: hci7: command 0x1009 tx timeout [ 1442.167081][T16347] Bluetooth: hci8: command 0x1009 tx timeout [ 1442.411077][T16347] Bluetooth: hci9: command 0x1009 tx timeout [ 1442.491009][T16347] Bluetooth: hci10: command 0x1009 tx timeout 04:38:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffff00000000) 04:38:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffff00000000) 04:38:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1446.161478][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1446.171685][T19715] QAT: failed to copy from user cfg_data. [ 1446.219341][T19726] QAT: failed to copy from user cfg_data. 04:38:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1446.409553][T19732] QAT: failed to copy from user cfg_data. 04:38:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:38:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=ANY=[@ANYBLOB="000200000000000015020401000415020001000000000000"], 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:38:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1446.817266][T19750] QAT: failed to copy from user cfg_data. 04:38:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1447.016885][T19758] QAT: failed to copy from user cfg_data. [ 1448.251081][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1448.257798][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1448.264721][ T7860] Bluetooth: hci6: command 0x1003 tx timeout [ 1448.270958][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1450.321060][ T7860] Bluetooth: hci6: command 0x1001 tx timeout [ 1450.327124][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1450.328118][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1450.341004][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1452.401052][T19747] Bluetooth: hci7: command 0x1009 tx timeout [ 1452.407126][T19747] Bluetooth: hci6: command 0x1009 tx timeout 04:39:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffff89a00000) 04:39:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xffffffff89a00000) 04:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x1fffd}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x7, 0x30, 0x2, 0x29b, 0xc, "b9a65ea9d3ff1f14df4b1a02b3ad15bccf3d98"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$notify(r0, 0x402, 0x40) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r2, r4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 04:39:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1456.430342][T19784] QAT: failed to copy from user cfg_data. 04:39:01 executing program 2: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0xfffffff7}}, [0x0, 0x4, 0x100000000, 0x0, 0x8, 0x4, 0x100000001, 0x427f, 0x0, 0x1, 0x1, 0x40, 0x1, 0x38000000, 0x7]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x8, 0x30, 0x1, 0x10001}, &(0x7f0000000200)=0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x0) 04:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000100)={0x0, 0x9, 0x3f}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000900)={0x3, &(0x7f0000000080)=[{0x9, 0xffff}, {0x5, 0x8}, {0x8d, 0x7fff}]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x0, @struct={0x4, 0x7}, r2, 0x7, 0x7, 0x27d, 0x4, 0x1ffc00000000000, 0x8, @usage=0x4630, 0xffff, 0x5, [0x10001, 0x633, 0x4718, 0x0, 0x1, 0x9]}, {0x29ba1eab, @usage=0x6fca0673, 0x0, 0x3f, 0x228, 0xad7b, 0xff, 0x3f, 0x6c, @struct={0x101, 0x10001}, 0x3, 0x0, [0xc57f, 0x8, 0x1, 0x1d4, 0x100000001]}, {0x2, @struct={0x9, 0x14995099}, 0x0, 0x3540d938, 0xffffffff, 0x1, 0x101, 0x8000, 0x404, @struct={0x435, 0x40}, 0x7, 0xff, [0x9, 0xfffffffffffff800, 0x9, 0x0, 0xe4, 0x96c]}, {0xffff, 0x0, 0x7fa2}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x33) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000980)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000940)=0xb) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000a00)={0xd, 0x1}) 04:39:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1456.661180][T11045] Bluetooth: hci7: sending frame failed (-49) [ 1456.685242][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1456.692791][T19804] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1456.705083][T19799] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1456.769540][T19811] QAT: failed to copy from user cfg_data. 04:39:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1456.811753][ T307] Bluetooth: hci8: Frame reassembly failed (-84) [ 1456.834195][T19799] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:39:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1456.925306][ T1039] Bluetooth: hci10: Frame reassembly failed (-84) [ 1456.969038][ T307] Bluetooth: hci9: Frame reassembly failed (-84) [ 1457.051809][T19824] QAT: failed to copy from user cfg_data. [ 1457.133782][T19830] QAT: failed to copy from user cfg_data. 04:39:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x7, 0x30, 0x2, 0x29b, 0xc, "b9a65ea9d3ff1f14df4b1a02b3ad15bccf3d98"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$notify(r0, 0x402, 0x40) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r2, r4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 04:39:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x7, 0x30, 0x2, 0x29b, 0xc, "b9a65ea9d3ff1f14df4b1a02b3ad15bccf3d98"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$notify(r0, 0x402, 0x40) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r2, r4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) [ 1457.398200][T19677] Bluetooth: hci11: sending frame failed (-49) [ 1457.420480][T19835] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1458.721008][T19747] Bluetooth: hci7: command 0x1003 tx timeout [ 1458.721163][T16347] Bluetooth: hci8: command 0x1003 tx timeout [ 1458.734587][T19677] Bluetooth: hci7: sending frame failed (-49) [ 1458.740939][T16347] Bluetooth: hci6: command 0x1003 tx timeout [ 1458.746983][T19677] Bluetooth: hci6: sending frame failed (-49) [ 1458.754723][ T307] Bluetooth: hci8: Frame reassembly failed (-84) [ 1458.891073][T16347] Bluetooth: hci9: command 0x1003 tx timeout [ 1458.898213][ T307] Bluetooth: hci9: Frame reassembly failed (-84) [ 1458.971183][T16347] Bluetooth: hci10: command 0x1003 tx timeout [ 1458.978822][T19677] Bluetooth: hci10: sending frame failed (-49) [ 1459.442405][T16347] Bluetooth: hci11: command 0x1003 tx timeout [ 1459.450043][T19677] Bluetooth: hci11: sending frame failed (-49) [ 1460.801241][T19710] Bluetooth: hci6: command 0x1001 tx timeout [ 1460.807330][T19710] Bluetooth: hci8: command 0x1001 tx timeout [ 1460.807930][T19677] Bluetooth: hci6: sending frame failed (-49) [ 1460.815830][T19710] Bluetooth: hci7: command 0x1001 tx timeout [ 1460.821763][T15597] Bluetooth: hci8: Frame reassembly failed (-84) [ 1460.828124][T19673] Bluetooth: hci7: sending frame failed (-49) [ 1460.960998][T16347] Bluetooth: hci9: command 0x1001 tx timeout [ 1460.968104][ T1039] Bluetooth: hci9: Frame reassembly failed (-84) [ 1461.040893][T16347] Bluetooth: hci10: command 0x1001 tx timeout [ 1461.047717][T19853] Bluetooth: hci10: sending frame failed (-49) [ 1461.521334][ T25] Bluetooth: hci11: command 0x1001 tx timeout [ 1461.528104][T19853] Bluetooth: hci11: sending frame failed (-49) [ 1462.880988][T11571] Bluetooth: hci8: command 0x1009 tx timeout [ 1462.888034][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1462.895398][ T7860] Bluetooth: hci7: command 0x1009 tx timeout [ 1463.041083][T11571] Bluetooth: hci9: command 0x1009 tx timeout [ 1463.131055][T11571] Bluetooth: hci10: command 0x1009 tx timeout [ 1463.610948][ T7860] Bluetooth: hci11: command 0x1009 tx timeout 04:39:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x7, 0x30, 0x2, 0x29b, 0xc, "b9a65ea9d3ff1f14df4b1a02b3ad15bccf3d98"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x33) fcntl$notify(r0, 0x402, 0x40) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x20) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={r2, r4}) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) 04:39:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400441, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="fcffffff000000002e2f66696c653000e90d7e68dea4ffb2e1fd7681ba5035df2dd6ccb028c0e335cb372eef5975494bbea40083516a47ecd3e5fc6b85fed1884a296c406ef45e7a46fde59b17"]) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000000c0)={0x7, 0x10000, 0x35ed, 0x20, 0x80000000}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000100)={0x2, 0x4, 0xff}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000080)) dup3(r2, r1, 0x0) [ 1467.429060][ T10] Bluetooth: hci6: Frame reassembly failed (-84) [ 1467.439857][T19875] QAT: failed to copy from user cfg_data. [ 1467.450770][T19876] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1467.469640][ T6545] Bluetooth: hci7: sending frame failed (-49) [ 1467.480370][T19886] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1467.492719][T19890] QAT: failed to copy from user cfg_data. [ 1467.501902][ T307] Bluetooth: hci8: Frame reassembly failed (-84) [ 1467.579984][T19896] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1467.597753][ T10] Bluetooth: hci9: Frame reassembly failed (-84) 04:39:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="dec34a530000000004010004b88ebfee27aea792d49f8d86e3ff030102000100e4ffffff"], 0x18) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) listen(r1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) r2 = io_uring_setup(0x365b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0xfffffffb, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x50, r2, 0x10000000) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) [ 1469.441070][T19710] Bluetooth: hci6: command 0x1003 tx timeout [ 1469.448468][T19699] Bluetooth: hci6: sending frame failed (-49) [ 1469.520943][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1469.528142][T19699] Bluetooth: hci8: sending frame failed (-49) [ 1469.535687][T19710] Bluetooth: hci7: command 0x1003 tx timeout [ 1469.542194][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1469.600940][T17084] Bluetooth: hci9: command 0x1003 tx timeout [ 1469.607689][T15597] Bluetooth: hci9: Frame reassembly failed (-84) [ 1471.521115][ T7860] Bluetooth: hci6: command 0x1001 tx timeout [ 1471.528375][T19699] Bluetooth: hci6: sending frame failed (-49) [ 1471.601243][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1471.607307][ T7860] Bluetooth: hci8: command 0x1001 tx timeout [ 1471.607982][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1471.614771][T11045] Bluetooth: hci8: sending frame failed (-49) [ 1471.690949][ T7860] Bluetooth: hci9: command 0x1001 tx timeout [ 1471.698535][ T10] Bluetooth: hci9: Frame reassembly failed (-84) [ 1473.610926][T17084] Bluetooth: hci6: command 0x1009 tx timeout [ 1473.680991][T16347] Bluetooth: hci8: command 0x1009 tx timeout [ 1473.692633][T17084] Bluetooth: hci7: command 0x1009 tx timeout [ 1473.760918][T16347] Bluetooth: hci9: command 0x1009 tx timeout 04:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x7, 0x2, 0x983a}, 0x1c) 04:39:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10001, 0x0, 0x4000000, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x8, 0x30, 0x7, 0x20, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2, 0x81}, 0x6504, 0x285526fc, 0x2, 0x9, 0x4, 0x8, 0x401, 0x0, 0x10000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x40) 04:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4, 0x983a}, 0x1c) 04:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1478.203289][T19946] QAT: failed to copy from user cfg_data. [ 1478.229107][T19947] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1478.285103][ T89] Bluetooth: hci6: Frame reassembly failed (-84) [ 1478.307950][T19821] Bluetooth: hci7: Frame reassembly failed (-84) 04:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x3, 0x2, 0x983a}, 0x1c) [ 1478.337776][T15597] Bluetooth: hci8: Frame reassembly failed (-84) [ 1478.337911][ T1039] Bluetooth: hci9: Frame reassembly failed (-84) [ 1478.355222][T19821] Bluetooth: hci7: Frame reassembly failed (-84) 04:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1478.394590][T19954] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1478.406039][T19954] Bluetooth: hci9: Frame reassembly failed (-84) 04:39:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10001, 0x0, 0x4000000, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x8, 0x30, 0x7, 0x20, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2, 0x81}, 0x6504, 0x285526fc, 0x2, 0x9, 0x4, 0x8, 0x401, 0x0, 0x10000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x2, 0x2, 0x983a}, 0x1c) 04:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000007, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:39:23 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1f}, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x6, 0x81, 0x7f, 0x0, 0x3, 0x83000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x5}, 0x400, 0x4, 0x4, 0x7, 0x2, 0xfffffffb, 0xdaf, 0x0, 0x80, 0x0, 0x5}, 0x0, 0xa, r0, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1479.086480][T19989] QAT: failed to copy from user cfg_data. [ 1480.241222][T16347] Bluetooth: hci6: command 0x1003 tx timeout [ 1480.248395][T15597] Bluetooth: hci6: Frame reassembly failed (-84) [ 1480.256548][T15597] Bluetooth: hci6: Frame reassembly failed (-84) [ 1480.321110][T16347] Bluetooth: hci7: command 0x1003 tx timeout [ 1480.328304][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1480.410954][T17084] Bluetooth: hci9: command 0x1003 tx timeout [ 1480.418016][T17084] Bluetooth: hci8: command 0x1003 tx timeout [ 1480.425192][T19699] Bluetooth: hci8: sending frame failed (-49) [ 1480.432436][ T307] Bluetooth: hci9: Frame reassembly failed (-84) [ 1482.321709][T17084] Bluetooth: hci6: command 0x1001 tx timeout [ 1482.328809][T15597] Bluetooth: hci6: Frame reassembly failed (-84) [ 1482.411130][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1482.417536][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1482.491131][T11571] Bluetooth: hci8: command 0x1001 tx timeout [ 1482.497386][T11571] Bluetooth: hci9: command 0x1001 tx timeout [ 1482.497463][T19699] Bluetooth: hci8: sending frame failed (-49) [ 1482.505512][ T307] Bluetooth: hci9: Frame reassembly failed (-84) [ 1483.762670][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.769109][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.411138][T19710] Bluetooth: hci6: command 0x1009 tx timeout [ 1484.480967][T19710] Bluetooth: hci7: command 0x1009 tx timeout [ 1484.561057][T17084] Bluetooth: hci9: command 0x1009 tx timeout [ 1484.571587][T19710] Bluetooth: hci8: command 0x1009 tx timeout 04:39:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0xfffffff9, 0x3ff, 0x3, 0x8, 0xc, "92f8904b22f65b0db3b300f34f9caa33472005"}) 04:39:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10001, 0x0, 0x4000000, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x8, 0x30, 0x7, 0x20, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x2, 0x81}, 0x6504, 0x285526fc, 0x2, 0x9, 0x4, 0x8, 0x401, 0x0, 0x10000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:34 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1f}, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x6, 0x81, 0x7f, 0x0, 0x3, 0x83000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x5}, 0x400, 0x4, 0x4, 0x7, 0x2, 0xfffffffb, 0xdaf, 0x0, 0x80, 0x0, 0x5}, 0x0, 0xa, r0, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) socket(0x200000000000011, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 04:39:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xc4a, 0x1000, 0x1, 0x0, 0x7, "fb7ee2b6dff759ef"}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x82082, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB="bd0f000000000000800000000000000006000000000000000000000000000000ff0100000000000001000000000000007a000000ff7f0000018000004106000005000000000000000800448d168d73b8d78e88e4bcd19b0000000000000200000000000000078a135a000000001000"/120]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000380)={r3, r4, "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", "fc97a8dd8018fcd62d2fdcf5d4433f5b469906753219c2c89a582535982617c89058db99ca5ca74a9dbe61dbbf6acdea1920595fc70fd408c5ff37b62bd21cb791ff4a7cdefedebbb3f06b2a42151eb2531ce90a132557daccfb4ed9529d61cc6d81eaae74ac20e9dda332690e57d2a3aeab7d9a8ff26642f9648855af88d1df4c14c3a18962ede82c03399ba22cf8fdabb6f3ba4a6a75fa1f2f4cad1306e48f4edaae50e46a6bee58526af312f9707f11761f29899786a8f1ed66902f14ecd0ad5fc6e1a79f41de541084433efe8e009f8d082d7ddc4d9fa2c13db4cf6d705d402cd3fcea62febb474e89ca06277c9bdbf406b71a56069479c0d6174b332ce30845335bd60c67c1f281b30d5836d418e2eba63938125eeb4f8a3970686a600761bd017c0e33e9895a0b61732501cc4cee5506a023175bfcb9113957ba9899a1c95b764c30a174533d9b375978cd764e86eff2fad51eff9a771513546761a3f56bd880de21979c54a62d09fac1fcb4587c891b945b3727870c964768e38c938c48de93998d84bad15b7af06321b7c6ab4fe8ecf8921e90cd31c8b5c3d8a3cb8ad74beec1db9f0de79e2549959e0531e4dd60ac2fd37c7fd5e311a9006a34d5714ceb83671ecdc6bda80346ae4e0479eb22d05ddab17e69374246a295c32db70c50c55bc8e5e4f2acb11c5f7e11614e3af56152bec017af3b9e5ff48afc22165c203488728af49b51e5f470dc1549e1edabcc253da1367ec1663d66c22d59cc03ae15403001366bac6ad49c501ffbd04dba5aa2402e226574fb04af1e7917af66632224e0fce45c87c354a13531612527fa1ab3740568db29b7c77c1569184c72e52ecd7213d1f52cc9540ae898a7bce98e714db3f7e35f36accb62a221d8c545b15723e6f00281c4466d7206d3b077acaca23d5aa8628c80d193301b363d6e58ab9964caf670da43bd9cf3f7d9f6561fa7c15501e6337adae3edfe9c3200d19f66c80e20dbf4655c79157bb8583cd8841dc985125a850fc0213158f53620e4c6ffe572e73d9e67953a7be244c1bb2b62c34380a5325bde12dcfeca7385f6f19d15a4b237282c05078e085207846ca228d3405e1209109c8c3e4b84a0f1011a8f4d71adcddce214d2d2eb80a5c0bc596b91b743be0c4fd50e6ea7886cbe9058107a8d568da32dddacc284ceb646f5b28a5a69d93e360279d548996ced695e442d6c2d7689816d29ceab6ad5d54c3d312e5e8c67068571bd45b703c47352f8ae1da790ee5ce7e16dba410e3f88a4ed25b39bb7f746fd4bff3bd67fc52c9f6c52400723ee6dfc1cb5ca1b09eda8e8ad8bf4489d933ae9f60b5158d1f15b587cecc1f7289f769882872007ece7c098e7594e28815c6958027c72f3c07e5e45ebc92062b063139715576b3a12957aacfdcb34aeebdd0405cd6b985def3fbbe88d4602aeb1045b4540437d3726936978b7dacffdc1d386b4a701e9193708bc3b5adeee1356a87cdfcfce459085fad3a56bec3c5faa4c5e4b45195719748043d278c9aa31ec7f29a2fffc872bce2699cd0ccb4e72cd4c17a553697c0bb60fcad95d52d3bfe3db6332d2545ecab97681364a4beff9926b17bfff2f900b112c022e1841e0449ebc693cf11e27195353e36e2246697849d11c7e4c5569bef12db89f535488d5c097f42a59d2c29078b4f78dc4934c5aba97f4d6d8466d92981e56c1351f71231610a60bdf23d5a563b9890215657a3345db975af8b934ec6a8f08985d2d0aa64b674c6cdac7c2e065c7510fbc9775c39f0b0b75249628fe6a2dccb71b5576ce13b6d475df10293451e718b23eaceec403b3eb8fbf1a266a36c2c66a4a5640970be2ae7a1a047bff94f061f914defbb898690202ee8fef76e97a30f38a32ec22d19189fcb3db53d3fbb842fffddb8ceeb192b2858011d985f541ab90bfaae0f224057443ab5bf7845dbe94377c8525131ef5e474cf5f92aa4f59688251d99861a76048f9d4d2017b8bb6edbf8883d297875cc9b911ff8ccea1c01274c733c1f7cfd7744a5cf817ee8da873ad52deaff2afffcef6a42f1b5cfc651d55d2f2007ad0441861ffa6f1d8676e6a93f2637efd8b1c9618c824dad869d60b82b1330d0a21a2c279c7b3fb422bf333f6bd10c9c29d9265986b159e41a69267be62fc9f98b10d07282beeb232eb131679430f9d14624da0ca803169fa26ac3f949e00a416647a4c6e17df221352f65aaec4987ec2f4753ab1f78cf73c7df3364cc23441ac1bac00185959ca010c63272ebebee0d700d69757684b384212b7a1cf4500893df20dd7f2c8fe49ff195fb9626a8ea7a2c5aab91c4595742f8d1afaee166a997cbb9bd5b44214ef17a522ffd36f8e3943ae06ac8e122ceb76fccf89658832b5bf16b0fec8b6982a5af43b8d1f3f15a58e43e77dc8b3d803cefd5881d100259d92cd1232a14a03f9d5d37d9c68a0c1ec93e5e704189190b103056a9c82d4d3a81cbaf5588836f03d2e2c4d452ec91bac56db3e200fcf3172ec6fe492864a46e6895a91bcbe6a2ea616f69d202c52ae575a30a6e3df6f99804a5042d44b99b433b42509597fee56d7cdb3b0af55fa1833eaf2fcd544274bcc8da25b8fb8dcce3eca2a41e21578b96d5c03cf03f2e438f7e0b7272124ae8258342fd81b4283358cf48ed44b776891808a292a69df7c33c48df0de9c960def687fc2e0c903b8aa26b3847325d321c0940920ee130ecd122332e5be9dc344328bd992d61589065bb00ad538035f6966ffe72e3fce864114206652c8357fda8f1e209ca0cb4dc92007c993b82a2923ab5c618d928ffd572539bb88b2870100ddae492f3b00ed41392393f32de1d9ea920c3dbaf2292506a76a2f7883ae6a87c3bfdfee3ec20c618a127b2e50887c07e71fff94e391e464f9389588288861ee868aa27b13f3f21e5328289e4908e3866071e8b8bbd6c7af17b2bed0bb2122a4c92e41a3bf3261880723548cb5759df8228ef780d5514dc8a591dc5c8fd94e2a17fb13ef6a8d65ef84d0a9eebe504d1360b4444845525e522149ee422e9fcba8d18ca63669bf07df204a29083c4cb3763002ba761d8f8d9c376d1a29bf251c6018fc11fd563bd5430ebf3fdee6d7f71d0e33973db904d447e633b0e16c8f6baaa2a8129ecf0f1487ca52137329bbfe7d238f3780550236db70c2cc744dd470be97dae97b8780a668f0a1f5565d67c916f0f4536b2e0f707b7b7cd1999fbcf305d608080d4358b258bb6681e0774c6402b21eb41b7c5e012206195562ac183c540bb51d5715b5910a018c06a7bac9d364e85b5e20187c94b40ae60e10a362997337637653553eaa9a57336cb428435812e1f75b8ee9edfc7c345eff93acc445ce6a0ffedc135c9b93ae2feb6e194e447cd12df2b00f97e01447de0150d29ebfe693ab05861c90eb1286d56ef79bad8d217f9e4057e6bfb920130a3c25dd8174fe42bda51606d56b5cda02975b0bd49dd6cd7500e10148200d3aef7667000a86797643637058fc8709d4dbc1852ce3f7fd2b2cd23d07af8b484c5843f10fc0c9ede6a351184959bbe1012446409920f63053a1fad88f954db88c2287b4f421abfba1c9872981b715cc2c86510a9dff255905be3748dcca99c67922b84a16f726f421d3ba54e6c9272129d0ad0d8dd63be7b16c42afe7130cb743bd14b82ebccab012318a992105bdcdd79ed93cf17c4c2b80751d697c7a44510587acef6292cb1bd1c1e69a51f64e868eb08d501b28cb2ced69a3e16df7c095cb43b814f67b3cca0773a906a401b5333c707d4b58b6241f587c64c05ce44002c545a52a19be525750c042ff8a4747c1436896f19b7a79968d3a3e7b67539e11edb75e26345affb5d2e0646b6e6638a4dee4dd35b74d1de72eba8ba8c2b64ea852c21eef24f78cc989d2633cfc0f8fab927560803ec336f9f0a11a6ea7d7f5f34e1c4d0665b5810e2d659e511365d85b77cb016d8beb3eba2f3906402d55fffcffdc67be9a08a9c702185d0757f05164198c95e20514754983595310571da598e4f644fae2fd95d3c29be8ca2f8d7cfc5939147120f8d2baa5659db8a89181384aa93879f8e5822334888261c12ed300b88667243bc7957e3986dc62f8531855a0e3133a69587dd6e20ac1b997ff02c221d1eb73dec9df24266593c28238b5c0194a8120adf12a5c83cecfb9fe077f973631f9ce6d71d1344eac4f2bed86c37c2043fb42b6e049e4a58b1651d703e74d40d925787478d7d0e3c49173024f7a8082e034afd37634b1923441a839adc9d47ec1baba9db2190c68c92949fbb62fa3b6cf9b3d02b2c179b795b720441234d0f5e57759db038c4e842d46a09a3372134bee3301781165b5fd92aa5e3cb55fd3d7c06193a29105d5f4d55564b7e3399ebc5c7ea5a2cf025bedd4719d6913fea6bc2b37de1bd82ee875bd73775f7d46081fe1ed0892ccf374832c8f1e70be5dadbf9cb4d5781d3f88e16cd15f2c5af54c2271d07e1b62bbb651f4dac32c207542264df1a110a5402e4325b9a8cda3b74580358a1a2fa87af256b0ffb5c740058d5ff386739cf91daad2a1374c344359851fe3215c61398ca3f53546a1223b0d522dad93176b810c364d496d84499898b391f8ed1cf3b143df448cca3575b782b7f0ff2b8d66f8968c2ef6f49e8d7ab08e1923ebd378ef096accaac9b3904377730b4cc136b87c494eb4f6111e74e2242187540cacb4dab85e2fe898b506d2d751f72823ea4f96f9946f893b6c158b5eb295f5b0868b2e5b8fa757125174468fcc131cdcbd68d9c8f2fc074318745f064dc20a319c949ce75b4d140e86dc37d9bed4204e78f4d18623ae8a6cbc746fba5d8a265a4ede22e542a03e74284f7dbe0fd9b853d69390ac3e10a40431e1d1b859386b47d39fa57903ca2befe93649a0107e94a7ab1202621f58f369a84649795037986c7e581f1c52335403f87b0743120b86075c24f6b7c629d2973ff43a91ad3541e7fd6fe958ee410e0204844b5ab9857c6ccbe6d3d56945d84e4d6d2b789b02711fd87e90541a5bfdb0f3a60c11e7bf13f25944492358171cd6b63953c098b6068f77170160eedacb47e9215b2f64fbadcd80258bab9b22c05c9a0481525a312cd8f76183478bc8b131741adf5fdc734faf4e39a53ac359d0a00e08a3e9459baf5adf6f2a538088b427872ba82ffc323a640ca020ea6b8894b4a8ba4f4a24ad0722c68a598684b558e9a971d342921eecb9fde0e4f7d917f6a32b0b891b7a6b575ef6a595ec991381426d45df7875846f4963abcd8deec13da24e677d52c0f26c9d3a770677e64be711da66a4f738eceb6de59c98a7febe04b32f5371546683dc0522bfdfad09ba0396c45f697cb7fa27e2f8a2af189b13fab7d0a73b91daef10"}) [ 1489.100872][ T1039] Bluetooth: hci6: Frame reassembly failed (-84) [ 1489.126156][ T89] Bluetooth: hci7: Frame reassembly failed (-84) [ 1489.143491][T20020] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:39:34 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1fffd}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1f}, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x6, 0x81, 0x7f, 0x0, 0x3, 0x83000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x5}, 0x400, 0x4, 0x4, 0x7, 0x2, 0xfffffffb, 0xdaf, 0x0, 0x80, 0x0, 0x5}, 0x0, 0xa, r0, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1489.157046][T20032] QAT: failed to copy from user cfg_data. [ 1489.171562][T15597] Bluetooth: hci8: Frame reassembly failed (-84) [ 1489.183820][T15597] Bluetooth: hci7: Frame reassembly failed (-84) [ 1489.214589][T19699] Bluetooth: hci9: sending frame failed (-49) [ 1489.214959][T20029] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1489.233338][T20029] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1489.329673][T15597] Bluetooth: hci10: Frame reassembly failed (-84) [ 1489.342080][T20041] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:39:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 1489.405297][T19821] Bluetooth: hci10: Frame reassembly failed (-84) 04:39:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) 04:39:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x540f, 0x0) 04:39:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1491.121410][T19747] Bluetooth: hci6: command 0x1003 tx timeout [ 1491.129126][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1491.201028][ T7860] Bluetooth: hci7: command 0x1003 tx timeout [ 1491.201048][T19747] Bluetooth: hci8: command 0x1003 tx timeout [ 1491.202253][T11045] Bluetooth: hci8: sending frame failed (-49) [ 1491.290971][ T7860] Bluetooth: hci9: command 0x1003 tx timeout [ 1491.297546][T11045] Bluetooth: hci9: sending frame failed (-49) [ 1491.361132][T19747] Bluetooth: hci10: command 0x1003 tx timeout [ 1491.368438][ T1039] Bluetooth: hci10: Frame reassembly failed (-84) [ 1493.200980][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1493.207988][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1493.280935][T11571] Bluetooth: hci8: command 0x1001 tx timeout [ 1493.287606][T11045] Bluetooth: hci8: sending frame failed (-49) [ 1493.294171][ T7860] Bluetooth: hci7: command 0x1001 tx timeout [ 1493.361038][T11571] Bluetooth: hci9: command 0x1001 tx timeout [ 1493.367934][T11045] Bluetooth: hci9: sending frame failed (-49) [ 1493.441049][T11571] Bluetooth: hci10: command 0x1001 tx timeout [ 1493.448347][ T1039] Bluetooth: hci10: Frame reassembly failed (-84) [ 1495.281264][T19710] Bluetooth: hci6: command 0x1009 tx timeout [ 1495.371084][T16347] Bluetooth: hci7: command 0x1009 tx timeout [ 1495.377156][T16347] Bluetooth: hci8: command 0x1009 tx timeout [ 1495.455216][T16347] Bluetooth: hci9: command 0x1009 tx timeout [ 1495.530962][T16347] Bluetooth: hci10: command 0x1009 tx timeout 04:39:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca6705bd", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) r5 = openat2(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0x50, 0x7}, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) r6 = memfd_secret(0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$VT_ACTIVATE(r6, 0x5606, 0x3771) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x1f) 04:39:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) 04:39:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x2, '\x00', [@ra, @enc_lim, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:44 executing program 2: setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0xc4a, 0x1000, 0x1, 0x0, 0x7, "fb7ee2b6dff759ef"}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x82082, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYBLOB="bd0f000000000000800000000000000006000000000000000000000000000000ff0100000000000001000000000000007a000000ff7f0000018000004106000005000000000000000800448d168d73b8d78e88e4bcd19b0000000000000200000000000000078a135a000000001000"/120]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000380)={r3, r4, "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", "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"}) 04:39:45 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) 04:39:45 executing program 2: syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = fork() r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2d, 0x20004) r3 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r2, &(0x7f0000000100)={r3, r5, 0xfffff275}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:45 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) [ 1500.080096][T20093] QAT: failed to copy from user cfg_data. [ 1500.144650][ T89] Bluetooth: hci6: Frame reassembly failed (-84) [ 1500.186283][ T1039] Bluetooth: hci7: Frame reassembly failed (-84) [ 1500.200293][T20101] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1500.216716][T20106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1500.223552][T20106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1500.256428][ T89] Bluetooth: hci7: Frame reassembly failed (-84) [ 1500.264414][T20112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1500.270953][T20112] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 04:39:45 executing program 4: ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) [ 1500.322277][T20106] vhci_hcd vhci_hcd.0: Device attached 04:39:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 1500.363589][T20112] vhci_hcd vhci_hcd.0: Device attached [ 1500.378720][T19699] Bluetooth: hci8: sending frame failed (-49) 04:39:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x6ca483, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1500.591263][T19747] usb 13-1: new high-speed USB device number 2 using vhci_hcd 04:39:45 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 1) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:39:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) 04:39:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCFLSH(r1, 0x540b, 0x0) 04:39:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) [ 1500.858188][ T1039] Bluetooth: hci9: Frame reassembly failed (-84) [ 1500.866362][T11045] Bluetooth: hci10: sending frame failed (-49) [ 1500.869902][T20142] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1500.878484][ T1039] Bluetooth: hci9: Frame reassembly failed (-84) [ 1500.906375][T20152] FAULT_INJECTION: forcing a failure. [ 1500.906375][T20152] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.920328][T20152] CPU: 0 PID: 20152 Comm: syz-executor.0 Not tainted 5.16.0-rc4-syzkaller #0 [ 1500.926415][T20106] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(3) [ 1500.929106][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.935596][T20106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1500.945626][T20152] Call Trace: [ 1500.945635][T20152] [ 1500.959681][T20152] dump_stack_lvl+0xcd/0x134 [ 1500.964285][T20152] should_fail.cold+0x5/0xa [ 1500.968801][T20152] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1500.974530][T20152] should_failslab+0x5/0x10 [ 1500.979079][T20152] __kmalloc+0x72/0x340 [ 1500.983246][T20152] tomoyo_realpath_from_path+0xc3/0x620 [ 1500.988891][T20152] ? tomoyo_profile+0x42/0x50 [ 1500.993579][T20152] tomoyo_path_number_perm+0x1d5/0x590 [ 1500.999048][T20152] ? tomoyo_path_number_perm+0x18d/0x590 [ 1501.004698][T20152] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1501.006500][T20143] QAT: failed to copy from user cfg_data. [ 1501.010540][T20152] ? find_held_lock+0x2d/0x110 [ 1501.010581][T20152] ? __fget_files+0x2f0/0x4c0 [ 1501.025734][T20152] security_file_ioctl+0x50/0xb0 [ 1501.030683][T20152] __x64_sys_ioctl+0xb3/0x200 [ 1501.034916][T20106] vhci_hcd vhci_hcd.0: Device attached [ 1501.035393][T20152] do_syscall_64+0x35/0xb0 [ 1501.045221][T20152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1501.051568][T20152] RIP: 0033:0x7f0af7c1daf9 [ 1501.056490][T20152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.076107][T20152] RSP: 002b:00007f0af6b93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1501.084530][T20152] RAX: ffffffffffffffda RBX: 00007f0af7d30f60 RCX: 00007f0af7c1daf9 [ 1501.092508][T20152] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000004 [ 1501.100485][T20152] RBP: 00007f0af6b931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1501.108460][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.116434][T20152] R13: 00007ffe8a5c260f R14: 00007f0af6b93300 R15: 0000000000022000 [ 1501.124432][T20152] [ 1501.178057][T20152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1501.186319][T20152] QAT: failed to copy from user cfg_data. [ 1502.161069][T20077] Bluetooth: hci6: command 0x1003 tx timeout [ 1502.167866][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1502.241039][ T25] Bluetooth: hci7: command 0x1003 tx timeout [ 1502.401292][T20077] Bluetooth: hci8: command 0x1003 tx timeout [ 1502.410186][T19821] Bluetooth: hci8: Frame reassembly failed (-84) [ 1502.881095][T20076] Bluetooth: hci10: command 0x1003 tx timeout [ 1502.888335][T20076] Bluetooth: hci9: command 0x1003 tx timeout [ 1502.895659][T11045] Bluetooth: hci9: sending frame failed (-49) [ 1502.902691][ T1039] Bluetooth: hci10: Frame reassembly failed (-84) [ 1504.241144][T20076] Bluetooth: hci6: command 0x1001 tx timeout [ 1504.249224][T11045] Bluetooth: hci6: sending frame failed (-49) [ 1504.321217][T20076] Bluetooth: hci7: command 0x1001 tx timeout [ 1504.481150][T20076] Bluetooth: hci8: command 0x1001 tx timeout [ 1504.488291][ T89] Bluetooth: hci8: Frame reassembly failed (-84) [ 1504.961121][T20078] Bluetooth: hci9: command 0x1001 tx timeout [ 1504.968867][T11045] Bluetooth: hci9: sending frame failed (-49) [ 1504.977591][T20078] Bluetooth: hci10: command 0x1001 tx timeout [ 1504.984137][T19821] Bluetooth: hci10: Frame reassembly failed (-84) [ 1506.320997][T20076] Bluetooth: hci6: command 0x1009 tx timeout [ 1506.401119][T20076] Bluetooth: hci7: command 0x1009 tx timeout [ 1506.561050][T20077] Bluetooth: hci8: command 0x1009 tx timeout [ 1507.041214][T20077] Bluetooth: hci10: command 0x1009 tx timeout [ 1507.047548][T20077] Bluetooth: hci9: command 0x1009 tx timeout 04:39:55 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 1) 04:39:55 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) 04:39:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="effffffff3ffffff2d2f66696c653000"]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$KDADDIO(r1, 0x4b34, 0x6) 04:39:55 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 2) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1510.816973][T20184] FAULT_INJECTION: forcing a failure. [ 1510.816973][T20184] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.836767][T20184] CPU: 1 PID: 20184 Comm: syz-executor.0 Not tainted 5.16.0-rc4-syzkaller #0 [ 1510.845960][T20184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.856069][T20184] Call Trace: [ 1510.859356][T20184] [ 1510.862290][T20184] dump_stack_lvl+0xcd/0x134 [ 1510.866925][T20184] should_fail.cold+0x5/0xa [ 1510.871450][T20184] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1510.876069][T20191] FAULT_INJECTION: forcing a failure. [ 1510.876069][T20191] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.876852][T20184] should_failslab+0x5/0x10 [ 1510.876883][T20184] __kmalloc+0x72/0x340 [ 1510.898097][T20184] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1510.903340][T20184] tomoyo_encode+0x28/0x50 [ 1510.907769][T20184] tomoyo_realpath_from_path+0x186/0x620 [ 1510.913420][T20184] tomoyo_path_number_perm+0x1d5/0x590 [ 1510.918881][T20184] ? tomoyo_path_number_perm+0x18d/0x590 [ 1510.924636][T20184] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1510.930487][T20184] ? find_held_lock+0x2d/0x110 [ 1510.935262][T20184] ? __fget_files+0x2f0/0x4c0 [ 1510.939948][T20184] security_file_ioctl+0x50/0xb0 [ 1510.944895][T20184] __x64_sys_ioctl+0xb3/0x200 [ 1510.949602][T20184] do_syscall_64+0x35/0xb0 [ 1510.954046][T20184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1510.960001][T20184] RIP: 0033:0x7f0af7c1daf9 [ 1510.964428][T20184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1510.984396][T20184] RSP: 002b:00007f0af6b93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.992826][T20184] RAX: ffffffffffffffda RBX: 00007f0af7d30f60 RCX: 00007f0af7c1daf9 [ 1511.000842][T20184] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000004 [ 1511.008817][T20184] RBP: 00007f0af6b931d0 R08: 0000000000000000 R09: 0000000000000000 04:39:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x803, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup3(r0, r0, 0x80000) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x83c, 0x1, 0x2, 0x1f, 0x1a, "19a26422f82b65d7"}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x101, 0xe1dd, 0x0, 0x28d, 0x0, [0x49458, 0x9, 0x7, 0x27]}) 04:39:56 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) [ 1511.016819][T20184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.024793][T20184] R13: 00007ffe8a5c260f R14: 00007f0af6b93300 R15: 0000000000022000 [ 1511.032780][T20184] [ 1511.041344][T20191] CPU: 0 PID: 20191 Comm: syz-executor.5 Not tainted 5.16.0-rc4-syzkaller #0 [ 1511.050130][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.060176][T20191] Call Trace: [ 1511.063444][T20191] [ 1511.066384][T20191] dump_stack_lvl+0xcd/0x134 [ 1511.070976][T20191] should_fail.cold+0x5/0xa [ 1511.075481][T20191] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1511.081202][T20191] should_failslab+0x5/0x10 [ 1511.085699][T20191] __kmalloc+0x72/0x340 [ 1511.089853][T20191] tomoyo_realpath_from_path+0xc3/0x620 [ 1511.095397][T20191] ? tomoyo_profile+0x42/0x50 [ 1511.100096][T20191] tomoyo_path_number_perm+0x1d5/0x590 [ 1511.105547][T20191] ? tomoyo_path_number_perm+0x18d/0x590 [ 1511.111195][T20191] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1511.117085][T20191] ? find_held_lock+0x2d/0x110 [ 1511.121870][T20191] ? __fget_files+0x2f0/0x4c0 [ 1511.126571][T20191] security_file_ioctl+0x50/0xb0 [ 1511.131779][T20191] __x64_sys_ioctl+0xb3/0x200 [ 1511.136472][T20191] do_syscall_64+0x35/0xb0 [ 1511.140898][T20191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1511.146798][T20191] RIP: 0033:0x7fe2a57fcaf9 [ 1511.151217][T20191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.170830][T20191] RSP: 002b:00007fe2a4772188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.179253][T20191] RAX: ffffffffffffffda RBX: 00007fe2a590ff60 RCX: 00007fe2a57fcaf9 [ 1511.187228][T20191] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000003 [ 1511.195200][T20191] RBP: 00007fe2a47721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.203194][T20191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.211188][T20191] R13: 00007ffc6aafe01f R14: 00007fe2a4772300 R15: 0000000000022000 [ 1511.219178][T20191] 04:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1511.312616][ T6536] Bluetooth: hci6: sending frame failed (-49) 04:39:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80be4da8951a5f7, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x100) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:39:56 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x540f, 0x0) 04:39:56 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 2) [ 1511.364405][T20191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1511.372123][T20191] QAT: failed to copy from user cfg_data. [ 1511.415880][T20211] QAT: failed to copy from user cfg_data. 04:39:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:56 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 3) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:39:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) (fail_nth: 1) [ 1511.468317][T20216] FAULT_INJECTION: forcing a failure. [ 1511.468317][T20216] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.492172][T20184] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1511.499053][T20184] QAT: failed to copy from user cfg_data. [ 1511.541411][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1511.562709][T20216] CPU: 1 PID: 20216 Comm: syz-executor.5 Not tainted 5.16.0-rc4-syzkaller #0 [ 1511.571510][T20216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.581660][T20216] Call Trace: [ 1511.584941][T20216] [ 1511.587872][T20216] dump_stack_lvl+0xcd/0x134 [ 1511.592475][T20216] should_fail.cold+0x5/0xa [ 1511.596995][T20216] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1511.602379][T20216] should_failslab+0x5/0x10 [ 1511.606890][T20216] __kmalloc+0x72/0x340 [ 1511.611059][T20216] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1511.616281][T20216] tomoyo_encode+0x28/0x50 [ 1511.620711][T20216] tomoyo_realpath_from_path+0x186/0x620 [ 1511.626361][T20216] tomoyo_path_number_perm+0x1d5/0x590 [ 1511.631853][T20216] ? tomoyo_path_number_perm+0x18d/0x590 [ 1511.637504][T20216] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1511.643348][T20216] ? find_held_lock+0x2d/0x110 [ 1511.648131][T20216] ? __fget_files+0x2f0/0x4c0 [ 1511.652824][T20216] security_file_ioctl+0x50/0xb0 [ 1511.657781][T20216] __x64_sys_ioctl+0xb3/0x200 [ 1511.662464][T20216] do_syscall_64+0x35/0xb0 [ 1511.666898][T20216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1511.672803][T20216] RIP: 0033:0x7fe2a57fcaf9 [ 1511.677247][T20216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.697225][T20216] RSP: 002b:00007fe2a4772188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.705649][T20216] RAX: ffffffffffffffda RBX: 00007fe2a590ff60 RCX: 00007fe2a57fcaf9 [ 1511.713625][T20216] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000003 [ 1511.721708][T20216] RBP: 00007fe2a47721d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.729700][T20216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.738279][T20216] R13: 00007ffc6aafe01f R14: 00007fe2a4772300 R15: 0000000000022000 [ 1511.746274][T20216] [ 1511.782104][T20233] FAULT_INJECTION: forcing a failure. [ 1511.782104][T20233] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.801035][T20234] FAULT_INJECTION: forcing a failure. [ 1511.801035][T20234] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.815629][T20233] CPU: 0 PID: 20233 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1511.824601][T20233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.834847][T20233] Call Trace: [ 1511.838157][T20233] [ 1511.841095][T20233] dump_stack_lvl+0xcd/0x134 [ 1511.845790][T20233] should_fail.cold+0x5/0xa [ 1511.850311][T20233] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1511.856056][T20233] should_failslab+0x5/0x10 [ 1511.860586][T20233] __kmalloc+0x72/0x340 [ 1511.864794][T20233] tomoyo_realpath_from_path+0xc3/0x620 [ 1511.870450][T20233] ? tomoyo_profile+0x42/0x50 [ 1511.875183][T20233] tomoyo_path_number_perm+0x1d5/0x590 [ 1511.880779][T20233] ? tomoyo_path_number_perm+0x18d/0x590 [ 1511.886439][T20233] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1511.892709][T20233] ? find_held_lock+0x2d/0x110 [ 1511.897830][T20233] ? __fget_files+0x2f0/0x4c0 [ 1511.902562][T20233] security_file_ioctl+0x50/0xb0 [ 1511.907721][T20233] __x64_sys_ioctl+0xb3/0x200 [ 1511.912429][T20233] do_syscall_64+0x35/0xb0 [ 1511.916871][T20233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1511.922791][T20233] RIP: 0033:0x7f7f33f79af9 [ 1511.927219][T20233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1511.947713][T20233] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.956166][T20233] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1511.964419][T20233] RDX: 0000000000000000 RSI: 000000000000540f RDI: 0000000000000003 [ 1511.972398][T20233] RBP: 00007f7f32eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1511.980485][T20233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.988553][T20233] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1511.996546][T20233] [ 1512.016912][T20234] CPU: 0 PID: 20234 Comm: syz-executor.0 Not tainted 5.16.0-rc4-syzkaller #0 [ 1512.025706][T20234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.037135][T20234] Call Trace: [ 1512.040592][T20234] [ 1512.043523][T20234] dump_stack_lvl+0xcd/0x134 [ 1512.048128][T20234] should_fail.cold+0x5/0xa [ 1512.052649][T20234] ? adf_ctl_alloc_resources+0x44/0x100 [ 1512.058292][T20234] should_failslab+0x5/0x10 [ 1512.062836][T20234] kmem_cache_alloc_trace+0x55/0x2c0 [ 1512.068525][T20234] adf_ctl_alloc_resources+0x44/0x100 [ 1512.074088][T20234] adf_ctl_ioctl+0xf0/0x9d0 [ 1512.078774][T20234] ? adf_ctl_alloc_resources+0x100/0x100 [ 1512.084422][T20234] ? __fget_files+0x2f0/0x4c0 [ 1512.089289][T20234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1512.090899][T20216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.095555][T20234] ? adf_ctl_alloc_resources+0x100/0x100 [ 1512.095587][T20234] __x64_sys_ioctl+0x193/0x200 [ 1512.095623][T20234] do_syscall_64+0x35/0xb0 [ 1512.095656][T20234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1512.095687][T20234] RIP: 0033:0x7f0af7c1daf9 [ 1512.127591][T20234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.147637][T20234] RSP: 002b:00007f0af6b93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.156103][T20234] RAX: ffffffffffffffda RBX: 00007f0af7d30f60 RCX: 00007f0af7c1daf9 [ 1512.164521][T20234] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000004 [ 1512.172571][T20234] RBP: 00007f0af6b931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.180575][T20234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 04:39:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 4) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1512.188739][T20234] R13: 00007ffe8a5c260f R14: 00007f0af6b93300 R15: 0000000000022000 [ 1512.196833][T20234] [ 1512.210627][T20233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.228322][T20235] QAT: failed to copy from user cfg_data. 04:39:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:39:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) (fail_nth: 2) [ 1512.240119][T20216] QAT: failed to copy from user cfg_data. [ 1512.382282][T20252] FAULT_INJECTION: forcing a failure. [ 1512.382282][T20252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.386705][T20253] FAULT_INJECTION: forcing a failure. [ 1512.386705][T20253] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.435140][T20252] CPU: 0 PID: 20252 Comm: syz-executor.0 Not tainted 5.16.0-rc4-syzkaller #0 [ 1512.444318][T20252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.455108][T20252] Call Trace: [ 1512.458716][T20252] [ 1512.462029][T20252] dump_stack_lvl+0xcd/0x134 [ 1512.467063][T20252] should_fail.cold+0x5/0xa [ 1512.471801][T20252] _copy_from_user+0x2c/0x180 [ 1512.476487][T20252] adf_ctl_alloc_resources+0x88/0x100 [ 1512.481891][T20252] adf_ctl_ioctl+0xf0/0x9d0 [ 1512.486486][T20252] ? adf_ctl_alloc_resources+0x100/0x100 [ 1512.492304][T20252] ? __fget_files+0x2f0/0x4c0 [ 1512.497084][T20252] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1512.503887][T20252] ? adf_ctl_alloc_resources+0x100/0x100 [ 1512.509706][T20252] __x64_sys_ioctl+0x193/0x200 [ 1512.514621][T20252] do_syscall_64+0x35/0xb0 [ 1512.519050][T20252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1512.524963][T20252] RIP: 0033:0x7f0af7c1daf9 [ 1512.529398][T20252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.549102][T20252] RSP: 002b:00007f0af6b93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.557525][T20252] RAX: ffffffffffffffda RBX: 00007f0af7d30f60 RCX: 00007f0af7c1daf9 [ 1512.565500][T20252] RDX: 0000000000000000 RSI: 0000000040096102 RDI: 0000000000000004 [ 1512.573525][T20252] RBP: 00007f0af6b931d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.581534][T20252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.589539][T20252] R13: 00007ffe8a5c260f R14: 00007f0af6b93300 R15: 0000000000022000 [ 1512.597656][T20252] [ 1512.600699][T20253] CPU: 1 PID: 20253 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1512.610246][T20253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.620425][T20253] Call Trace: [ 1512.623808][T20253] [ 1512.626747][T20253] dump_stack_lvl+0xcd/0x134 [ 1512.632028][T20253] should_fail.cold+0x5/0xa [ 1512.636623][T20253] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1512.642099][T20253] should_failslab+0x5/0x10 [ 1512.646605][T20253] __kmalloc+0x72/0x340 [ 1512.650949][T20253] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1512.656610][T20253] tomoyo_encode+0x28/0x50 [ 1512.661041][T20253] tomoyo_realpath_from_path+0x186/0x620 [ 1512.666676][T20253] tomoyo_path_number_perm+0x1d5/0x590 [ 1512.672912][T20253] ? tomoyo_path_number_perm+0x18d/0x590 [ 1512.678913][T20253] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1512.684763][T20253] ? find_held_lock+0x2d/0x110 [ 1512.689667][T20253] ? __fget_files+0x2f0/0x4c0 [ 1512.694351][T20253] security_file_ioctl+0x50/0xb0 [ 1512.699297][T20253] __x64_sys_ioctl+0xb3/0x200 [ 1512.704157][T20253] do_syscall_64+0x35/0xb0 [ 1512.708679][T20253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1512.715018][T20253] RIP: 0033:0x7f7f33f79af9 [ 1512.719439][T20253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1512.739046][T20253] RSP: 002b:00007f7f32eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.747462][T20253] RAX: ffffffffffffffda RBX: 00007f7f3408cf60 RCX: 00007f7f33f79af9 [ 1512.755442][T20253] RDX: 0000000000000000 RSI: 000000000000540f RDI: 0000000000000003 [ 1512.763709][T20253] RBP: 00007f7f32eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1512.771672][T20253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.779649][T20253] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1512.787642][T20253] [ 1512.853280][T20252] QAT: failed to copy from user cfg_data. [ 1512.859878][T20253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.867962][T20257] QAT: failed to copy from user cfg_data. [ 1513.369290][T20076] Bluetooth: hci6: command 0x1003 tx timeout [ 1513.376110][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1513.600960][T20077] Bluetooth: hci7: command 0x1003 tx timeout [ 1513.608145][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1515.441094][T20077] Bluetooth: hci6: command 0x1001 tx timeout [ 1515.448270][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1515.691115][T20077] Bluetooth: hci7: command 0x1001 tx timeout [ 1515.698258][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1517.532176][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1517.760994][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:40:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x10) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 5) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:06 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) (fail_nth: 3) [ 1521.599523][T20268] QAT: failed to copy from user cfg_data. 04:40:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:40:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) (fail_nth: 3) 04:40:07 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) 04:40:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096102, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x240481, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 04:40:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x2, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:07 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x2, 0x0) 04:40:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x3ff, 0xfffffffd, 0x2, 0xffffffe1, 0x1, "fc698f14e393edc9e2ef797ca90bf0d2f2b648"}) [ 1522.247841][T20289] QAT: failed to copy from user cfg_data. [ 1522.262854][T20292] FAULT_INJECTION: forcing a failure. [ 1522.262854][T20292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.282892][T20291] QAT: failed to copy from user cfg_data. [ 1522.320794][T20299] QAT: failed to copy from user cfg_data. [ 1522.330674][T20292] CPU: 1 PID: 20292 Comm: syz-executor.4 Not tainted 5.16.0-rc4-syzkaller #0 [ 1522.339512][T20292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.349859][T20292] Call Trace: [ 1522.353153][T20292] [ 1522.356130][T20292] dump_stack_lvl+0xcd/0x134 [ 1522.360741][T20292] should_fail.cold+0x5/0xa [ 1522.365278][T20292] _copy_to_user+0x2c/0x150 [ 1522.370010][T20292] simple_read_from_buffer+0xcc/0x160 [ 1522.375407][T20292] proc_fail_nth_read+0x187/0x220 [ 1522.380481][T20292] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1522.386463][T20292] ? security_file_permission+0xab/0xd0 [ 1522.392751][T20292] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1522.398486][T20292] vfs_read+0x1b5/0x600 [ 1522.402664][T20292] ksys_read+0x12d/0x250 [ 1522.406914][T20292] ? vfs_write+0xae0/0xae0 [ 1522.411711][T20292] ? syscall_enter_from_user_mode+0x21/0x70 [ 1522.417815][T20292] do_syscall_64+0x35/0xb0 [ 1522.422246][T20292] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1522.428326][T20292] RIP: 0033:0x7f7f33f2c6ac [ 1522.432867][T20292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1522.453530][T20292] RSP: 002b:00007f7f32eef170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1522.461955][T20292] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7f33f2c6ac 04:40:07 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x10, 0x0) 04:40:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x10, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1522.470190][T20292] RDX: 000000000000000f RSI: 00007f7f32eef1e0 RDI: 0000000000000004 [ 1522.478945][T20292] RBP: 00007f7f32eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1522.487179][T20292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.495149][T20292] R13: 00007ffd0083880f R14: 00007f7f32eef300 R15: 0000000000022000 [ 1522.503718][T20292] [ 1522.537147][T20298] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! 04:40:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1522.610591][T20321] QAT: Invalid ioctl 16 04:40:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/216) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1a) 04:40:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4c00, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1522.651493][ T8] Bluetooth: hci6: Frame reassembly failed (-84) [ 1522.658073][T20322] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1522.668540][T20320] QAT: Invalid ioctl 16 [ 1522.686784][T20329] QAT: Invalid ioctl 16 [ 1522.734292][T19821] Bluetooth: hci7: Frame reassembly failed (-84) [ 1522.773709][T20351] QAT: Invalid ioctl 19456 04:40:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540f, 0x0) 04:40:07 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4c00, 0x0) 04:40:07 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4c01, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1522.809635][T20342] QAT: failed to copy from user cfg_data. [ 1522.814502][T15956] Bluetooth: hci9: sending frame failed (-49) 04:40:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x2, 0x0) [ 1522.907086][T20364] QAT: Invalid ioctl 19457 04:40:08 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5412, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1522.939983][T20369] QAT: Invalid ioctl 19456 04:40:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x10, 0x0) [ 1522.968217][T20377] QAT: Invalid ioctl 19456 [ 1523.056497][T20383] QAT: Invalid ioctl 21522 [ 1524.640980][T20078] Bluetooth: hci6: command 0x1003 tx timeout [ 1524.648066][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1524.721276][T20076] Bluetooth: hci7: command 0x1003 tx timeout [ 1524.881252][T20076] Bluetooth: hci9: command 0x1003 tx timeout [ 1524.888113][T15956] Bluetooth: hci9: sending frame failed (-49) [ 1526.721013][T20076] Bluetooth: hci6: command 0x1001 tx timeout [ 1526.728763][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1526.801179][T20076] Bluetooth: hci7: command 0x1001 tx timeout [ 1526.961670][T20078] Bluetooth: hci9: command 0x1001 tx timeout [ 1526.968338][T15956] Bluetooth: hci9: sending frame failed (-49) [ 1528.801071][ T7843] Bluetooth: hci6: command 0x1009 tx timeout [ 1528.881987][ T7843] Bluetooth: hci7: command 0x1009 tx timeout [ 1529.040990][ T7843] Bluetooth: hci9: command 0x1009 tx timeout 04:40:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121c40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 04:40:18 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4c01, 0x0) 04:40:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4c00, 0x0) 04:40:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x541b, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:40:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x5a202, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x20, 0x141440) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x80, 0x7, 0x9, 0x8, 0xe, "cd99259c93e47307a0d49a94ee9cc14bdfb54d"}) ioctl$KDADDIO(r0, 0x4b34, 0x8) [ 1533.214695][T20423] QAT: Invalid ioctl 19457 04:40:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4c01, 0x0) [ 1533.243198][T20426] QAT: Invalid ioctl 21531 04:40:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5421, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:18 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5412, 0x0) [ 1533.278944][T20431] QAT: Invalid ioctl 19457 [ 1533.297701][T20425] QAT: failed to copy from user cfg_data. 04:40:18 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r0, 0x314, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0f, 0xfac0a]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac07, 0xfac01, 0xfac08, 0xfac0d, 0xfac02, 0xfac08, 0xfac14]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac14]}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 04:40:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5409, 0x0) [ 1533.329098][T17130] Bluetooth: hci6: sending frame failed (-49) 04:40:18 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5423, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1533.439733][T20447] QAT: Invalid ioctl 21522 [ 1533.470386][T20458] QAT: Invalid ioctl 21522 [ 1533.499293][T20460] QAT: Invalid ioctl 21539 [ 1535.371054][T20078] Bluetooth: hci6: command 0x1003 tx timeout [ 1535.378722][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1535.440988][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1535.447531][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1537.441243][ T7843] Bluetooth: hci6: command 0x1001 tx timeout [ 1537.448504][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1537.521114][ T7843] Bluetooth: hci7: command 0x1001 tx timeout [ 1537.528434][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1539.521029][ T7843] Bluetooth: hci6: command 0x1009 tx timeout [ 1539.604175][ T7843] Bluetooth: hci7: command 0x1009 tx timeout 04:40:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x2, 0x3, 0x236, 0x16f, 0x6, 0x2be, 0x12}, "aa45f940fbc1527cd4b2bbcaca7d6bbfa65ea2831bb6bc2d958d71284d46598fa8df7ae112a6c2ce481adc8254f53ba28d708503a42e91dcc6d7d9055fb4a10ec2e1d873e3b4bd38becc753bec693ce2c53392b49c8a716aec39f5b78f138b014f24e81f5ac0e77d6baeafe74c0d6aea2cd823b18855711bbf95110a71f25336d389a6c3511b25acd5cf4163a209d35c69bc7da295bf95c95c051f79960b699c4adf0bd046ff8937c14d8caada301e0674e0135028daecfe643e6bca1f2c64bda605b1722ff824ad342b1b1cbc618a178bc101f805227a", ['\x00', '\x00', '\x00']}, 0x3f7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5450, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540b, 0x0) 04:40:29 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x541b, 0x0) 04:40:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:40:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5451, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1544.022175][T20485] QAT: Invalid ioctl 21531 04:40:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540c, 0x0) 04:40:29 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5421, 0x0) [ 1544.061134][T20491] QAT: Invalid ioctl 21531 [ 1544.106425][T20499] QAT: failed to copy from user cfg_data. [ 1544.136682][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1544.145004][T20500] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 04:40:29 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5450, 0x0) 04:40:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5452, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540d, 0x0) [ 1545.204640][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.211648][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.161444][ T25] Bluetooth: hci7: command 0x1003 tx timeout [ 1546.168890][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1546.176915][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 1546.183699][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1548.241233][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1548.248016][ T6536] Bluetooth: hci6: sending frame failed (-49) [ 1548.259457][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1548.266447][ T6536] Bluetooth: hci7: sending frame failed (-49) [ 1550.321446][ T25] Bluetooth: hci7: command 0x1009 tx timeout [ 1550.328825][ T25] Bluetooth: hci6: command 0x1009 tx timeout 04:40:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x540e, 0x0) 04:40:39 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5451, 0x0) 04:40:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5460, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:40:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3f) vmsplice(r0, &(0x7f0000000000), 0x0, 0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000440)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca670506", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) 04:40:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x6364, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5410, 0x0) 04:40:39 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5452, 0x0) [ 1554.365720][T20571] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1554.370799][T20572] QAT: failed to copy from user cfg_data. [ 1554.401806][ T89] Bluetooth: hci6: Frame reassembly failed (-84) [ 1554.409668][T20571] Bluetooth: hci6: Frame reassembly failed (-84) [ 1554.419969][T20578] QAT: Invalid ioctl 25444 04:40:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8913, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:39 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5460, 0x0) [ 1554.443990][ T6536] Bluetooth: hci7: sending frame failed (-49) 04:40:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5412, 0x0) 04:40:39 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x5501, 0x0) 04:40:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8914, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1554.572710][T15956] Bluetooth: hci9: sending frame failed (-49) [ 1554.580531][T20600] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1554.581814][T20599] QAT: Invalid ioctl 35091 [ 1554.608936][T20604] QAT: Invalid ioctl 35091 [ 1554.666559][T20608] QAT: Invalid ioctl 21761 [ 1554.712569][T20614] QAT: Invalid ioctl 35092 04:40:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1555.159679][T20631] QAT: failed to copy from user cfg_data. [ 1555.410827][ T8] Bluetooth: hci10: Frame reassembly failed (-84) [ 1556.400994][T20078] Bluetooth: hci6: command 0x1003 tx timeout [ 1556.408685][ T89] Bluetooth: hci6: Frame reassembly failed (-84) [ 1556.481401][ T25] Bluetooth: hci7: command 0x1003 tx timeout [ 1556.487640][ T6545] Bluetooth: hci7: sending frame failed (-49) [ 1556.641004][ T25] Bluetooth: hci9: command 0x1003 tx timeout [ 1556.647766][ T6545] Bluetooth: hci9: sending frame failed (-49) [ 1557.451071][ T7843] Bluetooth: hci10: command 0x1003 tx timeout [ 1557.457640][ T8] Bluetooth: hci10: Frame reassembly failed (-84) [ 1558.491054][ T25] Bluetooth: hci6: command 0x1001 tx timeout [ 1558.499186][ T307] Bluetooth: hci6: Frame reassembly failed (-84) [ 1558.561276][ T25] Bluetooth: hci7: command 0x1001 tx timeout [ 1558.568170][ T6545] Bluetooth: hci7: sending frame failed (-49) [ 1558.721003][ T25] Bluetooth: hci9: command 0x1001 tx timeout [ 1558.728259][ T6545] Bluetooth: hci9: sending frame failed (-49) [ 1559.520973][ T25] Bluetooth: hci10: command 0x1001 tx timeout [ 1559.528806][T15597] Bluetooth: hci10: Frame reassembly failed (-84) [ 1560.576186][ T25] Bluetooth: hci6: command 0x1009 tx timeout [ 1560.641359][T11571] Bluetooth: hci7: command 0x1009 tx timeout [ 1560.811204][T20078] Bluetooth: hci9: command 0x1009 tx timeout [ 1561.601013][T20077] Bluetooth: hci10: command 0x1009 tx timeout [ 1565.086367][T20600] sp0: Synchronizing with TNC 04:40:50 executing program 2: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x168, 0x10, 0x20, 0x70bd27, 0x25dfdbfc, {0x14}, [@nested={0x11a, 0x92, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}, @nested={0x4, 0x8d}, @generic="ea60ec8af3e3ff7015052fcd39494f2cd864d0727b02dbcb87d7aa13deaa", @typed={0x14, 0x32, 0x0, 0x0, @ipv6=@mcast1}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0xc811) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 04:40:50 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x6364, 0x0) 04:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5413, 0x0) 04:40:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8933, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5414, 0x0) 04:40:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400448c9, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1565.311381][T20669] QAT: Invalid ioctl 35123 [ 1565.316902][T20672] QAT: Invalid ioctl 25444 [ 1565.334496][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1565.339639][T20682] QAT: Invalid ioctl 25444 [ 1565.371162][T20671] QAT: failed to copy from user cfg_data. [ 1565.392775][T20688] QAT: Invalid ioctl 1074022601 [ 1565.401373][T20690] QAT: Invalid ioctl 1074022601 04:40:50 executing program 1: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x1, 0x402, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c000}, 0x804) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:40:50 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400448dd, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:40:50 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8913, 0x0) 04:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5415, 0x0) 04:40:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5416, 0x0) [ 1565.764042][T20707] QAT: Invalid ioctl 1074022621 [ 1565.799186][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1565.813835][T20709] QAT: Invalid ioctl 35091 [ 1565.820379][T20716] QAT: Invalid ioctl 35091 [ 1567.361025][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 1567.368254][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1567.841244][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1567.848693][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1569.441136][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1569.447619][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1569.921119][ T7855] Bluetooth: hci7: command 0x1001 tx timeout [ 1569.927748][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1571.521213][ T7855] Bluetooth: hci6: command 0x1009 tx timeout [ 1572.001039][T20076] Bluetooth: hci7: command 0x1009 tx timeout 04:41:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123640, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:41:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400454ca, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:01 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8914, 0x0) 04:41:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5418, 0x0) 04:41:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:41:01 executing program 1: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x13, 0xffffffffffffffff, 0x6cf56000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1576.027214][T20739] QAT: Invalid ioctl 1074025674 04:41:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x541b, 0x0) [ 1576.050487][T20744] QAT: Invalid ioctl 1074025674 04:41:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400455c8, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1576.081996][T20743] QAT: Invalid ioctl 35092 [ 1576.094244][T20750] QAT: Invalid ioctl 35092 04:41:01 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x8933, 0x0) [ 1576.123094][T20742] QAT: failed to copy from user cfg_data. [ 1576.161187][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1576.196415][T20762] QAT: Invalid ioctl 35123 [ 1576.218352][T20765] QAT: Invalid ioctl 35123 04:41:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x541d, 0x0) 04:41:01 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400448c9, 0x0) 04:41:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40046103, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1576.250505][T20767] QAT: Invalid ioctl 1074025928 [ 1576.377714][T20779] QAT: failed to copy from user. [ 1578.241012][ T25] Bluetooth: hci6: command 0x1003 tx timeout [ 1578.241043][T20077] Bluetooth: hci7: command 0x1003 tx timeout [ 1578.248153][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1578.254290][T19699] Bluetooth: hci6: sending frame failed (-49) [ 1580.321373][T20077] Bluetooth: hci7: command 0x1001 tx timeout [ 1580.326461][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1580.328345][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1580.338866][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1582.401108][ T25] Bluetooth: hci6: command 0x1009 tx timeout [ 1582.401156][T20076] Bluetooth: hci7: command 0x1009 tx timeout 04:41:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x5a) ioctl$TCFLSH(r0, 0x540b, 0x2) 04:41:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x541e, 0x0) 04:41:11 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400448dd, 0x0) 04:41:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40046104, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1586.289874][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1586.304726][T20810] QAT: Invalid ioctl 1074022621 [ 1586.325753][T20817] QAT: Invalid ioctl 1074022621 [ 1586.365480][T20820] QAT: failed to copy from user cfg_data. 04:41:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x541e, 0x0) 04:41:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40049409, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:11 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400454ca, 0x0) 04:41:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5421, 0x0) 04:41:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDADDIO(r0, 0x400455c8, 0x3df56287) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f00000003c0)={0x0, @aes128, 0x0, @desc3}) mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x1148000, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@obj_user}]}}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000003c0)={0x0, @aes128, 0x0, @desc3}) mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x1148000, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@obj_user}]}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x5, 0x3, {}, {0xee01}, 0x9, 0x2c7}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="7925c3c1cee96f7e67dc10db9bd8551e3c81f656409bd4cd51b43fbfa14ff5725f3de9c6643bba54f77aecfcf979a74f981b0bebe1a85fc2d8b6fd7da65fb0227e44826036230fe87bf180938c992d2fd8c51c8320d3b068ce971cabd3a4c64471829dde66c8ca6cda670f4a84343d04263075010dfd26edeccba529abf272a90c26d5f1ebc170c2fb25f1e01bc8ea8c34860b7f59c07352ce70f11e04273f825561de3849ecbdfc3a489156e9cd17f411e2f7aac67cb11ac387933828b58ea50ea392541568aab8182112ff21d0f835ae7a9c632158c68ca197db3461fb14950fc9a956a889098a921d151130065d9d", 0xf0}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee01}}}], 0x60, 0x40}, 0x840) 04:41:11 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40086602, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1586.907678][T20835] QAT: Invalid ioctl 1074025674 [ 1586.939023][T20845] QAT: Invalid ioctl 1074025674 04:41:12 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096100, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1587.018682][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1587.029510][T20849] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1587.054369][T20856] QAT: failed to copy from user cfg_data. [ 1588.321009][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1588.328034][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1589.043864][ T25] Bluetooth: hci7: command 0x1003 tx timeout [ 1589.050824][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1590.401081][T20076] Bluetooth: hci6: command 0x1001 tx timeout [ 1590.407602][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1591.121125][T20077] Bluetooth: hci7: command 0x1001 tx timeout [ 1591.127631][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1592.481237][T20077] Bluetooth: hci6: command 0x1009 tx timeout [ 1593.211069][T20079] Bluetooth: hci7: command 0x1009 tx timeout 04:41:21 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x400455c8, 0x0) 04:41:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5422, 0x0) 04:41:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x453, 0x401}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xfc00000000000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe2) 04:41:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:41:21 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40049409, 0x0) [ 1596.468024][T20877] QAT: Invalid ioctl 1074025928 04:41:21 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096103, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1596.531936][T20884] QAT: failed to copy from user cfg_data. [ 1596.555788][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1596.569900][T20885] Bluetooth: hci6: Frame reassembly failed (-84) 04:41:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5423, 0x0) [ 1596.583336][T20894] QAT: failed to copy from user cfg_data. 04:41:21 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40082404, 0x0) [ 1596.705266][T20902] QAT: Invalid ioctl 1074356483 [ 1596.731041][T20904] QAT: Invalid ioctl 1074356483 [ 1596.750038][T20908] QAT: Invalid ioctl 1074275332 [ 1596.755378][T20911] QAT: Invalid ioctl 1074275332 04:41:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:41:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096104, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:22 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40085503, 0x0) 04:41:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5424, 0x0) [ 1597.108708][T20924] QAT: Invalid ioctl 1074287875 04:41:22 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096105, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:22 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40086602, 0x0) [ 1597.132812][T20934] QAT: Invalid ioctl 1074287875 [ 1597.194143][T20938] QAT: Invalid ioctl 1074356485 [ 1598.641038][T20076] Bluetooth: hci6: command 0x1003 tx timeout [ 1598.647207][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1599.201040][T20076] Bluetooth: hci7: command 0x1003 tx timeout [ 1599.207666][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1600.726591][T20076] Bluetooth: hci6: command 0x1001 tx timeout [ 1600.733461][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1601.281246][T20076] Bluetooth: hci7: command 0x1001 tx timeout [ 1601.288104][T17130] Bluetooth: hci7: sending frame failed (-49) [ 1602.801174][T20079] Bluetooth: hci6: command 0x1009 tx timeout [ 1603.361041][T20079] Bluetooth: hci7: command 0x1009 tx timeout 04:41:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x2) ioctl$KDADDIO(r2, 0x400455c8, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x33) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) r5 = memfd_secret(0x80000) ioctl$KDADDIO(r5, 0x400455c8, 0x2) 04:41:31 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096106, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5425, 0x0) 04:41:31 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096103, 0x0) 04:41:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) [ 1606.642382][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.649346][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.752808][T20964] QAT: Invalid ioctl 1074356483 04:41:31 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096104, 0x0) [ 1606.785211][T20972] QAT: Invalid ioctl 1074356483 [ 1606.804207][T20966] QAT: Invalid ioctl 1074356486 [ 1606.841741][T15597] Bluetooth: hci6: Frame reassembly failed (-84) [ 1606.856871][T20969] QAT: failed to copy from user cfg_data. [ 1606.904231][T20973] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1606.929157][T15597] Bluetooth: hci9: Frame reassembly failed (-84) [ 1606.939475][T20983] QAT: Invalid ioctl 1074356484 [ 1606.954552][T20973] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1606.967680][T20987] QAT: Invalid ioctl 1074356484 04:41:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x82843, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x800) 04:41:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5427, 0x0) 04:41:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096107, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:32 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096105, 0x0) [ 1607.374652][T20999] QAT: Invalid ioctl 1074356485 04:41:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5428, 0x0) 04:41:32 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096108, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1607.399856][T21000] QAT: Invalid ioctl 1074356487 [ 1607.405850][T21007] QAT: Invalid ioctl 1074356485 [ 1607.547099][T21015] QAT: Invalid ioctl 1074356488 [ 1608.891062][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1608.898028][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1608.961135][T20077] Bluetooth: hci9: command 0x1003 tx timeout [ 1608.968530][ T307] Bluetooth: hci9: Frame reassembly failed (-84) [ 1610.961009][T20077] Bluetooth: hci6: command 0x1001 tx timeout [ 1610.967903][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1611.041115][T20077] Bluetooth: hci9: command 0x1001 tx timeout [ 1611.048473][ T8] Bluetooth: hci9: Frame reassembly failed (-84) [ 1613.041380][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1613.131189][T11571] Bluetooth: hci9: command 0x1009 tx timeout 04:41:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1a) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:41:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:41:42 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096106, 0x0) 04:41:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x600280, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x6) 04:41:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5429, 0x0) 04:41:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096109, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1617.601922][T21037] QAT: Invalid ioctl 1074356489 04:41:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5437, 0x0) 04:41:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096110, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1617.635102][T15597] Bluetooth: hci6: Frame reassembly failed (-84) [ 1617.657887][T21039] QAT: Invalid ioctl 1074356486 [ 1617.659462][T21048] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1617.672138][T21036] QAT: failed to copy from user cfg_data. 04:41:42 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096107, 0x0) [ 1617.689358][T21053] QAT: Invalid ioctl 1074356486 04:41:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5441, 0x0) 04:41:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096163, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1617.752171][T21059] QAT: Invalid ioctl 1074356496 04:41:42 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096108, 0x0) [ 1617.810023][T21066] QAT: Invalid ioctl 1074356487 [ 1617.828369][T21071] QAT: Invalid ioctl 1074356487 [ 1617.858905][T21073] QAT: Invalid ioctl 1074356579 [ 1619.680995][T20077] Bluetooth: hci6: command 0x1003 tx timeout [ 1619.687903][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1619.694399][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1619.700665][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1621.771147][T11571] Bluetooth: hci7: command 0x1001 tx timeout [ 1621.778284][T15956] Bluetooth: hci7: sending frame failed (-49) [ 1621.787563][T11571] Bluetooth: hci6: command 0x1001 tx timeout [ 1621.794422][T15956] Bluetooth: hci6: sending frame failed (-49) [ 1623.841040][T11571] Bluetooth: hci6: command 0x1009 tx timeout [ 1623.847112][T11571] Bluetooth: hci7: command 0x1009 tx timeout 04:41:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40186366, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5450, 0x0) 04:41:52 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096110, 0x0) 04:41:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:41:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x919f8067d501b628, 0x0) ioctl$KDADDIO(r1, 0x400455c8, 0x0) 04:41:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000080000000002e2f66696c653000"]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x1, @private2, 0x6}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e21, 0x502e, @empty, 0xfffffff8}, @in={0x2, 0x4e24, @remote}], 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xe5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDADDIO(r2, 0x4b34, 0xca) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x33) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x6) ioctl$KDADDIO(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x33) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1cc, &(0x7f0000000380)}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x7) ioctl$KDADDIO(r1, 0x400455c8, 0x0) [ 1627.879603][T21103] QAT: Invalid ioctl 1075340134 04:41:52 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x401c5820, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:53 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x401845ff, 0x0) 04:41:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1627.910610][T21106] QAT: Invalid ioctl 1074356496 [ 1627.926508][T21112] QAT: Invalid ioctl 1074356496 04:41:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5451, 0x0) 04:41:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4020940d, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1628.010814][T21120] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1628.026728][T21125] QAT: failed to copy from user cfg_data. [ 1628.049347][T15597] Bluetooth: hci6: Frame reassembly failed (-84) 04:41:53 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40186366, 0x0) [ 1628.080858][T21130] QAT: Invalid ioctl 1075332607 [ 1628.097749][T21131] sp0: Synchronizing with TNC [ 1628.109700][T21142] QAT: Invalid ioctl 1075332607 04:41:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5452, 0x0) [ 1628.168370][T21131] sp0: Synchronizing with TNC 04:41:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x80086301, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1628.195871][T21154] QAT: Invalid ioctl 1075340134 04:41:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82}) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 1628.221901][T21163] QAT: Invalid ioctl 1075340134 [ 1628.269631][T21166] QAT: Invalid ioctl -2146934015 [ 1628.289993][T21168] QAT: Invalid ioctl -2146934015 04:41:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x80086601, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:41:53 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x401c5820, 0x0) [ 1628.800841][T21195] QAT: Invalid ioctl -2146933247 [ 1630.081209][T20078] Bluetooth: hci6: command 0x1003 tx timeout [ 1630.088478][ T307] Bluetooth: hci6: Frame reassembly failed (-84) [ 1630.171156][T20078] Bluetooth: hci7: command 0x1003 tx timeout [ 1630.177439][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1632.163817][T20079] Bluetooth: hci6: command 0x1001 tx timeout [ 1632.170889][ T1039] Bluetooth: hci6: Frame reassembly failed (-84) [ 1632.241288][T20079] Bluetooth: hci7: command 0x1001 tx timeout [ 1632.247918][T19699] Bluetooth: hci7: sending frame failed (-49) [ 1634.241093][T20079] Bluetooth: hci6: command 0x1009 tx timeout [ 1634.321076][T20079] Bluetooth: hci7: command 0x1009 tx timeout 04:42:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x545d, 0x0) 04:42:03 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) 04:42:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:42:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x801c581f, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:03 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4020565a, 0x0) 04:42:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x5460, 0x0) [ 1638.801783][T21232] adf_ctl_ioctl: 1 callbacks suppressed [ 1638.801800][T21232] QAT: Invalid ioctl 1075861082 04:42:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x400455c8, 0x3) 04:42:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc0045878, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:03 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4020940d, 0x0) [ 1638.852814][T21241] QAT: Invalid ioctl 1075861082 [ 1638.894579][T21246] QAT: failed to copy from user cfg_data. 04:42:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc0045878, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x6364, 0x0) [ 1640.961214][ T7855] Bluetooth: hci6: command 0x1003 tx timeout [ 1640.968189][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1643.051207][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1643.057819][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1645.131187][T11571] Bluetooth: hci6: command 0x1009 tx timeout 04:42:14 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x4030582b, 0x0) 04:42:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x20) 04:42:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc00464b4, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x8913, 0x0) 04:42:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x7a3b20d3c7ae08d3, 0x40, 0x40}, &(0x7f0000000040)=0x20) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096102, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000001a40)=@dstopts={0x0, 0x1, '\x00', [@ra, @enc_lim, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7f00}, 0x1c) 04:42:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = io_uring_setup(0x365b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xfffffffb, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x33) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r0, r0, r0, r2], 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 04:42:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x8914, 0x0) [ 1649.676038][T21308] QAT: Invalid ioctl 1076910123 [ 1649.693984][T17130] Bluetooth: hci6: sending frame failed (-49) [ 1649.703802][T21309] Bluetooth: hci6: Frame reassembly failed (-84) [ 1649.707463][T21315] QAT: Invalid ioctl 1076910123 04:42:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc00c642e, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:14 executing program 5: clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x41015500, 0x0) [ 1649.748461][T21317] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1649.777370][T21304] QAT: failed to copy from user cfg_data. 04:42:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc0189436, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:42:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDADDIO(r0, 0x8933, 0x0) [ 1649.808086][T15597] Bluetooth: hci7: Frame reassembly failed (-84) [ 1649.823508][T19821] Bluetooth: hci9: Frame reassembly failed (-84) [ 1649.829834][T21328] QAT: Invalid ioctl -1072929746 04:42:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x41}}, './file0\x00'}) fchdir(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3381, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$KDADDIO(r1, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 04:42:14 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0xc020660b, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1649.952777][T21342] QAT: Invalid ioctl 1090606336 [ 1649.974802][T21347] QAT: Invalid ioctl 1090606336 [ 1651.761206][T11571] Bluetooth: hci7: command 0x1003 tx timeout [ 1651.768640][T11571] Bluetooth: hci6: command 0x1003 tx timeout [ 1651.779412][ T6545] Bluetooth: hci6: sending frame failed (-49) [ 1651.786672][T15597] Bluetooth: hci7: Frame reassembly failed (-84) [ 1651.793419][T15597] Bluetooth: hci7: Frame reassembly failed (-84) [ 1651.841153][T20077] Bluetooth: hci9: command 0x1003 tx timeout [ 1651.847755][ T6545] Bluetooth: hci9: sending frame failed (-49) [ 1651.921060][T11571] Bluetooth: hci10: command 0x1003 tx timeout [ 1653.851192][ T7855] Bluetooth: hci6: command 0x1001 tx timeout [ 1653.858785][ T6545] Bluetooth: hci6: sending frame failed (-49) [ 1653.868000][ T7855] Bluetooth: hci7: command 0x1001 tx timeout [ 1653.874645][ T89] Bluetooth: hci7: Frame reassembly failed (-84) [ 1653.921153][ T7855] Bluetooth: hci9: command 0x1001 tx timeout [ 1653.927756][ T6545] Bluetooth: hci9: sending frame failed (-49) [ 1654.011120][ T7855] Bluetooth: hci10: command 0x1001 tx timeout [ 1655.281507][ T27] INFO: task kworker/1:6:17084 blocked for more than 143 seconds. [ 1655.291214][ T27] Not tainted 5.16.0-rc4-syzkaller #0 [ 1655.297236][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1655.311707][ T27] task:kworker/1:6 state:D stack:27576 pid:17084 ppid: 2 flags:0x00004000 [ 1655.321606][ T27] Workqueue: usb_hub_wq hub_event [ 1655.326948][ T27] Call Trace: [ 1655.330233][ T27] [ 1655.333674][ T27] __schedule+0xa9a/0x4940 [ 1655.338253][ T27] ? io_schedule_timeout+0x180/0x180 [ 1655.344832][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1655.350080][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 1655.355599][ T27] schedule+0xd2/0x260 [ 1655.359715][ T27] schedule_preempt_disabled+0xf/0x20 [ 1655.366020][ T27] __mutex_lock+0xa32/0x12f0 [ 1655.370738][ T27] ? hub_event+0x1e40/0x4460 [ 1655.375747][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 1655.382056][ T27] ? hub_ext_port_status+0x19d/0x450 [ 1655.388116][ T27] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1655.397162][ T27] hub_event+0x1e40/0x4460 [ 1655.404526][ T27] ? hub_port_debounce+0x3c0/0x3c0 [ 1655.409663][ T27] ? lock_release+0x720/0x720 [ 1655.415626][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1655.420610][ T27] ? do_raw_spin_lock+0x120/0x2b0 [ 1655.427153][ T27] process_one_work+0x9b2/0x1690 [ 1655.432454][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1655.437949][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1655.444028][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 1655.449253][ T27] worker_thread+0x658/0x11f0 [ 1655.454521][ T27] ? process_one_work+0x1690/0x1690 [ 1655.459946][ T27] kthread+0x405/0x4f0 [ 1655.465011][ T27] ? set_kthread_struct+0x130/0x130 [ 1655.470376][ T27] ret_from_fork+0x1f/0x30 [ 1655.475613][ T27] [ 1655.478736][ T27] INFO: task kworker/1:0:19747 blocked for more than 143 seconds. [ 1655.487793][ T27] Not tainted 5.16.0-rc4-syzkaller #0 [ 1655.495511][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1655.504288][ T27] task:kworker/1:0 state:D stack:27968 pid:19747 ppid: 2 flags:0x00004000 [ 1655.515889][ T27] Workqueue: usb_hub_wq hub_event [ 1655.522372][ T27] Call Trace: [ 1655.525668][ T27] [ 1655.528605][ T27] __schedule+0xa9a/0x4940 [ 1655.533481][ T27] ? io_schedule_timeout+0x180/0x180 [ 1655.538786][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1655.544454][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 1655.549682][ T27] schedule+0xd2/0x260 [ 1655.570981][ T27] usb_kill_urb.part.0+0x19a/0x220 [ 1655.576151][ T27] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 1655.590968][ T27] ? finish_wait+0x270/0x270 [ 1655.596297][ T27] usb_kill_urb+0x7f/0xa0 [ 1655.600647][ T27] usb_start_wait_urb+0x24a/0x4c0 [ 1655.606259][ T27] ? usb_api_blocking_completion+0xa0/0xa0 [ 1655.612427][ T27] ? memset+0x20/0x40 [ 1655.616439][ T27] usb_control_msg+0x31c/0x4a0 [ 1655.623994][ T27] ? usb_start_wait_urb+0x4c0/0x4c0 [ 1655.629213][ T27] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1655.634827][ T27] hub_port_init+0x7bd/0x2e80 [ 1655.639542][ T27] hub_event+0x21ea/0x4460 [ 1655.644438][ T27] ? hub_port_debounce+0x3c0/0x3c0 [ 1655.649583][ T27] ? lock_release+0x720/0x720 [ 1655.654322][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 1655.659181][ T27] ? do_raw_spin_lock+0x120/0x2b0 [ 1655.664329][ T27] process_one_work+0x9b2/0x1690 [ 1655.669278][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1655.674898][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 1655.679851][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 1655.684980][ T27] worker_thread+0x658/0x11f0 [ 1655.689666][ T27] ? process_one_work+0x1690/0x1690 [ 1655.695349][ T27] kthread+0x405/0x4f0 [ 1655.699950][ T27] ? set_kthread_struct+0x130/0x130 [ 1655.705354][ T27] ret_from_fork+0x1f/0x30 [ 1655.709818][ T27] [ 1655.713007][ T27] [ 1655.713007][ T27] Showing all locks held in the system: [ 1655.720715][ T27] 1 lock held by khungtaskd/27: [ 1655.726541][ T27] #0: ffffffff8bb83d20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1655.738646][ T27] 1 lock held by in:imklog/6212: [ 1655.744467][ T27] #0: ffff88807e3814f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1655.753778][ T27] 2 locks held by agetty/6436: [ 1655.758619][ T27] #0: ffff88801cc14098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1655.768976][ T27] #1: ffffc900027f82e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcf0/0x1230 [ 1655.779301][ T27] 3 locks held by kworker/u5:1/6536: [ 1655.784668][ T27] #0: ffff888078c12138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1655.794969][ T27] #1: ffffc900028bfdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1655.807069][ T27] #2: ffff8880285fcff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xac/0x1870 [ 1655.816951][ T27] 3 locks held by kworker/u5:0/15956: [ 1655.822390][ T27] #0: ffff888146a2a138 ((wq_completion)hci10){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1655.832779][ T27] #1: ffffc90002abfdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1655.847380][ T27] #2: ffff88807a654ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xac/0x1870 [ 1655.857765][ T27] 5 locks held by kworker/1:6/17084: [ 1655.863221][ T27] #0: ffff8881419b2938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1655.874074][ T27] #1: ffffc90002b8fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1655.885363][ T27] #2: ffff88801e0a1220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4460 [ 1655.894400][ T27] #3: ffff88801e0a45c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1e17/0x4460 [ 1655.905040][ T27] #4: ffff888147a8d968 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1e40/0x4460 [ 1655.914845][ T27] 3 locks held by kworker/u5:5/17130: [ 1655.920216][ T27] #0: ffff8881415dd138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1655.930800][ T7855] Bluetooth: hci7: command 0x1009 tx timeout [ 1655.935382][ T27] #1: ffffc900039c7db0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1655.936959][ T7855] Bluetooth: hci6: command 0x1009 tx timeout [ 1655.950012][ T27] #2: ffff88801d684ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xac/0x1870 [ 1655.968663][ T27] 3 locks held by kworker/u5:7/19699: [ 1655.974940][ T27] #0: ffff888078699138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1655.986377][ T27] #1: ffffc90004f1fdb0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1655.998485][ T27] #2: ffff88801d680ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_open+0xac/0x1870 [ 1656.009271][ T7855] Bluetooth: hci9: command 0x1009 tx timeout [ 1656.010488][ T27] 5 locks held by kworker/1:0/19747: [ 1656.023002][ T27] #0: ffff8881419b2938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1656.034471][ T27] #1: ffffc9000453fdb0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1656.046008][ T27] #2: ffff888147933220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4460 [ 1656.055037][ T27] #3: ffff8881479365c0 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1e17/0x4460 [ 1656.065164][ T27] #4: ffff888147a8d968 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1e40/0x4460 [ 1656.074935][ T27] 4 locks held by kworker/0:8/20079: [ 1656.080392][ T27] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x896/0x1690 [ 1656.090904][ T27] #1: ffffc90004a0fdb0 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_one_work+0x8ca/0x1690 [ 1656.092395][ T7855] Bluetooth: hci10: command 0x1009 tx timeout [ 1656.102481][ T27] #2: ffff88801a0f5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x129/0x2a0 [ 1656.120483][ T27] #3: ffff888025553098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x1d3/0x2a0 [ 1656.130853][ T27] 2 locks held by syz-executor.1/21298: [ 1656.137735][ T27] #0: ffff88807f450098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x129/0x2a0 [ 1656.149048][ T27] #1: ffff88807f451098 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x1d3/0x2a0 [ 1656.159708][ T27] [ 1656.165362][ T27] ============================================= [ 1656.165362][ T27] [ 1656.174310][ T27] NMI backtrace for cpu 0 [ 1656.178633][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc4-syzkaller #0 [ 1656.187095][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.197143][ T27] Call Trace: [ 1656.200500][ T27] [ 1656.203413][ T27] dump_stack_lvl+0xcd/0x134 [ 1656.208006][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 1656.213327][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 1656.218512][ T27] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 1656.224477][ T27] watchdog+0xc1d/0xf50 [ 1656.228617][ T27] ? reset_hung_task_detector+0x30/0x30 [ 1656.234320][ T27] kthread+0x405/0x4f0 [ 1656.238373][ T27] ? set_kthread_struct+0x130/0x130 [ 1656.243555][ T27] ret_from_fork+0x1f/0x30 [ 1656.247960][ T27] [ 1656.251788][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1656.257027][ C1] NMI backtrace for cpu 1 [ 1656.257039][ C1] CPU: 1 PID: 19821 Comm: kworker/u4:6 Not tainted 5.16.0-rc4-syzkaller #0 [ 1656.257057][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.257067][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1656.257094][ C1] RIP: 0010:stack_trace_consume_entry+0xd3/0x160 [ 1656.257116][ C1] Code: 02 00 0f 85 92 00 00 00 8d 45 01 89 43 10 48 8b 03 48 8d 2c e8 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 00 <75> 5c 48 89 75 00 8b 43 08 39 43 10 0f 92 c0 48 83 c4 08 5b 5d c3 [ 1656.257131][ C1] RSP: 0018:ffffc90004eff7c0 EFLAGS: 00000246 [ 1656.257142][ C1] RAX: dffffc0000000000 RBX: ffffc90004eff898 RCX: 0000000000000000 [ 1656.257152][ C1] RDX: 1ffff920009dff21 RSI: ffffffff81be4c7e RDI: ffffc90004eff8a4 [ 1656.257162][ C1] RBP: ffffc90004eff908 R08: ffffffff8e10556a R09: 0000000000000001 [ 1656.257172][ C1] R10: fffff520009dff07 R11: 000000000008808a R12: ffffc90004eff898 [ 1656.257181][ C1] R13: 0000000000000000 R14: ffff88801fd63a00 R15: ffff88807700a000 [ 1656.257194][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1656.257207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1656.257218][ C1] CR2: 00007fdffe2bc028 CR3: 000000007f47e000 CR4: 0000000000350ee0 [ 1656.257227][ C1] Call Trace: [ 1656.257231][ C1] [ 1656.257235][ C1] ? unwind_get_return_address+0x51/0x90 [ 1656.257252][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 1656.257268][ C1] arch_stack_walk+0x6d/0xe0 [ 1656.257285][ C1] ? kasan_save_stack+0x1e/0x50 [ 1656.257302][ C1] ? kmem_cache_free+0xbd/0x5d0 [ 1656.257318][ C1] stack_trace_save+0x8c/0xc0 [ 1656.257333][ C1] ? filter_irq_stacks+0x90/0x90 [ 1656.257348][ C1] ? __lock_acquire+0x162f/0x54a0 [ 1656.257367][ C1] kasan_save_stack+0x1e/0x50 [ 1656.257383][ C1] ? mark_lock+0xef/0x17b0 [ 1656.257398][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1656.257415][ C1] ? lock_chain_count+0x20/0x20 [ 1656.257432][ C1] ? find_held_lock+0x2d/0x110 [ 1656.257448][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 1656.257467][ C1] ? mark_held_locks+0x9f/0xe0 [ 1656.257483][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 1656.257501][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 1656.257517][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1656.257532][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 1656.257550][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1656.257574][ C1] kasan_set_track+0x21/0x30 [ 1656.257590][ C1] kasan_set_free_info+0x20/0x30 [ 1656.257608][ C1] __kasan_slab_free+0xff/0x130 [ 1656.257624][ C1] slab_free_freelist_hook+0x8b/0x1c0 [ 1656.257640][ C1] ? kfree_skbmem+0xef/0x1b0 [ 1656.257658][ C1] kmem_cache_free+0xbd/0x5d0 [ 1656.257675][ C1] kfree_skbmem+0xef/0x1b0 [ 1656.257692][ C1] consume_skb+0xcf/0x160 [ 1656.257704][ C1] batadv_forw_packet_free+0x1e7/0x270 [ 1656.257723][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x2b5/0x8e0 [ 1656.257746][ C1] process_one_work+0x9b2/0x1690 [ 1656.257762][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1656.257778][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1656.257793][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 1656.257810][ C1] worker_thread+0x658/0x11f0 [ 1656.257827][ C1] ? process_one_work+0x1690/0x1690 [ 1656.257841][ C1] kthread+0x405/0x4f0 [ 1656.257856][ C1] ? set_kthread_struct+0x130/0x130 [ 1656.257874][ C1] ret_from_fork+0x1f/0x30 [ 1656.257894][ C1] [ 1656.259054][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1656.600242][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc4-syzkaller #0 [ 1656.608374][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.618412][ T27] Call Trace: [ 1656.621673][ T27] [ 1656.624586][ T27] dump_stack_lvl+0xcd/0x134 [ 1656.629175][ T27] panic+0x2b0/0x6dd [ 1656.633055][ T27] ? __warn_printk+0xf3/0xf3 [ 1656.637640][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 1656.642819][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1656.648177][ T27] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 1656.654314][ T27] ? watchdog.cold+0x130/0x158 [ 1656.659065][ T27] watchdog.cold+0x141/0x158 [ 1656.663643][ T27] ? reset_hung_task_detector+0x30/0x30 [ 1656.669176][ T27] kthread+0x405/0x4f0 [ 1656.673227][ T27] ? set_kthread_struct+0x130/0x130 [ 1656.678406][ T27] ret_from_fork+0x1f/0x30 [ 1656.682823][ T27] [ 1656.686763][ T27] Kernel Offset: disabled [ 1656.691084][ T27] Rebooting in 86400 seconds..